last executing test programs:

18.126473817s ago: executing program 1 (id=11536):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x2c}, 0x1, 0x0, 0x0, 0x4402}, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000000)={0xa0000001})
ppoll(&(0x7f0000000980)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000140)={0x4})
r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
preadv(r7, &(0x7f0000000240)=[{&(0x7f0000000100)=""/30, 0x1e}], 0x1, 0xe8, 0x8)
bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x38)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r9)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_buf(r4, 0x1, 0x3d, &(0x7f0000000340)=""/87, &(0x7f00000003c0)=0x57)
sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010025bd7000ffdbdf25040001000800010002000000080002759d00000008000100020000000800020002000000e43b107b"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendto$inet6(r8, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x4, @mcast2, 0x4}, 0x1c)
ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f0000000040))
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)

17.733385722s ago: executing program 2 (id=11544):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x27, 0x4, 0xfffffffc)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0xfffffd6e)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r6}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r6, &(0x7f0000000080), 0x0}, 0x20)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x63, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$unix(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
r9 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r9, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00'})
gettid()
socket(0x10, 0x803, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)

17.595566275s ago: executing program 2 (id=11547):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000000)=0x5, 0x4)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={r2, 0x4}, 0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731306800c00010000b424d7d58bc8453e"], 0x13a0}, 0x1, 0x0, 0x0, 0x20000044}, 0xc000)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffff8, 0x4, 0x8, 0x0, 0x2}, 0x0, &(0x7f0000000900)={0x3fe, 0x0, 0x0, 0x81, 0x4000, 0x0, 0x7ffffffe, 0x4}, 0x0, 0x0)
close(r4)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x25, 0x0, 0x2}]})
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)

17.359062161s ago: executing program 0 (id=11548):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x18, 0x2, 0x1, 0x0, 0x25dfdbfc, "", [@typed={0x8, 0x110, 0x0, 0x0, @str='+&/\x00'}]}, 0x18}], 0x1, 0x0, 0x0, 0x20008001}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f0000000180)=0x1e)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000040), 0x4)
unshare(0x22060600)
r7 = epoll_create1(0x0)
epoll_pwait(r7, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
bind$bt_hci(r5, &(0x7f0000000040), 0x6)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}}, 0x14}}, 0x0)
ioctl$sock_bt_hci(r5, 0x400448e6, &(0x7f0000000080)="7c773d39aeef00")
ioctl$sock_bt_hci(r5, 0x400448e6, &(0x7f0000000500)="d7")
ioctl$sock_bt_hci(r5, 0x400448e7, &(0x7f0000000080))

17.108694425s ago: executing program 1 (id=11549):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r2)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r4, &(0x7f0000004140)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8001}, 0x1c, &(0x7f0000001500)=[{&(0x7f0000000080)="11c1", 0x2}], 0x1}}], 0x1, 0x4004) (async)
sendmmsg$inet6(r4, &(0x7f0000004140)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8001}, 0x1c, &(0x7f0000001500)=[{&(0x7f0000000080)="11c1", 0x2}], 0x1}}], 0x1, 0x4004)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}], 0x1c) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}], 0x1c)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff2, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xffffffa1, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x800}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000)

16.637205536s ago: executing program 2 (id=11550):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198914"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x46, 0x0, 0x0)
getsockopt$inet6_int(r3, 0x29, 0x46, 0x0, &(0x7f0000000080))
ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000000)=0x1)

16.634290794s ago: executing program 2 (id=11551):
syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffea657668115981000e0008060001080006040001bbbbbbbbbbbb64010102aaaaaaaaaabb05000101"], 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
accept$inet6(r0, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000000000000100000e03000000000000000200000008000300ac14141c0817420003000000"], 0x30}}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_256={{0x304}, '|\x00', "d3caadf08a6e8bfb134010f988010dfb83ebfbc27bed7d00", "f83d3940", "6ff5004c27f89cd1"}, 0x38)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r7, 0x1b476000)
setsockopt$inet6_tcp_TLS_RX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{}, "5a6db1cb8ef7241a", "3d555ac9c65c6fc74a611b2abdbf647873cdcc6f35df5319a462964a5ff14fd2", "7325045a", "57d9b1394ab6f637"}, 0x38)
socket$inet6(0xa, 0x3, 0x8)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r8)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)

16.379344947s ago: executing program 0 (id=11552):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a3200000000e4040000060a010400000000000000000500000008000b4000000000090001"], 0x558}}, 0x40)
socketpair(0x1f, 0x1, 0xffff, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRESHEX=r0], 0x64}, 0x1, 0x0, 0x0, 0x2400c085}, 0x4000040)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)

16.37753503s ago: executing program 0 (id=11553):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x130, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0xcb}, @nested={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@nested={0x104, 0x8, 0x0, 0x1, [@nested={0xfd, 0x138, 0x0, 0x1, [@generic="da59e0cbb2d83cfb9c98dae4f6c1040a", @generic="041108521f13eda8811b58b0f07ad826d108d098875725952289676ac54e1d18dade3a465f126665f662b6d15dd1661fa311e8ee4b491c5d8d8072bf9bdae5935a48573862bf6904043f42398e84cf0ec39f9729962d9d86b3199232e8949fca2289c034183c9830a6e21d5437198d3ca1f161adbe53488eea0b1b458585ff90afc50f316407b3", @generic="adb4c11bf4928a118f1159214606cb2f0141b4f7e0d71e11ea18b44249974155bd1741bba00a94952d20dd1d75a8d1808103384ae686e40aa8c47f73bad522960f113f431456b5db06278d1405be6917eb5e8a18956ca0ce634332add9c666337d17"]}]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x130}, 0x1, 0x0, 0x0, 0x404c801}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x14, 0x1, 0x7, 0x801, 0x0, 0x0, {0x9, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4004800)
r3 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r3)

16.308549857s ago: executing program 0 (id=11554):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002abd7000fadbdf2527000000180001801400020065727370616e3000"], 0x2c}}, 0x4) (async)
unshare(0x2040400) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}, @IFLA_GTP_LOCAL6={0x14, 0x8, @empty}]}}}]}, 0x4c}}, 0x40)
pread64(r2, &(0x7f0000000480)=""/61, 0x3d, 0x7fffffffffffffff)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r4, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0}) (async)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r10) (async)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async)
r11 = socket$kcm(0x11, 0x3, 0x0) (async)
r12 = socket(0x400000000010, 0x3, 0x0) (async)
r13 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009b40)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r14, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x3, 0x6, 0x0, 0xcb, 0x10001}, 0x1, 0x8, [{0x7f, 0xffff, 0x9, 0x0, 0x2e17d95a, 0x3}]}, [{0xffffffff, 0x790f, 0x3, 0x7, 0x7, 0x8}, {0x5, 0x7, 0x87fc0a4, 0x6, 0x6, 0x1}, {0x6, 0x93c3, 0x2, 0xf, 0x8, 0x5}, {0x1, 0x5, 0x1200, 0x7fff, 0x5, 0xd8}, {0x0, 0x7, 0x683f, 0x6, 0xf, 0x7}, {0x75cd, 0x20, 0x2, 0x2, 0x60cd, 0x10000}, {0x40, 0x14, 0x5, 0x8, 0x404, 0x3}, {0x2000000, 0x5, 0x73b, 0x1b5, 0x5, 0xfff}, {0x80, 0x80000001, 0x0, 0x5, 0x8, 0x3}, {0x800, 0x7, 0x0, 0x19, 0x288c, 0xfff}, {0xb, 0x5, 0x6, 0x1, 0x8, 0x6}, {0x0, 0x5, 0xffffffff, 0x6, 0xd, 0x5}, {0x0, 0x8, 0x3, 0x2, 0x7, 0x66bdaf68}, {0x0, 0x0, 0x7, 0x5, 0xc}, {0x8f9, 0xc22, 0x1, 0x7, 0x1, 0x7}, {0x7, 0x3ff, 0x4, 0x7, 0x7fff, 0x4}, {0x4, 0x40, 0x4, 0x3, 0xffffff2e, 0x10001}, {0x8, 0x4, 0x1, 0x1, 0x9, 0x7fff}, {0xb, 0x6, 0xffffffff, 0x7, 0x6, 0x80000001}, {0x200, 0x9, 0x81, 0x9, 0xd42, 0x1}, {0x31100000, 0xb, 0x8, 0x7ff, 0x1, 0xc}, {0x3, 0xc, 0xf3c, 0x1, 0x9, 0x8}, {0x4, 0x9, 0x1, 0x5, 0x0, 0x3}, {0x2, 0x8, 0xffffff6d, 0x9, 0x2, 0x7}, {0x4, 0x9, 0x7ff, 0x1ff, 0x0, 0xfff}, {0xb, 0x5, 0x1, 0x0, 0x7, 0x9}, {0x1, 0x8, 0x2, 0x2, 0x9, 0xffff}, {0x9, 0xffffffff, 0x9, 0x4, 0x1, 0x100}, {0xf, 0x8000, 0xffffffff, 0x0, 0x0, 0x519}, {0x0, 0x8, 0x5, 0x9, 0x1, 0x3}, {0x3, 0x6, 0x47df8, 0x8, 0xc, 0x2}, {0x9e, 0x33, 0x9, 0x0, 0xae1, 0x7fffffff}, {0x800, 0x4, 0x9, 0x3, 0xa8, 0x3c50}, {0x9, 0x3, 0x1, 0xff, 0x264e682a, 0xffffffff}, {0xd, 0x2, 0x607d, 0x9, 0xcf8}, {0x8, 0x9, 0xe, 0x6, 0x4, 0x6}, {0x6, 0x6, 0x4fb, 0x4, 0xe, 0x7}, {0x3, 0x8, 0x401, 0x2e58, 0xfffffff8, 0x9}, {0x8, 0x2, 0x5a, 0xf76, 0x40, 0x5}, {0x8, 0x4, 0x4000, 0x7, 0x3, 0x1}, {0x9, 0x3, 0x1, 0x401, 0x101, 0x5}, {0xfffffffc, 0x10001, 0x2, 0x3, 0xa, 0x3}, {0x73, 0x9, 0xa, 0x1, 0x5, 0xfff}, {0x7fffffff, 0x1000, 0x4, 0x6, 0x8, 0x5}, {0x0, 0x7, 0xd, 0x2f, 0x80000000, 0x5}, {0xfffffff8, 0x8, 0x1, 0x1, 0x8, 0xfffffff1}, {0x0, 0x5, 0x200, 0x5, 0x706e, 0x8}, {0x9, 0x7, 0x8001, 0x4, 0x1, 0x5}, {0x8, 0x8000, 0x0, 0x0, 0x10000, 0x7fff}, {0x3, 0x80000001, 0x400, 0x8d9, 0x6, 0x1}, {0x7, 0x4, 0xd, 0x6, 0x6, 0x4}, {0x10, 0xe7a, 0x4, 0x9, 0xf, 0x1ff}, {0x38000000, 0x6, 0x2, 0x95, 0x8f0, 0x8}, {0xffffffa2, 0x4, 0x8001, 0x4, 0xffffffff, 0x1000}, {0x0, 0xffffffff, 0x84fa, 0x8, 0x3, 0x4}, {0xcf3b, 0xfffffb27, 0x81, 0xb, 0x418, 0x9}, {0x7, 0x7ff, 0x400, 0x5c, 0x1d79, 0x3}, {0xfffff243, 0x80000001, 0x8, 0xc85, 0x8, 0x1b9ff9ed}, {0x4, 0x4, 0x4, 0x0, 0x6, 0x1b7}, {0x4, 0x3, 0x6, 0x5, 0x7, 0x100}, {0x2, 0xc, 0x5, 0xbabb, 0x7, 0xc6}, {0x4, 0x0, 0x9, 0x6a2, 0x8, 0x7}, {0x8, 0x7f, 0x7fffffff, 0xfb, 0x3, 0x3}, {0xf1, 0x400, 0x5, 0x1, 0x1ff, 0xa33}, {0x4, 0x2, 0x9, 0x0, 0x5, 0x200}, {0x7, 0x1, 0x4, 0x6, 0x7, 0x9}, {0xff, 0x3, 0xffff, 0x1c, 0x6, 0x9}, {0x3, 0x9, 0x0, 0x8001, 0x9, 0x3}, {0x10001, 0xa, 0x12, 0x2de, 0x7, 0xa50}, {0x2, 0xfffffffd, 0x1, 0x7, 0x2}, {0x2, 0x8, 0x80, 0x4a8, 0x7edd, 0x70}, {0x6, 0xfffffff0, 0x6fb, 0xb, 0x0, 0xffff}, {0x1, 0x6, 0x98b, 0x8, 0x13, 0x2}, {0x5, 0x8, 0x81, 0x5, 0x0, 0x10}, {0x4, 0x8, 0x3df2, 0x45b, 0xad0, 0x4}, {0x9, 0x1, 0x8, 0x0, 0x5, 0x5}, {0x3, 0x7, 0x15, 0x0, 0x4, 0xfe4400}, {0x6, 0x1e, 0x7f, 0x200, 0x8, 0x80000001}, {0x1, 0x7fffffff, 0x4, 0x7, 0x4, 0x4763}, {0xaa, 0x7, 0x0, 0x5, 0x80, 0x80}, {0x5, 0x7, 0x5ddf, 0xd898, 0x5, 0x8}, {0x8, 0x9, 0xfffffffe, 0x2, 0x200, 0xe45}, {0x1000, 0x5, 0x4, 0x0, 0x6, 0x3}, {0x619, 0x2, 0x4, 0x7, 0x5, 0xffffffff}, {0x1000, 0x400, 0x5, 0x2, 0x3, 0x7}, {0x8, 0x6, 0x3, 0x401, 0x8, 0x4}, {0x4, 0xffffffff, 0x10000, 0xff, 0x5, 0xfffffff7}, {0x7f, 0x2, 0x8000, 0x1, 0xdb82, 0x80000000}, {0x9b, 0x8, 0xd, 0x80000001, 0xd, 0xffff}, {0x8, 0xa8e5, 0x9, 0x5, 0x401, 0x7f}, {0x7, 0xe0, 0x2, 0x6, 0x9, 0x4}, {0x1000, 0x0, 0x4, 0x3, 0x80000000, 0xfffffff9}, {0x6, 0x0, 0x1, 0x1, 0x2, 0x5}, {0x7, 0xfffffffd, 0x200, 0xfffffffc, 0x7, 0x4}, {0xe6, 0x3, 0xfffffff7, 0xdee3, 0x4, 0xf}, {0x9, 0x8, 0x7fff, 0xd0, 0xfff, 0x2}, {0x1000, 0xd499, 0x0, 0x9, 0x6, 0x3}, {0x3, 0x7, 0x10000, 0x2, 0x8, 0xf6ed}, {0x3ff, 0x7, 0xff, 0x101, 0xfff, 0x7}, {0x8, 0x9, 0xf8d, 0xffff90eb, 0x5, 0x5}, {0x4, 0x2f2, 0x1, 0x7, 0x45, 0xfff}, {0x8, 0x2, 0x9, 0x2, 0x6, 0x7}, {0x0, 0xffffffff, 0x4, 0x5, 0x9, 0x100}, {0x3, 0x0, 0x8, 0x0, 0x1, 0xe75}, {0x3, 0xe, 0x4, 0x20080000, 0x3, 0xd77}, {0x0, 0x7, 0x0, 0x3, 0x7, 0x2}, {0xfffeffff, 0x7ff, 0x7, 0x101, 0x5, 0xffffffff}, {0x2, 0x4, 0x7, 0x0, 0x6, 0xffffffff}, {0xe770000, 0x10000, 0x1dd32c73, 0x6, 0x2, 0x2}, {0x1, 0x7, 0x1, 0x8, 0x0, 0x101}, {0x9, 0xffffff48, 0x3, 0x4, 0x6, 0xfffffa4e}, {0x9, 0xfae9, 0xd, 0x3, 0x8, 0x5}, {0x2d, 0x2fe5, 0x1, 0x8, 0x9}, {0x0, 0x8, 0x2, 0x91, 0x7, 0xfffffffa}, {0xba1, 0x5, 0x2, 0x5, 0x1, 0x6}, {0x142c58fd, 0x4, 0x400, 0x5, 0x8}, {0x1000, 0x6, 0x1, 0x100, 0x92a, 0x8001}, {0x80, 0x40000, 0x8bb, 0x1, 0x8, 0x4ffa}, {0x101, 0x9, 0x6, 0xfffffff0, 0x9, 0x2b80}, {0x8, 0x7, 0x4, 0x429e00b4, 0x6, 0xfffff000}, {0x3, 0x18, 0x1000, 0x7, 0x6, 0xfffffb01}, {0x4f2, 0x1, 0x8, 0x4, 0x9, 0x1}, {0x8, 0x6, 0xce, 0x7, 0x0, 0x80}, {0x2, 0x7ff, 0x0, 0x3, 0xf, 0x7ff}, {0x2, 0xffffffa8, 0x8, 0x7f, 0x8, 0x6}, {0x0, 0xcc74, 0x7, 0x4064, 0x8, 0x6}, {0x7fffffff, 0x6, 0x0, 0x5, 0x4, 0xace}, {0xb9a8, 0x10, 0x7f, 0x100, 0xffffffff, 0x6}], [{0x1}, {0x6}, {0x1, 0x1}, {0x7, 0x1}, {0x6, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x8bb3e40030c8e8ca}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0xb}, {0x4}, {0x2, 0x1}, {}, {0x5}, {0x5}, {0x3}, {0x4}, {0x4}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0xd}, {0x4, 0x7a917901219bea22}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0xe, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {}, {0x3}, {}, {}, {0x3}, {0xf7088fa7cf494390}, {0x3}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {}, {0x2}, {0x4, 0x1}, {0x4}, {0x4}, {0x2}, {0x4, 0x1}, {0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x4bc8c2ab18838025}, {0x0, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$kcm(r11, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r9, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880)

16.258551796s ago: executing program 1 (id=11555):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xb, 0x0, 0x8, 0xfffffffe}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=@newtaction={0x44, 0x5a, 0x1, 0x0, 0x25dfdbfb, {0x2}, [{0x30, 0x1, [@m_nat={0x2c, 0xe, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x810)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900210073797a31000000001c000380180000800c0001800600010012ad00000800034000000001140000001100010000000000000000000300000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = accept4(r2, &(0x7f00000001c0)=@l2={0x1f, 0x0, @none}, &(0x7f0000000340)=0x80, 0x80400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff0000000000000000000018000000", @ANYRES32, @ANYBLOB="00000000000000006608fdff0000000018000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000700b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xf, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94)
setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000380), 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbb, 0xbb, 0x6, [@restrict={0x0, 0x0, 0x0, 0xb, 0x3}, @float={0xe}, @datasec={0x9, 0x5, 0x0, 0xf, 0x3, [{0x1, 0xffff2a86, 0x7c}, {0x4, 0xb, 0x9}, {0x4, 0x7}, {0x2, 0x2, 0x91}, {0x5, 0x6, 0x4}], "9970ca"}, @enum={0x2, 0x2, 0x0, 0x6, 0x4, [{0x9, 0xdcb}, {0x4, 0x2}]}, @fwd={0x1}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x2, 0x7}, @var={0xc, 0x0, 0x0, 0xe, 0x5, 0x8a122a9eca357fee}, @var={0xc, 0x0, 0x0, 0xe, 0x3, 0xb17a3347a6b1df45}]}, {0x0, [0x2e, 0x5f, 0x2e, 0x30]}}, &(0x7f0000000840)=""/15, 0xda, 0xf, 0x0, 0x1, 0x10000, @value=r2}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x11, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x101}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x3, 0x1, 0x0, r5}, @map_fd={0x18, 0x7, 0x1, 0x0, r5}, @map_idx={0x18, 0x3}, @exit, @generic={0xff, 0x9, 0x8, 0x4, 0x100}, @call={0x85, 0x0, 0x0, 0x48}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff0001, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f0000000580)='syzkaller\x00', 0x7, 0xb1, &(0x7f00000005c0)=""/177, 0x41000, 0x15, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000008c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000900)={0x0, 0x4, 0x71, 0x3}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000940)=[r5, r5, r5, r5], &(0x7f0000000980)=[{0x3, 0x5, 0x7, 0x4}, {0x5, 0x5, 0x0, 0xa}, {0x2, 0x1, 0x4, 0x9}, {0x2, 0x4, 0x2, 0x6}, {0x3, 0x3, 0xa}, {0x4, 0x2, 0xc, 0x4}, {0x2, 0x1, 0x2, 0x1}, {0x1, 0x1, 0x8, 0xc}], 0x10, 0xffff238f}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000002850000001b"], 0x0, 0x0, 0x5c, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\r\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
socket(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xb, 0x0, 0x8, 0xfffffffe}, 0x10) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=@newtaction={0x44, 0x5a, 0x1, 0x0, 0x25dfdbfb, {0x2}, [{0x30, 0x1, [@m_nat={0x2c, 0xe, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
close(r1) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900210073797a31000000001c000380180000800c0001800600010012ad00000800034000000001140000001100010000000000000000000300000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
accept4(r2, &(0x7f00000001c0)=@l2={0x1f, 0x0, @none}, &(0x7f0000000340)=0x80, 0x80400) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff0000000000000000000018000000", @ANYRES32, @ANYBLOB="00000000000000006608fdff0000000018000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000700b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xf, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) (async)
setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000380), 0x3) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbb, 0xbb, 0x6, [@restrict={0x0, 0x0, 0x0, 0xb, 0x3}, @float={0xe}, @datasec={0x9, 0x5, 0x0, 0xf, 0x3, [{0x1, 0xffff2a86, 0x7c}, {0x4, 0xb, 0x9}, {0x4, 0x7}, {0x2, 0x2, 0x91}, {0x5, 0x6, 0x4}], "9970ca"}, @enum={0x2, 0x2, 0x0, 0x6, 0x4, [{0x9, 0xdcb}, {0x4, 0x2}]}, @fwd={0x1}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x2, 0x7}, @var={0xc, 0x0, 0x0, 0xe, 0x5, 0x8a122a9eca357fee}, @var={0xc, 0x0, 0x0, 0xe, 0x3, 0xb17a3347a6b1df45}]}, {0x0, [0x2e, 0x5f, 0x2e, 0x30]}}, &(0x7f0000000840)=""/15, 0xda, 0xf, 0x0, 0x1, 0x10000, @value=r2}, 0x28) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x11, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x101}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x3, 0x1, 0x0, r5}, @map_fd={0x18, 0x7, 0x1, 0x0, r5}, @map_idx={0x18, 0x3}, @exit, @generic={0xff, 0x9, 0x8, 0x4, 0x100}, @call={0x85, 0x0, 0x0, 0x48}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff0001, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f0000000580)='syzkaller\x00', 0x7, 0xb1, &(0x7f00000005c0)=""/177, 0x41000, 0x15, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000008c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000900)={0x0, 0x4, 0x71, 0x3}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000940)=[r5, r5, r5, r5], &(0x7f0000000980)=[{0x3, 0x5, 0x7, 0x4}, {0x5, 0x5, 0x0, 0xa}, {0x2, 0x1, 0x4, 0x9}, {0x2, 0x4, 0x2, 0x6}, {0x3, 0x3, 0xa}, {0x4, 0x2, 0xc, 0x4}, {0x2, 0x1, 0x2, 0x1}, {0x1, 0x1, 0x8, 0xc}], 0x10, 0xffff238f}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000002850000001b"], 0x0, 0x0, 0x5c, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\r\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async)

16.178177347s ago: executing program 1 (id=11556):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x40001)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x38, 0xd, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x64, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x4)
socket(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES8=r3, @ANYRES64=r3, @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040800)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r5=>0x0})
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, 0x0, &(0x7f00000002c0))
bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0xfffffffff7fffffe, {}, 0x2}, 0x18)
connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x400, {}, 0xfe}, 0x18)
sendmmsg(r4, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, 0x0, 0x0)

16.118685201s ago: executing program 0 (id=11557):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x9b}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000000))
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20)
accept(r1, 0x0, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="2800000010000108fdffffff0000000800000000", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b0000000000092275ba3e54754f4b170308734de7af4138d48622a63b7fe8dfa38e9f409e3b20fc5328ccacfa2e730bf514d6cc71aee55339ddec473859283ba1355d7f040c48605aaff38a111df8fae8584a3eef1f5c8db9bb9e16cbda8ba97e8e1eb8352fa0f3d155dc5793526047989c54eb6b79fc3404907d6e0c6c8c992e2e33a2d7562123f3106b4b0a0c24d32924d183a4da8e3f06dea5216b9656cfee7be451c85eb474feaa0e4e92ebef07e9c0dad39d9b364100f680e26e23f38c90be13c3966c720c57cd2ef3d900000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0)
readv(r2, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1)
sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0)
r4 = socket(0xb, 0x2, 0x5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000180))
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r5}, 0xc)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)

16.068923796s ago: executing program 1 (id=11558):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', <r5=>0x0})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
unshare(0x20000400)
getsockopt$inet_int(r7, 0x0, 0xf, 0x0, &(0x7f0000000040))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x10001, 0x0, 0x0, 0x41100, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b703000000000000850000001b", @ANYRES32, @ANYBLOB="1800000000000001000000000000000018120000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70300001a"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x8000400)
r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
sendfile(r9, r9, 0x0, 0x40)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r8, 0x0, 0x0}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRES8=r5, @ANYRESOCT=r4, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000280)={r4, 0x7, 0x104, 0x7ff})
r10 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r10, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0)

16.068190655s ago: executing program 1 (id=11559):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9)
r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0)=r3, 0x4)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x12)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a80), 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000000c0)={0x2c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040)

15.638837729s ago: executing program 2 (id=11560):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30f50000002c000000030a01020000000000000000010000000900010073797a30000000000920030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c000240000000000000000109000300030000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0)

15.638351607s ago: executing program 2 (id=11561):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x70, r2, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x807}, 0x40001)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001b80)=@newlink={0x58, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0x1c}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x58}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)

15.249132014s ago: executing program 0 (id=11562):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x54, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xfffffee6, 0x8f, 0x1000000}, {0xc}}]}, 0x54}}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x8c, 0x39, 0x1, 0x7fffa, 0x25dfdbff, {0xa}, [@generic="ed7aca3d0faabe8cefe0f34866f1138a0386bb3e2c11b375f64de5c7040f8df771f8069621883b7820ac2556d7169dab9df0a457bf45d75a95106a40693f97f06b3eea2c0695e947bee07e11950fc693f0489f67ae650868594e43337c0eeae73f23679da51afa27a8435ece3168eaf5506c748659915097"]}, 0x8c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'bridge_slave_0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xb619, '.\x00'}})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000000206030000000000000000000a0000000d000300686173683a6e657400000000050001000700000005000500020000000900020073797a3000000000050004000000000014000780080008400000007808000640"], 0x5c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r3], 0x38}}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x14}, @in=@rand_addr=0x64010100, 0x4e20, 0x8000, 0x4e21, 0x7, 0xa, 0x80, 0x20, 0x33}, {0x4, 0x6, 0xfffffffffffffba5, 0x9, 0x8d, 0x1, 0x8001, 0x6}, {0x5, 0x9, 0x5, 0x10001}, 0x9, 0x6e6bb8, 0x0, 0x1, 0x1, 0x2}, {{@in6=@loopback, 0x4d6, 0x2b}, 0xa, @in=@private=0xa010102, 0x3500, 0x3, 0x0, 0x6, 0x7, 0x7, 0xb}}, 0xe8)
r6 = socket(0x10, 0x803, 0x2)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r7, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", "", ""]}, 0x14}}, 0x4008040)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
close(0x4)

1.040032269s ago: executing program 32 (id=11559):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9)
r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0)=r3, 0x4)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x12)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a80), 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000000c0)={0x2c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040)

17.829824ms ago: executing program 33 (id=11562):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x54, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xfffffee6, 0x8f, 0x1000000}, {0xc}}]}, 0x54}}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x8c, 0x39, 0x1, 0x7fffa, 0x25dfdbff, {0xa}, [@generic="ed7aca3d0faabe8cefe0f34866f1138a0386bb3e2c11b375f64de5c7040f8df771f8069621883b7820ac2556d7169dab9df0a457bf45d75a95106a40693f97f06b3eea2c0695e947bee07e11950fc693f0489f67ae650868594e43337c0eeae73f23679da51afa27a8435ece3168eaf5506c748659915097"]}, 0x8c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'bridge_slave_0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xb619, '.\x00'}})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000000206030000000000000000000a0000000d000300686173683a6e657400000000050001000700000005000500020000000900020073797a3000000000050004000000000014000780080008400000007808000640"], 0x5c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r3], 0x38}}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x14}, @in=@rand_addr=0x64010100, 0x4e20, 0x8000, 0x4e21, 0x7, 0xa, 0x80, 0x20, 0x33}, {0x4, 0x6, 0xfffffffffffffba5, 0x9, 0x8d, 0x1, 0x8001, 0x6}, {0x5, 0x9, 0x5, 0x10001}, 0x9, 0x6e6bb8, 0x0, 0x1, 0x1, 0x2}, {{@in6=@loopback, 0x4d6, 0x2b}, 0xa, @in=@private=0xa010102, 0x3500, 0x3, 0x0, 0x6, 0x7, 0x7, 0xb}}, 0xe8)
r6 = socket(0x10, 0x803, 0x2)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r7, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", "", ""]}, 0x14}}, 0x4008040)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
close(0x4)

0s ago: executing program 34 (id=11561):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x70, r2, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x807}, 0x40001)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001b80)=@newlink={0x58, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0x1c}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x58}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)

kernel console output (not intermixed with test programs):

vice bond142
[  878.655384][ T8277] bond142 (unregistering): Released all slaves
[  878.757184][ T8283] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  878.872824][ T8287] bridge70: port 1(veth55) entered blocking state
[  878.875514][ T8287] bridge70: port 1(veth55) entered disabled state
[  878.878272][ T8287] veth55: entered allmulticast mode
[  878.883611][ T8287] veth55: entered promiscuous mode
[  878.887753][ T8288] bridge70: port 2(veth0_to_bond) entered blocking state
[  878.891810][ T8288] bridge70: port 2(veth0_to_bond) entered disabled state
[  878.894685][ T8288] veth0_to_bond: entered allmulticast mode
[  878.898448][ T8288] veth0_to_bond: entered promiscuous mode
[  879.075024][ T8296] __nla_validate_parse: 19 callbacks suppressed
[  879.075040][ T8296] netlink: 208 bytes leftover after parsing attributes in process `syz.0.10085'.
[  879.081888][ T8296] netlink: 208 bytes leftover after parsing attributes in process `syz.0.10085'.
[  879.086485][ T8296] netlink: 208 bytes leftover after parsing attributes in process `syz.0.10085'.
[  879.090624][ T8296] netlink: 208 bytes leftover after parsing attributes in process `syz.0.10085'.
[  879.270207][ T8310] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10089'.
[  879.298644][ T8314] xt_hashlimit: size too large, truncated to 1048576
[  879.315129][ T8312] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10090'.
[  879.322238][ T8312] netlink: 'syz.1.10090': attribute type 1 has an invalid length.
[  879.452711][ T8323] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10094'.
[  879.461586][ T8323] netlink: 'syz.2.10094': attribute type 1 has an invalid length.
[  879.525878][ T8326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10095'.
[  879.693154][ T8337] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10099'.
[  879.715441][ T8337] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10099'.
[  879.847210][ T8347] bond137: option xmit_hash_policy: invalid value (10)
[  879.852369][ T8347] bond137 (unregistering): Released all slaves
[  880.188739][ T8365] netlink: 'syz.0.10105': attribute type 10 has an invalid length.
[  880.195137][ T8365] netlink: 'syz.0.10105': attribute type 10 has an invalid length.
[  880.264229][ T8370] tipc: Bearer <eth:syzkaller0>: already 2 bearers with priority 10
[  880.268074][ T8370] tipc: Bearer <eth:syzkaller0>: trying with adjusted priority
[  880.271167][ T8370] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  882.520274][ T8433] lo speed is unknown, defaulting to 1000
[  882.524377][ T8433] lo speed is unknown, defaulting to 1000
[  883.498766][ T8452] netlink: 'syz.1.10130': attribute type 10 has an invalid length.
[  883.669944][ T8459] nbd: illegal input index -1113835520
[  883.827132][ T8472] bridge0: port 3(erspan0) entered blocking state
[  883.840832][ T8472] bridge0: port 3(erspan0) entered disabled state
[  883.843214][ T8472] erspan0: entered allmulticast mode
[  883.856346][ T8472] erspan0: entered promiscuous mode
[  883.888324][ T8472] erspan0: left allmulticast mode
[  883.892465][ T8472] erspan0: left promiscuous mode
[  883.899234][ T8472] bridge0: port 3(erspan0) entered disabled state
[  884.238043][ T8500] netlink: 'syz.1.10144': attribute type 1 has an invalid length.
[  884.238495][ T8502] __nla_validate_parse: 20 callbacks suppressed
[  884.238509][ T8502] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10145'.
[  884.280723][ T8500] 8021q: adding VLAN 0 to HW filter on device bond148
[  884.338252][ T8500] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10144'.
[  884.343590][ T8500] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  896.294067][ T8512] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10147'.
[  896.320932][ T8516] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10149'.
[  896.385768][ T8519] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10151'.
[  896.392740][ T8519] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10151'.
[  896.396276][ T8519] netlink: 'syz.0.10151': attribute type 4 has an invalid length.
[  896.488522][ T8526] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10154'.
[  896.501539][ T8526] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10154'.
[  896.505288][ T8526] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10154'.
[  896.561608][ T8538] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  896.607426][ T8543] netlink: 272 bytes leftover after parsing attributes in process `syz.1.10157'.
[  896.620973][ T8537] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10157'.
[  896.647614][ T8541] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  896.680120][ T8548] netlink: 'syz.0.10160': attribute type 2 has an invalid length.
[  896.682744][ T8548] netlink: 'syz.0.10160': attribute type 8 has an invalid length.
[  896.685082][ T8548] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10160'.
[  896.696594][ T8548] openvswitch: netlink: Key 6 has unexpected len 180 expected 2
[  896.867420][ T8571] bond142: Removing last arp target with arp_interval on
[  896.886670][ T8572] bond143: Removing last arp target with arp_interval on
[  897.234765][ T8618] netlink: 'syz.0.10175': attribute type 7 has an invalid length.
[  897.410056][ T8637] netlink: 'syz.0.10181': attribute type 1 has an invalid length.
[  897.418313][ T8637] netlink: 'syz.0.10181': attribute type 4 has an invalid length.
[  897.628878][ T8653] atomic_op ffff8881b41b2198 conn xmit_atomic 0000000000000000
[  897.863473][ T8672] nbd: illegal input index -1113835520
[  897.869536][ T8672] nbd: illegal input index -1113835520
[  897.872067][ T8672] nbd: illegal input index -1113835520
[  897.873890][ T8672] nbd: illegal input index -1113835520
[  897.875624][ T8672] nbd: illegal input index -1113835520
[  897.877366][ T8672] nbd: illegal input index -1113835520
[  897.880029][ T8672] nbd: illegal input index -1113835520
[  897.882192][ T8672] nbd: illegal input index -1113835520
[  897.884008][ T8672] nbd: illegal input index -1113835520
[  897.886202][ T8672] nbd: illegal input index -1113835520
[  897.888528][ T8672] nbd: illegal input index -1113835520
[  897.891979][ T8672] nbd: illegal input index -1113835520
[  897.894001][ T8672] nbd: illegal input index -1113835520
[  897.896036][ T8672] nbd: illegal input index -1113835520
[  897.898064][ T8672] nbd: illegal input index -1113835520
[  897.903771][ T8672] nbd: illegal input index -1113835520
[  897.905684][ T8672] nbd: illegal input index -1113835520
[  897.907631][ T8672] nbd: illegal input index -1113835520
[  897.910079][ T8672] nbd: illegal input index -1113835520
[  897.914537][ T8672] nbd: illegal input index -1113835520
[  897.918156][ T8672] nbd: illegal input index -1113835520
[  897.922833][ T8672] nbd: illegal input index -1113835520
[  897.925223][ T8672] nbd: illegal input index -1113835520
[  897.927602][ T8672] nbd: illegal input index -1113835520
[  897.931145][ T8672] nbd: illegal input index -1113835520
[  897.933584][ T8672] nbd: illegal input index -1113835520
[  897.935890][ T8672] nbd: illegal input index -1113835520
[  897.938271][ T8672] nbd: illegal input index -1113835520
[  897.943045][ T8672] nbd: illegal input index -1113835520
[  897.948396][ T8672] nbd: illegal input index -1113835520
[  897.950543][ T8672] nbd: illegal input index -1113835520
[  897.952532][ T8672] nbd: illegal input index -1113835520
[  897.954302][ T8672] nbd: illegal input index -1113835520
[  897.956037][ T8672] nbd: illegal input index -1113835520
[  897.957896][ T8672] nbd: illegal input index -1113835520
[  897.960149][ T8672] nbd: illegal input index -1113835520
[  897.961955][ T8672] nbd: illegal input index -1113835520
[  897.963784][ T8672] nbd: illegal input index -1113835520
[  897.965891][ T8672] nbd: illegal input index -1113835520
[  897.968180][ T8672] nbd: illegal input index -1113835520
[  897.972926][ T8672] nbd: illegal input index -1113835520
[  897.975161][ T8672] nbd: illegal input index -1113835520
[  897.977739][ T8672] nbd: illegal input index -1113835520
[  897.980944][ T8672] nbd: illegal input index -1113835520
[  897.983158][ T8672] nbd: illegal input index -1113835520
[  897.986131][ T8672] nbd: illegal input index -1113835520
[  897.988956][ T8672] nbd: illegal input index -1113835520
[  897.992867][ T8672] nbd: illegal input index -1113835520
[  897.995465][ T8672] nbd: illegal input index -1113835520
[  897.997893][ T8672] nbd: illegal input index -1113835520
[  898.000945][ T8672] nbd: illegal input index -1113835520
[  898.003847][ T8672] nbd: illegal input index -1113835520
[  898.006666][ T8672] nbd: illegal input index -1113835520
[  898.011214][ T8672] nbd: illegal input index -1113835520
[  898.013530][ T8672] nbd: illegal input index -1113835520
[  898.016964][ T8672] nbd: illegal input index -1113835520
[  898.018936][ T8672] nbd: illegal input index -1113835520
[  898.021841][ T8672] nbd: illegal input index -1113835520
[  898.025468][ T8672] nbd: illegal input index -1113835520
[  898.027328][ T8672] nbd: illegal input index -1113835520
[  898.029991][ T8672] nbd: illegal input index -1113835520
[  898.032155][ T8672] nbd: illegal input index -1113835520
[  898.034204][ T8672] nbd: illegal input index -1113835520
[  898.035912][ T8672] nbd: illegal input index -1113835520
[  898.037842][ T8672] nbd: illegal input index -1113835520
[  898.117826][ T8690] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  898.175757][ T8695] netlink: 'syz.0.10196': attribute type 5 has an invalid length.
[  898.381008][ T8711] netlink: 'syz.1.10201': attribute type 1 has an invalid length.
[  898.468328][ T8722] IPVS: set_ctl: invalid protocol: 104 224.0.0.1:20000
[  898.805867][ T8733] pim6reg1: entered promiscuous mode
[  898.807581][ T8733] pim6reg1: entered allmulticast mode
[  898.903872][ T8746] vlan9: entered promiscuous mode
[  898.905903][ T8746] geneve1: entered promiscuous mode
[  898.908578][ T8746] vlan9: entered allmulticast mode
[  898.911663][ T8746] geneve1: entered allmulticast mode
[  898.915952][ T8749] x_tables: duplicate underflow at hook 1
[  898.922661][ T8733] tipc: Trying to set illegal importance in message
[  899.093879][ T8757] lo speed is unknown, defaulting to 1000
[  899.097455][ T8757] lo speed is unknown, defaulting to 1000
[  899.662228][ T8800] netlink: 'syz.1.10228': attribute type 2 has an invalid length.
[  899.737098][ T8805] netlink: 'syz.1.10229': attribute type 8 has an invalid length.
[  899.823898][ T8812] netlink: 'syz.1.10232': attribute type 11 has an invalid length.
[  900.057189][ T8826] lo speed is unknown, defaulting to 1000
[  900.064397][ T8826] lo speed is unknown, defaulting to 1000
[  900.584064][ T8839] tipc: Can't bind to reserved service type 2
[  901.114355][ T8879] lo speed is unknown, defaulting to 1000
[  901.117015][ T8879] lo speed is unknown, defaulting to 1000
[  901.149863][ T8886] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  901.267635][ T8893] atomic_op ffff88819f87c998 conn xmit_atomic 0000000000000000
[  901.309685][ T8895] Cannot find add_set index 1 as target
[  901.328840][ T8896] bridge63: entered promiscuous mode
[  901.332201][ T8896] bridge63: entered allmulticast mode
[  901.404041][ T8904] 8021q: VLANs not supported on ip6_vti0
[  901.446935][ T8909] netlink: 'syz.0.10253': attribute type 1 has an invalid length.
[  901.461287][ T8909] __nla_validate_parse: 92 callbacks suppressed
[  901.461301][ T8909] netlink: 248 bytes leftover after parsing attributes in process `syz.0.10253'.
[  901.502146][ T8911] openvswitch: netlink: Unexpected mask (mask=4400040, allowed=410048)
[  901.593432][ T8924] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10257'.
[  901.674307][ T8931] tipc: Bearer <eth:lo>: already 2 bearers with priority 10
[  901.676518][ T8931] tipc: Bearer <eth:lo>: trying with adjusted priority
[  901.678773][ T8931] tipc: Enabling of bearer <eth:lo> rejected, max 3 bearers permitted
[  901.705785][ T8924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10257'.
[  901.734859][ T8935] netlink: 'syz.1.10260': attribute type 1 has an invalid length.
[  901.742665][ T8935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10260'.
[  901.818062][ T8942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10262'.
[  901.825841][ T8942] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10262'.
[  901.965313][ T8963] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.10266'.
[  901.975297][ T8963] openvswitch: netlink: EtherType 0 is less than min 600
[  902.104425][ T8975] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10269'.
[  902.107064][ T8975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10269'.
[  902.123435][ T8975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10269'.
[  902.800863][ T9016] netlink: 'syz.1.10279': attribute type 1 has an invalid length.
[  902.832496][ T9016] bond149: entered promiscuous mode
[  902.837558][ T9016] 8021q: adding VLAN 0 to HW filter on device bond149
[  903.013114][ T9029] 8021q: adding VLAN 0 to HW filter on device bond144
[  903.078562][ T9029] 8021q: adding VLAN 0 to HW filter on device batadv4
[  903.087957][ T9029] bond144: (slave batadv4): Enslaving as an active interface with an up link
[  903.160675][ T9044] openvswitch: netlink: Message has 4 unknown bytes.
[  903.235954][ T9048] netlink: 'syz.2.10288': attribute type 1 has an invalid length.
[  903.311266][ T9051] batadv4: entered promiscuous mode
[  903.317633][ T9051] batadv4: entered allmulticast mode
[  903.323239][ T9051] 8021q: adding VLAN 0 to HW filter on device batadv4
[  903.334808][ T9057] netlink: 'syz.0.10291': attribute type 1 has an invalid length.
[  903.405993][ T9057] bond145: (slave vxcan7): The slave device specified does not support setting the MAC address
[  903.410668][ T9057] bond145: (slave vxcan7): Error -95 calling set_mac_address
[  903.477119][ T9063] bond145: (slave bridge72): Enslaving as an active interface with a down link
[  903.814823][ T9079] netlink: 'syz.1.10298': attribute type 1 has an invalid length.
[  903.843775][ T9079] veth45: entered promiscuous mode
[  903.860342][ T9079] bond150: (slave veth45): Enslaving as a backup interface with a down link
[  903.870908][ T9079] 8021q: adding VLAN 0 to HW filter on device bond150
[  904.212181][ T9095] ip6_tunnel: ip6tnl11 xmit: Local address not yet configured!
[  904.440252][ T9117] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  904.495682][ T9124] netlink: 'syz.1.10310': attribute type 1 has an invalid length.
[  904.498392][ T9124] netlink: 'syz.1.10310': attribute type 1 has an invalid length.
[  904.814820][ T9166] netlink: 'syz.0.10322': attribute type 1 has an invalid length.
[  904.847383][ T9163] lo speed is unknown, defaulting to 1000
[  904.852025][ T9163] lo speed is unknown, defaulting to 1000
[  904.884794][ T9169] openvswitch: netlink: IP tunnel dst address not specified
[  905.185966][ T9172] netlink: 'syz.1.10324': attribute type 1 has an invalid length.
[  905.217521][ T9172] 8021q: adding VLAN 0 to HW filter on device bond151
[  905.517254][ T9185] 8021q: adding VLAN 0 to HW filter on device bond152
[  905.525275][ T9184] tipc: Resetting bearer <eth:syzkaller0>
[  905.527618][ T9185] bond152: option mode: unable to set because the bond device is up
[  905.539988][ T9186] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  905.543573][ T9184] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  905.548728][ T9182] tipc: Resetting bearer <eth:syzkaller0>
[  905.589589][ T7446] tipc: Resetting bearer <eth:syzkaller0>
[  905.621821][ T9195] block nbd2: Unsupported socket: should be TCP or UNIX.
[  905.806511][ T9212] bond0: entered promiscuous mode
[  905.810093][ T9212] gretap0: entered promiscuous mode
[  905.812922][ T9212] debugfs: 'hsr0' already exists in 'hsr'
[  905.814722][ T9212] Cannot create hsr debugfs directory
[  905.816576][ T9212] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  905.822212][ T9212] hsr0: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  905.825374][ T9212] hsr0: entered promiscuous mode
[  905.925528][ T9219] bridge73: entered promiscuous mode
[  906.114778][ T9221] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  906.142193][T15194] syz0: Port: 1 Link ACTIVE
[  906.211815][ T9240] netlink: 'syz.0.10343': attribute type 11 has an invalid length.
[  906.440900][ T9269] netlink: 'syz.1.10347': attribute type 11 has an invalid length.
[  906.449431][ T9269] validate_nla: 5 callbacks suppressed
[  906.449442][ T9269] netlink: 'syz.1.10347': attribute type 5 has an invalid length.
[  906.473380][ T9269] __nla_validate_parse: 37 callbacks suppressed
[  906.473392][ T9269] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10347'.
[  906.616280][ T9281] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10350'.
[  906.980604][ T9292] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  906.983601][ T9292] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  907.204710][ T9329] netlink: 'syz.0.10362': attribute type 9 has an invalid length.
[  907.323694][ T9334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10364'.
[  907.329028][ T9334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10364'.
[  907.430534][ T9346] xt_NFQUEUE: number of queues (3633) out of range (got 69161)
[  907.486787][ T9353] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10370'.
[  907.526409][ T9356] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10371'.
[  907.533799][ T9356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10371'.
[  907.540189][ T9356] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10371'.
[  907.634292][ T9361] netlink: 140 bytes leftover after parsing attributes in process `syz.1.10373'.
[  907.646304][ T9361] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10373'.
[  907.678914][ T9363] lo speed is unknown, defaulting to 1000
[  907.687261][ T9363] lo speed is unknown, defaulting to 1000
[  907.801743][ T9369] vlan0: entered promiscuous mode
[  908.653812][ T9408] tipc: Resetting bearer <eth:syzkaller0>
[  908.703961][ T9410] netlink: 'syz.0.10388': attribute type 30 has an invalid length.
[  908.774845][ T9414] syzkaller1: entered promiscuous mode
[  908.777746][ T9414] syzkaller1: entered allmulticast mode
[  908.884674][ T9418] netlink: 'syz.1.10391': attribute type 1 has an invalid length.
[  908.898198][ T9418] workqueue: Failed to create a rescuer kthread for wq "bond153": -EINTR
[  909.127610][ T9438] 8021q: VLANs not supported on ip6_vti0
[  909.651420][ T9465] xt_ecn: cannot match TCP bits for non-tcp packets
[  909.654111][ T9465] netlink: 'syz.2.10406': attribute type 142 has an invalid length.
[  909.852234][ T9480] lo speed is unknown, defaulting to 1000
[  909.855597][ T9480] lo speed is unknown, defaulting to 1000
[  910.166709][ T9491] xt_hashlimit: size too large, truncated to 1048576
[  910.224404][ T9495] netlink: 'syz.2.10412': attribute type 1 has an invalid length.
[  911.145048][ T9533] IPv6: sit7: Disabled Multicast RS
[  911.407710][ T9547] openvswitch: netlink: Unknown nsh attribute 0
[  911.458605][ T9549] lo speed is unknown, defaulting to 1000
[  911.470970][ T9549] lo speed is unknown, defaulting to 1000
[  911.786288][ T9565] __nla_validate_parse: 24 callbacks suppressed
[  911.786301][ T9565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10427'.
[  911.858717][ T9571] sctp: [Deprecated]: syz.1.10428 (pid 9571) Use of int in max_burst socket option.
[  911.858717][ T9571] Use struct sctp_assoc_value instead
[  912.105200][ T9577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10429'.
[  912.356273][ T9584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10431'.
[  912.362294][ T9584] openvswitch: netlink: Message has 2 unknown bytes.
[  912.629033][ T9588] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10432'.
[  912.637207][ T9588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10432'.
[  912.883073][ T9609] netlink: 'syz.1.10435': attribute type 1 has an invalid length.
[  912.935345][ T9609] bond154: (slave vxcan9): The slave device specified does not support setting the MAC address
[  912.939885][ T9609] bond154: (slave vxcan9): Error -95 calling set_mac_address
[  912.983467][ T9619] macvlan32: entered promiscuous mode
[  912.985578][ T9619] macvlan32: entered allmulticast mode
[  912.988085][ T9619] bond154: entered promiscuous mode
[  912.990529][ T9619] 8021q: adding VLAN 0 to HW filter on device macvlan32
[  912.996387][ T9619] bond154: left promiscuous mode
[  913.247441][ T9641] netlink: 112 bytes leftover after parsing attributes in process `syz.0.10439'.
[  913.254447][ T9641] netlink: 'syz.0.10439': attribute type 9 has an invalid length.
[  913.497920][ T9662] netlink: 108 bytes leftover after parsing attributes in process `syz.0.10441'.
[  913.506244][ T9662] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  913.509027][ T9662] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  913.583437][ T9669] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.10442'.
[  913.588309][ T9669] openvswitch: netlink: Message has 3 unknown bytes.
[  913.893060][ T9691] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10447'.
[  913.946620][ T9693] nbd: must specify an index to disconnect
[  914.001108][ T9696] lo speed is unknown, defaulting to 1000
[  914.003935][ T9696] lo speed is unknown, defaulting to 1000
[  914.097266][ T9699] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10450'.
[  914.678210][ T9740] tipc: Resetting bearer <eth:syzkaller0>
[  914.690561][ T9740] tipc: Resetting bearer <eth:vlan0>
[  914.889012][ T9751] IPVS: Unknown mcast interface: .
[  914.936355][ T9750] netlink: 'syz.0.10461': attribute type 1 has an invalid length.
[  914.944555][ T9750] netlink: 'syz.0.10461': attribute type 2 has an invalid length.
[  915.755410][ T9800] bond147: entered allmulticast mode
[  915.782025][ T9801] bond148: entered allmulticast mode
[  915.942531][ T9822] netlink: 'syz.1.10478': attribute type 21 has an invalid length.
[  915.949842][ T9822] netlink: 'syz.1.10478': attribute type 1 has an invalid length.
[  916.011308][ T9831] netlink: 'syz.1.10482': attribute type 32 has an invalid length.
[  916.099927][ T9832] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  916.221726][ T9848] xt_hashlimit: size too large, truncated to 1048576
[  916.227827][ T9847] xt_hashlimit: size too large, truncated to 1048576
[  916.458728][ T9869] xt_hashlimit: size too large, truncated to 1048576
[  916.469954][ T9869] xt_hashlimit: invalid interval
[  916.504519][ T9874] vlan10: entered allmulticast mode
[  916.506560][ T9874] bond0: entered allmulticast mode
[  916.823449][ T9901] __nla_validate_parse: 18 callbacks suppressed
[  916.823461][ T9901] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10497'.
[  916.911690][ T5433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  916.918168][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  916.928733][ T5431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  916.932063][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  916.956137][ T9898] veth1_macvtap: left promiscuous mode
[  916.966079][ T9898] veth0_macvtap: left promiscuous mode
[  916.972903][ T7465] lo speed is unknown, defaulting to 1000
[  916.977099][ T7465] sqz0: Port: 1 Link ACTIVE
[  916.981571][ T9906] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  917.022410][ T7465] lo speed is unknown, defaulting to 1000
[  917.103146][ T9917] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10502'.
[  917.164581][ T9917] bond155: entered promiscuous mode
[  917.165432][ T9925] netlink: 'syz.0.10504': attribute type 1 has an invalid length.
[  917.166895][ T9917] 8021q: adding VLAN 0 to HW filter on device bond155
[  917.170104][ T9925] netlink: 96 bytes leftover after parsing attributes in process `syz.0.10504'.
[  917.179329][ T9925] netlink: 'syz.0.10504': attribute type 1 has an invalid length.
[  917.183989][ T9925] netlink: 'syz.0.10504': attribute type 8 has an invalid length.
[  917.189392][ T9925] netlink: 582 bytes leftover after parsing attributes in process `syz.0.10504'.
[  917.192823][ T9925] netlink: 1 bytes leftover after parsing attributes in process `syz.0.10504'.
[  917.230827][ T9931] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  917.300407][ T9936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10506'.
[  917.320953][ T9936] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10506'.
[  917.337599][ T9936] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10506'.
[  917.361507][ T9945] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10508'.
[  917.390500][ T9945] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10508'.
[  917.471607][ T9953] 8021q: adding VLAN 0 to HW filter on device bond138
[  917.480924][ T9953] bond137: (slave bond138): making interface the new active one
[  917.484021][ T9953] bond137: (slave bond138): Enslaving as an active interface with an up link
[  917.508944][ T9953] 8021q: adding VLAN 0 to HW filter on device bond137
[  917.578433][ T9968] netlink: 'syz.2.10515': attribute type 11 has an invalid length.
[  917.585616][ T9971] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  917.632192][ T9971] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  917.634594][ T9971] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  917.727694][ T9979] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  917.744966][ T9979] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  917.836867][ T9996] block nbd0: NBD_DISCONNECT
[  917.838358][ T9996] block nbd0: Send disconnect failed -32
[  917.840779][ T9996] block nbd0: shutting down sockets
[  917.848399][ T9993] 8021q: adding VLAN 0 to HW filter on device bond139
[  917.890973][ T9993] xt_hashlimit: size too large, truncated to 1048576
[  918.242879][T10024] validate_nla: 4 callbacks suppressed
[  918.242892][T10024] netlink: 'syz.0.10531': attribute type 1 has an invalid length.
[  918.503842][T10021] tipc: Resetting bearer <eth:syzkaller0>
[  918.519902][ T7465] syz0: Port: 1 Link DOWN
[  918.560722][T10032] netlink: 'syz.0.10533': attribute type 2 has an invalid length.
[  918.563167][T10032] netlink: 'syz.0.10533': attribute type 8 has an invalid length.
[  918.578632][T10032] netlink: 'syz.0.10533': attribute type 2 has an invalid length.
[  918.583451][T10032] netlink: 'syz.0.10533': attribute type 8 has an invalid length.
[  918.878358][T10035] tipc: Resetting bearer <eth:syzkaller0>
[  918.912400][ T7465] lo speed is unknown, defaulting to 1000
[  918.919541][ T7465] sqz0: Port: 1 Link DOWN
[  918.925339][ T7465] lo speed is unknown, defaulting to 1000
[  919.170192][T10076] netlink: 'syz.0.10546': attribute type 1 has an invalid length.
[  919.197366][T10076] 8021q: adding VLAN 0 to HW filter on device bond149
[  919.224220][T10076] bond149: (slave veth59): Enslaving as an active interface with a down link
[  919.246341][T10076] bond149: (slave veth61): Enslaving as an active interface with a down link
[  919.256182][T10080] bond126: (slave bridge51): Releasing backup interface
[  919.262321][T10080] bond135: (slave veth43): Releasing backup interface
[  919.266288][T10080] bond136: (slave bridge56): Releasing backup interface
[  919.271380][T10080] bond139: (slave wireguard1): Releasing backup interface
[  919.278776][T10080] bond141: (slave bond142): Releasing backup interface
[  919.291387][T10080] bond150: (slave veth45): Releasing backup interface
[  919.382033][T10092] ip6gre6: entered allmulticast mode
[  919.586910][T10110] xt_CT: You must specify a L4 protocol and not use inversions on it
[  919.591193][T10110] netlink: 'syz.2.10552': attribute type 21 has an invalid length.
[  919.605924][T10114] netlink: 'syz.1.10553': attribute type 15 has an invalid length.
[  919.609186][T10116] netlink: 'syz.1.10553': attribute type 15 has an invalid length.
[  919.853788][ T9722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  919.857342][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  919.860709][ T5431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  919.863591][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  919.886233][T11131] lo speed is unknown, defaulting to 1000
[  919.888862][T11131] sqz0: Port: 1 Link ACTIVE
[  919.894456][T10137] netlink: 'syz.1.10561': attribute type 1 has an invalid length.
[  919.902546][T11131] lo speed is unknown, defaulting to 1000
[  920.085683][T10150] batman_adv: batadv0: Adding interface: ip6gretap6
[  920.088050][T10150] batman_adv: batadv0: Interface activated: ip6gretap6
[  920.372719][T10179] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  920.414590][T11131] syz0: Port: 1 Link ACTIVE
[  920.416507][T10178] bond139: entered allmulticast mode
[  920.464403][T10183] veth1_macvtap: entered promiscuous mode
[  920.483514][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  920.487265][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  920.496855][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  920.500628][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  920.980563][T10224] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  921.011228][T10224] 8021q: adding VLAN 0 to HW filter on device bond157
[  921.030656][T10221] lo speed is unknown, defaulting to 1000
[  921.033469][T10221] lo speed is unknown, defaulting to 1000
[  921.168859][T10234] lo speed is unknown, defaulting to 1000
[  921.230739][T10234] lo speed is unknown, defaulting to 1000
[  921.505623][T10252] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  921.624662][T10255] xt_hashlimit: size too large, truncated to 1048576
[  922.051024][T10275] syzkaller1: entered promiscuous mode
[  922.053774][T10275] syzkaller1: entered allmulticast mode
[  922.452290][T10283] __nla_validate_parse: 39 callbacks suppressed
[  922.452300][T10283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10604'.
[  922.588786][T10287] bond150: entered allmulticast mode
[  922.610499][T10293] macvlan51: entered promiscuous mode
[  922.612657][T10293] macvlan51: entered allmulticast mode
[  922.615868][T10293] bond150: entered promiscuous mode
[  922.617980][T10293] 8021q: adding VLAN 0 to HW filter on device macvlan51
[  922.627791][T10293] bond150: left promiscuous mode
[  922.741211][T10302] netlink: 'syz.1.10610': attribute type 11 has an invalid length.
[  922.768641][T10293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10605'.
[  922.835904][T10306] netlink: 292 bytes leftover after parsing attributes in process `syz.2.10609'.
[  922.993136][T10315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10615'.
[  923.086259][T10324] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0
[  923.089350][T10326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10619'.
[  923.110919][T10324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10618'.
[  923.220890][T10338] 8021q: adding VLAN 0 to HW filter on device bond151
[  923.235228][T10338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10621'.
[  923.239501][T10338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10621'.
[  923.246743][T10338] bond151 (unregistering): Released all slaves
[  923.678174][T10365] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10628'.
[  923.681419][T10365] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10628'.
[  923.769548][    C1] net_ratelimit: 2 callbacks suppressed
[  923.769609][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  923.776247][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  923.847781][T10382] tipc: Resetting bearer <eth:syzkaller0>
[  923.855092][T10382] syzkaller0: tun_net_xmit 14
[  923.856577][T10382] syzkaller0: tun_net_xmit 14
[  923.864045][T10381] tipc: Resetting bearer <eth:syzkaller0>
[  924.090389][ T9724] tipc: Resetting bearer <eth:syzkaller0>
[  924.260712][T10411] validate_nla: 11 callbacks suppressed
[  924.260732][T10411] netlink: 'syz.2.10642': attribute type 1 has an invalid length.
[  924.286105][T10411] 8021q: adding VLAN 0 to HW filter on device bond140
[  924.299296][T10411] bond140 (unregistering): Released all slaves
[  924.678242][T10417] can: request_module (can-proto-5) failed.
[  924.726620][T10421] xt_NFQUEUE: number of queues (3633) out of range (got 69161)
[  925.055217][ T5431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  925.058672][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  925.115034][T10449] tipc: Invalid UDP bearer configuration
[  925.115062][T10449] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  925.167778][T10455] bond140: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  925.172702][T10455] bond140 (unregistering): Released all slaves
[  925.197439][T10459] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  925.474381][T10482] netlink: 'syz.0.10662': attribute type 7 has an invalid length.
[  925.543787][T10486] netlink: 'syz.2.10664': attribute type 3 has an invalid length.
[  925.556820][T10486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  925.626869][T10489] netlink: 'syz.1.10665': attribute type 3 has an invalid length.
[  925.629777][T10489] netlink: 'syz.1.10665': attribute type 3 has an invalid length.
[  925.658978][T10492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  925.700717][T10160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  925.704087][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  925.902322][T10501] netlink: 'syz.1.10667': attribute type 2 has an invalid length.
[  925.904926][T10501] netlink: 'syz.1.10667': attribute type 1 has an invalid length.
[  925.914782][T10501] netlink: 'syz.1.10667': attribute type 1 has an invalid length.
[  925.918833][T10501] netlink: 'syz.1.10667': attribute type 2 has an invalid length.
[  925.927611][T10501] netlink: 'syz.1.10667': attribute type 2 has an invalid length.
[  925.944504][T10501] nbd: must specify a size in bytes for the device
[  925.947727][T10501] x_tables: duplicate underflow at hook 3
[  926.530052][T10513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  929.516842][T10523] validate_nla: 4 callbacks suppressed
[  929.516860][T10523] netlink: 'syz.0.10674': attribute type 3 has an invalid length.
[  929.596476][T10532] __nla_validate_parse: 11 callbacks suppressed
[  929.596488][T10532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10676'.
[  929.773669][T10556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10677'.
[  929.882120][T10560] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10681'.
[  929.903538][T10563] netlink: 'syz.0.10682': attribute type 1 has an invalid length.
[  929.906312][T10563] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10682'.
[  929.955389][T10569] dvmrp1: entered allmulticast mode
[  929.978215][T10573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10685'.
[  930.051447][T10569] lo speed is unknown, defaulting to 1000
[  930.055651][T10569] lo speed is unknown, defaulting to 1000
[  930.063828][T10580] netlink: 22 bytes leftover after parsing attributes in process `syz.0.10687'.
[  930.076100][T10582] netlink: 22 bytes leftover after parsing attributes in process `syz.0.10687'.
[  930.192959][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10688'.
[  930.444628][T10607] net_ratelimit: 3 callbacks suppressed
[  930.444641][T10607] openvswitch: netlink: IPv4 tun info is not correct
[  930.616233][T10609] bond151 (unregistering): Released all slaves
[  930.729318][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  930.762061][T10613] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10693'.
[  930.824102][ T5431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  930.826758][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  930.919016][T10635] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10694'.
[  931.451450][ T5431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  931.455002][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  931.460927][T10667] netlink: 'syz.2.10708': attribute type 4 has an invalid length.
[  931.475895][T10667] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  931.840427][T10681] openvswitch: netlink: Message has 40 unknown bytes.
[  931.884626][T10684] netlink: 'syz.1.10713': attribute type 1 has an invalid length.
[  931.918125][T10684] 8021q: adding VLAN 0 to HW filter on device bond158
[  931.983199][T10689] IPVS: Unknown mcast interface: veth0_to_bond
[  932.352470][T10713] netlink: 'syz.1.10722': attribute type 61 has an invalid length.
[  932.358690][T10713] netlink: 'syz.1.10722': attribute type 9 has an invalid length.
[  932.506619][T10717] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  936.570133][ T5431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  936.576803][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  937.213856][ T5431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  937.218893][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  942.330477][ T9725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  942.333555][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  942.971151][ T9725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  942.974534][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  947.451440][ T9725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  947.454742][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  948.089794][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  948.093034][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  948.506579][T10734] __nla_validate_parse: 8 callbacks suppressed
[  948.506597][T10734] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10725'.
[  948.514788][T10736] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10726'.
[  948.553391][T10735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10724'.
[  948.589857][T10741] openvswitch: netlink: Flow actions attr not present in new flow.
[  948.643488][T10746] openvswitch: netlink: Duplicate or invalid key (type 0).
[  948.659421][T10746] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  948.742608][T10160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  948.745995][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  948.755139][T10755] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10731'.
[  948.828184][T10766] netlink: 'syz.2.10733': attribute type 30 has an invalid length.
[  948.966994][T10776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10736'.
[  948.976713][T10776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10736'.
[  949.023201][T10782] netlink: 108 bytes leftover after parsing attributes in process `syz.2.10738'.
[  949.027136][T10784] netlink: 108 bytes leftover after parsing attributes in process `syz.2.10738'.
[  949.030517][T10781] netlink: 'syz.1.10737': attribute type 1 has an invalid length.
[  949.033621][T10785] netlink: 'syz.1.10737': attribute type 10 has an invalid length.
[  949.061665][T10781] 8021q: adding VLAN 0 to HW filter on device bond159
[  949.070219][T10783] vlan11: entered promiscuous mode
[  949.071866][T10783] bond159: entered promiscuous mode
[  949.073708][T10783] vlan11: entered allmulticast mode
[  949.075369][T10783] bond159: entered allmulticast mode
[  949.102943][T10788] sctp: [Deprecated]: syz.2.10739 (pid 10788) Use of int in max_burst socket option.
[  949.102943][T10788] Use struct sctp_assoc_value instead
[  949.135189][T10792] ip6_vti0: left allmulticast mode
[  949.137593][T10792] dvmrp6: left allmulticast mode
[  949.143819][T10792] bond139: left allmulticast mode
[  949.244732][T10806] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10744'.
[  949.268523][T10808] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  949.304758][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10746'.
[  949.733613][T10842] nbd1: detected capacity change from 0 to 63
[  949.750522][   T54] block nbd1: Receive control failed (result -104)
[  949.795332][T10858] netlink: 'syz.2.10758': attribute type 11 has an invalid length.
[  949.822551][T10861] tipc: Disabling bearer <eth:vlan0>
[  949.973134][T10876] netlink: 'syz.1.10764': attribute type 1 has an invalid length.
[  949.973310][T10875] netlink: 'syz.1.10764': attribute type 1 has an invalid length.
[  949.983310][T10875] netlink: 'syz.1.10764': attribute type 1 has an invalid length.
[  950.003397][T10879] netlink: 'syz.0.10765': attribute type 11 has an invalid length.
[  950.110215][T10884] vlan0: entered allmulticast mode
[  950.112433][T10884] macvtap0: entered allmulticast mode
[  950.159894][T10890] xt_hashlimit: invalid rate
[  950.314833][T10909] dvmrp0: entered allmulticast mode
[  950.351498][T10911] netlink: 'syz.1.10774': attribute type 58 has an invalid length.
[  950.373104][T10912] rdma_rxe: rxe_newlink: failed to add bridge_slave_1
[  950.540275][T10919] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  950.542402][T10919] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  951.269546][T10938] tipc: Resetting bearer <eth:syzkaller0>
[  951.287021][T10938] batman_adv: batadv0: Interface deactivated: ip6gretap6
[  951.318569][T32296] lo speed is unknown, defaulting to 1000
[  951.321202][T32296] sqz0: Port: 1 Link DOWN
[  951.429560][T15904] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  951.435472][T15904] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  951.438100][T32296] lo speed is unknown, defaulting to 1000
[  951.440430][T15904] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  951.444159][T15904] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  951.657435][T10966] netlink: 'syz.1.10790': attribute type 1 has an invalid length.
[  951.889512][T10995] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  951.892113][T10996] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  951.961455][T11007] vlan0: entered promiscuous mode
[  951.963242][T11007] macvtap0: entered promiscuous mode
[  951.965090][T11007] vlan0: left allmulticast mode
[  951.966877][T11007] macvtap0: left allmulticast mode
[  952.115549][T11015] netlink: 'syz.0.10804': attribute type 1 has an invalid length.
[  952.152440][T11015] 8021q: adding VLAN 0 to HW filter on device bond153
[  952.158315][T11015] bond152: (slave bond153): making interface the new active one
[  952.162721][T11015] bond152: (slave bond153): Enslaving as an active interface with an up link
[  952.173419][T11015] 8021q: adding VLAN 0 to HW filter on device bond152
[  953.032073][T11062] bond161: option all_slaves_active: invalid value (8)
[  953.036777][T11062] bond161 (unregistering): Released all slaves
[  953.093132][T11060] netlink: 'syz.2.10815': attribute type 1 has an invalid length.
[  953.792260][T11090] __nla_validate_parse: 76 callbacks suppressed
[  953.792278][T11090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10821'.
[  953.798863][T32296] syz0: Port: 1 Link DOWN
[  953.874144][T11097] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10823'.
[  954.131874][T11124] xt_TCPMSS: Only works on TCP SYN packets
[  954.167809][T11126] net_ratelimit: 405 callbacks suppressed
[  954.167822][T11126] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  954.295099][T11139] netlink: 'syz.1.10836': attribute type 29 has an invalid length.
[  954.300416][T11139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10836'.
[  954.304508][T11139] netlink: 'syz.1.10836': attribute type 29 has an invalid length.
[  954.307192][T11139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10836'.
[  954.312610][T11139] netlink: 'syz.1.10836': attribute type 29 has an invalid length.
[  954.316772][T11145] xt_hashlimit: size too large, truncated to 1048576
[  954.317091][T11139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10836'.
[  954.328417][T11139] netlink: 'syz.1.10836': attribute type 29 has an invalid length.
[  954.333803][T11139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10836'.
[  954.337205][T11139] netlink: 'syz.1.10836': attribute type 29 has an invalid length.
[  954.340853][T11139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10836'.
[  954.344466][T11139] netlink: 'syz.1.10836': attribute type 29 has an invalid length.
[  954.347535][T11139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10836'.
[  954.352259][T11139] netlink: 'syz.1.10836': attribute type 29 has an invalid length.
[  954.354996][T11139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10836'.
[  954.362104][T11139] netlink: 'syz.1.10836': attribute type 29 has an invalid length.
[  954.369583][T11139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10836'.
[  954.376599][T11139] netlink: 'syz.1.10836': attribute type 29 has an invalid length.
[  954.384965][T11139] netlink: 'syz.1.10836': attribute type 29 has an invalid length.
[  954.585255][T11166] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD
[  954.605473][T11168] bond142: option all_slaves_active: invalid value (8)
[  954.611617][T11168] bond142 (unregistering): Released all slaves
[  954.632358][T11166] bridge: RTM_NEWNEIGH with invalid state 0x8
[  955.193760][T11221] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  955.196503][T11221] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  955.511171][T11244] xt_hashlimit: size too large, truncated to 1048576
[  955.921558][T11286] bond161 (unregistering): Released all slaves
[  956.193819][T11304] tipc: Resetting bearer <eth:syzkaller0>
[  956.210246][T11304] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  956.229254][T11304] tipc: Resetting bearer <eth:syzkaller0>
[  956.252084][T11310] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  956.448287][T16858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  956.451827][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  956.456652][ T5431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  956.459253][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  956.477900][T11316] veth1_macvtap: left promiscuous mode
[  956.481876][T32296] lo speed is unknown, defaulting to 1000
[  956.483748][T32296] sqz0: Port: 1 Link ACTIVE
[  956.507796][T32296] lo speed is unknown, defaulting to 1000
[  956.774986][T11338] netlink: 'syz.0.10888': attribute type 11 has an invalid length.
[  956.840249][T11345] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  956.844115][T11345] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  956.865109][T16858] tipc: Resetting bearer <eth:syzkaller0>
[  957.236081][T11364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  957.264868][T11364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  957.369855][T11367] syzkaller1: tun_chr_ioctl cmd 2147767506
[  957.657889][T11385] ?30{X: entered promiscuous mode
[  957.660691][T11385] ?30{X: left allmulticast mode
[  957.667438][T11388] 0{X: renamed from ?30{X
[  957.673907][T11388] 0{X: left promiscuous mode
[  957.675949][T11388] 0{X: entered allmulticast mode
[  958.012560][T11412] bond161: option all_slaves_active: invalid value (8)
[  958.016798][T11412] bond161 (unregistering): Released all slaves
[  958.183794][ T9727] bridge70: port 2(veth0_to_bond) entered blocking state
[  958.186819][ T9727] bridge70: port 2(veth0_to_bond) entered forwarding state
[  958.197774][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  958.200790][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  958.204647][  T994] syz2: Port: 1 Link ACTIVE
[  958.206764][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  958.209739][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  958.249784][T11422] bond161: option miimon: invalid value (18446744073709551607)
[  958.253275][T11422] bond161: option miimon: allowed values 0 - 2147483647
[  958.262326][T11422] bond161 (unregistering): Released all slaves
[  958.369781][   T54] block nbd0: Receive control failed (result -32)
[  958.799610][T11455] 8021q: adding VLAN 0 to HW filter on device bond155
[  958.801595][T11459] xt_hashlimit: size too large, truncated to 1048576
[  958.823912][T11455] bond155 (unregistering): Released all slaves
[  958.851688][T11460] tipc: Resetting bearer <eth:syzkaller0>
[  958.923731][T11460] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  958.972303][T11464] __nla_validate_parse: 116 callbacks suppressed
[  958.972314][T11464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10922'.
[  958.984761][T11458] tipc: Resetting bearer <eth:syzkaller0>
[  959.106774][T11476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10924'.
[  959.106795][T11475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10924'.
[  959.123962][T11474] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10924'.
[  959.655763][T11513] validate_nla: 102 callbacks suppressed
[  959.655779][T11513] netlink: 'syz.2.10932': attribute type 32 has an invalid length.
[  959.682620][T11515] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.10933'.
[  959.804590][T11524] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.10935'.
[  959.833631][T11525] netlink: 211856 bytes leftover after parsing attributes in process `syz.0.10936'.
[  959.846683][T11525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10936'.
[  959.974770][T11532] bridge70: port 2(veth0_to_bond) entered disabled state
[  960.027776][T11532] bridge0: left promiscuous mode
[  960.074269][ T9722] tipc: Resetting bearer <eth:syzkaller0>
[  960.080291][ T5683] syz2: Port: 1 Link DOWN
[  960.083012][ T5674] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  960.090925][ T5674] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  960.098109][ T5674] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  960.105963][ T5674] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  960.243152][T11547] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10941'.
[  960.336231][T11553] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10941'.
[  960.387999][T11552] netlink: 'syz.1.10943': attribute type 21 has an invalid length.
[  960.395516][T11552] netlink: 'syz.1.10943': attribute type 20 has an invalid length.
[  960.937162][T11597] netlink: 'syz.1.10954': attribute type 12 has an invalid length.
[  961.151997][T11609] bond161: option all_slaves_active: invalid value (8)
[  961.156571][T11609] bond161 (unregistering): Released all slaves
[  961.374403][T11612] RDS: rds_bind could not find a transport for fe88::102, load rds_tcp or rds_rdma?
[  961.552973][T11622] netlink: 'syz.2.10960': attribute type 10 has an invalid length.
[  962.786151][T11684] bond0: entered promiscuous mode
[  962.835764][T11686] bond142: option all_slaves_active: invalid value (8)
[  962.840990][T11686] bond142 (unregistering): Released all slaves
[  962.855468][T11690] bond17: (slave ): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  962.864277][T11690] bond17: (slave ): Enslaving as an active interface with an up link
[  962.867136][T11690] net_ratelimit: 23 callbacks suppressed
[  962.867145][T11690] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  962.936247][T11696] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  963.143593][T11723] bond156: option all_slaves_active: invalid value (8)
[  963.302596][T11723] bond156 (unregistering): Released all slaves
[  963.657196][T11749] netlink: 'syz.1.10993': attribute type 18 has an invalid length.
[  963.691305][T11751] netlink: 'syz.0.10994': attribute type 4 has an invalid length.
[  963.695252][T11751] netlink: 'syz.0.10994': attribute type 4 has an invalid length.
[  963.847029][T11770] netlink: 'syz.0.10999': attribute type 1 has an invalid length.
[  963.863591][T11770] bond156: entered promiscuous mode
[  963.866056][T11770] 8021q: adding VLAN 0 to HW filter on device bond156
[  963.895390][T11770] bond156: (slave bridge74): making interface the new active one
[  963.897731][T11770] bridge74: entered promiscuous mode
[  963.900823][T11770] bond156: (slave bridge74): Enslaving as an active interface with an up link
[  963.976703][T11777] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  964.033509][T11781] __nla_validate_parse: 88 callbacks suppressed
[  964.033521][T11781] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11003'.
[  964.040441][T11781] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11003'.
[  964.066123][T11782] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  964.813488][T11813] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11012'.
[  964.829926][T11810] bond161: entered promiscuous mode
[  964.832381][T11810] 8021q: adding VLAN 0 to HW filter on device bond161
[  964.850358][T11815] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11010'.
[  964.854504][T11813] bridge75: entered promiscuous mode
[  964.856174][T11813] bridge75: entered allmulticast mode
[  964.860371][T11815] bond0: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  964.907270][T11818] netlink: 'syz.1.11013': attribute type 1 has an invalid length.
[  964.915271][T11818] netlink: 88 bytes leftover after parsing attributes in process `syz.1.11013'.
[  964.921422][T11818] netlink: 1 bytes leftover after parsing attributes in process `syz.1.11013'.
[  964.924899][T11822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11014'.
[  964.928572][T11818] netlink: 'syz.1.11013': attribute type 1 has an invalid length.
[  964.932379][T11818] netlink: 634 bytes leftover after parsing attributes in process `syz.1.11013'.
[  964.977392][T11815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11010'.
[  964.997169][T16858] smbdirect: ib_dev[syz2] removed
[  965.034932][T11823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11010'.
[  965.055624][T11818] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  965.071781][T11818] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  965.077721][T11815] netlink: 'syz.2.11010': attribute type 10 has an invalid length.
[  965.427963][T11856] 8021q: adding VLAN 0 to HW filter on device 
[  965.453608][T11856] A link change request failed with some changes committed already. Interface ; may have been left with an inconsistent configuration, please check.
[  965.468626][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  965.471844][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  965.476618][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  965.479762][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  965.496693][T11856] syzkaller1: entered promiscuous mode
[  965.498544][T11856] syzkaller1: entered allmulticast mode
[  965.933214][T11868] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  966.174078][T11880] bond162: option all_slaves_active: invalid value (8)
[  966.185667][T11880] bond162 (unregistering): Released all slaves
[  966.334365][T11887] veth1_to_team: entered promiscuous mode
[  966.346494][T11887] veth1_to_team: left promiscuous mode
[  966.403097][T11892] veth1_to_team: entered promiscuous mode
[  966.420874][T11892] veth1_to_team: left promiscuous mode
[  967.199912][T11961] lo speed is unknown, defaulting to 1000
[  967.202601][T11961] lo speed is unknown, defaulting to 1000
[  967.574779][T11978] nbd: must specify an index to disconnect
[  967.582974][T11980] netlink: 'syz.1.11055': attribute type 1 has an invalid length.
[  967.593456][T11978] 8021q: adding VLAN 0 to HW filter on device bond157
[  967.642053][T11978] vlan8: entered promiscuous mode
[  967.643695][T11978] bond157: entered promiscuous mode
[  967.645390][T11978] vlan8: entered allmulticast mode
[  967.647133][T11978] bond157: entered allmulticast mode
[  967.659649][T11978] 8021q: adding VLAN 0 to HW filter on device batadv5
[  967.666920][T11978] batadv5: entered promiscuous mode
[  967.670032][T11978] batadv5: entered allmulticast mode
[  967.673759][T11978] bond157: (slave batadv5): Enslaving as an active interface with an up link
[  967.973804][T11998] bond163: option all_slaves_active: invalid value (8)
[  967.977072][T11998] bond163 (unregistering): Released all slaves
[  968.310115][T12010] lo speed is unknown, defaulting to 1000
[  968.313249][T12010] lo speed is unknown, defaulting to 1000
[  968.420154][T12014] 0{X: entered promiscuous mode
[  968.425440][T12017] netlink: 'syz.2.11064': attribute type 1 has an invalid length.
[  968.425480][T12014] vlan0: entered promiscuous mode
[  968.430597][T12016] netlink: 'syz.2.11064': attribute type 1 has an invalid length.
[  968.485514][T12016] ip6gretap7: entered allmulticast mode
[  968.499416][T12016] bond142: (slave ip6gretap7): making interface the new active one
[  968.504664][T12016] bond142: (slave ip6gretap7): Enslaving as an active interface with an up link
[  968.552435][T12021] netlink: 'syz.2.11065': attribute type 1 has an invalid length.
[  968.633339][T12025] netlink: 'syz.0.11067': attribute type 21 has an invalid length.
[  968.709504][T12029] netlink: 'syz.2.11068': attribute type 8 has an invalid length.
[  968.888430][T12036] bond158: option all_slaves_active: invalid value (8)
[  968.899909][T12036] bond158 (unregistering): Released all slaves
[  969.064996][T12046] bond143: option all_slaves_active: invalid value (8)
[  969.070187][T12046] bond143 (unregistering): Released all slaves
[  969.219868][T12059] __nla_validate_parse: 24 callbacks suppressed
[  969.219880][T12059] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11074'.
[  969.250026][T12053] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11075'.
[  969.295992][T12062] netlink: 'syz.2.11077': attribute type 1 has an invalid length.
[  969.298928][T12062] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11077'.
[  969.345211][T12067] netlink: 76 bytes leftover after parsing attributes in process `syz.1.11078'.
[  969.404812][T12067] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  969.413724][T12067] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  969.417983][T12073] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11079'.
[  969.504092][T12078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11080'.
[  969.530340][T12081] bond158: option all_slaves_active: invalid value (8)
[  969.536363][T12081] bond158 (unregistering): Released all slaves
[  969.656710][T12088] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  969.812863][T12100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11086'.
[  969.910158][T12100] lo speed is unknown, defaulting to 1000
[  969.918252][T12100] lo speed is unknown, defaulting to 1000
[  970.005071][T12119] netlink: set zone limit has 4 unknown bytes
[  970.466430][T12136] 8021q: adding VLAN 0 to HW filter on device bond163
[  970.765310][T12159] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  970.981066][T12171] netlink: 732 bytes leftover after parsing attributes in process `syz.1.11103'.
[  970.983952][T12171] openvswitch: netlink: Flow key attr not present in new flow.
[  971.031800][T12177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11105'.
[  971.168857][T12186] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11107'.
[  971.232724][T12190] netlink: 'syz.1.11108': attribute type 13 has an invalid length.
[  971.381459][T12190] lo speed is unknown, defaulting to 1000
[  971.384281][T12190] lo speed is unknown, defaulting to 1000
[  971.620102][T12200] netlink: 'syz.0.11110': attribute type 1 has an invalid length.
[  971.660472][T12200] bond158: entered promiscuous mode
[  971.663238][T12200] 8021q: adding VLAN 0 to HW filter on device bond158
[  971.670678][T12200] xt_hashlimit: size too large, truncated to 1048576
[  971.702250][T12200] 8021q: adding VLAN 0 to HW filter on device bond158
[  971.705521][T12200] bond158: (slave vcan0): The slave device specified does not support setting the MAC address
[  971.713135][T12200] bond158: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  971.741073][T12200] bond158: (slave vcan0): making interface the new active one
[  971.744311][T12200] vcan0: entered promiscuous mode
[  971.749487][T12200] bond158: (slave vcan0): Enslaving as an active interface with an up link
[  971.816500][T12208] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  971.894409][T12214] bond143: option all_slaves_active: invalid value (8)
[  971.899787][T12214] bond143 (unregistering): Released all slaves
[  971.949956][T12217] A link change request failed with some changes committed already. Interface ; may have been left with an inconsistent configuration, please check.
[  972.009952][T12221] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  972.016228][T12221] netlink: 'syz.0.11115': attribute type 10 has an invalid length.
[  972.112348][T12231] netlink: 'syz.0.11119': attribute type 12 has an invalid length.
[  972.117078][T12231] syzkaller1: entered promiscuous mode
[  972.118986][T12231] syzkaller1: entered allmulticast mode
[  972.125573][T12231] netlink: 'syz.0.11119': attribute type 1 has an invalid length.
[  972.173848][T12231] bond159: entered promiscuous mode
[  972.188977][T12231] 8021q: adding VLAN 0 to HW filter on device bond159
[  972.402218][T12245] bond143: option all_slaves_active: invalid value (8)
[  972.411014][T12245] bond143 (unregistering): Released all slaves
[  972.652724][T12231] bond159: (slave bridge76): making interface the new active one
[  972.657671][T12231] bridge76: entered promiscuous mode
[  972.662259][T12231] bridge76: left promiscuous mode
[  973.027156][T12281] gtp4: entered promiscuous mode
[  973.031531][T12281] gtp4: entered allmulticast mode
[  973.172428][T12294] bond158: (slave vcan0): Releasing backup interface
[  973.175137][T12294] vcan0 (unregistering): left promiscuous mode
[  973.184271][T12294] bond158: Destroying bond
[  973.200027][T12294] bond158 (unregistering): Released all slaves
[  973.238062][T12296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  973.365614][T12303] netlink: 'syz.1.11135': attribute type 1 has an invalid length.
[  973.365657][T12301] netlink: 'syz.1.11135': attribute type 1 has an invalid length.
[  973.394909][T12301] 8021q: adding VLAN 0 to HW filter on device bond164
[  974.244172][T12358] netlink: 'syz.2.11150': attribute type 29 has an invalid length.
[  974.247296][T12358] netlink: 'syz.2.11150': attribute type 29 has an invalid length.
[  974.252087][T12358] __nla_validate_parse: 23 callbacks suppressed
[  974.252096][T12358] netlink: 524 bytes leftover after parsing attributes in process `syz.2.11150'.
[  974.279303][T12360] syz0: rxe_newlink: already configured on bridge_slave_1
[  974.333964][T12353] ip6tnl14: entered allmulticast mode
[  974.338652][   T12] ip6_tunnel: ip6tnl14 xmit: Local address not yet configured!
[  974.343172][   T12] ip6_tunnel: ip6tnl14 xmit: Local address not yet configured!
[  974.359388][T15194] ip6_tunnel: ip6tnl14 xmit: Local address not yet configured!
[  974.413275][T12370] A link change request failed with some changes committed already. Interface ; may have been left with an inconsistent configuration, please check.
[  974.422529][T12372] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11156'.
[  974.426264][T12372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11156'.
[  974.659416][  T798] ip6_tunnel: ip6tnl14 xmit: Local address not yet configured!
[  974.695665][T12390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11159'.
[  974.705218][T12390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11159'.
[  974.827006][T12392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11160'.
[  974.849450][  T798] ip6_tunnel: ip6tnl14 xmit: Local address not yet configured!
[  974.885026][T12397] tipc: Resetting bearer <eth:syzkaller0>
[  975.097687][T12400] tunl0: Caught tx_queue_len zero misconfig
[  977.883493][T12396] tipc: Resetting bearer <eth:syzkaller0>
[  977.891405][ T9727] tipc: Resetting bearer <eth:syzkaller0>
[  977.969900][T12406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11166'.
[  977.971622][T12405] netlink: 'syz.0.11164': attribute type 1 has an invalid length.
[  977.999498][T12405] 8021q: adding VLAN 0 to HW filter on device bond158
[  978.031239][T12405] bond158: (slave veth67): Enslaving as an active interface with a down link
[  978.038751][T12409] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  978.059563][T12405] 8021q: adding VLAN 0 to HW filter on device batadv6
[  978.063207][T12405] bond158: (slave batadv6): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  978.270157][T12421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11169'.
[  978.275009][T12421] netlink: 'syz.2.11169': attribute type 11 has an invalid length.
[  978.285800][T12428] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11171'.
[  978.285813][T12427] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11171'.
[  978.489388][    C1] ip6_tunnel: ip6tnl14 xmit: Local address not yet configured!
[  978.694218][T12465] netlink: 'syz.0.11180': attribute type 1 has an invalid length.
[  978.725999][T12465] bond160: entered promiscuous mode
[  978.731544][T12465] 8021q: adding VLAN 0 to HW filter on device bond160
[  978.767499][T12465] syzkaller1: entered promiscuous mode
[  978.769625][T12465] syzkaller1: entered allmulticast mode
[  978.788197][T12465] macvtap1: entered allmulticast mode
[  978.803632][T12465] bond160: (slave bridge78): making interface the new active one
[  978.806293][T12465] bridge78: entered promiscuous mode
[  978.811309][T12465] bond160: (slave bridge78): Enslaving as an active interface with an up link
[  978.976783][T12468] netlink: 'syz.2.11181': attribute type 1 has an invalid length.
[  978.980197][T12468] netlink: 'syz.2.11181': attribute type 2 has an invalid length.
[  979.439724][T12491] __nla_validate_parse: 5 callbacks suppressed
[  979.439736][T12491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11187'.
[  979.532967][T12498] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  979.543767][T12496] xt_hashlimit: size too large, truncated to 1048576
[  979.728884][T12506] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11192'.
[  979.733002][T12506] openvswitch: netlink: Tunnel attr 3 has unexpected len 4 expected 1
[  979.758762][T12508] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11193'.
[  979.798769][T12508] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  979.808826][T12510] netlink: 'syz.0.11194': attribute type 1 has an invalid length.
[  979.817963][T12510] netlink: 244 bytes leftover after parsing attributes in process `syz.0.11194'.
[  979.897075][T12514] netem: change failed
[  980.090836][   T98] block nbd1: Possible stuck request ffff888041820000: control (read@0,1024B). Runtime 30 seconds
[  980.094984][   T98] block nbd1: Possible stuck request ffff888041820200: control (read@1024,1024B). Runtime 30 seconds
[  980.099236][   T98] block nbd1: Possible stuck request ffff888041820400: control (read@2048,1024B). Runtime 30 seconds
[  980.103282][   T98] block nbd1: Possible stuck request ffff888041820600: control (read@3072,1024B). Runtime 30 seconds
[  980.146712][T12535] xt_hashlimit: size too large, truncated to 1048576
[  980.200512][T12542] netlink: 'syz.2.11202': attribute type 1 has an invalid length.
[  980.218991][T12542] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11202'.
[  980.253277][T12535] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11202'.
[  980.316872][T12542] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  980.338966][T12548] netlink: 56 bytes leftover after parsing attributes in process `syz.1.11205'.
[  980.344581][T12548] netlink: 'syz.1.11205': attribute type 3 has an invalid length.
[  980.459922][T12555] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  980.462766][T12555] IPv6: NLM_F_CREATE should be set when creating new route
[  980.466054][T12555] IPv6: NLM_F_CREATE should be set when creating new route
[  980.468643][T12555] IPv6: NLM_F_CREATE should be set when creating new route
[  980.537615][T12558] netlink: 'syz.0.11207': attribute type 10 has an invalid length.
[  980.540901][T12558] netlink: 'syz.0.11207': attribute type 10 has an invalid length.
[  980.678815][T12562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11209'.
[  980.729916][T12570] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  980.813739][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  980.833508][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  980.840409][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  980.846935][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  980.877452][T12575] openvswitch: netlink: Message has 496 unknown bytes.
[  980.881065][T12575] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  980.933271][T12578] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.11213'.
[  981.065429][T12592] bond161: entered promiscuous mode
[  981.067904][T12592] 8021q: adding VLAN 0 to HW filter on device bond161
[  981.177737][T12609] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  981.270331][T12619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11224'.
[  981.537864][T12648] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  981.542331][T12648] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  981.546219][T12648] tipc: Resetting bearer <eth:syzkaller0>
[  981.554052][T12648] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig
[  981.578571][T12648] syzkaller0: mtu less than device minimum
[  984.343216][T12631] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  984.441710][T12659] SET target dimension over the limit!
[  984.574286][T12679] __nla_validate_parse: 3 callbacks suppressed
[  984.574300][T12679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11240'.
[  984.631838][T12684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11241'.
[  984.640109][T12687] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11238'.
[  984.655060][T12687] netlink: 76 bytes leftover after parsing attributes in process `syz.1.11238'.
[  984.678421][T12687] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11238'.
[  984.687391][T12690] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  984.694280][T12690] validate_nla: 2 callbacks suppressed
[  984.694293][T12690] netlink: 'syz.0.11242': attribute type 1 has an invalid length.
[  984.741486][T12690] 8021q: adding VLAN 0 to HW filter on device bond163
[  984.766092][T12690] bond163: (slave geneve8): making interface the new active one
[  984.773982][T12690] bond163: (slave geneve8): Enslaving as an active interface with an up link
[  984.781015][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  984.782782][T12701] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  984.784264][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  984.796734][ T5475] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  984.811914][ T5475] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  984.822288][T12700] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  984.880167][T12700] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11244'.
[  984.923201][T12707] lo speed is unknown, defaulting to 1000
[  984.926200][T12710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11247'.
[  984.932320][T12707] lo speed is unknown, defaulting to 1000
[  984.958234][T12710] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  984.976764][T12711] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  985.100605][T12718] netlink: 'syz.1.11250': attribute type 1 has an invalid length.
[  985.126441][T12721] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11251'.
[  985.132985][T12718] bond165: entered promiscuous mode
[  985.135419][T12718] 8021q: adding VLAN 0 to HW filter on device bond165
[  985.157256][T12721] veth69: entered allmulticast mode
[  985.311709][T12727] netlink: 'syz.2.11252': attribute type 1 has an invalid length.
[  985.366661][T12727] 8021q: adding VLAN 0 to HW filter on device bond143
[  985.516605][T12739] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig
[  985.569432][T12741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  985.598547][T12739] tipc: Resetting bearer <eth:syzkaller0>
[  986.300315][T12751] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11260'.
[  986.340113][T12755] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11261'.
[  986.425828][T12762] netlink: 'syz.2.11263': attribute type 1 has an invalid length.
[  986.461156][T12762] bond144: entered promiscuous mode
[  986.463355][T12762] 8021q: adding VLAN 0 to HW filter on device bond144
[  986.480879][T12765] netlink: 'syz.1.11264': attribute type 1 has an invalid length.
[  986.502948][T12765] bond166: entered promiscuous mode
[  986.505320][T12765] 8021q: adding VLAN 0 to HW filter on device bond166
[  986.552049][T12762] bond144: (slave bridge66): making interface the new active one
[  986.556526][T12762] bridge66: entered promiscuous mode
[  986.567998][T12762] bond144: (slave bridge66): Enslaving as an active interface with an up link
[  986.733182][T12790] netlink: 'syz.0.11270': attribute type 1 has an invalid length.
[  986.895896][T12799] netlink: 'syz.1.11273': attribute type 1 has an invalid length.
[  986.921545][T12799] bond167: entered promiscuous mode
[  986.923939][T12799] 8021q: adding VLAN 0 to HW filter on device bond167
[  986.965825][T12799] 8021q: adding VLAN 0 to HW filter on device bond167
[  986.968532][T12799] bond167: (slave wireguard3): The slave device specified does not support setting the MAC address
[  986.974266][T12799] bond167: (slave wireguard3): Setting fail_over_mac to active for active-backup mode
[  986.978727][T12803] netlink: 'syz.0.11274': attribute type 1 has an invalid length.
[  986.988238][T12799] bond167: (slave wireguard3): making interface the new active one
[  986.991923][T12799] wireguard3: entered promiscuous mode
[  986.995486][T12799] bond167: (slave wireguard3): Enslaving as an active interface with an up link
[  987.017723][T12803] bond165: entered promiscuous mode
[  987.023978][T12803] 8021q: adding VLAN 0 to HW filter on device bond165
[  987.034363][T12804] bond167: (slave wireguard4): The slave device specified does not support setting the MAC address
[  987.048624][T12804] bond167: (slave wireguard4): Enslaving as a backup interface with an up link
[  987.129220][    C1] ip6_tunnel: ip6tnl14 xmit: Local address not yet configured!
[  987.275409][T12830] netlink: 'syz.1.11282': attribute type 1 has an invalid length.
[  987.296889][T12833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  987.299842][T12830] bond168: entered promiscuous mode
[  987.302768][T12830] 8021q: adding VLAN 0 to HW filter on device bond168
[  987.523158][T12859] bond169: entered promiscuous mode
[  987.525678][T12859] 8021q: adding VLAN 0 to HW filter on device bond169
[  987.530901][T12856] netlink: 'syz.0.11286': attribute type 58 has an invalid length.
[  987.966571][T12897] bond145: entered promiscuous mode
[  987.969978][T12897] 8021q: adding VLAN 0 to HW filter on device bond145
[  988.002065][T12897] syzkaller1: entered promiscuous mode
[  988.003856][T12897] syzkaller1: entered allmulticast mode
[  988.327303][T12907] tipc: Resetting bearer <eth:syzkaller0>
[  988.345025][T12907] tipc: Resetting bearer <eth:syzkaller0>
[  988.448437][T12917] syzkaller1: entered promiscuous mode
[  988.455561][T12917] syzkaller1: entered allmulticast mode
[  988.544437][T12927] veth0_to_bond: left allmulticast mode
[  988.546584][T12927] veth0_to_bond: left promiscuous mode
[  988.548782][T12927] bridge70: port 2(veth0_to_bond) entered disabled state
[  988.559170][T12927] tipc: Resetting bearer <eth:syzkaller0>
[  988.561884][T12927] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  988.870024][ T9725] tipc: Resetting bearer <eth:syzkaller0>
[  990.151463][T12942] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  990.257489][T12969] validate_nla: 2 callbacks suppressed
[  990.257499][T12969] netlink: 'syz.2.11314': attribute type 29 has an invalid length.
[  990.340689][T12971] __nla_validate_parse: 15 callbacks suppressed
[  990.340708][T12971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11313'.
[  990.346482][T12971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11313'.
[  990.349462][T12971] netlink: 58 bytes leftover after parsing attributes in process `syz.1.11313'.
[  990.403181][T12974] netlink: 3 bytes leftover after parsing attributes in process `syz.2.11314'.
[  990.420890][T12974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11314'.
[  990.425555][T12974] netlink: 3 bytes leftover after parsing attributes in process `syz.2.11314'.
[  990.428835][T12974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11314'.
[  990.432325][T12974] netlink: 3 bytes leftover after parsing attributes in process `syz.2.11314'.
[  990.464395][T12983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11318'.
[  990.513930][T12983] bond170: (slave bridge68): Enslaving as an active interface with an up link
[  990.521364][T12984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11318'.
[  990.748445][T12992] lo speed is unknown, defaulting to 1000
[  990.752130][T12992] lo speed is unknown, defaulting to 1000
[  991.062324][T13017] netlink: 'syz.0.11326': attribute type 1 has an invalid length.
[  991.095331][T13019] netlink: 'syz.2.11327': attribute type 1 has an invalid length.
[  991.234690][T13028] ip6gretap4: entered promiscuous mode
[  991.237333][T13028] ip6gretap4: entered allmulticast mode
[  991.625249][T13063] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  991.630094][T13061] bridge0: port 3(erspan0) entered blocking state
[  991.636563][T13061] bridge0: port 3(erspan0) entered disabled state
[  991.648572][T13061] erspan0: entered allmulticast mode
[  991.668328][T13061] erspan0: entered promiscuous mode
[  991.671557][T13062] erspan0: left allmulticast mode
[  991.673374][T13062] erspan0: left promiscuous mode
[  991.675376][T13062] bridge0: port 3(erspan0) entered disabled state
[  991.840626][T13079] bond171: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  991.852791][T13079] bond171 (unregistering): Released all slaves
[  992.411298][T13058] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  992.524466][T13087] netlink: 'syz.1.11342': attribute type 7 has an invalid length.
[  992.527724][T13087] netlink: 'syz.1.11342': attribute type 8 has an invalid length.
[  992.846917][T13125] mac80211_hwsim hwsim147 wlan0: entered promiscuous mode
[  992.924538][T13130] x_tables: ip_tables: time.0 match: invalid size 24 (kernel) != (user) 40
[  993.008098][T13144] netlink: 'syz.1.11359': attribute type 10 has an invalid length.
[  993.243209][T13160] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  993.250082][T13160] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  993.504833][T13188] netlink: 'syz.1.11370': attribute type 1 has an invalid length.
[  994.136317][T13216] netlink: 'syz.2.11380': attribute type 21 has an invalid length.
[  994.139398][T13216] netlink: 'syz.2.11380': attribute type 7 has an invalid length.
[  994.222480][T13221] bond167: entered promiscuous mode
[  994.227073][T13221] 8021q: adding VLAN 0 to HW filter on device bond167
[  994.507550][ T5674] tipc: Subscription rejected, illegal request
[  994.594258][T13242] netlink: 'syz.0.11387': attribute type 4 has an invalid length.
[  994.604211][T13242] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  994.900274][T13266] bond172: (slave vxcan9): The slave device specified does not support setting the MAC address
[  994.905515][T13266] bond172: (slave vxcan9): Error -95 calling set_mac_address
[  994.955616][T13273] bond172: (slave bridge69): Enslaving as an active interface with a down link
[  995.217448][T13297] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  995.439827][T13315] __nla_validate_parse: 43 callbacks suppressed
[  995.439842][T13315] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11416'.
[  995.546863][T13319] validate_nla: 12 callbacks suppressed
[  995.546880][T13319] netlink: 'syz.0.11417': attribute type 39 has an invalid length.
[  995.816980][T13347] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  995.835587][T13347] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11424'.
[  995.841298][T13349] netlink: 'syz.1.11425': attribute type 1 has an invalid length.
[  995.845766][T13350] netlink: 'syz.1.11425': attribute type 1 has an invalid length.
[  995.887574][T13349] bond173: entered promiscuous mode
[  995.889639][T13349] 8021q: adding VLAN 0 to HW filter on device bond173
[  995.941221][T13350] vlan12: entered allmulticast mode
[  995.946129][T13350] bond173: entered allmulticast mode
[  996.095237][T13371] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  996.099862][T13371] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  996.103028][T13371] tipc: Resetting bearer <eth:syzkaller0>
[  996.160978][T13375] bond146: entered promiscuous mode
[  996.164119][T13375] 8021q: adding VLAN 0 to HW filter on device bond146
[  996.174297][T13375] netlink: 'syz.2.11430': attribute type 1 has an invalid length.
[  996.193575][T13375] 8021q: adding VLAN 0 to HW filter on device bond147
[  996.202596][T13375] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11430'.
[  996.214769][T13381] netlink: 'syz.0.11432': attribute type 1 has an invalid length.
[  996.234791][T13381] bond168: entered promiscuous mode
[  996.236587][T13380] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11431'.
[  996.237522][T13381] 8021q: adding VLAN 0 to HW filter on device bond168
[  996.257740][T13381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11432'.
[  996.268267][T13381] vlan9: entered allmulticast mode
[  996.270720][T13381] bond168: entered allmulticast mode
[  996.291973][T13381] bond168: (slave bridge80): making interface the new active one
[  996.296529][T13381] bridge80: entered promiscuous mode
[  996.298640][T13381] bridge80: entered allmulticast mode
[  996.302467][T13381] bond168: (slave bridge80): Enslaving as an active interface with an up link
[  996.704162][T13415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11442'.
[  996.707863][T13415] netlink: 'syz.0.11442': attribute type 2 has an invalid length.
[  996.716774][T13415] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11442'.
[  996.726261][T13415] bond0: Error: Cannot enslave bond to itself.
[  996.731201][T13415] netlink: 'syz.0.11442': attribute type 3 has an invalid length.
[  996.733670][T13417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11444'.
[  996.951603][T13435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11448'.
[  996.955943][T13442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11449'.
[  997.435224][T13468] netlink: 'syz.1.11456': attribute type 1 has an invalid length.
[  997.695433][T13494] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  997.786920][T13498] xt_nfacct: accounting object `syz0' does not exist
[ 1000.421893][T13468] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1000.467987][T13494] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 1000.471865][T13494] CPU: 0 UID: 0 PID: 13494 Comm: syz.2.11461 Not tainted syzkaller #0 PREEMPT(full) 
[ 1000.471888][T13494] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1000.471900][T13494] Call Trace:
[ 1000.471907][T13494]  <TASK>
[ 1000.471914][T13494]  dump_stack_lvl+0xe8/0x150
[ 1000.471938][T13494]  sysfs_warn_dup+0x8e/0xa0
[ 1000.471957][T13494]  sysfs_do_create_link_sd+0xc0/0x110
[ 1000.471983][T13494]  device_add_class_symlinks+0x1cf/0x240
[ 1000.472044][T13494]  device_add+0x475/0xbb0
[ 1000.472068][T13494]  wiphy_register+0x1dc5/0x2dc0
[ 1000.472104][T13494]  ? __pfx_wiphy_register+0x10/0x10
[ 1000.472126][T13494]  ? __pfx_netdev_run_todo+0x10/0x10
[ 1000.472147][T13494]  ? minstrel_ht_alloc+0x6e0/0x7e0
[ 1000.472170][T13494]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[ 1000.472190][T13494]  ieee80211_register_hw+0x3d82/0x4a70
[ 1000.472219][T13494]  ? ieee80211_register_hw+0x18e1/0x4a70
[ 1000.472257][T13494]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1000.472279][T13494]  ? __asan_memset+0x22/0x50
[ 1000.472297][T13494]  ? __hrtimer_setup+0x1b7/0x260
[ 1000.472313][T13494]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1000.472334][T13494]  mac80211_hwsim_new_radio+0x3335/0x5aa0
[ 1000.472374][T13494]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1000.472390][T13494]  ? kstrndup+0xbf/0x160
[ 1000.472411][T13494]  hwsim_new_radio_nl+0xf6a/0x1c00
[ 1000.472444][T13494]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1000.472467][T13494]  ? rcu_is_watching+0x15/0xb0
[ 1000.472486][T13494]  ? trace_kmalloc+0x2a/0xf0
[ 1000.472508][T13494]  ? __nla_parse+0x40/0x60
[ 1000.472530][T13494]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[ 1000.472544][T13494]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[ 1000.472563][T13494]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1000.472580][T13494]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1000.472615][T13494]  ? bpf_lsm_capable+0x9/0x20
[ 1000.472630][T13494]  ? security_capable+0x7e/0x2c0
[ 1000.472658][T13494]  genl_rcv_msg+0x61c/0x7a0
[ 1000.472680][T13494]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1000.472695][T13494]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1000.472725][T13494]  netlink_rcv_skb+0x232/0x4b0
[ 1000.472757][T13494]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1000.472774][T13494]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1000.472808][T13494]  ? down_read+0x270/0x2e0
[ 1000.472821][T13494]  ? genl_rcv+0xd/0x40
[ 1000.472837][T13494]  genl_rcv+0x28/0x40
[ 1000.472850][T13494]  netlink_unicast+0x75c/0x8e0
[ 1000.472903][T13494]  netlink_sendmsg+0x813/0xb40
[ 1000.472934][T13494]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1000.472959][T13494]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1000.472981][T13494]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1000.473002][T13494]  ____sys_sendmsg+0x972/0x9f0
[ 1000.473055][T13494]  ? __might_fault+0xaf/0x130
[ 1000.473081][T13494]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1000.473110][T13494]  ? import_iovec+0x73/0xa0
[ 1000.473141][T13494]  ___sys_sendmsg+0x2a5/0x360
[ 1000.473160][T13494]  ? __lock_acquire+0x6b5/0x2cf0
[ 1000.473182][T13494]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1000.473210][T13494]  ? futex_wake+0x4ac/0x580
[ 1000.473254][T13494]  ? __fget_files+0x2a/0x420
[ 1000.473270][T13494]  ? __fget_files+0x3a0/0x420
[ 1000.473297][T13494]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1000.473320][T13494]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1000.473347][T13494]  ? rcu_is_watching+0x15/0xb0
[ 1000.473371][T13494]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1000.473384][T13494]  do_syscall_64+0x15f/0xf80
[ 1000.473404][T13494]  ? trace_irq_disable+0x3b/0x140
[ 1000.473429][T13494]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1000.473444][T13494] RIP: 0033:0x7f1070f9cdd9
[ 1000.473460][T13494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1000.473473][T13494] RSP: 002b:00007f1071e9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1000.473489][T13494] RAX: ffffffffffffffda RBX: 00007f1071215fa0 RCX: 00007f1070f9cdd9
[ 1000.473501][T13494] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[ 1000.473511][T13494] RBP: 00007f1071032d69 R08: 0000000000000000 R09: 0000000000000000
[ 1000.473520][T13494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1000.473530][T13494] R13: 00007f1071216038 R14: 00007f1071215fa0 R15: 00007ffc1ec9a378
[ 1000.473554][T13494]  </TASK>
[ 1001.131022][T13504] tipc: Resetting bearer <eth:syzkaller0>
[ 1001.143641][T13525] __nla_validate_parse: 3 callbacks suppressed
[ 1001.143651][T13525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11468'.
[ 1001.221341][  T798] lo speed is unknown, defaulting to 1000
[ 1001.240066][  T798] sqz0: Port: 1 Link DOWN
[ 1001.244379][  T798] lo speed is unknown, defaulting to 1000
[ 1001.276746][T13527] netlink: 'syz.0.11469': attribute type 9 has an invalid length.
[ 1001.283887][T13527] netlink: 'syz.0.11469': attribute type 6 has an invalid length.
[ 1001.286799][T13527] netlink: 'syz.0.11469': attribute type 7 has an invalid length.
[ 1001.292693][T13527] netlink: 'syz.0.11469': attribute type 8 has an invalid length.
[ 1001.469799][T13536] openvswitch: netlink: Unknown VXLAN extension attribute 0
[ 1001.548282][T13541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11473'.
[ 1001.606463][T13541] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11473'.
[ 1001.641875][T13545] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11474'.
[ 1001.758335][T13550] Timeout policy `syz0' can only be used by L3 protocol number 34924
[ 1002.295215][T13598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11488'.
[ 1002.315976][T13600] openvswitch: netlink: Missing key (keys=40, expected=2000)
[ 1002.402609][T13609] xt_hashlimit: size too large, truncated to 1048576
[ 1002.403420][T13607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11492'.
[ 1002.411400][T13604] netlink: 'syz.0.11490': attribute type 21 has an invalid length.
[ 1002.414283][T13604] netlink: 128 bytes leftover after parsing attributes in process `syz.0.11490'.
[ 1002.424023][T13604] netlink: 'syz.0.11490': attribute type 4 has an invalid length.
[ 1002.426903][T13604] netlink: 3 bytes leftover after parsing attributes in process `syz.0.11490'.
[ 1002.532600][T13623] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[ 1002.581742][T13629] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[ 1002.585310][T13629] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[ 1002.587885][T13629] tipc: Resetting bearer <eth:syzkaller0>
[ 1002.625194][T13635] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11497'.
[ 1002.630432][T13635] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11497'.
[ 1002.635407][T13635] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1002.888195][T13653] xt_limit: Overflow, try lower: 324382443/0
[ 1002.945878][T13656] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[ 1002.977650][T13658] bond176: option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6)
[ 1002.987866][T13658] bond176 (unregistering): Released all slaves
[ 1003.159552][T13661] dvmrp1: entered allmulticast mode
[ 1003.226430][T13661] lo speed is unknown, defaulting to 1000
[ 1003.231565][T13661] lo speed is unknown, defaulting to 1000
[ 1003.297357][T13667] netlink: 'syz.0.11509': attribute type 1 has an invalid length.
[ 1003.320864][T13667] bond169: entered promiscuous mode
[ 1003.323263][T13667] 8021q: adding VLAN 0 to HW filter on device bond169
[ 1003.374807][T13667] bond169: (slave veth71): making interface the new active one
[ 1003.377410][T13667] veth71: entered promiscuous mode
[ 1003.381160][T13667] bond169: (slave veth71): Enslaving as an active interface with an up link
[ 1004.223516][T13717] team_slave_1: Caught tx_queue_len zero misconfig
[ 1004.230616][T13717] tipc: Failed to remove unknown binding: 66,0,0/522450353:1678456044/1678456046
[ 1004.234184][T13717] tipc: Failed to remove unknown binding: 66,0,0/522450353:1678456044/1678456045
[ 1004.238284][T13717] tipc: Failed to remove unknown binding: 66,0,0/522450353:1678456044/1678456046
[ 1004.242133][T13717] tipc: Failed to remove unknown binding: 66,0,0/522450353:1678456044/1678456045
[ 1004.352975][T13722] lo speed is unknown, defaulting to 1000
[ 1004.356944][T13722] lo speed is unknown, defaulting to 1000
[ 1004.735749][T13736] IPVS: Unknown mcast interface: virt_wifi0
[ 1004.741163][T13736] IPVS: Unknown mcast interface: virt_wifi0
[ 1004.747223][T13736] IPVS: Unknown mcast interface: virt_wifi0
[ 1004.751211][T13736] IPVS: Unknown mcast interface: virt_wifi0
[ 1004.754481][T13736] IPVS: Unknown mcast interface: virt_wifi0
[ 1004.756866][T13736] IPVS: Unknown mcast interface: virt_wifi0
[ 1004.761378][T13736] IPVS: Unknown mcast interface: virt_wifi0
[ 1004.763815][T13736] IPVS: Unknown mcast interface: virt_wifi0
[ 1004.773934][T13736] IPVS: Unknown mcast interface: virt_wifi0
[ 1004.830613][T13736] IPVS: Unknown mcast interface: virt_wifi0
[ 1004.997112][T13750] netlink: 'syz.2.11530': attribute type 1 has an invalid length.
[ 1005.147665][T13759] netlink: 'syz.0.11532': attribute type 62 has an invalid length.
[ 1005.212288][ T5475] tipc: Subscription rejected, illegal request
[ 1005.550376][T13789] syzkaller1: entered promiscuous mode
[ 1005.553649][T13789] syzkaller1: entered allmulticast mode
[ 1005.866148][T13809] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1005.937143][T13811] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[ 1005.973254][T13811] bridge82: entered promiscuous mode
[ 1005.975114][T13811] bridge82: entered allmulticast mode
[ 1006.306585][T13824] __nla_validate_parse: 17 callbacks suppressed
[ 1006.306600][T13824] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11549'.
[ 1006.375187][T13824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11549'.
[ 1007.074571][T13838] openvswitch: netlink: Geneve option length err (len 256, max 255).
[ 1007.162049][T13845] netlink: 'syz.1.11555': attribute type 1 has an invalid length.
[ 1007.200692][T13845] netlink: 'syz.1.11555': attribute type 1 has an invalid length.
[ 1007.237802][T13850] netlink: 'syz.1.11556': attribute type 1 has an invalid length.
[ 1007.261867][T13850] 8021q: adding VLAN 0 to HW filter on device bond176
[ 1007.267443][T13850] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11556'.
[ 1007.313365][T13855] tipc: Resetting bearer <eth:syzkaller0>
[ 1007.342266][ T4219] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1007.346877][ T4219] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1007.351553][ T4219] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1007.354405][ T4219] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1007.782732][T13864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11560'.
[ 1010.171647][   T98] block nbd1: Possible stuck request ffff888041820000: control (read@0,1024B). Runtime 60 seconds
[ 1010.175901][   T98] block nbd1: Possible stuck request ffff888041820200: control (read@1024,1024B). Runtime 60 seconds
[ 1010.180559][   T98] block nbd1: Possible stuck request ffff888041820400: control (read@2048,1024B). Runtime 60 seconds
[ 1010.184857][   T98] block nbd1: Possible stuck request ffff888041820600: control (read@3072,1024B). Runtime 60 seconds
[ 1012.207583][ T5058] udevd[5058]: worker [10853] /devices/virtual/block/nbd1 is taking a long time
[ 1022.476489][ T4999] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1022.480321][ T4999] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1022.483898][ T4999] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1022.487365][ T4999] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1022.496203][ T4999] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1022.673998][T13876] lo speed is unknown, defaulting to 1000
[ 1022.676811][T13876] lo speed is unknown, defaulting to 1000
[ 1023.011545][T13876] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1023.013924][T13876] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1023.016429][T13876] bridge_slave_0: entered allmulticast mode
[ 1023.020244][T13876] bridge_slave_0: entered promiscuous mode
[ 1023.024030][T13876] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1023.026625][T13876] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1023.029483][T13876] bridge_slave_1: entered allmulticast mode
[ 1023.032397][T13876] bridge_slave_1: entered promiscuous mode
[ 1023.060885][T13876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1023.066225][T13876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1023.092279][T13876] team0: Port device team_slave_0 added
[ 1023.096131][T13876] team0: Port device team_slave_1 added
[ 1023.114712][T13876] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1023.116957][T13876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1023.124506][T13876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1023.130446][T13876] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1023.133227][T13876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1023.142038][T13876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1023.174411][T13876] hsr_slave_0: entered promiscuous mode
[ 1023.177170][T13876] hsr_slave_1: entered promiscuous mode
[ 1023.179638][T13876] debugfs: 'hsr0' already exists in 'hsr'
[ 1023.181395][T13876] Cannot create hsr debugfs directory
[ 1023.528052][ T4999] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1023.543437][ T4999] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1023.549003][ T4999] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1023.555802][ T4999] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1023.558556][ T4999] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1023.614538][ T5621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1023.628263][ T5621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1023.632700][ T5621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1023.638415][ T5621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1023.641648][ T5621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1023.773538][T13897] lo speed is unknown, defaulting to 1000
[ 1023.776213][T13897] lo speed is unknown, defaulting to 1000
[ 1023.835396][T13899] lo speed is unknown, defaulting to 1000
[ 1023.876057][T13899] lo speed is unknown, defaulting to 1000
[ 1024.178864][T13897] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1024.181205][T13897] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1024.183609][T13897] bridge_slave_0: entered allmulticast mode
[ 1024.186700][T13897] bridge_slave_0: entered promiscuous mode
[ 1024.193259][T13897] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1024.195701][T13897] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1024.198065][T13897] bridge_slave_1: entered allmulticast mode
[ 1024.201188][T13897] bridge_slave_1: entered promiscuous mode
[ 1024.225356][T13897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1024.235525][T13897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1024.282737][T13897] team0: Port device team_slave_0 added
[ 1024.291977][T13897] team0: Port device team_slave_1 added
[ 1024.313954][T13897] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1024.316437][T13897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1024.323983][T13897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1024.331130][T13897] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1024.333307][T13897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1024.341562][T13897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1024.399461][T13897] hsr_slave_0: entered promiscuous mode
[ 1024.402236][T13897] hsr_slave_1: entered promiscuous mode
[ 1024.404505][T13897] debugfs: 'hsr0' already exists in 'hsr'
[ 1024.406236][T13897] Cannot create hsr debugfs directory
[ 1024.436779][T13899] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1024.440174][T13899] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1024.442529][T13899] bridge_slave_0: entered allmulticast mode
[ 1024.445398][T13899] bridge_slave_0: entered promiscuous mode
[ 1024.461544][T13899] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1024.463844][T13899] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1024.466822][T13899] bridge_slave_1: entered allmulticast mode
[ 1024.471945][T13899] bridge_slave_1: entered promiscuous mode
[ 1024.516420][T13899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1024.523502][T13899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1024.563015][T13899] team0: Port device team_slave_0 added
[ 1024.569694][ T4999] Bluetooth: hci3: command tx timeout
[ 1024.577062][T13899] team0: Port device team_slave_1 added
[ 1024.615686][T13899] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1024.618361][T13899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1024.628583][T13899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1024.643780][T13899] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1024.646423][T13899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1024.656072][T13899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1024.701389][T13899] hsr_slave_0: entered promiscuous mode
[ 1024.704325][T13899] hsr_slave_1: entered promiscuous mode
[ 1024.706523][T13899] debugfs: 'hsr0' already exists in 'hsr'
[ 1024.708441][T13899] Cannot create hsr debugfs directory
[ 1025.609496][ T4999] Bluetooth: hci4: command tx timeout
[ 1025.689588][ T4999] Bluetooth: hci5: command tx timeout
[ 1026.649890][ T4999] Bluetooth: hci3: command tx timeout
[ 1027.689955][ T4999] Bluetooth: hci4: command tx timeout
[ 1027.779288][ T4999] Bluetooth: hci5: command tx timeout
[ 1028.729829][ T4999] Bluetooth: hci3: command tx timeout
[ 1029.769829][ T4999] Bluetooth: hci4: command tx timeout
[ 1029.849397][ T4999] Bluetooth: hci5: command tx timeout
[ 1030.819947][ T4999] Bluetooth: hci3: command tx timeout
[ 1031.849834][ T4999] Bluetooth: hci4: command tx timeout
[ 1031.929478][ T4999] Bluetooth: hci5: command tx timeout
[ 1040.250674][   T98] block nbd1: Possible stuck request ffff888041820000: control (read@0,1024B). Runtime 90 seconds
[ 1040.253962][   T98] block nbd1: Possible stuck request ffff888041820200: control (read@1024,1024B). Runtime 90 seconds
[ 1040.257415][   T98] block nbd1: Possible stuck request ffff888041820400: control (read@2048,1024B). Runtime 90 seconds
[ 1040.261416][   T98] block nbd1: Possible stuck request ffff888041820600: control (read@3072,1024B). Runtime 90 seconds
[ 1070.349670][   T98] block nbd1: Possible stuck request ffff888041820000: control (read@0,1024B). Runtime 120 seconds
[ 1070.352979][   T98] block nbd1: Possible stuck request ffff888041820200: control (read@1024,1024B). Runtime 120 seconds
[ 1070.356453][   T98] block nbd1: Possible stuck request ffff888041820400: control (read@2048,1024B). Runtime 120 seconds
[ 1070.359794][   T98] block nbd1: Possible stuck request ffff888041820600: control (read@3072,1024B). Runtime 120 seconds
[ 1083.491792][ T5621] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1083.495825][ T5621] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1083.502956][ T5621] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1083.510127][ T5621] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1083.513547][ T5621] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1083.694630][T13932] lo speed is unknown, defaulting to 1000
[ 1083.698220][T13932] lo speed is unknown, defaulting to 1000
[ 1084.104822][T13932] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1084.107559][T13932] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1084.110556][T13932] bridge_slave_0: entered allmulticast mode
[ 1084.113381][T13932] bridge_slave_0: entered promiscuous mode
[ 1084.116829][T13932] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1084.119003][T13932] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1084.122393][T13932] bridge_slave_1: entered allmulticast mode
[ 1084.126316][T13932] bridge_slave_1: entered promiscuous mode
[ 1084.148977][T13932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1084.154344][T13932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1084.173511][T13932] team0: Port device team_slave_0 added
[ 1084.177189][T13932] team0: Port device team_slave_1 added
[ 1084.194051][T13932] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1084.196697][T13932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1084.206078][T13932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1084.213447][T13932] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1084.215474][T13932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1084.223103][T13932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1084.263529][T13932] hsr_slave_0: entered promiscuous mode
[ 1084.266587][T13932] hsr_slave_1: entered promiscuous mode
[ 1084.269517][T13932] debugfs: 'hsr0' already exists in 'hsr'
[ 1084.271540][T13932] Cannot create hsr debugfs directory
[ 1084.524942][ T5621] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1084.533489][ T5621] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1084.536692][ T5621] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1084.561391][ T5621] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1084.565775][ T5621] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1084.639457][ T4999] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1084.655225][ T4999] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1084.658143][ T4999] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1084.660898][ T4999] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1084.664495][ T4999] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1084.866128][T13951] lo speed is unknown, defaulting to 1000
[ 1084.877684][T13951] lo speed is unknown, defaulting to 1000
[ 1084.955123][T13954] lo speed is unknown, defaulting to 1000
[ 1085.002895][T13954] lo speed is unknown, defaulting to 1000
[ 1085.278266][T13951] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1085.280995][T13951] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1085.283568][T13951] bridge_slave_0: entered allmulticast mode
[ 1085.286426][T13951] bridge_slave_0: entered promiscuous mode
[ 1085.290545][T13951] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1085.292914][T13951] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1085.295290][T13951] bridge_slave_1: entered allmulticast mode
[ 1085.298289][T13951] bridge_slave_1: entered promiscuous mode
[ 1085.337533][T13951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1085.347272][T13951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1085.381025][T13951] team0: Port device team_slave_0 added
[ 1085.388282][T13951] team0: Port device team_slave_1 added
[ 1085.411339][T13951] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1085.413527][T13951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1085.422024][T13951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1085.427346][T13951] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1085.429748][T13951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1085.437531][T13951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1085.493037][T13951] hsr_slave_0: entered promiscuous mode
[ 1085.496526][T13951] hsr_slave_1: entered promiscuous mode
[ 1085.499969][T13951] debugfs: 'hsr0' already exists in 'hsr'
[ 1085.502436][T13951] Cannot create hsr debugfs directory
[ 1085.609415][ T4999] Bluetooth: hci6: command tx timeout
[ 1085.698704][T13954] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1085.701702][T13954] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1085.704544][T13954] bridge_slave_0: entered allmulticast mode
[ 1085.708872][T13954] bridge_slave_0: entered promiscuous mode
[ 1085.714684][T13954] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1085.717516][T13954] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1085.720738][T13954] bridge_slave_1: entered allmulticast mode
[ 1085.725015][T13954] bridge_slave_1: entered promiscuous mode
[ 1085.787635][T13954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1085.793295][T13954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1085.825099][T13954] team0: Port device team_slave_0 added
[ 1085.828713][T13954] team0: Port device team_slave_1 added
[ 1085.846128][T13954] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1085.848320][T13954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1085.857527][T13954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1085.863893][T13954] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1085.866481][T13954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1085.874889][T13954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1085.916167][T13954] hsr_slave_0: entered promiscuous mode
[ 1085.918668][T13954] hsr_slave_1: entered promiscuous mode
[ 1085.921304][T13954] debugfs: 'hsr0' already exists in 'hsr'
[ 1085.923243][T13954] Cannot create hsr debugfs directory
[ 1086.649379][ T4999] Bluetooth: hci7: command tx timeout
[ 1086.729442][ T4999] Bluetooth: hci8: command tx timeout
[ 1087.689335][ T4999] Bluetooth: hci6: command tx timeout
[ 1088.739481][ T4999] Bluetooth: hci7: command tx timeout
[ 1088.809425][ T4999] Bluetooth: hci8: command tx timeout
[ 1089.769401][ T4999] Bluetooth: hci6: command tx timeout
[ 1090.809614][ T4999] Bluetooth: hci7: command tx timeout
[ 1090.889503][ T4999] Bluetooth: hci8: command tx timeout
[ 1091.849598][ T4999] Bluetooth: hci6: command tx timeout
[ 1092.889275][ T4999] Bluetooth: hci7: command tx timeout
[ 1092.969376][ T4999] Bluetooth: hci8: command tx timeout
[ 1100.410614][   T98] block nbd1: Possible stuck request ffff888041820000: control (read@0,1024B). Runtime 150 seconds
[ 1100.414632][   T98] block nbd1: Possible stuck request ffff888041820200: control (read@1024,1024B). Runtime 150 seconds
[ 1100.418924][   T98] block nbd1: Possible stuck request ffff888041820400: control (read@2048,1024B). Runtime 150 seconds
[ 1100.424036][   T98] block nbd1: Possible stuck request ffff888041820600: control (read@3072,1024B). Runtime 150 seconds
[ 1130.489953][   T98] block nbd1: Possible stuck request ffff888041820000: control (read@0,1024B). Runtime 180 seconds
[ 1130.494318][   T98] block nbd1: Possible stuck request ffff888041820200: control (read@1024,1024B). Runtime 180 seconds
[ 1130.498034][   T98] block nbd1: Possible stuck request ffff888041820400: control (read@2048,1024B). Runtime 180 seconds
[ 1130.501697][   T98] block nbd1: Possible stuck request ffff888041820600: control (read@3072,1024B). Runtime 180 seconds
[ 1131.446926][ T5058] udevd[5058]: worker [10853] /devices/virtual/block/nbd1 timeout; kill it
[ 1131.451610][ T5058] udevd[5058]: seq 55905 '/devices/virtual/block/nbd1' killed
[ 1143.550163][ T5621] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1143.567376][ T5621] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1143.572571][ T5621] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1143.576423][ T5621] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1143.579875][ T5621] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1143.785078][T13989] lo speed is unknown, defaulting to 1000
[ 1143.789031][T13989] lo speed is unknown, defaulting to 1000
[ 1144.205139][T13989] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1144.207693][T13989] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1144.210937][T13989] bridge_slave_0: entered allmulticast mode
[ 1144.214905][T13989] bridge_slave_0: entered promiscuous mode
[ 1144.218609][T13989] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1144.222000][T13989] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1144.224994][T13989] bridge_slave_1: entered allmulticast mode
[ 1144.228192][T13989] bridge_slave_1: entered promiscuous mode
[ 1144.257558][T13989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1144.265345][T13989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1144.297558][T13989] team0: Port device team_slave_0 added
[ 1144.303442][T13989] team0: Port device team_slave_1 added
[ 1144.332283][T13989] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1144.334951][T13989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1144.345108][T13989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1144.351733][T13989] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1144.354287][T13989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1144.362949][T13989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1144.395145][T13989] hsr_slave_0: entered promiscuous mode
[ 1144.398055][T13989] hsr_slave_1: entered promiscuous mode
[ 1144.400475][T13989] debugfs: 'hsr0' already exists in 'hsr'
[ 1144.402225][T13989] Cannot create hsr debugfs directory
[ 1144.555391][ T4999] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 1144.575621][ T4999] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 1144.581026][ T4999] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 1144.587656][ T4999] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 1144.594032][ T4999] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 1144.769979][T14007] lo speed is unknown, defaulting to 1000
[ 1144.772961][T14007] lo speed is unknown, defaulting to 1000
[ 1145.257605][T14007] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1145.260604][T14007] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1145.263894][T14007] bridge_slave_0: entered allmulticast mode
[ 1145.267756][T14007] bridge_slave_0: entered promiscuous mode
[ 1145.273642][T14007] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1145.276572][T14007] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1145.279680][T14007] bridge_slave_1: entered allmulticast mode
[ 1145.283663][T14007] bridge_slave_1: entered promiscuous mode
[ 1145.316724][T14007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1145.323606][T14007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1145.351574][T14007] team0: Port device team_slave_0 added
[ 1145.355316][T14007] team0: Port device team_slave_1 added
[ 1145.374679][T14007] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1145.377299][T14007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1145.387623][T14007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1145.393170][T14007] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1145.395240][T14007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1145.403056][T14007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1145.434392][T14007] hsr_slave_0: entered promiscuous mode
[ 1145.437862][T14007] hsr_slave_1: entered promiscuous mode
[ 1145.441369][T14007] debugfs: 'hsr0' already exists in 'hsr'
[ 1145.443704][T14007] Cannot create hsr debugfs directory
[ 1145.566687][ T4999] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[ 1145.572805][ T4999] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[ 1145.575763][ T4999] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[ 1145.580867][ T4999] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[ 1145.584984][ T4999] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[ 1145.619340][ T5621] Bluetooth: hci9: command tx timeout
[ 1145.797378][T14025] lo speed is unknown, defaulting to 1000
[ 1145.801274][T14025] lo speed is unknown, defaulting to 1000
[ 1146.157560][T14025] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1146.160146][T14025] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1146.162553][T14025] bridge_slave_0: entered allmulticast mode
[ 1146.165458][T14025] bridge_slave_0: entered promiscuous mode
[ 1146.168974][T14025] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1146.171513][T14025] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1146.173922][T14025] bridge_slave_1: entered allmulticast mode
[ 1146.177169][T14025] bridge_slave_1: entered promiscuous mode
[ 1146.204257][T14025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1146.211716][T14025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1146.242395][T14025] team0: Port device team_slave_0 added
[ 1146.247322][T14025] team0: Port device team_slave_1 added
[ 1146.274480][T14025] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1146.277122][T14025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1146.287209][T14025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1146.293440][T14025] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1146.296061][T14025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1146.306171][T14025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1146.352157][T14025] hsr_slave_0: entered promiscuous mode
[ 1146.355943][T14025] hsr_slave_1: entered promiscuous mode
[ 1146.358834][T14025] debugfs: 'hsr0' already exists in 'hsr'
[ 1146.361547][T14025] Cannot create hsr debugfs directory
[ 1146.649395][ T5621] Bluetooth: hci10: command tx timeout
[ 1147.609412][T14043] Bluetooth: hci11: command tx timeout
[ 1147.689478][T14043] Bluetooth: hci9: command tx timeout
[ 1148.729474][T14043] Bluetooth: hci10: command tx timeout
[ 1149.209642][T14043] Bluetooth: hci3: command 0x0406 tx timeout
[ 1149.230834][T14043] Bluetooth: hci5: command 0x0406 tx timeout
[ 1149.232766][T14043] Bluetooth: hci4: command 0x0406 tx timeout
[ 1149.689902][ T5621] Bluetooth: hci11: command tx timeout
[ 1149.769379][ T5621] Bluetooth: hci9: command tx timeout
[ 1150.809727][ T5621] Bluetooth: hci10: command tx timeout
[ 1151.769579][ T5621] Bluetooth: hci11: command tx timeout
[ 1151.849452][ T5621] Bluetooth: hci9: command tx timeout
[ 1152.889452][ T5621] Bluetooth: hci10: command tx timeout
[ 1153.849466][ T5621] Bluetooth: hci11: command tx timeout
[ 1160.574587][   T98] block nbd1: Possible stuck request ffff888041820000: control (read@0,1024B). Runtime 210 seconds
[ 1160.578022][   T98] block nbd1: Possible stuck request ffff888041820200: control (read@1024,1024B). Runtime 210 seconds
[ 1160.581698][   T98] block nbd1: Possible stuck request ffff888041820400: control (read@2048,1024B). Runtime 210 seconds
[ 1160.585837][   T98] block nbd1: Possible stuck request ffff888041820600: control (read@3072,1024B). Runtime 210 seconds
[ 1170.170883][   T34] INFO: task syz.1.11559:13859 blocked for more than 143 seconds.
[ 1170.173891][   T34]       Not tainted syzkaller #0
[ 1170.177421][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1170.181819][   T34] task:syz.1.11559     state:D stack:26328 pid:13859 tgid:13858 ppid:5616   task_flags:0x480140 flags:0x00080002
[ 1170.186255][   T34] Call Trace:
[ 1170.187525][   T34]  <TASK>
[ 1170.188636][   T34]  __schedule+0x1821/0x5740
[ 1170.190875][   T34]  ? __pfx___schedule+0x10/0x10
[ 1170.192855][   T34]  ? schedule+0x90/0x360
[ 1170.194661][   T34]  schedule+0x164/0x360
[ 1170.196379][   T34]  blk_mq_freeze_queue_wait+0x101/0x180
[ 1170.198477][   T34]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[ 1170.201672][   T34]  ? queue_limits_commit_update_frozen+0x55/0xd0
[ 1170.203977][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1170.206112][   T34]  queue_limits_commit_update_frozen+0x55/0xd0
[ 1170.208492][   T34]  nbd_set_size+0x454/0x680
[ 1170.210845][   T34]  ? __pfx_nbd_set_size+0x10/0x10
[ 1170.212689][   T34]  ? nla_memcpy+0x5b/0xc0
[ 1170.214508][   T34]  nbd_genl_reconfigure+0x7f5/0x1ea0
[ 1170.216529][   T34]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[ 1170.218723][   T34]  ? rcu_is_watching+0x15/0xb0
[ 1170.221217][   T34]  ? trace_kmalloc+0x2a/0xf0
[ 1170.223348][   T34]  ? __nla_parse+0x40/0x60
[ 1170.225182][   T34]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[ 1170.227586][   T34]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[ 1170.230340][   T34]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1170.232704][   T34]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1170.235123][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[ 1170.237006][   T34]  genl_rcv_msg+0x61c/0x7a0
[ 1170.238763][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1170.240862][   T34]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[ 1170.243076][   T34]  netlink_rcv_skb+0x232/0x4b0
[ 1170.244923][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1170.247101][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1170.249803][   T34]  ? down_read+0x270/0x2e0
[ 1170.251991][   T34]  ? genl_rcv+0xd/0x40
[ 1170.253676][   T34]  genl_rcv+0x28/0x40
[ 1170.255141][   T34]  netlink_unicast+0x75c/0x8e0
[ 1170.257080][   T34]  netlink_sendmsg+0x813/0xb40
[ 1170.258874][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1170.261253][   T34]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1170.263172][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1170.265166][   T34]  ____sys_sendmsg+0x972/0x9f0
[ 1170.266968][   T34]  ? __might_fault+0xaf/0x130
[ 1170.268818][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1170.270933][   T34]  ? import_iovec+0x73/0xa0
[ 1170.272676][   T34]  ___sys_sendmsg+0x2a5/0x360
[ 1170.274346][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[ 1170.276172][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1170.278083][   T34]  ? futex_wait+0x2a2/0x390
[ 1170.280938][   T34]  ? __fget_files+0x2a/0x420
[ 1170.282791][   T34]  ? __fget_files+0x3a0/0x420
[ 1170.284590][   T34]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1170.286594][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1170.288686][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1170.291115][   T34]  do_syscall_64+0x15f/0xf80
[ 1170.292929][   T34]  ? trace_irq_disable+0x3b/0x140
[ 1170.295147][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1170.297437][   T34] RIP: 0033:0x7fd9d3b9cdd9
[ 1170.299284][   T34] RSP: 002b:00007fd9d4987028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1170.302444][   T34] RAX: ffffffffffffffda RBX: 00007fd9d3e15fa0 RCX: 00007fd9d3b9cdd9
[ 1170.305290][   T34] RDX: 0000000004000040 RSI: 0000200000000c40 RDI: 0000000000000009
[ 1170.309796][   T34] RBP: 00007fd9d3c32d69 R08: 0000000000000000 R09: 0000000000000000
[ 1170.312861][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1170.316360][   T34] R13: 00007fd9d3e16038 R14: 00007fd9d3e15fa0 R15: 00007ffda8104cf8
[ 1170.319382][   T34]  </TASK>
[ 1170.320698][   T34] INFO: task syz.2.11561:13866 blocked for more than 143 seconds.
[ 1170.327175][   T34]       Not tainted syzkaller #0
[ 1170.333470][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1170.336752][   T34] task:syz.2.11561     state:D stack:28760 pid:13866 tgid:13865 ppid:5620   task_flags:0x400040 flags:0x00080002
[ 1170.350772][   T34] Call Trace:
[ 1170.352124][   T34]  <TASK>
[ 1170.358902][   T34]  __schedule+0x1821/0x5740
[ 1170.361614][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[ 1170.365236][   T34]  ? __pfx___schedule+0x10/0x10
[ 1170.368917][   T34]  ? schedule+0x90/0x360
[ 1170.372862][   T34]  schedule+0x164/0x360
[ 1170.374757][   T34]  schedule_preempt_disabled+0x13/0x30
[ 1170.376902][   T34]  __mutex_lock+0x7f7/0x1550
[ 1170.378689][   T34]  ? kernel_text_address+0xa5/0xe0
[ 1170.381224][   T34]  ? __mutex_lock+0x608/0x1550
[ 1170.383442][   T34]  ? genl_rcv_msg+0x10b/0x7a0
[ 1170.385147][   T34]  ? __pfx___mutex_lock+0x10/0x10
[ 1170.387031][   T34]  ? stack_trace_save+0xa9/0x100
[ 1170.391278][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[ 1170.393278][   T34]  ? radix_tree_lookup+0x240/0x290
[ 1170.395261][   T34]  genl_rcv_msg+0x10b/0x7a0
[ 1170.397105][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1170.399558][   T34]  netlink_rcv_skb+0x232/0x4b0
[ 1170.401484][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1170.403421][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1170.405544][   T34]  ? down_read+0x270/0x2e0
[ 1170.408072][   T34]  ? genl_rcv+0xd/0x40
[ 1170.410726][   T34]  genl_rcv+0x28/0x40
[ 1170.412369][   T34]  netlink_unicast+0x75c/0x8e0
[ 1170.414241][   T34]  netlink_sendmsg+0x813/0xb40
[ 1170.416212][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1170.418480][   T34]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1170.421332][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1170.423758][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1170.425708][   T34]  __sys_sendto+0x672/0x710
[ 1170.427615][   T34]  ? __pfx___sys_sendto+0x10/0x10
[ 1170.430219][   T34]  ? exc_page_fault+0x6a/0xc0
[ 1170.432155][   T34]  ? do_user_addr_fault+0xc6f/0x1340
[ 1170.434210][   T34]  __x64_sys_sendto+0xde/0x100
[ 1170.436281][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1170.438612][   T34]  do_syscall_64+0x15f/0xf80
[ 1170.441114][   T34]  ? trace_irq_disable+0x3b/0x140
[ 1170.443138][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1170.445400][   T34] RIP: 0033:0x7f1070f5d60e
[ 1170.447016][   T34] RSP: 002b:00007f1071e9ae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1170.450435][   T34] RAX: ffffffffffffffda RBX: 00007f1071e9c6c0 RCX: 00007f1070f5d60e
[ 1170.453484][   T34] RDX: 0000000000000020 RSI: 00007f1071e9b000 RDI: 0000000000000004
[ 1170.456621][   T34] RBP: 0000000000000000 R08: 00007f1071e9af04 R09: 000000000000000c
[ 1170.460405][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1170.463867][   T34] R13: 00007f1071e9af58 R14: 00007f1071e9b000 R15: 0000000000000000
[ 1170.467226][   T34]  </TASK>
[ 1170.468523][   T34] INFO: task syz.0.11562:13869 blocked for more than 143 seconds.
[ 1170.472135][   T34]       Not tainted syzkaller #0
[ 1170.474132][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1170.477519][   T34] task:syz.0.11562     state:D stack:28760 pid:13869 tgid:13868 ppid:5623   task_flags:0x400040 flags:0x00080002
[ 1170.483019][   T34] Call Trace:
[ 1170.484532][   T34]  <TASK>
[ 1170.485853][   T34]  __schedule+0x1821/0x5740
[ 1170.487613][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[ 1170.494113][   T34]  ? __pfx___schedule+0x10/0x10
[ 1170.496387][   T34]  ? schedule+0x90/0x360
[ 1170.498252][   T34]  schedule+0x164/0x360
[ 1170.501465][   T34]  schedule_preempt_disabled+0x13/0x30
[ 1170.503773][   T34]  __mutex_lock+0x7f7/0x1550
[ 1170.505818][   T34]  ? kernel_text_address+0xa5/0xe0
[ 1170.507863][   T34]  ? __mutex_lock+0x608/0x1550
[ 1170.510821][   T34]  ? genl_rcv_msg+0x10b/0x7a0
[ 1170.512925][   T34]  ? __pfx___mutex_lock+0x10/0x10
[ 1170.515041][   T34]  ? stack_trace_save+0xa9/0x100
[ 1170.517011][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[ 1170.518885][   T34]  ? radix_tree_lookup+0x240/0x290
[ 1170.521020][   T34]  genl_rcv_msg+0x10b/0x7a0
[ 1170.522825][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1170.524756][   T34]  netlink_rcv_skb+0x232/0x4b0
[ 1170.526583][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1170.528594][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1170.531125][   T34]  ? down_read+0x270/0x2e0
[ 1170.532822][   T34]  ? genl_rcv+0xd/0x40
[ 1170.534388][   T34]  genl_rcv+0x28/0x40
[ 1170.535911][   T34]  netlink_unicast+0x75c/0x8e0
[ 1170.537735][   T34]  netlink_sendmsg+0x813/0xb40
[ 1170.539748][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1170.541838][   T34]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1170.543702][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1170.545819][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1170.547989][   T34]  __sys_sendto+0x672/0x710
[ 1170.550068][   T34]  ? __pfx___sys_sendto+0x10/0x10
[ 1170.552102][   T34]  ? exc_page_fault+0x6a/0xc0
[ 1170.553948][   T34]  ? do_user_addr_fault+0xc6f/0x1340
[ 1170.555856][   T34]  __x64_sys_sendto+0xde/0x100
[ 1170.557603][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1170.559982][   T34]  do_syscall_64+0x15f/0xf80
[ 1170.561711][   T34]  ? trace_irq_disable+0x3b/0x140
[ 1170.563488][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1170.565729][   T34] RIP: 0033:0x7f6c02d5d60e
[ 1170.567533][   T34] RSP: 002b:00007f6c03c98e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1170.571862][   T34] RAX: ffffffffffffffda RBX: 00007f6c03c9a6c0 RCX: 00007f6c02d5d60e
[ 1170.575730][   T34] RDX: 0000000000000020 RSI: 00007f6c03c99000 RDI: 0000000000000007
[ 1170.578677][   T34] RBP: 0000000000000000 R08: 00007f6c03c98f04 R09: 000000000000000c
[ 1170.582409][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[ 1170.585517][   T34] R13: 00007f6c03c98f58 R14: 00007f6c03c99000 R15: 0000000000000000
[ 1170.588566][   T34]  </TASK>
[ 1170.590237][   T34] INFO: task syz.0.11562:13870 blocked for more than 143 seconds.
[ 1170.593594][   T34]       Not tainted syzkaller #0
[ 1170.595471][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1170.598608][   T34] task:syz.0.11562     state:D stack:28184 pid:13870 tgid:13868 ppid:5623   task_flags:0x400040 flags:0x00080002
[ 1170.603466][   T34] Call Trace:
[ 1170.604804][   T34]  <TASK>
[ 1170.606004][   T34]  __schedule+0x1821/0x5740
[ 1170.607726][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[ 1170.611057][   T34]  ? __pfx___schedule+0x10/0x10
[ 1170.613629][   T34]  ? schedule+0x90/0x360
[ 1170.615218][   T34]  schedule+0x164/0x360
[ 1170.616838][   T34]  schedule_preempt_disabled+0x13/0x30
[ 1170.619154][   T34]  __mutex_lock+0x7f7/0x1550
[ 1170.620886][   T34]  ? kernel_text_address+0xa5/0xe0
[ 1170.622908][   T34]  ? __mutex_lock+0x608/0x1550
[ 1170.624747][   T34]  ? genl_rcv_msg+0x10b/0x7a0
[ 1170.626551][   T34]  ? __pfx___mutex_lock+0x10/0x10
[ 1170.628537][   T34]  ? stack_trace_save+0xa9/0x100
[ 1170.630682][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[ 1170.632617][   T34]  ? radix_tree_lookup+0x240/0x290
[ 1170.634572][   T34]  genl_rcv_msg+0x10b/0x7a0
[ 1170.636353][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1170.638237][   T34]  netlink_rcv_skb+0x232/0x4b0
[ 1170.640327][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1170.642261][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1170.644302][   T34]  ? down_read+0x270/0x2e0
[ 1170.645959][   T34]  ? genl_rcv+0xd/0x40
[ 1170.647504][   T34]  genl_rcv+0x28/0x40
[ 1170.649188][   T34]  netlink_unicast+0x75c/0x8e0
[ 1170.651890][   T34]  netlink_sendmsg+0x813/0xb40
[ 1170.654112][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1170.656103][   T34]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1170.658895][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1170.662077][   T34]  ____sys_sendmsg+0x972/0x9f0
[ 1170.664022][   T34]  ? __might_fault+0xaf/0x130
[ 1170.665964][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1170.667973][   T34]  ? import_iovec+0x73/0xa0
[ 1170.669846][   T34]  ___sys_sendmsg+0x2a5/0x360
[ 1170.672240][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[ 1170.674411][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1170.676432][   T34]  ? futex_wait+0x2a2/0x390
[ 1170.678298][   T34]  ? __fget_files+0x2a/0x420
[ 1170.680517][   T34]  ? __fget_files+0x3a0/0x420
[ 1170.682419][   T34]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1170.684553][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1170.686626][   T34]  ? rcu_is_watching+0x15/0xb0
[ 1170.688466][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1170.691802][   T34]  do_syscall_64+0x15f/0xf80
[ 1170.693637][   T34]  ? trace_irq_disable+0x3b/0x140
[ 1170.695521][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1170.697656][   T34] RIP: 0033:0x7f6c02d9cdd9
[ 1170.699631][   T34] RSP: 002b:00007f6c03c79028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1170.702797][   T34] RAX: ffffffffffffffda RBX: 00007f6c03016090 RCX: 00007f6c02d9cdd9
[ 1170.705664][   T34] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000006
[ 1170.708681][   T34] RBP: 00007f6c02e32d69 R08: 0000000000000000 R09: 0000000000000000
[ 1170.711841][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1170.714930][   T34] R13: 00007f6c03016128 R14: 00007f6c03016090 R15: 00007ffd0edf2448
[ 1170.717871][   T34]  </TASK>
[ 1170.719157][   T34] INFO: task syz-executor:13876 blocked for more than 143 seconds.
[ 1170.725527][   T34]       Not tainted syzkaller #0
[ 1170.728287][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1170.733956][   T34] task:syz-executor    state:D stack:23240 pid:13876 tgid:13876 ppid:1      task_flags:0x400140 flags:0x00080002
[ 1170.738680][   T34] Call Trace:
[ 1170.739987][   T34]  <TASK>
[ 1170.741015][   T34]  __schedule+0x1821/0x5740
[ 1170.742697][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[ 1170.744323][   T34]  ? __pfx___schedule+0x10/0x10
[ 1170.746173][   T34]  ? schedule+0x90/0x360
[ 1170.748205][   T34]  schedule+0x164/0x360
[ 1170.750352][   T34]  schedule_preempt_disabled+0x13/0x30
[ 1170.752499][   T34]  __mutex_lock+0x7f7/0x1550
[ 1170.754304][   T34]  ? kernel_text_address+0xa5/0xe0
[ 1170.756377][   T34]  ? __mutex_lock+0x608/0x1550
[ 1170.758227][   T34]  ? genl_rcv_msg+0x10b/0x7a0
[ 1170.759853][   T34]  ? __pfx___mutex_lock+0x10/0x10
[ 1170.761421][   T34]  ? stack_trace_save+0xa9/0x100
[ 1170.762960][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[ 1170.764491][   T34]  ? radix_tree_lookup+0x240/0x290
[ 1170.766126][   T34]  genl_rcv_msg+0x10b/0x7a0
[ 1170.767550][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1170.769157][   T34]  netlink_rcv_skb+0x232/0x4b0
[ 1170.770668][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1170.772194][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1170.773924][   T34]  ? down_read+0x270/0x2e0
[ 1170.775277][   T34]  ? genl_rcv+0xd/0x40
[ 1170.776496][   T34]  genl_rcv+0x28/0x40
[ 1170.777721][   T34]  netlink_unicast+0x75c/0x8e0
[ 1170.779435][   T34]  netlink_sendmsg+0x813/0xb40
[ 1170.780948][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1170.782899][   T34]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1170.784749][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1170.786447][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1170.788095][   T34]  __sys_sendto+0x672/0x710
[ 1170.789739][   T34]  ? __pfx___sys_sendto+0x10/0x10
[ 1170.791689][   T34]  ? fd_install+0x94/0x3d0
[ 1170.793164][   T34]  ? fd_install+0x306/0x3d0
[ 1170.794760][   T34]  __x64_sys_sendto+0xde/0x100
[ 1170.796232][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1170.798364][   T34]  do_syscall_64+0x15f/0xf80
[ 1170.800456][   T34]  ? trace_irq_disable+0x3b/0x140
[ 1170.802233][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1170.804132][   T34] RIP: 0033:0x7f55caf5d60e
[ 1170.805650][   T34] RSP: 002b:00007ffd37de2fb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1170.808604][   T34] RAX: ffffffffffffffda RBX: 0000555577259500 RCX: 00007f55caf5d60e
[ 1170.811879][   T34] RDX: 0000000000000020 RSI: 00007f55cbd44670 RDI: 0000000000000005
[ 1170.814500][   T34] RBP: 0000000000000001 R08: 00007ffd37de3034 R09: 000000000000000c
[ 1170.816899][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[ 1170.819372][   T34] R13: 00007ffd37de3088 R14: 00007f55cbd44670 R15: 0000000000000000
[ 1170.822000][   T34]  </TASK>
[ 1170.822922][   T34] INFO: task syz-executor:13897 blocked for more than 144 seconds.
[ 1170.825245][   T34]       Not tainted syzkaller #0
[ 1170.826775][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1170.829885][   T34] task:syz-executor    state:D stack:22808 pid:13897 tgid:13897 ppid:1      task_flags:0x400140 flags:0x00080002
[ 1170.833501][   T34] Call Trace:
[ 1170.834469][   T34]  <TASK>
[ 1170.835597][   T34]  __schedule+0x1821/0x5740
[ 1170.837312][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[ 1170.840025][   T34]  ? __pfx___schedule+0x10/0x10
[ 1170.841956][   T34]  ? schedule+0x90/0x360
[ 1170.843562][   T34]  schedule+0x164/0x360
[ 1170.845043][   T34]  schedule_preempt_disabled+0x13/0x30
[ 1170.846797][   T34]  __mutex_lock+0x7f7/0x1550
[ 1170.848232][   T34]  ? kernel_text_address+0xa5/0xe0
[ 1170.850002][   T34]  ? __mutex_lock+0x608/0x1550
[ 1170.851568][   T34]  ? genl_rcv_msg+0x10b/0x7a0
[ 1170.853002][   T34]  ? __pfx___mutex_lock+0x10/0x10
[ 1170.854610][   T34]  ? stack_trace_save+0xa9/0x100
[ 1170.856096][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[ 1170.857543][   T34]  ? radix_tree_lookup+0x240/0x290
[ 1170.859026][   T34]  genl_rcv_msg+0x10b/0x7a0
[ 1170.860452][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1170.861946][   T34]  netlink_rcv_skb+0x232/0x4b0
[ 1170.863611][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1170.865151][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1170.867024][   T34]  ? down_read+0x270/0x2e0
[ 1170.868726][   T34]  ? genl_rcv+0xd/0x40
[ 1170.870952][   T34]  genl_rcv+0x28/0x40
[ 1170.872657][   T34]  netlink_unicast+0x75c/0x8e0
[ 1170.874203][   T34]  netlink_sendmsg+0x813/0xb40
[ 1170.875716][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1170.877424][   T34]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1170.878903][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1170.880851][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1170.882784][   T34]  __sys_sendto+0x672/0x710
[ 1170.884300][   T34]  ? __pfx___sys_sendto+0x10/0x10
[ 1170.886026][   T34]  ? fd_install+0x94/0x3d0
[ 1170.887466][   T34]  ? fd_install+0x306/0x3d0
[ 1170.888985][   T34]  __x64_sys_sendto+0xde/0x100
[ 1170.891888][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1170.893937][   T34]  do_syscall_64+0x15f/0xf80
[ 1170.895587][   T34]  ? trace_irq_disable+0x3b/0x140
[ 1170.897457][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1170.899443][   T34] RIP: 0033:0x7f2bcdf5d60e
[ 1170.900859][   T34] RSP: 002b:00007ffce49e64d8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1170.903496][   T34] RAX: ffffffffffffffda RBX: 000055557f04c500 RCX: 00007f2bcdf5d60e
[ 1170.906042][   T34] RDX: 0000000000000020 RSI: 00007f2bced44670 RDI: 0000000000000005
[ 1170.908583][   T34] RBP: 0000000000000001 R08: 00007ffce49e6554 R09: 000000000000000c
[ 1170.911802][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[ 1170.914838][   T34] R13: 00007ffce49e65a8 R14: 00007f2bced44670 R15: 0000000000000000
[ 1170.917531][   T34]  </TASK>
[ 1170.918650][   T34] INFO: task syz-executor:13899 blocked for more than 144 seconds.
[ 1170.921681][   T34]       Not tainted syzkaller #0
[ 1170.923549][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1170.926743][   T34] task:syz-executor    state:D stack:22984 pid:13899 tgid:13899 ppid:1      task_flags:0x400140 flags:0x00080002
[ 1170.931278][   T34] Call Trace:
[ 1170.932662][   T34]  <TASK>
[ 1170.933816][   T34]  __schedule+0x1821/0x5740
[ 1170.935579][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[ 1170.937479][   T34]  ? __pfx___schedule+0x10/0x10
[ 1170.939441][   T34]  ? schedule+0x90/0x360
[ 1170.941062][   T34]  schedule+0x164/0x360
[ 1170.942662][   T34]  schedule_preempt_disabled+0x13/0x30
[ 1170.944742][   T34]  __mutex_lock+0x7f7/0x1550
[ 1170.946502][   T34]  ? kernel_text_address+0xa5/0xe0
[ 1170.948491][   T34]  ? __mutex_lock+0x608/0x1550
[ 1170.951396][   T34]  ? genl_rcv_msg+0x10b/0x7a0
[ 1170.953358][   T34]  ? __pfx___mutex_lock+0x10/0x10
[ 1170.955271][   T34]  ? stack_trace_save+0xa9/0x100
[ 1170.957154][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[ 1170.959131][   T34]  ? radix_tree_lookup+0x240/0x290
[ 1170.961061][   T34]  genl_rcv_msg+0x10b/0x7a0
[ 1170.962805][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1170.964727][   T34]  netlink_rcv_skb+0x232/0x4b0
[ 1170.966530][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1170.968361][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1170.970529][   T34]  ? down_read+0x270/0x2e0
[ 1170.972216][   T34]  ? genl_rcv+0xd/0x40
[ 1170.973839][   T34]  genl_rcv+0x28/0x40
[ 1170.975351][   T34]  netlink_unicast+0x75c/0x8e0
[ 1170.977131][   T34]  netlink_sendmsg+0x813/0xb40
[ 1170.978982][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1170.981109][   T34]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1170.982984][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1170.985040][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1170.987159][   T34]  __sys_sendto+0x672/0x710
[ 1170.988934][   T34]  ? __pfx___sys_sendto+0x10/0x10
[ 1170.991048][   T34]  ? fd_install+0x94/0x3d0
[ 1170.992836][   T34]  ? fd_install+0x306/0x3d0
[ 1170.994618][   T34]  __x64_sys_sendto+0xde/0x100
[ 1170.996342][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1170.998599][   T34]  do_syscall_64+0x15f/0xf80
[ 1171.000444][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1171.002648][   T34] RIP: 0033:0x7f364975d60e
[ 1171.004388][   T34] RSP: 002b:00007ffe6270f0a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1171.007469][   T34] RAX: ffffffffffffffda RBX: 000055557a7f7500 RCX: 00007f364975d60e
[ 1171.010556][   T34] RDX: 0000000000000020 RSI: 00007f364a544670 RDI: 0000000000000005
[ 1171.013716][   T34] RBP: 0000000000000001 R08: 00007ffe6270f124 R09: 000000000000000c
[ 1171.016999][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[ 1171.020911][   T34] R13: 00007ffe6270f178 R14: 00007f364a544670 R15: 0000000000000000
[ 1171.024314][   T34]  </TASK>
[ 1171.025781][   T34] 
[ 1171.025781][   T34] Showing all locks held in the system:
[ 1171.029478][   T34] 1 lock held by khungtaskd/34:
[ 1171.031422][   T34]  #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1171.035428][   T34] 2 locks held by getty/5435:
[ 1171.037306][   T34]  #0: ffff88817817d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1171.041440][   T34]  #1: ffffc900031682e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0
[ 1171.045902][   T34] 1 lock held by udevd/10853:
[ 1171.047876][   T34]  #0: ffff888012782350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[ 1171.052639][   T34] 6 locks held by syz.1.11559/13859:
[ 1171.055073][   T34]  #0: ffffffff8fe3f9a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1171.058492][   T34]  #1: ffffffff8fe3f7e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1171.063118][   T34]  #2: ffff888027dc8a60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0
[ 1171.067580][   T34]  #3: ffff88801cb5da68 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680
[ 1171.071269][   T34]  #4: ffff88801cb5d430 (&q->q_usage_counter(io)#74){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[ 1171.075745][   T34]  #5: ffff88801cb5d468 (&q->q_usage_counter(queue)#57){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[ 1171.080486][   T34] 2 locks held by syz.2.11561/13866:
[ 1171.082456][   T34]  #0: ffffffff8fe3f9a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1171.085533][   T34]  #1: ffffffff8fe3f7e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1171.088819][   T34] 2 locks held by syz.0.11562/13869:
[ 1171.090840][   T34]  #0: ffffffff8fe3f9a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1171.094038][   T34]  #1: ffffffff8fe3f7e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1171.097175][   T34] 2 locks held by syz.0.11562/13870:
[ 1171.099202][   T34]  #0: ffffffff8fe3f9a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1171.102104][   T34]  #1: ffffffff8fe3f7e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1171.105369][   T34] 2 locks held by syz-executor/13876:
[ 1171.107444][   T34]  #0: ffffffff8fe3f9a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1171.110544][   T34]  #1: ffffffff8fe3f7e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1171.113653][   T34] 2 locks held by syz-executor/13897:
[ 1171.115165][   T34]  #0: ffffffff8fe3f9a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1171.118057][   T34]  #1: ffffffff8fe3f7e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1171.120823][   T34] 2 locks held by syz-executor/13899:
[ 1171.122443][   T34]  #0: ffffffff8fe3f9a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1171.124855][   T34]  #1: ffffffff8fe3f7e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1171.128483][   T34] 2 locks held by syz-executor/13932:
[ 1171.131382][   T34]  #0: ffffffff8fe3f9a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1171.134522][   T34]  #1: ffffffff8fe3f7e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1171.137351][   T34] 2 locks held by syz-executor/13951:
[ 1171.139215][   T34]  #0: ffffffff8fe3f9a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1171.141821][   T34]  #1: ffffffff8fe3f7e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1171.145333][   T34] 2 locks held by syz-executor/13954:
[ 1171.147373][   T34]  #0: ffffffff8fe3f9a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1171.150417][   T34]  #1: ffffffff8fe3f7e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1171.153514][   T34] 2 locks held by syz-executor/13989:
[ 1171.155506][   T34]  #0: ffffffff8fe3f9a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1171.158590][   T34]  #1: ffffffff8fe3f7e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1171.162169][   T34] 2 locks held by syz-executor/14007:
[ 1171.164239][   T34]  #0: ffffffff8fe3f9a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1171.167760][   T34]  #1: ffffffff8fe3f7e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1171.171486][   T34] 2 locks held by syz-executor/14025:
[ 1171.173188][   T34]  #0: ffffffff8fe3f9a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1171.175730][   T34]  #1: ffffffff8fe3f7e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1171.178505][   T34] 
[ 1171.179683][   T34] =============================================
[ 1171.179683][   T34] 
[ 1171.183249][   T34] NMI backtrace for cpu 0
[ 1171.183264][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 1171.183280][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1171.183289][   T34] Call Trace:
[ 1171.183299][   T34]  <TASK>
[ 1171.183305][   T34]  dump_stack_lvl+0xe8/0x150
[ 1171.183320][   T34]  nmi_cpu_backtrace+0x274/0x2d0
[ 1171.183331][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1171.183341][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1171.183351][   T34]  sys_info+0x135/0x170
[ 1171.183359][   T34]  watchdog+0xfd3/0x1030
[ 1171.183375][   T34]  ? watchdog+0x1c9/0x1030
[ 1171.183390][   T34]  kthread+0x388/0x470
[ 1171.183401][   T34]  ? __pfx_watchdog+0x10/0x10
[ 1171.183411][   T34]  ? __pfx_kthread+0x10/0x10
[ 1171.183421][   T34]  ret_from_fork+0x514/0xb70
[ 1171.183433][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[ 1171.183441][   T34]  ? __switch_to+0xc79/0x1410
[ 1171.183461][   T34]  ? __pfx_kthread+0x10/0x10
[ 1171.183472][   T34]  ret_from_fork_asm+0x1a/0x30
[ 1171.183488][   T34]  </TASK>
[ 1171.183491][   T34] Sending NMI from CPU 0 to CPUs 1:
[ 1171.228639][    C1] NMI backtrace for cpu 1
[ 1171.228657][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[ 1171.228672][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1171.228682][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1171.228706][    C1] Code: 9b 7d 02 e9 93 f7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 53 a1 20 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[ 1171.228718][    C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000206
[ 1171.228731][    C1] RAX: 00000000006e69c5 RBX: ffffffff819a93ba RCX: 0000000080000001
[ 1171.228741][    C1] RDX: 0000000000000001 RSI: ffffffff8dfa6837 RDI: ffffffff8c28af60
[ 1171.228752][    C1] RBP: ffffc90000197f10 R08: ffff88823c6339db R09: 1ffff110478c673b
[ 1171.228763][    C1] R10: dffffc0000000000 R11: ffffed10478c673c R12: 0000000000000001
[ 1171.228772][    C1] R13: 1ffff1102c156000 R14: 0000000000000001 R15: 1ffff1102c156000
[ 1171.228783][    C1] FS:  0000000000000000(0000) GS:ffff8882a928d000(0000) knlGS:0000000000000000
[ 1171.228794][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1171.228803][    C1] CR2: 0000560bb0378598 CR3: 0000000175d82000 CR4: 00000000000006f0
[ 1171.228837][    C1] Call Trace:
[ 1171.228846][    C1]  <TASK>
[ 1171.228852][    C1]  default_idle+0x9/0x20
[ 1171.228865][    C1]  default_idle_call+0x72/0xb0
[ 1171.228880][    C1]  do_idle+0x36a/0x5f0
[ 1171.228899][    C1]  ? __pfx_do_idle+0x10/0x10
[ 1171.228919][    C1]  cpu_startup_entry+0x43/0x60
[ 1171.228934][    C1]  start_secondary+0x101/0x110
[ 1171.228947][    C1]  common_startup_64+0x13e/0x147
[ 1171.228972][    C1]  </TASK>
[ 1171.229742][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[ 1171.229754][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 1171.229764][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1171.229770][   T34] Call Trace:
[ 1171.229774][   T34]  <TASK>
[ 1171.229778][   T34]  vpanic+0x56c/0xa60
[ 1171.229791][   T34]  ? __pfx___schedule+0x10/0x10
[ 1171.229803][   T34]  ? __pfx_vpanic+0x10/0x10
[ 1171.229816][   T34]  panic+0xc5/0xd0
[ 1171.229825][   T34]  ? __pfx_panic+0x10/0x10
[ 1171.229838][   T34]  ? preempt_schedule_thunk+0x16/0x30
[ 1171.229858][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[ 1171.229877][   T34]  watchdog+0x102c/0x1030
[ 1171.229901][   T34]  ? watchdog+0x1c9/0x1030
[ 1171.229925][   T34]  kthread+0x388/0x470
[ 1171.229942][   T34]  ? __pfx_watchdog+0x10/0x10
[ 1171.229959][   T34]  ? __pfx_kthread+0x10/0x10
[ 1171.229976][   T34]  ret_from_fork+0x514/0xb70
[ 1171.229994][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[ 1171.230010][   T34]  ? __switch_to+0xc79/0x1410
[ 1171.230033][   T34]  ? __pfx_kthread+0x10/0x10
[ 1171.230051][   T34]  ret_from_fork_asm+0x1a/0x30
[ 1171.230068][   T34]  </TASK>
[ 1171.330264][   T34] Kernel Offset: disabled
[ 1171.332017][   T34] Rebooting in 86400 seconds..
