last executing test programs:

16.959949s ago: executing program 2 (id=3319):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmmsg$sock(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)=@llc={0x1a, 0x308, 0x8, 0x0, 0x17, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x80, &(0x7f0000000640)=[{&(0x7f00000002c0)="4c573218317d42ac7f9605c48cf445bcd96d5361b542cb2e88dca2ab75f27968bb43b46ac16ee8eb165d100d50e6b322b9338ef9056c1e59722e054865f8848a194d5fac1fb898061f51631485198650485d6e28ff4ff12f4ab07cba2bb639d02182d5e50704d562968433a475c1471b0ddc9b57ff728f78ce6cdcd6b4da4cb8d566ad18b8b3ae93bc34aa2b0dc5f292e916bfaee4f243ce642fe99b986a0a6bc90c44c041702d3b0a05ca557b333afb4f76b37ac0ee09201e2f5b9d30b9f2c7c94404761d2c7d847fb0a534e0be5cb115a4356a3c8ccecc43ab6bd9712473610d3ef7d9db00afa998cf4c48dd33f14db870", 0xf2}, {&(0x7f00000003c0)="d119ba9704aee113536028dabc63fade9141ab4276e9124ca2156ab4342ba859aa3387085dfd7a0ec9d615e63ac18df3eb30e385738bd4c9354f62a1065fa1b9aa6a2491", 0x44}, {&(0x7f0000000540)="c93bd4857d3548427643009cdb97c6ad55aa9ad14473495c5df68050f1bf3cd89fb7587be5ab39af282399528d90346e1744ca55583f335d97adbcef28a65c8c0697d61f671b2196971aed4a6d534ad5846a603b5928d9ac15319c2e0212464879415883d1e767e4e49d76799a760fc59e75fc76ea3e69ad4ef569cbd373abb60a921db6397eab84e260e7349621c4aa60e178c9d3658b10d11e0beaa02f9e47f680833c4ffef38f5426b2f99e931d21ca3a92d34d11f33261ffde954fc62eaf908f79c613518c7f8137c058b841831e72f8917aa23d13affe", 0xd9}], 0x3, &(0x7f0000000680)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffe}}, @timestamping={{0x14, 0x1, 0x25, 0x800}}, @mark={{0x14, 0x1, 0x24, 0xfffffff2}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x3fb}}], 0xc0}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000740)="58900f862ecc77b9428b240f9ce629778c7bda9fa3ffe7f783c8cce47431e8390deef1f452212e303ba96091ad86990caaf4cb8099d34d38b3ac72b9b99052f5142602b6736079729bafcd08f47a89b8d4f964ad37bb806627cc620091a0e03f106633d6cdc12917313b7bd7461ef9bf2371b22458ff4f0617217851ad2a92d5d5aaf771d9b6a173f77884ad994d30817d44c37fb1c71e4b5bab0de8136d530fadd88197f51629872fb58cd4a55bdf91d135a28e3ae99a191caae3cb8bc83cc6cc4c6d8a58de8714dfb3d764c05abfa6b330db7c37378e5cec2edc4357210b935b231e2591114d2898d629c8", 0xec}, {&(0x7f0000000840)="f27c24e11fcf1970db232517dadf44ef58da9da95af71ff48a2efb673005191859e636215031704360cb8f2e397a511a5420e6260d27ab5ce5729192a3fa5b6ca9c700da22d7d895ba0405dfaff34f8cf9ae639f35a52a0f78127ce8473f36c59a378a6a03524ef83f1ff15968da39eed31532f0e5fe297abc3ec684ba7b774c19ee3989cc285a515d85487f462d9e5d2c1cbb1e6e1480a6ab921eb84f701546b46b6dc5e4bc4709eb487be3e4e8f375092d93", 0xb3}, {&(0x7f0000000900)="b4d96593d4ec656be454baf49175f810908d394dcd2b894b8f99493f202b0b590d5c46cf263c0181c546e74aafad55bfefff4cbe3f944f2e93c04ab7844ee666d7662ca3e2ae607fa620ff22af4ad01f30a56b4a6210bc9b512ca724dd23bfb41fe09f8bb3b590a1f2967bd85bd569b2b06178a8a0f3f8aaa7572b08e5e9d92ee828917eb1343aa0d74201e677abf4afe46ac1eac6349f18f5feb58a36275bc366b3dc9eee966b2da480e6d2efa0", 0xae}], 0x3, &(0x7f0000000a00)=[@timestamping={{0x14, 0x1, 0x25, 0x200}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0xa}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x2879}}, @mark={{0x14, 0x1, 0x24, 0x40}}], 0x90}}], 0x2, 0x40004)
socket$inet6(0xa, 0x6, 0x9)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000280)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000400)={r3}, 0x8)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6010104000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="3f70003e90782000"], 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x3}}}}}}}, 0x0)

16.868643413s ago: executing program 2 (id=3321):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010003b0c28bd7000fedbdf8eb4000000", @ANYRES32=r3, @ANYBLOB="0008000000620000300012800b00010065727370616e0000200002800400120006000f00f321000006000e00000000000500130001"], 0x50}, 0x1, 0x0, 0x0, 0x180}, 0x40080c0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0x10}, {0xfff1, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x8}}]}, 0x2c}}, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$sock_int(r8, 0x1, 0x50, &(0x7f0000000040)=0x202, 0x4)
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x6, 0xa}, {0x1, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCBRADDBR(r9, 0x89a0, &(0x7f0000000000)='wg2\x00')

16.867671458s ago: executing program 2 (id=3322):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newlink={0x34, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x71c03}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @multicast1}}}], 0x20}}], 0x483, 0x4880)

16.819137052s ago: executing program 2 (id=3324):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80c0}, 0x880)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)
socket$xdp(0x2c, 0x3, 0x0)

16.70037351s ago: executing program 1 (id=3326):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}, 0x10}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0xb, 0x201, 0x0, 0x0, {0xf01bd3f71c4967a8, 0x0, 0x8}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}}, 0x44004)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x2c, 0x2f, 0x9, 0x70bd27, 0x800000, {0x4}, [@typed={0x4, 0xe, 0x0, 0x0, @binary}, @nested={0x14, 0x9, 0x0, 0x1, [@typed={0x10, 0xae, 0x0, 0x0, @str='\x00'/12}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x42804}, 0x10)

16.639957795s ago: executing program 1 (id=3327):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
socket$igmp(0x2, 0x3, 0x2)
getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, &(0x7f0000000300)=""/58, &(0x7f0000000340)=0x3a)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc004}, 0x4000)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x5, 0x9fd, 0x84, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in=@multicast2, 0xffff, 0x0, 0x4e20, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in6=@local, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0xb, 0x7ffffffc, 0x543}, {0x8001, 0x8000000000000002}, {0x2}, 0x70bd2b, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000200000002"], 0x48)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={0xffffffffffffffff}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r3, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000000e00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r6}, 0xc)
r7 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r7, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c)
r8 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r8, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r9 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r9, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e20}, 0x1c)
socket$inet6(0xa, 0x2, 0x0)
r10 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x10}}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x70bd2b, 0x25dfdbfe, {{@in6=@private0, @in=@multicast2, 0x0, 0x4, 0x0, 0x0, 0xa, 0x40, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)

16.446676604s ago: executing program 2 (id=3328):
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x44002)
recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x100)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="fc00000000000000000000001200"], 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
socket$kcm(0x10, 0x2, 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x2, 0x3, 0xd, 0x4101}, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100))
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x870}}, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[], 0x0)
socket(0x400000000010, 0x3, 0x2)
close(0xffffffffffffffff)
socket(0x400000000010, 0x4, 0x0)
socket$unix(0x1, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYBLOB="909f6e7e2c62464e84e65f96a75163ee5e90593b75304b3dad5c122da51c4a83f6210ed42b0962069cd6bc1588841360286ff22cdfbe49"], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e800007f6c00010029bd17affe00df2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0)
close(r2)

16.44558643s ago: executing program 1 (id=3329):
r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1c, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x9, 0x80, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async, rerun: 32)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x100000000000000, {0x0, 0x1}}, 0x18) (async)
connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18)
writev(r1, &(0x7f0000000400)=[{&(0x7f0000000440)="b47b693fb8be1e856e", 0x9}], 0x1) (async)
recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/230, 0xe6}, 0x10000000}], 0x1, 0x0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0xfffffeb3, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3, 0x3}, {}, {0xe, 0x2}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

16.250324892s ago: executing program 2 (id=3331):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000006740)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804}}, {{&(0x7f0000001f40)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) (async)
sendmmsg$unix(r0, &(0x7f0000006740)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804}}, {{&(0x7f0000001f40)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000b00), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000900)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf25030000000c000500200100000000000008000100000000000c00020007000000000000000d7eb12ae990f0349fc8376abcaa187236e87e1520a10685b4794b8f43943964db8949188f5a2e8963763c94b01718d420e66e24d93a955d6ca891ec75db339e9ce8c60e2e8ef9100e417937dbdaa788e96e7832df240530ce273ee832fe7921646f7147f04d33f3342b2891398391646d44d47e170dd9e0dad67ecf4d06b224a30288a6a1a5ab4490c95a23e3325bb4ee685d10aebe75947c1de5e5612e4864acb54d916f49efb366d87a7db5cfde11c8ecb4a57ab9cdce4d6908c98d8294dcc225"], 0x34}}, 0x80000)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000002c0)={<r4=>0x0, 0x59, "0f435dc65e8df6f71ca17a7c683102c9586bb59bbc9ba7a3b6a823bfaab589a29f284d94658dcfd40ea5c3ae10ddadfb55004c9ca4820466ff30f708b53830b5cac515688f53db22da2c2afc65604bd23edcbbdd66e33a63b9"}, &(0x7f0000000340)=0x61)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000380)={r4, 0xa2, 0x1f86}, &(0x7f00000003c0)=0x8)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) (async)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r6)
sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x68, r7, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff0}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8010}, 0x24000000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x128}, 0x60000d5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) (async)
recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0)
select(0x46, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x2}, &(0x7f0000000440)={0x0, 0x2710})
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="80000000", @ANYRES16=r10, @ANYBLOB="0100fcffffff00000000420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730000000005008e0001000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f70730000000005008300010000002a760a7c8f1c8e97806fca2fd638671afe0ca992a3699c13a4ff55b5acff096e7fead513ad634e3cc59ce29b54f1c656accc8d7ed8df3f8f2c3fb76321815781d335a8cb86fe7673408d9119c8e7cd9bce753589eeaca24cc5990c852aa24bf5c6761ff72bfd49dd535aa5eee034feb9734f00f302db9ee76161710e172bad209a962acc5190a321c0176769d11312e43ffced84a2a919a2f11122345ef39734e348478d2507b96c4dc4a11c701bc61ea354c3b13117ee68936dc52dda7788e2b556e27e2e03470fb697e00c034602977579fe0cf3d82bf835fbf5f88298f661985cb20103f0ae786f09f7bb950ff37c1dfcd006d107e411a04621efe16aaa7de54b8dca445e04b7fb754f756316fcb4e6386d8271d1e328a3c9609cf2be472f478546432b1a1511bd8611e82e6671"], 0x80}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000814) (async)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000814)
bind$alg(r5, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a0000", 0x10) (async)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a0000", 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r12=>0x0, 0x0})
close(r12) (async)
close(r12)

16.127225877s ago: executing program 0 (id=3334):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
listen(r2, 0xfff)
r3 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r3, &(0x7f0000000480)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r4 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000280)=0x4, 0x4)
connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x25dfdbff, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@broadcast, @in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26)
recvmmsg(r3, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x4, &(0x7f0000000340)=""/136, &(0x7f0000000000)=0x88)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg(r9, &(0x7f0000006200)=[{{&(0x7f0000000040)=@l2tp={0x2, 0x0, @rand_addr=0x64010100, 0x3}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)='NQ', 0x2}], 0x1}}, {{&(0x7f0000000240)=@llc={0x1a, 0x1, 0x9, 0x33, 0x80, 0x81, @remote}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000300)="981b", 0x2}], 0x1}}], 0x2, 0x40d5)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014640000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000003800038034000080040001800c000540000000000000004914000b80110001800b0001006f626a72656600000c00044000000000000007"], 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002f00090027bd70000000000004000000080018000bac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4)

16.027409246s ago: executing program 0 (id=3335):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0xc15, 0x41000}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x9}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8015)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100039040000000000000000000003e4", @ANYRES32, @ANYBLOB="00000000000000001400128009000100626f6e64000000000c000280050001"], 0x3c}}, 0x0)
socket(0x1e, 0xa, 0x7a)

15.979504017s ago: executing program 0 (id=3336):
socket$nl_route(0x10, 0x3, 0x0)
epoll_create1(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x2c, 0x6, 0x1)
socket(0x2b, 0x1, 0x1)
socket$packet(0x11, 0x3, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="978e192d8efefcc35328908871759ea2fff5acf8a78983b7217bab98f44538ac819848f22ba709f6b94b4aa67b79905abc51292bb970381d9bb3ea68b46779350b", @ANYRES16=0x0, @ANYBLOB="100029bd70284dc4b5b195435d18703800ffdbdf250e00000034000000000800030000000000080206000001000005000d000000"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0)
sendmmsg$inet(r4, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000200001002dbd7000fcdbdf250a008000040000001e80020014a40200fc02000000000000000000000000000005001600b600000029cc7a6e64458ee4ec34ba2bf60ebf55b84c7eaf02bfa44d103be88d35c1b0c93da1c35ae72c041a64dbdf2a120057d20520c9d9c2095971a10dd34d4d64a366bcaeccb3507f771fa6541db1f0cce61d8e6c80b3b3644046b02708d0d1acd563c9fcfacf4f1f9203b444842eed79b4771c47819ce9d3da87ca2350f093725a2d7e638ce796ecaf06ded2d4a19c7c31ea38a8b8d7cb10ac5ebc9b9d13d07dcb241c1fcd735ce3c2f8ea766afbc8cc07e0aa57aa136a169393bca6539b69a9734fcaf67574399ddcb02b0c"], 0x38}}, 0x480d0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028014000300200100000000faffffffffffffff000114000200fc02"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40)
r7 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newtfilter={0x90, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x48000, 0x9, 0x6, 0x4, 0xffff}, 0x8d23}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xf, 0xd}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
r8 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, 0x0, 0x3e}, 0x80, 0x0}, 0x4011)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000240)={0x0, <r11=>0x0}, &(0x7f0000000400)=0xc)
sendmsg$netlink(r9, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000000700)=ANY=[@ANYRES32=r8, @ANYRES32=r4, @ANYBLOB="0b000080976b640868603000180001801400f6801000468008004a00b300000004004d80"], 0x3c}, {&(0x7f0000001300)={0x2380, 0x12, 0x100, 0x70bd28, 0x25dfdbff, "", [@generic="89f5cb31ab0b726524365714de74d12c761e00af996a7bc041ac945b8108e8f77852", @generic="c84ac7b04761953fc3c6ebe322a30c40b1cc9b3ec447d34fc7c29c23d6bf6d5d2c6ecde89f0756124fd2b4a2ca89254f917204b1fb5eafd6fc25fd85d409c4564733755fb944cc9a2ae917d301e3c58cf6d9d525139d7d532cd011cde547ad8a0691796cf9121649f2f4ba5a4c2a6b26899d2fd4ba62606b0fbab1e27e4ee9ccc2ebad52153cdb73ebb03294ae448b5e9578ab22865fbd6b3c6ab31317973316d51c7658462e17a278063d5d88b37d8e24451f6c67a34ba31d98596e45c4482e66faa6624b696b3467cf3578be60d0e71aab4cfbe3cdd26bcbe459fd5d3827762a4a8e3082369aab7b7bcb6bf3e2a5c050933968289b2144e19a8c8e465e5f7c16ac3c873bbe69f66093e4904517c7b640fbfcebd705fcffbe2e7df725a43c67092f06b1b8ac027c6c9676c2afa782927f6c7da0ab9916e2278edd3c5874e0619cd4d4aa0e592aa6f63bbfead280dbfb093aaed0234dbcdce8ac33d7db1401cd3652e95280f1227e02ed53200bcdd77a1ce2749a162dc34169552f32c88d6f41efd167229f4a58e4a5b7ad6b11f60158347cb6e106efcd73b794dc68cc6326078473a8584b8c7e21affe0a12b572370a2b4bf905fef407dd22a137456bde1a24113831358f6bdbddee503060493af8a0931eab072a7656253ff1406921dc2afb6743f811b0946215c9e35491be26b57d82b2fb6a5d0bf21ab468cc40f7aeec3e7132d2b5ab9a4ae1e8aa7509d7890885394371a6e118fd4d445b70caaaddf26ec23502955b5d5c05116082f32701e766951e0811d89d6c90a93e903bbd7bc50bf5b79d29ab1e778ab354e9fc3c070d4bdc5c15803f69da328eeeb41137e14fa446d1eaf632b88d80a3d38f567be854b39ad190ae995341ea409f112ae0792a03e8eaca13a16c3f13141df7fabceddc00b3f48363804e21550aa23c8174d54d488caadc6f26d38af75dce67dd4b91f01ce05999bbf5c8e0aaf1c0ccef5a63fc3d9ba5b8f317153efad1ddfb846fd705a4c1410ceb98efd7eb989f32aeae3306bb8b4171c04305ea41d57186eeadac3bbf7413657e706e009f807cf66c29f13d8a9af90b429874ae6a21f2c555f4743d1083909f3a58f73d677a4119bbce20b86f7fe0a5bd104c4c641d7ad32e2b7ac50c190e30e6622ec827e96b5de02c4e7711b1244f8a487248e80b75a9831d623b159f2f1fc6c4cd63582540e3305b9c8424f718e4513fa85f3bc6737ff928fe97909f43bcc2fb2fb84bae20cbb5fab84f5ee2a083495b9ccfad81b762c0d2620baa70668a76acb84e67a1f25a4f6e9d4e79d4889e91bcabf51890c98d0f0250d156833a7affbde3b072a491a643f14d5e266ecaac19ad1847e29745e1d7bd31dd18200f3fce20db56a74f0110c311df18f4762963ab36f0d47ca2450b43a5b08b3b38412377b01179a1d5b2da5251d4b4bf331d6bb00bee8faf9e8a8facde61fb69d593fe0936a052d00b583731330e994f48b5c62ea634d42bb7aaa162f6c7c04b8d2be7d03466728c555de3f40b55762d50111fe17bc544910b3efd1b07e1ccfac4ac8eac963a8dfc50d8b5a13209a0ad4872e5cb600faf4b039b4ababa6321be6769bfc5693df5a496373d29d71b6d59c5a1d8181f5834caab3113f3b6e11ee57ceab25be6c72c79ec11f21f3b986e01610d8f3694244202bc8bee96577ce82bd5ea09ddfb97de840745dbc5f052f418286e30acb84a63534633e7222b4600f9f7ff79456dee028882a970c251e834c603ea23e13a60ee6bc546fbccb1ede0cce8f98ce4fa5746de1fdfc77f19f2f818e514b1494a3a08d7703d8f25e341f09519cdd96079eb9981706a7ae90fda9e970e8d86151e759a24ae07dca70838b25b9054a05e1e7d1f6dcaea595095fd824c8dfeeb2bd61ea847fedb4b91a14614eb40b59090507b65c40e02aa260d446c66f3cfee262144a5aeef162da915701a243ee8ad3ec29e76298d1c5718db72d2a19f0d26d012b6a1121e696668a49d288768f6873b47e77f1d35091240422df3cf09cc74fbce2fb038ef96940f8177ae0d3080d45403f87d68429fbb4933dca0df44ba3b49865bd2a4f8863f04c388e2945be5302cdb7096127412e9e1da7aa4e2997a48d5e23d9c8440e46943255c92a42c8d60cf9989c88f5d1f966969ff67b554878b4990ef6fd6a8adefc9d0ea487c5360136e2dfbadad691780817342685f60c5e68678c1ce31c65241371becf3bea64d5ca7f1751dea26becbed86212d2884f400d64ff2fac2b2d62efe002138ba8db0759c3d4fbf7efad82e9d6555064808ac669b7edf2b034f9dae888709ad41faf2d825c77415b106264760b8aebf62d90416537297c92ed42f7e4ddf9cbe5fcc86dd5b368442f66f025e71be1bca789987d802008c798b5b322519210e28b77c97780a355b2c0011a437c7192224f680154c3563b24380038d5a75ad549b08490380a4867bff68db36b0162031e1a83534fe4f84103a424387059fc3f86021cc4cd62f9d0fb689953204a5db935ef3b2bcc3f5f4dc8b841a4cb6eee5512b3d9f5d6486e06e73771b8372df1bc50270ea840dcbb9904ef4e05139acc8743b5f5eda0b54757b4950da3714931f4fb3f6a9c92f9608dfe0e230218a7cdb66ed162211d9fa2e95d11aa17a5548f0f9391ece3ffac0d7452730bb89fd11df56eb2015e10ddf8718619c6dc987bd6226a0bbcf8108f69b6299c3b8e3cd50996b0a4fb7796335d1920494192d7f134a62e84b5eb8b2b379dfcc40d2bb93ffb8d2060b2e2917287e6650878d0559325d8d751b866abe9a4fda091b163e4e4d37334762df2d540ed3dadcd19d5aa535e780f63a166fd4925b278e1ed2419e54b348b84a9ebd6f4537042d704b55c848cdb6c769ed4147a45f4d48a61f2a42851c89a18e748710c7ee7244ce24d696e9ca86316ff7daa7eae1b2126bfd5a883668fd595e551bb0e93b50a3c207c93213276d57d5d9a7afee9112ff8935437a3aefb2f4e0830a99c81fd16f3e02c78bf47c421b419dad5a69ea9e6c79c89043263239758c7fe2ae27bc84f390483c0b715447b54be5fc6786a0554928eeaf00a2aa56e547092b29f96bb84cbf8183d15472c6938e44b850b328cc54b76a472b8034831d76fcd455ef03395dc7190159f955be1a0eb794c59608a969a0253b8ee13c0bcf700e5f90850f658c10415e9f07fbf6962067f581c6a59c08b0001ba785d2a6e0c3c0f3ca0b179d1efe2031b35d707ec151d177c070d1b09089a3706ee956f56d4300664c7dff8b4d594a56f15ca8418021a4c0bc747a32f2485b7e4b433e658f7a73777f2d66e11beea1ae71a8674aa58e92546b35f97692e64a0c69f60c878e2421afd74cfd489b95bc39e856ce4da6a79c47ff8ea5ab568a8bb9b67146a77fba9f01333bd75d1588fd3a705feb35aa60108dad67b80a79d3e181e8d4e58fa71326f150dd01eaa5235f034220f25e4c8f1138c231d84c9b7de10c00acbb5fdcb5a01db27e49f9e6f631c08f1c796ea2ecb5f6942c352a6919501713394f40df30efc5744cae6946d769acf9f108dcc79ff116562be8a82844f30faf387206464d9aca2b5259aa3022de802ff1e7baf13e7c73a744eae4def1bab3306b2f7689ef7be99f3fd622371d8ffca3cc77cc11f4aebe019c5709a6649799a3288fefa35f4ff8cf904e560390a201b433c335a0a5ea470ada54f4ffed2f400225f11f94444c0299a23a27e7dd3c125436acd3f07c656854369945eebabffebf05e06fdc1a2ead0fee00e9797a6021a380f87816779547ec15ede9c913e38571d85c4494007bc176e9b75bcd809d149510413c6481bbd5dfe1ef0173da67da3e32d2e73ed099aa01e203478a9e456d017cefd6a17a63fb869c1cb572af8774e6c255eefa21ce631e50b028bbb2555c886780058cc52c574b15a1f79235876a4fa447ed24d0cb1a0fc1e33567aac8c46321ff05948b06ea7d531fae619b690a0064750530ee12d163aa7d48abf7f213ac862a4a844184407fa8e840c25c591ddedfd7473c1f543f441001e419e8c236a09f1f25100b55d0bf752d570703ab4a8687d9a3f86198b552227873f31f1ee29d73a3b27165bb0d736b52cab08a4eabfcab2c1a17f0e3b2e553c1e79f3911b15a6746619181dbeb218920f331d5f9ab65e1e687f289ef147452f609d76bc1542ed82202d32754e6f66f604a42188d070aa197d06086319222dd2a8a962f144f300c80798eda189939a68d59d21557fbde47236f91417b97365dfa323e70e9f7d3d1f8ff4f0bae7ccad65b2afc9d333e306ef72718b2b67c354cff471bf138ca8a4102947c35098d4ce80e7fb249b7c8711e81dcbb35a8b869c64c06a4925bf92679d217f1e5e4a7fd98d5e761fc0f054cfcc7097a7406f88d2d122f182c09520fe6bc9fe62d36aa6a2cb929280cf8726f12a56673aad58023181f5e79e584db3c6e41cae274d440f93d075764add34f4ecde92da2ec4e5b4c4a8e89e74087f27774773d0fc6afe54e3d5c684b36d2b4daea57eac1e17aaa7b6fe02383d4d7aede2816862cddd1f9efc947f6f607abc47a1ff8b6461f29ed89319747277e2be23db775884dc6ef85c8bc231845562ed355117b5d93bd882787399007d33237fa7cd6bf3ae7278868ad2447c34521f55bd030158c00cbcc2566823229aa9ab2c94e71ab5ca9d488965e244e732282cc77fd5d28406416e00a704f30991df8b6b84461f522561f302f55867cbfb52c0741bc7c68cd38c04803f8aec19199b659976ccd0153cea6cc510d2f25a4649f9658f656d4e170b248456c4e6121d4f1d15c946e183af1799553d342c781f9e3ef843fb17472b9f44537ea7785b34f56c080d678186e6e262dce04358a51e6405e65d14fbbb45d6305f3f64f2176510e6d7354fa0f67f516b13920a8c7e7272f1f5e35b7cc0fe7c593241c683d3a1515ea49371dd2691c022c9d59dbfb47d1762a288d69d28d793078d4d88aa3c2525607893b9b720dde6fa8aab1a72cc2ddcdde9cdb635db2c4d63cfdbaa42d1f2e06762434f332e8b454b1c395c6cc744137a1bd6be6420ce2da66aa7388afe4a336d2fd837dd6b71b7caf19b1fda902af74f394ff68d08764d2b6668d50b8ba2f9f23db12b47cb8d8e73c13da53d8bd2fcdf58a0563f51a068423019e0d7741969d6a2199f9ea51167940952e7acd146a8bb9427b154ad46f9a32ff1a20486b1454dc16fe12c865579e9b43d0c05ee6af5e5c0d7c9d8192e2751ebafc1664a37def936d4c8eefa2e2930d7020af784a834980dc85fa608312ca97d4523f0740cdab0a5ccd7782af84bc058d6123bfa1e8e9653817204b74566b5e79e7e865e3885868a19c05a7e1532816c71235f3eff9240be273928633ee581a241a91cab096b47bbdc5f2ea8a9095cf2bc7029a2426dacaf0432caa7908de423af42c0ef4f36d19de75e06e8fd2d15f2f6696a1f43ad10a270effda6a74a4a4365241057c34e66e706bbfa2b7afed3a638ad414fedb25faf40b28417c83a50da2960c7d8358e29644fbb1bf9eee8e1b8126ec8099c36214677fc2394f67f684b0e55e13ea0c2043fea37138a0f3a0c9888696dffd971b95999267df0125a0a193f19252f89d09f6c9da7ef15039afc62ce921bac84314488ac3206f5f542bd979be82d04d3b54a6154b9d3452fca81e6b171ac00023bc304a0d41e93ba3caf4f004e7d60ff8a9693bb12f8eb99a833962ae72394c24e6be3af157ba0544581c0c1634ac44fd66975fdc83fa7b4aa0", @generic="e179f1dfb612b1749202d24f23b9ec93043db0391124010e1696c77c357b9b16f074df6b1d95a748476de7c04ba638ba0a59f34a425b45c3800cb8da1d4e56dd7f03e24912824ad3c971668debeaf507b8f4430451492ee83e10f5d03568a2696381bebaf99f022a3ebda27855398e0ad5d123d0965f97e4567a55cc160f36ae8e60c25f00b5436674f89c73a90757d83e500e9cbbf7a84e0e1fb8e962b47be7ca5081c59393fc2ccf98f7d55cb0653a60635165ad36e284ae7286d895c107f48c963bd8f597212a9571a4ec2e", @typed={0x4, 0x24}, @typed={0x14, 0x32, 0x0, 0x0, @ipv6=@empty}, @nested={0x10, 0x115, 0x0, 0x1, [@typed={0x8, 0x9d, 0x0, 0x0, @pid}, @nested={0x4, 0x142}]}, @nested={0x1258, 0xcb, 0x0, 0x1, [@nested={0xdc, 0xd1, 0x0, 0x1, [@typed={0x8, 0x88, 0x0, 0x0, @u32=0x40}, @nested={0xcf, 0x43, 0x0, 0x1, [@typed={0xa, 0x117, 0x0, 0x0, @str='basic\x00'}, @nested={0x4, 0x74}, @generic="7364c882089dd61ded8dd2ebeba247d7664ccf55241d5f53d14e23c0dcc6c484aa16ba7d4ae440c3a66093d58dcc99438ba86fd2b9a4eb06a4b36d5bf064c53280ebace2b3e481e9bbfece4b0d279c57a766fde74cacabc4f68be79d9531884936bf2623e813d3b09d815fb352ccd0cc8a2d10ce70e28b45713cadd176384050d3fdc464977346f93b47b201d4f4ebd6bee7c75d12347ca8dd489b1e1f041610743e03b172484175aae3331013cac10388093bfda8b59ae18c534d"]}]}, @generic="4d96ffcb77506ba2357752dba07fea82fffb1f5799454ef6b83bbae3fc2fe0d481e2e4dd3bd31bd599674e9d62ed65c432460ca47ea782d152215b553c2c3aa95052a8df00d9", @generic="be1ae0994a5654c966777b021080b93a95a9655963c6a5ed5dc4914cb1b2ce96241d34a4dea43c3d", @generic="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", @generic="0b9284317cd77cded206b690984f443dcc30d4637d28ee87b444a63d96509d43ed338f6e8e6e0061dcf764c6968ac0144cb92b7f1622bb27ac66ea3ea18fe976bf9bcc6d2318c261eefe51578575c006204bd841432ec2", @nested={0x4, 0xbd}, @generic="7704f0be49e68d090b45b8e198bffe48c0c09b7f6dd1cee1544efa148f6673e68a50bdd223554b5b522ca125494ee7403bc5e92ef9bf72f7426e0e1e3bbaa4390eb19f4875b91c5d6976e765bde8c6d32094a12d39d9796782cc9505f8c0c8a94bc678cd70ff61a614f492f25afbcc713e888b832cd4f43138ea096251ed2cc180c81cf9f731a62c15b12b913a22bdac5517ed3cc2c52bb0f54368b21aa609cc8e8630dbe74ffd7644f20a", @nested={0x4, 0x14}]}]}, 0x2380}], 0x2, 0x0, 0x0, 0x2000000}, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000540)={{{@in=@empty, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0xf, 0x4e21, 0x4, 0x2, 0x40, 0x7312d5474ed66c8, 0xff, r6, r11}, {0x1, 0x7f, 0x0, 0x1ff, 0x0, 0xfffffffffffffffc, 0x80, 0x4}, {0x8000000000000000, 0x101, 0xc5, 0x6}, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1}, {{@in6=@empty, 0x4d2, 0x3c}, 0xa, @in6=@private1, 0x3505, 0x4, 0x3, 0x1, 0x6, 0xfffffffd, 0x3}}, 0xe8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYRESOCT=r1, @ANYBLOB="16a7aca496649c5c16760dea73ff8883afdd442bc4597cd275fae029b0fef65dd28f37b8bda82b826cfddb05dfc21fc24528c0b4b90a6dc63043aa6038a1db547f74dd02892778bddfef8d38f8a86921d9df400169f7857471fdf00541b37db4d746a623e4f60dc8acc4846bbca6fff4c7f2255d6d84c7f72fcc986c34d109a4274a459dc13c10557804f9ae782e8e9916c9", @ANYRES16=r2, @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r1], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x20)

15.830028104s ago: executing program 0 (id=3337):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff00000000000000008500000041000000850000002a00000095"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, 0xffffffffffffffff, 0x4}, 0x14)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socketpair(0x1, 0x80005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r3}, 0x20)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f40)={{r0, <r5=>0xffffffffffffffff}, &(0x7f0000000ec0), &(0x7f0000000f00)=r1}, 0x20)
pipe(&(0x7f0000001740)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c)
sendto$inet6(r7, 0x0, 0x0, 0x220080c1, &(0x7f0000000040)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x1c)
splice(r7, 0x0, r6, 0x0, 0x406f413, 0x0)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f80)={0x1b, 0x0, 0x0, 0x943a, 0x0, 0xffffffffffffffff, 0x1191, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2fab, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x1d, 0x16, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000040000000000000003fe000018430000fcffffff000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000018110000", @ANYRES32, @ANYBLOB="5ad6486cd0750000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000950095ce0d7c329aedf340230aa43fddd7f7c859341f36f55adf275c3243fcad0e34d6cadb7dbdbf9a15e4adcf2fcbcb70d549530988fe5b3cc3647049d35fcf4aa1d90927bcd098e5e3be06000000e02ccca4d0fdea73cee05f23ad7b36d6adf396ba8ad5b484431adf3acbed664783302c87254c21b066"], &(0x7f00000008c0)='syzkaller\x00', 0xd786, 0x8d, &(0x7f0000000900)=""/141, 0x41000, 0x48, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x80000000, 0x2}, 0x8, 0x10, &(0x7f0000000a40)={0x1, 0x9, 0x9f, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r5, r6, r8, r9], &(0x7f00000010c0)=[{0x0, 0x2, 0xd}], 0x10, 0x1000}, 0x94)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r11, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}]}, &(0x7f0000000180)=0x10)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0)
r13 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r13, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x6, &(0x7f0000004740)={0x0, @in6={{0xa, 0x4e23, 0xcc7, @remote, 0x13b9}}}, 0x84)
r14 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r14, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="380100001a0413070000000000000000aa7f00000100000000000000000000000000000000000000020000000000000000", @ANYBLOB="9b81fd11f486c915302ecf85ab0d21ee8db960071cbbcaf6ce3c0da1d644b6bc221e4c8f6454d8f9a4ef20764b42011efaa23eabc9118462c1bb8f15c9173860917c5d82e7c522666012fd99a2bcf2a7af73e20ad8c933d600f87c8535b522752fa396dc5a300cc30f8f0123d58fd72daaf5063e3c022500dd16efded636fa3817e4c7bd96784071996861c001d7ba9692108b8af366aad5285e4b8d6d60f8bd70b944906c4881deb14173", @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d233000000ac1414000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000b40000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000a0002006000000000000000480001007368613100"/240], 0x138}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

15.739444026s ago: executing program 0 (id=3338):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x10, 0xb, 0x10001, 0x9, 0x1}, 0x50)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x3}}}}}}}, 0x0)

15.739027195s ago: executing program 0 (id=3339):
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="73df3f66c293cac1fdffd9d286dd606403a6000032fe00000000000000000000000001000000ff020000000000000000000000000001"], 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000f40)=ANY=[@ANYBLOB="9feb010018000000000000008000000080000000030000000b0000000200001300000000010000004a660000660f00000900000004000000ff0100000d00000004000085010400000700000003000000070000000900000004000000ff0100000f00000004000000050000000500000004000000000800000c000000000000010000000045006e020f0000000000000e05000000000000fcb54c2ee983ae0aaf81a0e568106e5b848231c68e69855fbb5d4f7c6071819f1f43b1be2fe9bb646c223896f27f4b5d42867541c6539c0413f1ff70f69b55785d613545412f75aa5151d20e752b793167c317efaaf431e57943"], &(0x7f0000000140)=""/218, 0x9b, 0xda, 0x0, 0x8, 0x10000}, 0x28)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r1)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'hsr0\x00', 0x400})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x0, 0x0, 0x0}]}, 0x14}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r6, &(0x7f0000000480)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0xfffffffc}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000006c0)="b3", 0x1}], 0x1}}], 0x1, 0x44)
listen(r6, 0x100101)
r7 = accept(r6, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x2}, 0x10)
writev(r0, &(0x7f0000000700)=[{&(0x7f0000000240)="57ee476d400fc7329899151f235159b114a73d1c20fce683166c78306d9c07757b19d02e13df6f478c6f3bd91652e2fdeab4e6907654c1bf9d7ef0fccac9c339050b58fb1160ad4b62088c2d", 0x4c}, {0x0}], 0x2)
write$nci(r0, 0x0, 0x14)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001"], 0xbc}}, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4)
unshare(0x20000400)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r11=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r10, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff8e}]}, 0x38}}, 0x20000000)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)

15.518683817s ago: executing program 1 (id=3340):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$nci(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet(0x2, 0x3, 0x100)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r1, &(0x7f0000000240), &(0x7f00000003c0)=@udp6=r3, 0x1}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0)

15.289547065s ago: executing program 1 (id=3341):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$inet(0x2, 0x1, 0x0)
r4 = socket$inet(0x2, 0x1, 0x6)
bind(r4, &(0x7f0000000300)=@in={0x2, 0x4908, @loopback}, 0x10)
listen(r4, 0x5)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'rr\x00', 0x2b}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44)
r5 = socket$inet(0x2, 0x1, 0x6)
connect(r5, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r0, r2, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x800}}, 0x40)

15.13947342s ago: executing program 1 (id=3342):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x21980}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
socket$nl_crypto(0x10, 0x3, 0x15) (async, rerun: 32)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (rerun: 32)
r2 = socket$kcm(0x10, 0x2, 0x0) (async)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMRRU(r3, 0x4010744d, &(0x7f0000000080)=0xc) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x3a, 0x505, 0x1, 0x0, {0x1, 0x1}, [@generic="0f0001006f76732d"]}, 0x1c}}, 0x0) (async, rerun: 64)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, 0x3b, 0x505, 0x1, 0x0, {0x1, 0x1}, [@generic="0f0001006f76732d73797374656d0000"]}, 0x24}}, 0x0) (async, rerun: 64)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x3c, 0x505, 0x1, 0x0, {0x1, 0x1}}, 0x14}}, 0x0) (async)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, 0x3d, 0x505, 0x1, 0x0, {0x1, 0x1}, [@generic="0f0001006f76732d73797374656d0000"]}, 0x24}}, 0x0) (async)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, 0x3e, 0x505, 0x1, 0x0, {0x1, 0x1}, [@generic="0f0001006f76732d73797374656d0000"]}, 0x24}}, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, 0x3f, 0x505, 0x1, 0x0, {0x1, 0x1}, [@generic="0f0001006f76732d73797374656d0000"]}, 0x24}}, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, 0x40, 0x505, 0x1, 0x0, {0x1, 0x1}, [@generic="0f0001006f76732d73797374656d0000"]}, 0x24}}, 0x0) (async)
sendmsg$nl_generic(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x38, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0) (async)
sendmsg$nl_generic(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x39, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x3a, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0) (async)
sendmsg$nl_generic(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) (async)
sendmsg$nl_generic(r4, 0x0, 0x0) (async)
sendmsg$nl_generic(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x3e, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0) (async)
sendmsg$nl_generic(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x3f, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x40, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r4) (async)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

1.098456635s ago: executing program 32 (id=3331):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000006740)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804}}, {{&(0x7f0000001f40)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) (async)
sendmmsg$unix(r0, &(0x7f0000006740)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804}}, {{&(0x7f0000001f40)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000b00), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000900)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf25030000000c000500200100000000000008000100000000000c00020007000000000000000d7eb12ae990f0349fc8376abcaa187236e87e1520a10685b4794b8f43943964db8949188f5a2e8963763c94b01718d420e66e24d93a955d6ca891ec75db339e9ce8c60e2e8ef9100e417937dbdaa788e96e7832df240530ce273ee832fe7921646f7147f04d33f3342b2891398391646d44d47e170dd9e0dad67ecf4d06b224a30288a6a1a5ab4490c95a23e3325bb4ee685d10aebe75947c1de5e5612e4864acb54d916f49efb366d87a7db5cfde11c8ecb4a57ab9cdce4d6908c98d8294dcc225"], 0x34}}, 0x80000)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000002c0)={<r4=>0x0, 0x59, "0f435dc65e8df6f71ca17a7c683102c9586bb59bbc9ba7a3b6a823bfaab589a29f284d94658dcfd40ea5c3ae10ddadfb55004c9ca4820466ff30f708b53830b5cac515688f53db22da2c2afc65604bd23edcbbdd66e33a63b9"}, &(0x7f0000000340)=0x61)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000380)={r4, 0xa2, 0x1f86}, &(0x7f00000003c0)=0x8)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) (async)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r6)
sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x68, r7, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff0}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8010}, 0x24000000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x128}, 0x60000d5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) (async)
recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0)
select(0x46, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x2}, &(0x7f0000000440)={0x0, 0x2710})
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="80000000", @ANYRES16=r10, @ANYBLOB="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"], 0x80}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000814) (async)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000814)
bind$alg(r5, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a0000", 0x10) (async)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a0000", 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r12=>0x0, 0x0})
close(r12) (async)
close(r12)

60.765075ms ago: executing program 33 (id=3339):
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="73df3f66c293cac1fdffd9d286dd606403a6000032fe00000000000000000000000001000000ff020000000000000000000000000001"], 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000f40)=ANY=[@ANYBLOB="9feb010018000000000000008000000080000000030000000b0000000200001300000000010000004a660000660f00000900000004000000ff0100000d00000004000085010400000700000003000000070000000900000004000000ff0100000f00000004000000050000000500000004000000000800000c000000000000010000000045006e020f0000000000000e05000000000000fcb54c2ee983ae0aaf81a0e568106e5b848231c68e69855fbb5d4f7c6071819f1f43b1be2fe9bb646c223896f27f4b5d42867541c6539c0413f1ff70f69b55785d613545412f75aa5151d20e752b793167c317efaaf431e57943"], &(0x7f0000000140)=""/218, 0x9b, 0xda, 0x0, 0x8, 0x10000}, 0x28)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r1)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'hsr0\x00', 0x400})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x0, 0x0, 0x0}]}, 0x14}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r6, &(0x7f0000000480)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0xfffffffc}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000006c0)="b3", 0x1}], 0x1}}], 0x1, 0x44)
listen(r6, 0x100101)
r7 = accept(r6, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x2}, 0x10)
writev(r0, &(0x7f0000000700)=[{&(0x7f0000000240)="57ee476d400fc7329899151f235159b114a73d1c20fce683166c78306d9c07757b19d02e13df6f478c6f3bd91652e2fdeab4e6907654c1bf9d7ef0fccac9c339050b58fb1160ad4b62088c2d", 0x4c}, {0x0}], 0x2)
write$nci(r0, 0x0, 0x14)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001"], 0xbc}}, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4)
unshare(0x20000400)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r11=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r10, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff8e}]}, 0x38}}, 0x20000000)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)

0s ago: executing program 34 (id=3342):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x21980}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
socket$nl_crypto(0x10, 0x3, 0x15) (async, rerun: 32)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (rerun: 32)
r2 = socket$kcm(0x10, 0x2, 0x0) (async)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMRRU(r3, 0x4010744d, &(0x7f0000000080)=0xc) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x3a, 0x505, 0x1, 0x0, {0x1, 0x1}, [@generic="0f0001006f76732d"]}, 0x1c}}, 0x0) (async, rerun: 64)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, 0x3b, 0x505, 0x1, 0x0, {0x1, 0x1}, [@generic="0f0001006f76732d73797374656d0000"]}, 0x24}}, 0x0) (async, rerun: 64)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x3c, 0x505, 0x1, 0x0, {0x1, 0x1}}, 0x14}}, 0x0) (async)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, 0x3d, 0x505, 0x1, 0x0, {0x1, 0x1}, [@generic="0f0001006f76732d73797374656d0000"]}, 0x24}}, 0x0) (async)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, 0x3e, 0x505, 0x1, 0x0, {0x1, 0x1}, [@generic="0f0001006f76732d73797374656d0000"]}, 0x24}}, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, 0x3f, 0x505, 0x1, 0x0, {0x1, 0x1}, [@generic="0f0001006f76732d73797374656d0000"]}, 0x24}}, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, 0x40, 0x505, 0x1, 0x0, {0x1, 0x1}, [@generic="0f0001006f76732d73797374656d0000"]}, 0x24}}, 0x0) (async)
sendmsg$nl_generic(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x38, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0) (async)
sendmsg$nl_generic(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x39, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x3a, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0) (async)
sendmsg$nl_generic(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) (async)
sendmsg$nl_generic(r4, 0x0, 0x0) (async)
sendmsg$nl_generic(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x3e, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0) (async)
sendmsg$nl_generic(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x3f, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x40, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r4) (async)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

valid length.
[  169.175625][T12014] netlink: 'syz.1.1779': attribute type 12 has an invalid length.
[  169.182437][T12015] netlink: 'syz.1.1779': attribute type 12 has an invalid length.
[  169.393780][T12024] ovs-s: entered promiscuous mode
[  169.399402][T12025] openvswitch: ovs-s: Dropping previously announced user features
[  169.405070][T12024] openvswitch: ovs-s: Dropping previously announced user features
[  169.580052][T12039] ip6t_rpfilter: unknown options
[  169.588786][T12039] pim6reg99999999: entered allmulticast mode
[  169.677492][T12046] netlink: 'syz.2.1786': attribute type 1 has an invalid length.
[  169.697946][T12046] 8021q: adding VLAN 0 to HW filter on device bond19
[  170.038357][T12061] sctp: [Deprecated]: syz.2.1790 (pid 12061) Use of struct sctp_assoc_value in delayed_ack socket option.
[  170.038357][T12061] Use struct sctp_sack_info instead
[  170.054030][T12061] sock: sock_set_timeout: `syz.2.1790' (pid 12061) tries to set negative timeout
[  170.347970][T12077] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  170.547137][T12092] pim6reg1: entered promiscuous mode
[  170.551265][T12092] pim6reg1: entered allmulticast mode
[  170.658850][T12099] netlink: 'syz.1.1800': attribute type 13 has an invalid length.
[  170.683347][T12099] tipc: Resetting bearer <eth:syz_tun>
[  170.843391][T12109] x_tables: duplicate underflow at hook 1
[  171.067757][T12130] __nla_validate_parse: 18 callbacks suppressed
[  171.067768][T12130] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1811'.
[  171.201704][T12143] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  171.548159][T12160] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  172.007533][T12166] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1822'.
[  172.366440][T12177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1824'.
[  172.427144][T12187] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1826'.
[  172.516922][T12198] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1826'.
[  172.734445][T12202] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1829'.
[  172.737975][T12202] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1829'.
[  175.344956][T12177] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  175.463812][T12216] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1832'.
[  175.471197][T12216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1832'.
[  175.474838][T12216] netlink: 'syz.2.1832': attribute type 30 has an invalid length.
[  175.509299][T12220] IPv6: NLM_F_CREATE should be specified when creating new route
[  175.530944][T12211] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1831'.
[  175.710031][T12234] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  175.789292][T12244] veth0: entered promiscuous mode
[  176.019754][T12253] sock: sock_set_timeout: `syz.1.1842' (pid 12253) tries to set negative timeout
[  176.049142][T12257] tun0: tun_chr_ioctl cmd 1074025675
[  176.050997][T12257] tun0: persist enabled
[  176.115410][T12266] syzkaller0: entered promiscuous mode
[  176.117974][T12266] syzkaller0: entered allmulticast mode
[  176.575732][T12282] __nla_validate_parse: 6 callbacks suppressed
[  176.575742][T12282] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1852'.
[  176.588917][T12282] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1852'.
[  176.615142][T12282] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1852'.
[  176.627447][T12283] tipc: Resetting bearer <eth:syz_tun>
[  176.641666][T12283] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  176.817493][T12283] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check.
[  176.889908][T12294] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  176.924674][T12298] xt_nfacct: accounting object `syz0' does not exist
[  176.976151][T12301] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  177.044968][T12313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1856'.
[  177.053211][T12313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1856'.
[  177.068799][T12313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1856'.
[  177.079631][T12313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1856'.
[  177.089413][T12313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1856'.
[  177.099673][T12313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1856'.
[  177.114607][T12313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1856'.
[  177.640156][T12371] bond20 (unregistering): Released all slaves
[  177.698028][T12385] tipc: Resetting bearer <eth:syz_tun>
[  177.701769][T12385] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.739177][T12385] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  177.975171][T12416] netlink: 'syz.0.1885': attribute type 2 has an invalid length.
[  178.094509][T12429] 8021q: adding VLAN 0 to HW filter on device bond21
[  178.106044][T12429] erspan0: entered promiscuous mode
[  178.109782][T12429] erspan0: left promiscuous mode
[  178.303632][T12448] syzkaller0: entered promiscuous mode
[  178.305949][T12448] syzkaller0: entered allmulticast mode
[  178.315820][T12448] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  178.327121][T12448] tipc: Resetting bearer <eth:syzkaller0>
[  178.334571][T12446] tipc: Resetting bearer <eth:syzkaller0>
[  178.364785][T12446] tipc: Disabling bearer <eth:syzkaller0>
[  178.724366][T12455] bridge1: left promiscuous mode
[  178.726390][T12455] bridge1: left allmulticast mode
[  178.728353][T12455] ip6erspan0: left allmulticast mode
[  178.730921][T12455] bond3: left allmulticast mode
[  178.732516][T12455] bond4: left allmulticast mode
[  178.734973][T12455] bond8: left promiscuous mode
[  178.737396][T12455] bond8: left allmulticast mode
[  178.739189][T12455] gretap1: left promiscuous mode
[  178.750985][T12455] bond10: left promiscuous mode
[  178.755486][T12455] bridge5: left promiscuous mode
[  178.791788][T12455] vlan3: left allmulticast mode
[  178.796811][T12455] bond0: left allmulticast mode
[  178.824853][T12455] gre1: left promiscuous mode
[  178.838893][T12455] bridge6: left allmulticast mode
[  178.938810][T12471] xt_hashlimit: size too large, truncated to 1048576
[  178.943769][T12471] xt_hashlimit: max too large, truncated to 1048576
[  178.960568][T12455] gretap3: left allmulticast mode
[  178.968177][T12455] veth11: left allmulticast mode
[  179.008990][T12455] bond20: left promiscuous mode
[  179.056693][   T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  179.059392][   T12] netdevsim netdevsim0 netdevsim1: unset [0, 1] type 1 family 0 port 4352 - 0
[  179.062283][   T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  179.072901][   T12] netdevsim netdevsim0 netdevsim2: unset [0, 1] type 1 family 0 port 4352 - 0
[  179.077173][   T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  179.082066][   T12] netdevsim netdevsim0 netdevsim3: unset [0, 1] type 1 family 0 port 4352 - 0
[  179.084981][   T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  179.089007][   T12] netdevsim netdevsim0 netdevsim0: unset [0, 1] type 1 family 0 port 4352 - 0
[  179.094179][T12479] sctp: [Deprecated]: syz.1.1905 (pid 12479) Use of struct sctp_assoc_value in delayed_ack socket option.
[  179.094179][T12479] Use struct sctp_sack_info instead
[  179.293083][T12487] tcf_pedit_act: 54 callbacks suppressed
[  179.293096][T12487] tc action pedit offset 0 out of bounds
[  179.340737][T12494] xt_nfacct: accounting object `syz0' does not exist
[  179.428639][T12502] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  179.494573][T12510] C: renamed from veth1_to_team (while UP)
[  179.691158][T12516] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.998713][T12510] netlink: 'syz.1.1914': attribute type 4 has an invalid length.
[  181.003355][T12510] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  182.546974][T12524] gre0: left promiscuous mode
[  182.554259][T12524] gre0: left allmulticast mode
[  182.570571][T12524] 1{X: left allmulticast mode
[  182.618257][T12524] bridge0: left promiscuous mode
[  182.620864][T12524] bridge0: left allmulticast mode
[  182.657981][T12524] wg0: left allmulticast mode
[  182.679912][T12524] bridge_slave_0: left promiscuous mode
[  182.709706][T12530] __nla_validate_parse: 42 callbacks suppressed
[  182.709718][T12530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1917'.
[  182.717391][T12530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1917'.
[  182.768685][T12538] netlink: 'syz.2.1917': attribute type 16 has an invalid length.
[  182.775334][T12538] netlink: 'syz.2.1917': attribute type 17 has an invalid length.
[  182.785883][T12538] netlink: 'syz.2.1917': attribute type 27 has an invalid length.
[  182.821612][T12524] veth0_to_hsr: left promiscuous mode
[  182.889027][T12524] vlan0: left promiscuous mode
[  182.971622][T12524] gre1: left allmulticast mode
[  182.992624][T12524] bond1: left promiscuous mode
[  182.995727][T12524] ipip0: left promiscuous mode
[  183.211377][T12524] bridge3: left promiscuous mode
[  183.215239][T12524] bridge3: left allmulticast mode
[  183.219642][T12524] bond3: left promiscuous mode
[  183.221232][T12524] bond3: left allmulticast mode
[  183.228767][T12524] bridge4: left promiscuous mode
[  183.235362][T12524] bridge5: left promiscuous mode
[  183.240685][T12524] bridge6: left promiscuous mode
[  183.247430][T12524] bridge7: left promiscuous mode
[  183.253358][T12524] bridge8: left promiscuous mode
[  183.257895][T12524] bridge9: left promiscuous mode
[  183.262914][T12524] bridge10: left promiscuous mode
[  183.271112][T12524] bridge11: left promiscuous mode
[  183.275755][T12524] bridge12: left promiscuous mode
[  183.283377][T12524] bridge13: left promiscuous mode
[  183.292086][T12524] bridge14: left promiscuous mode
[  183.303220][T12524] bridge15: left promiscuous mode
[  183.307411][T12524] bridge16: left promiscuous mode
[  183.313276][T12524] bridge17: left promiscuous mode
[  183.323583][T12524] bridge18: left promiscuous mode
[  183.328273][T12524] bridge19: left promiscuous mode
[  183.332848][T12524] bridge20: left promiscuous mode
[  183.344057][T12524] bridge21: left promiscuous mode
[  183.348787][T12524] bridge22: left promiscuous mode
[  183.362107][T12524] bridge23: left promiscuous mode
[  183.370743][T12524] bridge24: left promiscuous mode
[  183.378734][T12524] bridge25: left promiscuous mode
[  183.381071][T12524] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  183.386266][T12524] ip6gretap1: left allmulticast mode
[  183.465038][T12524] bond9: left promiscuous mode
[  183.478485][T12524] bond11: left promiscuous mode
[  183.480222][T12524] bridge27: left promiscuous mode
[  183.484806][T12524] macvtap0: left allmulticast mode
[  183.489995][T12524] macvtap1: left allmulticast mode
[  183.502800][T12524] geneve5: left promiscuous mode
[  183.511177][T12524] ipip1: left promiscuous mode
[  183.530519][T12524] macvtap2: left allmulticast mode
[  183.535312][T12524] macvtap3: left allmulticast mode
[  183.539196][T12524] bond16: left promiscuous mode
[  183.540792][T12524] bond16: left allmulticast mode
[  183.544669][T12524] geneve6: left promiscuous mode
[  183.549002][T12524] geneve6: left allmulticast mode
[  183.558530][T12524] gretap0: left allmulticast mode
[  183.562066][T12524] geneve7: left promiscuous mode
[  183.564530][T12524] geneve7: left allmulticast mode
[  183.569898][T12524] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  183.575969][T12524] ip6gretap2: left allmulticast mode
[  183.618965][   T13] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  183.628596][T12554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1923'.
[  183.633812][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  183.639426][T12558] netlink: 'syz.2.1925': attribute type 4 has an invalid length.
[  183.642817][T12559] netlink: 'syz.2.1925': attribute type 4 has an invalid length.
[  183.644059][   T13] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  183.660763][   T13] netdevsim netdevsim2 eth3: unset [1, 2] type 2 family 0 port 50557 - 0
[  183.671486][   T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  183.677186][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  183.683680][   T13] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  183.690692][   T13] netdevsim netdevsim2 eth2: unset [1, 2] type 2 family 0 port 50557 - 0
[  183.710432][T12554] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  183.784225][T12562] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1924'.
[  183.796559][   T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  183.801182][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  183.808221][   T12] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  183.813397][   T12] netdevsim netdevsim2 eth1: unset [1, 2] type 2 family 0 port 50557 - 0
[  183.819761][   T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  183.825603][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  183.835125][   T12] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  183.842413][   T12] netdevsim netdevsim2 eth0: unset [1, 2] type 2 family 0 port 50557 - 0
[  184.278779][T12605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1929'.
[  184.301119][T12605] 8021q: adding VLAN 0 to HW filter on device bond23
[  184.520278][T12623] netlink: 'syz.2.1936': attribute type 13 has an invalid length.
[  184.779299][T12623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1936'.
[  184.800767][T12623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1936'.
[  185.105465][T12660] syzkaller0: entered allmulticast mode
[  185.168911][T12666] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1944'.
[  185.172669][T12666] netlink: 'syz.1.1944': attribute type 4 has an invalid length.
[  185.175780][T12666] netlink: 'syz.1.1944': attribute type 1 has an invalid length.
[  185.293501][T12670] bond21 (unregistering): Released all slaves
[  185.600045][T12697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1953'.
[  185.676865][T12700] netlink: 'syz.1.1954': attribute type 13 has an invalid length.
[  185.682100][T12700] tipc: Resetting bearer <eth:syz_tun>
[  185.729301][T12700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1954'.
[  185.842357][T12703] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  185.845931][T12703] syzkaller0: entered promiscuous mode
[  185.848667][T12703] syzkaller0: entered allmulticast mode
[  185.853549][T12703] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  185.883051][T12703] tipc: Resetting bearer <eth:syzkaller0>
[  185.902674][T12702] tipc: Resetting bearer <eth:syzkaller0>
[  185.920892][T12702] tipc: Disabling bearer <eth:syzkaller0>
[  186.160402][T12718] netlink: 'syz.0.1961': attribute type 5 has an invalid length.
[  186.221896][T12720] xt_nfacct: accounting object `syz0' does not exist
[  186.462601][T12739] bond22: option min_links: invalid value (18446744073709551612)
[  186.466037][T12739] bond22: option min_links: allowed values 0 - 2147483647
[  186.473137][T12739] bond22 (unregistering): Released all slaves
[  186.535965][T12738] bond22: option min_links: invalid value (18446744073709551612)
[  186.540304][T12738] bond22: option min_links: allowed values 0 - 2147483647
[  186.547352][T12738] bond22 (unregistering): Released all slaves
[  186.575754][T12747] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[  186.914471][T12782] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  186.965008][T12786] tipc: Resetting bearer <eth:syz_tun>
[  187.160284][T12801] tap0: tun_chr_ioctl cmd 1074025677
[  187.162974][T12801] tap0: linktype set to 805
[  187.299520][T12816] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[  187.659399][T12847] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[  187.798545][T12864] __nla_validate_parse: 12 callbacks suppressed
[  187.798557][T12864] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2003'.
[  187.818134][T12864] xt_cgroup: path and classid specified
[  187.849953][T12836] bond0 (unregistering): Released all slaves
[  187.868498][T12865] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1995'.
[  187.889206][   T37] smbdirect: ib_dev[syz1] removed
[  188.084883][T12878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2007'.
[  188.091781][T12878] netlink: 'syz.1.2007': attribute type 12 has an invalid length.
[  188.099828][T12878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2007'.
[  188.105500][T12878] netlink: 'syz.1.2007': attribute type 12 has an invalid length.
[  188.223292][T12891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2011'.
[  188.260794][T12890] syzkaller0: entered promiscuous mode
[  188.263077][T12890] syzkaller0: entered allmulticast mode
[  188.271376][T12890] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2012'.
[  188.279273][T12890] unsupported nlmsg_type 40
[  188.284013][T12890] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2012'.
[  188.446517][T12905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2016'.
[  188.473838][T12905] netlink: 'syz.0.2016': attribute type 1 has an invalid length.
[  188.562811][T12923] mac80211_hwsim hwsim18 : renamed from wlan0
[  188.613666][T12932] xt_connbytes: Forcing CT accounting to be enabled
[  188.734037][T12947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2024'.
[  188.739608][T12947] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  188.796292][T12944] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2023'.
[  189.383169][T12996] pim6reg: entered allmulticast mode
[  189.670337][T13015] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  189.692180][T13014] pim6reg1: entered promiscuous mode
[  189.698113][T13014] pim6reg1: entered allmulticast mode
[  190.175783][T13059] syzkaller0: entered promiscuous mode
[  190.183588][T13059] syzkaller0: entered allmulticast mode
[  190.221373][T13068] ovs-s: entered promiscuous mode
[  190.334178][T13077] smc: net device vlan1 applied user defined pnetid SYZ2
[  190.399140][T13082] xt_l2tp: v2 sid > 0xffff: 33554432
[  191.171082][   T53] block nbd0: Possible stuck request ffff88810acf0000: control (read@0,1024B). Runtime 60 seconds
[  191.175554][   T53] block nbd0: Possible stuck request ffff88810acf0200: control (read@1024,1024B). Runtime 60 seconds
[  191.180126][   T53] block nbd0: Possible stuck request ffff88810acf0400: control (read@2048,1024B). Runtime 60 seconds
[  191.185099][   T53] block nbd0: Possible stuck request ffff88810acf0600: control (read@3072,1024B). Runtime 60 seconds
[  191.292204][T13157] netlink: 'syz.2.2077': attribute type 1 has an invalid length.
[  191.317648][T13157] 8021q: adding VLAN 0 to HW filter on device bond21
[  191.324254][T13157] Cannot find add_set index 2 as target
[  191.336131][T13157] vlan4: entered promiscuous mode
[  191.338385][T13157] bond21: entered promiscuous mode
[  191.340737][T13157] vlan4: entered allmulticast mode
[  191.342779][T13157] bond21: entered allmulticast mode
[  191.449620][T13164] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  191.639629][T13173] lo: Caught tx_queue_len zero misconfig
[  191.825116][T13191] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.984738][T13203] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame.
[  192.450411][T13241] pim6reg: left allmulticast mode
[  192.563952][T13252] syzkaller0: entered promiscuous mode
[  192.566148][T13252] syzkaller0: entered allmulticast mode
[  192.573131][T13255] xfrm0: Caught tx_queue_len zero misconfig
[  192.783347][T13267] bond0: option arp_validate: invalid value (55553)
[  192.793458][T13267] 8021q: adding VLAN 0 to HW filter on device bond0
[  192.805028][T13271] x_tables: duplicate underflow at hook 2
[  192.970903][T13284] __nla_validate_parse: 20 callbacks suppressed
[  192.970913][T13284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2109'.
[  192.987095][T13284] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2109'.
[  193.105996][T13291] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2113'.
[  193.111806][T13291] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2113'.
[  193.197177][T13297] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2115'.
[  193.242123][T13295] bond0 (unregistering): Released all slaves
[  193.342046][T13302] veth1_macvtap: Caught tx_queue_len zero misconfig
[  193.397152][T13308] 8021q: adding VLAN 0 to HW filter on device bond22
[  193.399731][T13308] bridge0: port 1(bond22) entered blocking state
[  193.402002][T13308] bridge0: port 1(bond22) entered disabled state
[  193.404323][T13308] bond22: entered allmulticast mode
[  193.408096][T13308] bridge0: port 1(bond22) entered blocking state
[  193.410281][T13308] bridge0: port 1(bond22) entered forwarding state
[  193.415036][ T2177] bridge0: port 1(bond22) entered disabled state
[  193.459156][T13315] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2119'.
[  193.462336][T13315] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2119'.
[  193.465866][T13315] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2119'.
[  193.469040][T13315] netlink: 'syz.2.2119': attribute type 2 has an invalid length.
[  193.472399][T13315] netlink: 'syz.2.2119': attribute type 1 has an invalid length.
[  193.474925][T13315] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2119'.
[  193.570944][T13324] xt_nfacct: accounting object `syz0' does not exist
[  193.756981][T13342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2127'.
[  193.770342][T13342] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  194.052610][T13372] netlink: 'syz.0.2136': attribute type 1 has an invalid length.
[  194.086783][T13372] bond22: entered promiscuous mode
[  194.088902][T13372] 8021q: adding VLAN 0 to HW filter on device bond22
[  194.103646][T13372] 8021q: adding VLAN 0 to HW filter on device bond22
[  194.107469][T13372] bond22: (slave ipip2): The slave device specified does not support setting the MAC address
[  194.110597][T13372] bond22: (slave ipip2): Setting fail_over_mac to active for active-backup mode
[  194.119360][T13372] bond22: (slave ipip2): making interface the new active one
[  194.121887][T13372] ipip2: entered promiscuous mode
[  194.124540][T13372] bond22: (slave ipip2): Enslaving as an active interface with an up link
[  194.210687][T13383] netlink: 'syz.1.2139': attribute type 1 has an invalid length.
[  194.231855][T13383] 8021q: adding VLAN 0 to HW filter on device bond0
[  194.250083][T13383] bond0: (slave veth9): Enslaving as an active interface with an up link
[  194.281466][T13383] bond0 (unregistering): (slave veth9): Releasing backup interface
[  194.304959][T13383] bond0 (unregistering): Released all slaves
[  194.342442][T13407] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  194.361738][T13407] netlink: 'syz.0.2142': attribute type 4 has an invalid length.
[  194.367747][ T1372] ieee802154 phy1 wpan1: encryption failed: -22
[  194.379864][T13407] netlink: 'syz.0.2142': attribute type 4 has an invalid length.
[  194.385236][T13411] bond18: entered allmulticast mode
[  194.701904][T13448] netlink: 'syz.0.2154': attribute type 10 has an invalid length.
[  194.745507][T13458] netlink: 'syz.2.2156': attribute type 1 has an invalid length.
[  194.798037][T13458] bond23: entered promiscuous mode
[  194.802433][T13458] 8021q: adding VLAN 0 to HW filter on device bond23
[  194.839329][T13468] tipc: MTU too low for tipc bearer
[  194.850848][T13468] xt_l2tp: v2 doesn't support IP mode
[  194.924584][T13477] netlink: 'syz.0.2161': attribute type 10 has an invalid length.
[  195.110064][T13491] tipc: Resetting bearer <eth:syz_tun>
[  195.128370][T13497] x_tables: duplicate underflow at hook 2
[  195.294958][T13491] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  195.299187][T13491] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  195.305366][T13491] vti2: left promiscuous mode
[  195.308036][T13491] vti2: left allmulticast mode
[  195.313948][T13491] bridge6: left allmulticast mode
[  195.338806][T13491] ip6erspan0: left allmulticast mode
[  195.398469][T13491] bond18: left promiscuous mode
[  195.405859][T13491] bond21: left promiscuous mode
[  195.412072][T13491] bond21: left allmulticast mode
[  195.426513][ T7986] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  195.431568][ T7986] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  195.434413][ T7986] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  195.437904][ T7986] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  195.506694][ T7986] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  195.515594][ T7986] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  195.522477][ T7986] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  195.525641][ T7986] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  195.532452][T13501] xt_nfacct: accounting object `syz0' does not exist
[  195.739234][T13516] dvmrp8: entered allmulticast mode
[  195.958539][T13527] bond0: option arp_all_targets: invalid value (3)
[  195.968501][T13527] bond0 (unregistering): Released all slaves
[  196.468184][T13576] validate_nla: 1 callbacks suppressed
[  196.468195][T13576] netlink: 'syz.1.2188': attribute type 14 has an invalid length.
[  196.472241][T13573] bond25: (slave bridge33): Enslaving as an active interface with an up link
[  196.477197][T13576] netlink: 'syz.1.2188': attribute type 14 has an invalid length.
[  197.193337][T13628] syzkaller1: entered promiscuous mode
[  197.195861][T13628] syzkaller1: entered allmulticast mode
[  197.291720][T13638] can: request_module (can-proto-5) failed.
[  197.687846][T13667] 8021q: adding VLAN 0 to HW filter on device batadv0
[  197.729029][T13668] block nbd1: server does not support multiple connections per device.
[  197.736164][T13668] block nbd1: shutting down sockets
[  197.881117][T13677] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  197.943857][T13690] netlink: 'syz.1.2219': attribute type 2 has an invalid length.
[  197.955466][T13690] : entered promiscuous mode
[  198.122628][T13702] lo: Caught tx_queue_len zero misconfig
[  198.176552][T13704] syzkaller1: tun_chr_ioctl cmd 1074025677
[  198.179242][T13704] syzkaller1: linktype set to 823
[  198.991326][T13758] netlink: 'syz.2.2241': attribute type 1 has an invalid length.
[  199.038373][T13758] 8021q: adding VLAN 0 to HW filter on device bond26
[  199.345472][T13787] __nla_validate_parse: 17 callbacks suppressed
[  199.345491][T13787] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2249'.
[  199.382024][T13791] erspan0: left promiscuous mode
[  199.414033][T13791] tipc: Resetting bearer <eth:syz_tun>
[  199.500270][T13791] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  199.503882][T13791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  199.514646][T13791] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  199.554485][ T2177] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  199.557372][ T2177] bridge0: port 1(veth0_virt_wifi) entered forwarding state
[  199.627780][T13796] Cannot find del_set index 17 as target
[  199.737653][T13799] syzkaller0: entered promiscuous mode
[  199.740029][T13799] syzkaller0: entered allmulticast mode
[  200.128738][T13812] netlink: 'syz.1.2253': attribute type 1 has an invalid length.
[  201.420378][T13810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2252'.
[  201.421683][T13812] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  201.424308][T13810] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2252'.
[  201.436757][T13810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2252'.
[  201.440146][T13810] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2252'.
[  201.543104][T13822] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2254'.
[  201.574833][ T5047] udevd[5047]: worker [9394] /devices/virtual/block/nbd0 is taking a long time
[  201.585541][T13829] syzkaller0: entered allmulticast mode
[  201.591844][T13829] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  201.597237][T13829] tipc: Resetting bearer <eth:syzkaller0>
[  201.626089][T13828] tipc: Disabling bearer <eth:syzkaller0>
[  201.637978][T13831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2257'.
[  201.642159][T13831] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  201.687416][T13838] vlan5: entered allmulticast mode
[  201.689104][T13838] bond0: entered allmulticast mode
[  201.722259][T13842] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2261'.
[  201.726475][T13840] syzkaller1: entered promiscuous mode
[  201.728695][T13840] syzkaller1: entered allmulticast mode
[  201.733159][T13842] netlink: 'syz.2.2261': attribute type 11 has an invalid length.
[  201.841358][T13844] ip6gretap0: left promiscuous mode
[  201.846167][T13844] 8021q: adding VLAN 0 to HW filter on device batadv0
[  201.897628][T13844] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  201.902408][T13844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  201.910494][T13844] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  202.015509][T13844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2261'.
[  202.153347][T13861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2266'.
[  202.189770][T13861] bond23: entered promiscuous mode
[  202.191479][T13861] bond23: entered allmulticast mode
[  202.648481][T13898] syzkaller1: entered promiscuous mode
[  202.650914][T13898] syzkaller1: entered allmulticast mode
[  202.655066][T13898] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  202.708443][T13906] netlink: 'syz.0.2277': attribute type 1 has an invalid length.
[  202.743431][T13900] veth11: entered promiscuous mode
[  202.745164][T13900] veth11: entered allmulticast mode
[  203.129212][T13950] bond0: Removing last arp target with arp_interval on
[  203.178783][T13946] syzkaller0: entered promiscuous mode
[  203.180967][T13946] syzkaller0: entered allmulticast mode
[  205.294303][T13967] __nla_validate_parse: 5 callbacks suppressed
[  205.294321][T13967] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2292'.
[  205.469242][T13980] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2298'.
[  205.573247][T13983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2299'.
[  205.713058][T14003] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  205.726252][T14003] bridge0: entered allmulticast mode
[  205.741838][T14003] veth0_virt_wifi: left allmulticast mode
[  205.745774][T14003] veth0_virt_wifi: left promiscuous mode
[  205.750825][T14003] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  205.852289][T14003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2303'.
[  206.035202][T14020] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2308'.
[  206.195124][T14035] netlink: 4384 bytes leftover after parsing attributes in process `syz.0.2311'.
[  206.215872][T14037] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  206.257786][T14039] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2311'.
[  206.341841][T14048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2314'.
[  206.352386][T14048] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  206.400557][T14045] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2313'.
[  206.401681][T14057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2316'.
[  206.448086][T14057] vlan0: entered allmulticast mode
[  206.450584][T14057] bridge0: entered allmulticast mode
[  206.454578][T14057] bridge0: port 1(erspan0) entered blocking state
[  206.458061][T14057] bridge0: port 1(erspan0) entered disabled state
[  206.460724][T14057] erspan0: entered allmulticast mode
[  206.464272][T14057] erspan0: left allmulticast mode
[  206.469885][T14057] tipc: Resetting bearer <eth:syz_tun>
[  206.493270][T14059] ip6tnl2: entered allmulticast mode
[  206.579538][T14067] netlink: 'syz.0.2320': attribute type 1 has an invalid length.
[  206.630751][T14067] 8021q: adding VLAN 0 to HW filter on device bond25
[  206.646051][   T13] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  206.649861][   T13] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  206.667611][ T5671] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  206.880755][T14098] vlan3: entered allmulticast mode
[  206.884374][T14098] bridge10: entered allmulticast mode
[  206.889082][T14098] bridge10: port 1(erspan0) entered blocking state
[  206.891702][T14098] bridge10: port 1(erspan0) entered disabled state
[  206.894584][T14098] erspan0: entered allmulticast mode
[  206.899163][T14098] erspan0: left allmulticast mode
[  206.948026][ T5671] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  206.959244][T14103] netlink: 'syz.2.2330': attribute type 1 has an invalid length.
[  206.987784][T14109] xt_hashlimit: size too large, truncated to 1048576
[  206.996675][T14103] 8021q: adding VLAN 0 to HW filter on device bond27
[  207.089002][T14119] xt_hashlimit: size too large, truncated to 1048576
[  207.167725][ T5671] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  207.552668][T14158] xt_hashlimit: size too large, truncated to 1048576
[  207.561232][T14165] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[  207.799167][T14188] vlan1: entered allmulticast mode
[  207.801435][T14188] bond0: entered allmulticast mode
[  207.841064][T14193] netlink: 'syz.1.2354': attribute type 1 has an invalid length.
[  207.878078][T14193] 8021q: adding VLAN 0 to HW filter on device bond24
[  207.909016][T14193] veth13: entered allmulticast mode
[  207.916087][T14193] bond24: (slave veth13): Enslaving as an active interface with an up link
[  207.940147][T14193] bond24 (unregistering): (slave veth13): Releasing backup interface
[  207.947406][T14193] bond24 (unregistering): Released all slaves
[  208.028141][T14208] batadv0: entered promiscuous mode
[  208.034165][T14208] macvtap4: entered promiscuous mode
[  208.036736][T14208] macvtap4: entered allmulticast mode
[  208.038891][T14208] batadv0: entered allmulticast mode
[  208.042124][T14208] 8021q: adding VLAN 0 to HW filter on device macvtap4
[  208.048432][T14208] batadv0: left allmulticast mode
[  208.051425][T14208] batadv0: left promiscuous mode
[  208.406895][T14244] bond26: option miimon: invalid value (18446744073709551615)
[  208.409230][T14244] bond26: option miimon: allowed values 0 - 2147483647
[  208.412590][T14244] bond26 (unregistering): Released all slaves
[  208.472471][T14244] bond26: option miimon: invalid value (18446744073709551615)
[  208.475184][T14244] bond26: option miimon: allowed values 0 - 2147483647
[  208.479179][T14244] bond26 (unregistering): Released all slaves
[  208.560581][T14244] bond26: option miimon: invalid value (18446744073709551615)
[  208.563038][T14244] bond26: option miimon: allowed values 0 - 2147483647
[  208.566286][T14244] bond26 (unregistering): Released all slaves
[  208.668256][T14244] bond26: option miimon: invalid value (18446744073709551615)
[  208.673924][T14244] bond26: option miimon: allowed values 0 - 2147483647
[  208.681873][T14244] bond26 (unregistering): Released all slaves
[  208.766281][T14244] bond26: option miimon: invalid value (18446744073709551615)
[  208.771631][T14244] bond26: option miimon: allowed values 0 - 2147483647
[  208.778610][T14244] bond26 (unregistering): Released all slaves
[  208.799847][T14257] netlink: 'syz.1.2370': attribute type 1 has an invalid length.
[  208.872951][T14257] 8021q: adding VLAN 0 to HW filter on device bond24
[  208.896263][T14244] bond26: option miimon: invalid value (18446744073709551615)
[  208.898929][T14244] bond26: option miimon: allowed values 0 - 2147483647
[  208.901978][T14244] bond26 (unregistering): Released all slaves
[  208.953511][T14267] bond24: (slave geneve4): making interface the new active one
[  208.960030][T14267] bond24: (slave geneve4): Enslaving as an active interface with an up link
[  209.003337][T14244] bond26: option miimon: invalid value (18446744073709551615)
[  209.005937][T14244] bond26: option miimon: allowed values 0 - 2147483647
[  209.014357][T14244] bond26 (unregistering): Released all slaves
[  209.056802][ T5650] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  209.059668][ T5650] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  209.065280][ T5650] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  209.068482][ T5650] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  209.128630][T14244] bond26: option miimon: invalid value (18446744073709551615)
[  209.135596][T14244] bond26: option miimon: allowed values 0 - 2147483647
[  209.160820][T14244] bond26 (unregistering): Released all slaves
[  209.365296][T14275] macvlan6: entered promiscuous mode
[  209.367423][T14275] gretap0: entered promiscuous mode
[  209.370892][T14275] gretap0: left promiscuous mode
[  209.401892][T14278] xt_hashlimit: overflow, try lower: 0/0
[  209.443241][T14280] sit0: entered promiscuous mode
[  209.558626][T14283] block nbd1: server does not support multiple connections per device.
[  209.564217][T14283] block nbd1: shutting down sockets
[  209.761815][T14307] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  209.773488][T14304] 8021q: adding VLAN 0 to HW filter on device bond28
[  209.777555][T14304] bridge0: port 2(bond28) entered blocking state
[  209.780369][T14304] bridge0: port 2(bond28) entered disabled state
[  209.784101][T14304] bond28: entered allmulticast mode
[  209.789303][T14304] bond28: entered promiscuous mode
[  209.791733][T14304] bond22: entered promiscuous mode
[  209.794492][T14304] bridge0: port 2(bond28) entered blocking state
[  209.797166][T14304] bridge0: port 2(bond28) entered forwarding state
[  209.804487][   T27] bridge0: port 2(bond28) entered disabled state
[  210.526602][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  210.552112][T14324] ipvlan2: entered promiscuous mode
[  210.555167][T14324] bridge0: port 3(ipvlan2) entered blocking state
[  210.560272][T14324] bridge0: port 3(ipvlan2) entered disabled state
[  210.563373][T14324] ipvlan2: entered allmulticast mode
[  210.565733][T14324] bridge0: entered allmulticast mode
[  210.571841][T14324] ipvlan2: left allmulticast mode
[  210.574305][T14324] bridge0: left allmulticast mode
[  210.627913][T14326] __nla_validate_parse: 47 callbacks suppressed
[  210.627930][T14326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2390'.
[  210.658749][T14327] ipvlan2: entered promiscuous mode
[  210.663943][T14327] bridge0: port 3(ipvlan2) entered blocking state
[  210.667208][T14327] bridge0: port 3(ipvlan2) entered disabled state
[  210.670682][T14327] ipvlan2: entered allmulticast mode
[  210.673134][T14327] bridge0: entered allmulticast mode
[  210.675826][T14331] xt_nfacct: accounting object `syz0' does not exist
[  210.680481][T14327] ipvlan2: left allmulticast mode
[  210.688666][T14327] bridge0: left allmulticast mode
[  210.769353][T14337] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  210.875288][T14351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2397'.
[  210.880685][T14351] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  210.886153][T14352] netlink: 'syz.2.2396': attribute type 1 has an invalid length.
[  210.955644][T14352] workqueue: Failed to create a rescuer kthread for wq "bond29": -EINTR
[  210.976962][T14361] netlink: 'syz.0.2399': attribute type 16 has an invalid length.
[  210.984389][T14361] netlink: 'syz.0.2399': attribute type 17 has an invalid length.
[  211.027547][ T5671] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  211.063450][T14368] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2401'.
[  211.098635][T14368] ip_tables: iptables: counters copy to user failed while replacing table
[  211.178358][T14379] smc: net device vlan1 applied user defined pnetid SYZ2
[  211.195914][T14381] netlink: 'syz.0.2405': attribute type 1 has an invalid length.
[  211.231853][T14381] bond26: entered promiscuous mode
[  211.233810][T14381] 8021q: adding VLAN 0 to HW filter on device bond26
[  211.238940][T14384] veth1_to_bond: entered allmulticast mode
[  211.249705][T14381] 8021q: adding VLAN 0 to HW filter on device bond26
[  211.252798][T14381] bond26: (slave ip6gre2): The slave device specified does not support setting the MAC address
[  211.256211][T14381] bond26: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode
[  211.265277][T14381] bond26: (slave ip6gre2): making interface the new active one
[  211.270571][T14381] ip6gre2: entered promiscuous mode
[  211.274639][T14381] bond26: (slave ip6gre2): Enslaving as an active interface with an up link
[  211.302674][T14384] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0
[  211.307208][T14384] veth1_to_bond: entered promiscuous mode
[  211.310244][T14384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2407'.
[  211.328716][T14384] veth1_to_bond (unregistering): left allmulticast mode
[  211.333917][T14384] veth1_to_bond (unregistering): left promiscuous mode
[  211.357234][T14391] ip_tunnel_core: Dead loop on virtual device ipip2 (net 27), fix it urgently!
[  211.364621][T14391] ip_tunnel_core: Dead loop on virtual device ipip2 (net 27), fix it urgently!
[  211.371909][T14391] ip_tunnel_core: Dead loop on virtual device ipip2 (net 27), fix it urgently!
[  211.375492][T14391] ip_tunnel_core: Dead loop on virtual device ipip2 (net 27), fix it urgently!
[  211.381600][T14391] ip_tunnel_core: Dead loop on virtual device ipip2 (net 27), fix it urgently!
[  211.385638][T14391] ip_tunnel_core: Dead loop on virtual device ipip2 (net 27), fix it urgently!
[  211.392413][T14391] ip_tunnel_core: Dead loop on virtual device ipip2 (net 27), fix it urgently!
[  211.397595][ T5671] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  211.401508][T14391] ip_tunnel_core: Dead loop on virtual device ipip2 (net 27), fix it urgently!
[  212.161552][T14416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2415'.
[  212.169943][T14416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2415'.
[  212.172328][T14391] syz.0.2409 (14391) used greatest stack depth: 17648 bytes left
[  212.263898][T14425] netlink: 'syz.0.2418': attribute type 1 has an invalid length.
[  212.299345][T14425] bond27: (slave geneve4): making interface the new active one
[  212.304576][T14425] bond27: (slave geneve4): Enslaving as an active interface with an up link
[  212.317018][ T7986] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  212.320174][ T7986] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  212.325753][ T7986] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  212.331736][ T7986] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  212.412763][T14440] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode
[  212.415045][T14440] mac80211_hwsim hwsim34 wlan0: entered allmulticast mode
[  212.494099][T14451] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2424'.
[  212.513803][T14452] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2426'.
[  212.611636][T14459] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2429'.
[  212.634547][T14469] xt_nfacct: accounting object `syz0' does not exist
[  212.911630][T14490] netlink: 'syz.0.2436': attribute type 1 has an invalid length.
[  212.943062][T14490] 8021q: adding VLAN 0 to HW filter on device bond28
[  212.980117][T14490] bond28: (slave veth17): Enslaving as an active interface with a down link
[  212.986184][T14490] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2436'.
[  213.160661][T14507] netlink: 'syz.0.2440': attribute type 21 has an invalid length.
[  213.170471][T14507] netlink: 'syz.0.2440': attribute type 5 has an invalid length.
[  213.273564][T14511] sit0: left promiscuous mode
[  213.290332][T14511] tipc: Resetting bearer <eth:syz_tun>
[  213.568259][T14511] veth11: left promiscuous mode
[  213.572170][T14511] veth11: left allmulticast mode
[  213.589608][T14511] vlan0: left allmulticast mode
[  213.594486][T14511] bridge0: left allmulticast mode
[  213.600651][T14511] vlan1: left allmulticast mode
[  213.604973][T14511] bond0: left allmulticast mode
[  213.607966][T14511] veth13: left allmulticast mode
[  213.638509][ T7986] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  213.649472][ T7986] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  213.661991][ T7986] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  213.671659][ T7986] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  213.914393][T14551] team_slave_1: Caught tx_queue_len zero misconfig
[  213.939947][T14536] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  214.157409][T14566] sctp: [Deprecated]: syz.2.2454 (pid 14566) Use of int in max_burst socket option deprecated.
[  214.157409][T14566] Use struct sctp_assoc_value instead
[  214.397518][T14586] syzkaller0: entered promiscuous mode
[  214.399268][T14586] syzkaller0: entered allmulticast mode
[  214.435879][T14590] xt_cgroup: xt_cgroup: no path or classid specified
[  214.545687][T14599] xt_CONNSECMARK: invalid mode: 254
[  214.611761][T14606] netlink: 'syz.0.2461': attribute type 1 has an invalid length.
[  214.779631][T14617] netlink: 'syz.2.2469': attribute type 9 has an invalid length.
[  215.823914][T14685] __nla_validate_parse: 10 callbacks suppressed
[  215.823929][T14685] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2488'.
[  215.831351][T14685] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2488'.
[  215.834989][T14685] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2488'.
[  216.117806][T14706] syzkaller0: entered promiscuous mode
[  216.120622][T14706] syzkaller0: entered allmulticast mode
[  216.127720][T14706] syzkaller0: tun_net_xmit 14
[  216.253222][T14711] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2496'.
[  216.255975][T14711] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2496'.
[  216.375444][T14717] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  216.475697][T14726] netlink: 'syz.0.2501': attribute type 1 has an invalid length.
[  216.522459][T14726] veth19: entered allmulticast mode
[  216.528842][T14726] bond30: (slave veth19): Enslaving as an active interface with a down link
[  216.538946][T14726] bond30: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  216.580054][T14731] syzkaller1: tun_chr_ioctl cmd 1074813040
[  216.582418][T14731] netlink: 'syz.0.2503': attribute type 4 has an invalid length.
[  216.584886][T14731] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2503'.
[  216.590739][T14731] syzkaller1: tun_chr_ioctl cmd 1074025677
[  216.593371][T14731] syzkaller1: linktype set to 768
[  216.837386][T14747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2508'.
[  216.866267][T14749] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2509'.
[  216.995188][T14755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2511'.
[  217.055366][T14755] bond25: (slave ip6tnl6): The slave device specified does not support setting the MAC address
[  217.068887][T14755] bond25: (slave ip6tnl6): Error -95 calling set_mac_address
[  217.173348][T14776] bond31: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  217.178261][T14776] bond31 (unregistering): Released all slaves
[  217.327199][T14790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2519'.
[  217.431495][T13401] bridge0: entered promiscuous mode
[  217.533742][T14813] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  218.027389][T14847] net_ratelimit: 1016 callbacks suppressed
[  218.027405][T14847] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  218.686593][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  218.724044][T14872] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  218.734042][T14874] veth14: entered allmulticast mode
[  218.746877][T14872] ipt_ECN: cannot use operation on non-tcp rule
[  218.910398][T14888] netlink: 'syz.1.2545': attribute type 1 has an invalid length.
[  218.935901][T14888] 8021q: adding VLAN 0 to HW filter on device bond26
[  219.388922][T14915] mac80211_hwsim hwsim34 wlan0: left promiscuous mode
[  219.392212][T14915] mac80211_hwsim hwsim34 wlan0: left allmulticast mode
[  219.395813][T14915] netlink: 'syz.0.2554': attribute type 11 has an invalid length.
[  219.852348][T14947] bond22: left promiscuous mode
[  219.858590][T14947] ipip2: left promiscuous mode
[  219.876933][T14947] bond23: left promiscuous mode
[  219.910453][T14947] bond26: left promiscuous mode
[  219.916811][T14947] ip6gre2: left promiscuous mode
[  219.955496][T14954] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[  220.020772][T14965] bond29: option resend_igmp: invalid value (2878)
[  220.023020][T14965] bond29: option resend_igmp: allowed values 0 - 255
[  220.027221][T14965] bond29 (unregistering): Released all slaves
[  220.046857][ T5650] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  220.049483][ T5650] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  220.052623][ T5650] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  220.055250][ T5650] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  220.079700][T14971] openvswitch: netlink: EtherType 300 is less than min 600
[  220.156208][T14981] xt_l2tp: v2 tid > 0xffff: 37482740
[  220.205669][T14989] xt_nfacct: accounting object `syz0' does not exist
[  220.278131][T14996] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[  220.372626][T15001] 8021q: VLANs not supported on wg0
[  220.384593][T15001] x_tables: duplicate underflow at hook 1
[  220.591250][T15029] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  220.688106][T15027] : renamed from vlan0
[  220.690977][T15027] tipc: Disabling bearer <eth:vlan0>
[  220.805706][T15037] ipip2: entered promiscuous mode
[  220.874918][T15059] __nla_validate_parse: 19 callbacks suppressed
[  220.874929][T15059] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2598'.
[  220.875469][T15061] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2598'.
[  220.878626][T15043] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2595'.
[  220.889936][T15058] netlink: 'syz.0.2598': attribute type 16 has an invalid length.
[  220.892602][T15058] netlink: 'syz.0.2598': attribute type 17 has an invalid length.
[  220.894260][T15043] 0: renamed from hsr0 (while UP)
[  220.898860][T15043] 0: entered allmulticast mode
[  220.900377][T15043] hsr_slave_0: entered allmulticast mode
[  220.902118][T15043] hsr_slave_1: entered allmulticast mode
[  220.904161][T15043] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  220.951697][T15058] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  220.958631][T15058] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  221.028634][T15070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2601'.
[  221.031458][T15070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2601'.
[  221.034395][T15070] netlink: 'syz.1.2601': attribute type 12 has an invalid length.
[  221.039821][T15070] netlink: 'syz.1.2601': attribute type 11 has an invalid length.
[  221.053722][T15068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2600'.
[  221.059693][T15068] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  221.085196][T15074] netlink: 'syz.1.2603': attribute type 1 has an invalid length.
[  221.101097][T15074] bond27: entered promiscuous mode
[  221.104047][T15074] 8021q: adding VLAN 0 to HW filter on device bond27
[  221.148980][T15074] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2603'.
[  221.244212][T15081] syzkaller1: entered promiscuous mode
[  221.245918][T15081] syzkaller1: entered allmulticast mode
[  221.251927][   T53] block nbd0: Possible stuck request ffff88810acf0000: control (read@0,1024B). Runtime 90 seconds
[  221.256120][   T53] block nbd0: Possible stuck request ffff88810acf0200: control (read@1024,1024B). Runtime 90 seconds
[  221.263711][   T53] block nbd0: Possible stuck request ffff88810acf0400: control (read@2048,1024B). Runtime 90 seconds
[  221.268547][   T53] block nbd0: Possible stuck request ffff88810acf0600: control (read@3072,1024B). Runtime 90 seconds
[  221.378683][T15092] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2608'.
[  221.394990][T15092] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  221.413069][T15090] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  221.417949][T15090] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  221.617033][T15107] xt_ipcomp: unknown flags 1D
[  221.643908][T15109] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2613'.
[  221.908218][T15122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2617'.
[  221.912046][T15122] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  222.356876][T15142] erspan0: entered promiscuous mode
[  222.644755][T15164] netlink: 'syz.2.2631': attribute type 1 has an invalid length.
[  222.658674][T15164] bond29: entered promiscuous mode
[  222.664719][T15164] 8021q: adding VLAN 0 to HW filter on device bond29
[  222.699838][T15169] ovs-system: entered promiscuous mode
[  222.944694][T15185] IPVS: Unknown mcast interface: netdevsim0
[  223.034875][T15194] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check.
[  223.248421][T15209] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  223.925670][T15279] netlink: 'syz.1.2661': attribute type 16 has an invalid length.
[  223.941840][T15279] netlink: 'syz.1.2661': attribute type 17 has an invalid length.
[  224.517897][T15304] netlink: 'syz.2.2667': attribute type 10 has an invalid length.
[  224.520507][T15304] openvswitch: netlink: Flow key attr not present in new flow.
[  225.021134][T15315] bond31: entered promiscuous mode
[  225.367780][T15333] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  225.745801][T15340] vlan0: entered promiscuous mode
[  225.748280][T15340] bridge0: entered promiscuous mode
[  225.895770][T15351] __nla_validate_parse: 21 callbacks suppressed
[  225.895788][T15351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2682'.
[  225.925796][T15351] bond28: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  225.930937][T15351] bond28 (unregistering): Released all slaves
[  226.162774][T15360] openvswitch: netlink: Message has 8 unknown bytes.
[  226.181171][T15366] netlink: 'syz.2.2684': attribute type 13 has an invalid length.
[  226.182360][T15367] netlink: 'syz.2.2684': attribute type 13 has an invalid length.
[  226.194926][T15366] netlink: 'syz.2.2684': attribute type 13 has an invalid length.
[  226.203536][T15367] netlink: 'syz.2.2684': attribute type 13 has an invalid length.
[  226.207325][ T7986] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  226.213660][ T7986] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  226.218015][ T7986] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  226.222542][ T7986] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  226.260473][T15371] netlink: 'syz.2.2686': attribute type 1 has an invalid length.
[  226.263896][T15371] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2686'.
[  226.426007][T15392] netlink: 'syz.2.2691': attribute type 1 has an invalid length.
[  226.443478][T15392] 8021q: adding VLAN 0 to HW filter on device bond30
[  226.469789][T15393] bond30: (slave veth12): Enslaving as an active interface with a down link
[  226.489937][T15392] bond30: (slave veth14): Enslaving as an active interface with a down link
[  226.501356][T15393] 8021q: adding VLAN 0 to HW filter on device batadv2
[  226.505415][T15393] bond30: (slave batadv2): making interface the new active one
[  226.509362][T15393] batadv2: entered promiscuous mode
[  226.511897][T15393] bond30: (slave batadv2): Enslaving as an active interface with an up link
[  226.535564][T15392] bond30 (unregistering): (slave veth12): Releasing active interface
[  226.543527][T15392] bond30 (unregistering): (slave veth14): Releasing active interface
[  226.553545][T15392] bond30 (unregistering): (slave batadv2): Releasing active interface
[  226.561154][T15392] bond30 (unregistering): Released all slaves
[  226.654519][T15398] netlink: 'syz.0.2692': attribute type 11 has an invalid length.
[  226.747208][T15404] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2694'.
[  226.870768][T15411] bond28 (unregistering): Released all slaves
[  227.381768][T15421] netlink: 'syz.0.2699': attribute type 1 has an invalid length.
[  227.408239][T15421] 8021q: adding VLAN 0 to HW filter on device bond32
[  227.430796][T15422] 8021q: adding VLAN 0 to HW filter on device batadv6
[  227.442237][T15422] bond32: (slave batadv6): making interface the new active one
[  227.453239][T15422] bond32: (slave batadv6): Enslaving as an active interface with an up link
[  227.469023][T15421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2699'.
[  227.472672][T15421] block nbd1: Unsupported socket: should be TCP or UNIX.
[  227.548760][T15425] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2700'.
[  227.619713][T15428] bond33: entered promiscuous mode
[  227.621658][T15428] 8021q: adding VLAN 0 to HW filter on device bond33
[  227.624441][T15428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2701'.
[  227.685374][T15437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2703'.
[  227.692769][T15437] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2703'.
[  227.711228][T15439] ip6tnl0: Caught tx_queue_len zero misconfig
[  227.720690][T15439] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2704'.
[  227.723947][T15439] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2704'.
[  227.777164][T15442] atomic_op ffff8881ab7af198 conn xmit_atomic 0000000000000000
[  229.057387][T15487] pim6reg: left allmulticast mode
[  229.144162][T15492] validate_nla: 4 callbacks suppressed
[  229.144181][T15492] netlink: 'syz.2.2717': attribute type 1 has an invalid length.
[  229.176967][T15492] 8021q: adding VLAN 0 to HW filter on device bond30
[  229.188705][T15492] bond30: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  229.195835][T15492] bond30: entered promiscuous mode
[  229.198812][T15492] bond30: entered allmulticast mode
[  229.302546][T15506] 8021q: adding VLAN 0 to HW filter on device batadv2
[  229.473015][T15514] openvswitch: netlink: Message has 34 unknown bytes.
[  229.557445][T15523] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  229.671450][T15531] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  232.739046][T15546] netlink: 'syz.0.2732': attribute type 2 has an invalid length.
[  232.745455][T15546] : entered promiscuous mode
[  232.784093][T15552] __nla_validate_parse: 206 callbacks suppressed
[  232.784110][T15552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2735'.
[  232.805919][T15557] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2736'.
[  232.880655][T15563] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  233.059262][T15571] batman_adv: batadv0: Adding interface: macvtap1
[  233.061355][T15571] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  233.071028][T15571] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  233.095858][T15574] batman_adv: batadv0: Adding interface: macvtap2
[  233.101538][T15574] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  233.113096][T15574] batman_adv: batadv0: Not using interface macvtap2 (retrying later): interface not active
[  233.157973][T15582] netlink: 'syz.2.2741': attribute type 1 has an invalid length.
[  233.203046][T15582] bond31: entered promiscuous mode
[  233.209366][T15582] 8021q: adding VLAN 0 to HW filter on device bond31
[  233.276010][T15592] openvswitch: netlink: IP tunnel dst address not specified
[  233.285147][T15592] netlink: 'syz.2.2743': attribute type 21 has an invalid length.
[  233.289537][T15592] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2743'.
[  233.292394][T15592] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2743'.
[  233.704794][T15629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2752'.
[  233.710433][T15629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2752'.
[  233.714699][T15629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2752'.
[  233.970604][T15643] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2756'.
[  233.985953][T15645] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2757'.
[  233.994654][T15645] gretap0: entered promiscuous mode
[  234.004024][T15645] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2757'.
[  234.007930][T15645] 0{X: renamed from gretap0
[  234.011645][T15645] 0{X: left promiscuous mode
[  234.013370][T15645] 0{X: entered allmulticast mode
[  234.017012][T15645] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  234.111147][T15652] nbd: must specify an index to disconnect
[  234.164768][T15654] bond34: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  234.170537][T15654] bond34 (unregistering): Released all slaves
[  234.429144][T15669] netlink: 'syz.1.2765': attribute type 2 has an invalid length.
[  234.439147][T15669] : entered promiscuous mode
[  234.540650][T15676] netlink: 'syz.1.2767': attribute type 8 has an invalid length.
[  234.680834][T15686] 8021q: adding VLAN 0 to HW filter on device batadv0
[  234.700344][T15686] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  234.703557][T15686] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  234.708955][T15686] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  234.724848][T15685] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[  235.495728][T15712] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  235.537562][T15714] veth1_to_bridge: Caught tx_queue_len zero misconfig
[  235.541076][T15714] batadv_slave_0: Caught tx_queue_len zero misconfig
[  235.571431][T15720] netlink: 'syz.2.2780': attribute type 1 has an invalid length.
[  235.590379][T15720] 8021q: adding VLAN 0 to HW filter on device bond32
[  235.615741][T15720] bond32: (slave veth16): Enslaving as an active interface with a down link
[  235.628676][T15720] 8021q: adding VLAN 0 to HW filter on device batadv3
[  235.633674][T15720] bond32: (slave batadv3): making interface the new active one
[  235.637381][T15720] batadv3: entered promiscuous mode
[  235.639573][T15720] bond32: (slave batadv3): Enslaving as an active interface with an up link
[  235.686143][T15720] bond32: (slave veth18): Enslaving as an active interface with a down link
[  235.733211][T15730] netlink: 'syz.2.2782': attribute type 3 has an invalid length.
[  235.912216][T15750] IPVS: set_ctl: invalid protocol: 29 172.30.0.3:20000
[  235.921535][T15750] bridge0: entered allmulticast mode
[  236.013374][T15758] syzkaller0: entered promiscuous mode
[  236.015232][T15758] syzkaller0: entered allmulticast mode
[  236.020449][T15758] netlink: 'syz.2.2790': attribute type 10 has an invalid length.
[  236.165762][T15763] tc_dump_action: action bad kind
[  236.207868][T15765] openvswitch: netlink: Flow actions attr not present in new flow.
[  236.254349][T15769] netlink: 'syz.2.2794': attribute type 18 has an invalid length.
[  236.579728][T15779] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  236.744465][T15803] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[  237.322954][T15824] 8021q: adding VLAN 0 to HW filter on device bond28
[  237.620292][T15841] netlink: 'syz.0.2813': attribute type 1 has an invalid length.
[  237.653489][T15841] 8021q: adding VLAN 0 to HW filter on device bond35
[  237.768311][T15855] vti1: entered promiscuous mode
[  237.794021][T15844] netlink: 'syz.2.2814': attribute type 4 has an invalid length.
[  237.803767][T15844] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  237.859481][T15865] openvswitch: netlink: Duplicate or invalid key (type 0).
[  238.086659][T15877] bridge35: entered promiscuous mode
[  238.088990][T15877] bridge35: entered allmulticast mode
[  238.182531][T15889] netlink: 'syz.2.2827': attribute type 1 has an invalid length.
[  238.202113][T15896] netlink: 'syz.0.2825': attribute type 1 has an invalid length.
[  238.213024][T15889] 8021q: adding VLAN 0 to HW filter on device bond34
[  238.259076][T15896] 8021q: adding VLAN 0 to HW filter on device bond36
[  238.273598][T15896] veth21: entered allmulticast mode
[  238.281662][T15896] bond36: (slave veth21): Enslaving as an active interface with an up link
[  238.294298][T15902] __nla_validate_parse: 28 callbacks suppressed
[  238.294310][T15902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2829'.
[  238.315918][T15896] bond36 (unregistering): (slave veth21): Releasing backup interface
[  238.335711][T15896] bond36 (unregistering): Released all slaves
[  238.415017][T15911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2832'.
[  238.437222][T15911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2832'.
[  238.443851][T15911] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[  238.455465][T15911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2832'.
[  238.461801][T15917] xt_nfacct: accounting object `syz0' does not exist
[  238.498986][T15911] hsr_slave_1 (unregistering): left promiscuous mode
[  238.542640][T15925] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2837'.
[  238.684091][T15940] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2843'.
[  238.693701][T15940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2843'.
[  238.910816][T15962] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2850'.
[  239.135431][T15966] veth20: entered promiscuous mode
[  239.180517][T15968] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2852'.
[  239.189335][T15968] 8021q: adding VLAN 0 to HW filter on device bond35
[  239.468551][T15985] validate_nla: 7 callbacks suppressed
[  239.468565][T15985] netlink: 'syz.1.2856': attribute type 12 has an invalid length.
[  239.475407][T15982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2856'.
[  239.517182][T15987] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  239.543397][T15990] netlink: 'syz.1.2858': attribute type 1 has an invalid length.
[  239.616764][T15990] bridge10: entered promiscuous mode
[  239.628038][T15990] bond29: (slave bridge10): making interface the new active one
[  239.638178][T15990] bond29: (slave bridge10): Enslaving as an active interface with an up link
[  239.659334][T15990] bridge11: entered promiscuous mode
[  239.671159][T15990] bond29: (slave bridge11): Enslaving as a backup interface with an up link
[  239.681322][T15999] pimreg: entered allmulticast mode
[  239.684934][ T5343] netdevsim netdevsim1 netdevsim3: default qdisc (pfifo_fast) fail, fallback to noqueue
[  239.689236][ T5343] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  239.698983][T15998] pimreg: left allmulticast mode
[  239.921298][T16024] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  240.240738][T16045] xt_nfacct: accounting object `syz0' does not exist
[  240.368417][T16048] netlink: 'syz.0.2880': attribute type 9 has an invalid length.
[  240.394138][T16048] bond36 (unregistering): Released all slaves
[  240.425817][T16060] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  240.431296][T16071] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  240.545350][T16080] 1{X: entered promiscuous mode
[  240.554786][T16080] macvlan3: entered promiscuous mode
[  240.560890][T16080] 1{X: left promiscuous mode
[  240.713487][T16098] ipvlan0: entered promiscuous mode
[  240.719163][T16098] bridge0: port 1(ipvlan0) entered blocking state
[  240.721513][T16098] bridge0: port 1(ipvlan0) entered disabled state
[  240.724276][T16098] ipvlan0: entered allmulticast mode
[  240.729142][T16098] bridge0: entered allmulticast mode
[  240.732354][T16098] ipvlan0: left allmulticast mode
[  240.734141][T16098] bridge0: left allmulticast mode
[  240.796055][T16101] 1: renamed from c0 (while UP)
[  240.802120][T16101] A link change request failed with some changes committed already. Interface c1 may have been left with an inconsistent configuration, please check.
[  240.858368][T16107] netlink: 'syz.1.2898': attribute type 1 has an invalid length.
[  240.872461][T16109] tun0: tun_chr_ioctl cmd 1074025675
[  240.876198][T16109] tun0: persist enabled
[  240.880408][T16109] tun0: tun_chr_ioctl cmd 1074025675
[  240.885002][T16109] tun0: persist disabled
[  241.015848][T16119] syzkaller1: entered promiscuous mode
[  241.018584][T16119] syzkaller1: entered allmulticast mode
[  241.023143][T16119] lo speed is unknown, defaulting to 1000
[  241.025607][T16119] lo speed is unknown, defaulting to 1000
[  241.030691][T16119] lo speed is unknown, defaulting to 1000
[  241.033907][T16119] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  241.042740][T16119] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  241.051602][T16119] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  241.078229][T16119] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  241.129058][T16119] lo speed is unknown, defaulting to 1000
[  241.134535][T16119] lo speed is unknown, defaulting to 1000
[  241.140565][T16119] lo speed is unknown, defaulting to 1000
[  241.602781][T16148] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  241.611162][ T5671] lo speed is unknown, defaulting to 1000
[  241.781049][T16170] xt_nfacct: accounting object `syz0' does not exist
[  241.976124][T16198] netlink: 'syz.2.2926': attribute type 1 has an invalid length.
[  242.009622][T16198] 8021q: adding VLAN 0 to HW filter on device bond37
[  242.409963][T16239] syzkaller0: entered promiscuous mode
[  242.412311][T16239] syzkaller0: entered allmulticast mode
[  242.584114][T16256] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[  242.909462][T16271] macsec3: entered promiscuous mode
[  242.963364][T16274] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  243.176919][T16304] bridge0: left allmulticast mode
[  243.272847][T16310] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  243.424502][T16321] bond28: left allmulticast mode
[  243.433361][T16321] bond28: left promiscuous mode
[  243.435755][T16321] bridge0: port 2(bond28) entered disabled state
[  243.441722][T16321] bond22: left allmulticast mode
[  243.446128][T16321] bond22: left promiscuous mode
[  243.450671][T16321] bridge0: port 1(bond22) entered disabled state
[  243.512204][T16328] netlink: 'syz.0.2962': attribute type 2 has an invalid length.
[  243.542160][T16328] 8021q: VLANs not supported on ip6_vti0
[  243.828700][T16341] netlink: 'syz.2.2967': attribute type 1 has an invalid length.
[  243.851841][T16341] bond38: entered promiscuous mode
[  243.854570][T16341] 8021q: adding VLAN 0 to HW filter on device bond38
[  244.020047][T16346] __nla_validate_parse: 22 callbacks suppressed
[  244.020067][T16346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2969'.
[  244.083402][T16350] netlink: 'syz.2.2970': attribute type 12 has an invalid length.
[  244.091992][T16350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2970'.
[  244.244918][T16354] bond39: option xmit_hash_policy: invalid value (10)
[  244.249707][T16354] bond39 (unregistering): Released all slaves
[  244.333571][T16360] bridge0: entered allmulticast mode
[  244.481278][T16366] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0
[  244.493621][T16366] batman_adv: batadv0: Adding interface: gretap0
[  244.496296][T16366] batman_adv: batadv0: The MTU of interface gretap0 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  244.507838][T16366] batman_adv: batadv0: Interface activated: gretap0
[  244.777908][T16378] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  244.823334][T16386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2981'.
[  244.890430][T16388] erspan0: left promiscuous mode
[  244.910980][T16388] ipip2: left promiscuous mode
[  244.915912][T16388] bond27: left promiscuous mode
[  244.939228][T16388] bridge10: left promiscuous mode
[  244.946017][T16388] bridge11: left promiscuous mode
[  244.949511][    T9] lo speed is unknown, defaulting to 1000
[  244.952224][    T9] syz2: Port: 1 Link DOWN
[  245.134184][T16395] syzkaller0: entered promiscuous mode
[  245.136209][T16395] syzkaller0: entered allmulticast mode
[  245.266935][T16397] bond39: Unable to set peer notification delay as MII monitoring is disabled
[  245.273101][T16397] bond39 (unregistering): Released all slaves
[  245.457696][T16415] netlink: 'syz.2.2990': attribute type 2 has an invalid length.
[  245.460806][T16415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2990'.
[  245.696157][T16430] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2996'.
[  245.706906][T16430] tipc: Enabling of bearer <utp:s> rejected, media not registered
[  245.722187][T16425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2993'.
[  245.730360][T16425] netlink: 'syz.2.2993': attribute type 1 has an invalid length.
[  245.870111][T16438] netlink: 'syz.2.2998': attribute type 2 has an invalid length.
[  245.874235][T16438] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2998'.
[  246.138249][T16446] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2999'.
[  246.183979][T16430] bond31: left promiscuous mode
[  246.209929][T16430] bond33: left promiscuous mode
[  246.228114][T16430] vti1: left promiscuous mode
[  246.236084][T16430] batman_adv: batadv0: Interface deactivated: gretap0
[  246.255857][T16441] syzkaller0: left promiscuous mode
[  246.260134][T16441] syzkaller0: left allmulticast mode
[  246.333987][T16450] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3000'.
[  246.404873][T16455] bond31 (unregistering): Released all slaves
[  246.690064][T16489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3009'.
[  246.762422][T16472] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  246.767603][T16472] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  246.780233][T16472] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  246.797759][T13399] lo speed is unknown, defaulting to 1000
[  246.809049][T13399] syz2: Port: 1 Link ACTIVE
[  246.931147][T16501] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  246.970949][T16504] sctp: [Deprecated]: syz.2.3012 (pid 16504) Use of int in max_burst socket option.
[  246.970949][T16504] Use struct sctp_assoc_value instead
[  247.016957][ T7986] batadv3: left promiscuous mode
[  247.356834][T16532] syzkaller1: entered promiscuous mode
[  247.359211][T16532] syzkaller1: entered allmulticast mode
[  247.448652][T16540] openvswitch: netlink: IP tunnel TTL not specified.
[  247.451138][T16540] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  247.539167][T16546] netlink: 'syz.1.3026': attribute type 1 has an invalid length.
[  247.574141][T16546] bond31: entered promiscuous mode
[  247.578564][T16546] 8021q: adding VLAN 0 to HW filter on device bond31
[  247.582794][T16548] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  247.610998][T16546] 8021q: adding VLAN 0 to HW filter on device bond31
[  247.614048][T16546] bond31: (slave ipip3): The slave device specified does not support setting the MAC address
[  247.618958][T16546] bond31: (slave ipip3): Setting fail_over_mac to active for active-backup mode
[  247.626656][T16546] bond31: (slave ipip3): making interface the new active one
[  247.629616][T16546] ipip3: entered promiscuous mode
[  247.633037][T16546] bond31: (slave ipip3): Enslaving as an active interface with an up link
[  247.692191][T16556] netlink: 'syz.1.3029': attribute type 1 has an invalid length.
[  247.734356][T16556] 8021q: adding VLAN 0 to HW filter on device bond32
[  247.754064][T16559] No such timeout policy "syz1"
[  247.946285][T16581] netlink: 'syz.1.3036': attribute type 1 has an invalid length.
[  247.958538][T16581] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  248.210263][T16602] netlink: 'syz.0.3043': attribute type 1 has an invalid length.
[  248.229550][T16602] bond37: entered promiscuous mode
[  248.231536][T16602] 8021q: adding VLAN 0 to HW filter on device bond37
[  248.241787][T16605] tipc: Resetting bearer <eth:syz_tun>
[  248.251834][T16602] vlan5: entered allmulticast mode
[  248.253528][T16602] bond37: entered allmulticast mode
[  248.255436][T16607] batadv0: entered promiscuous mode
[  248.273090][T16602] bond37: (slave bridge12): making interface the new active one
[  248.275696][T16602] bridge12: entered promiscuous mode
[  248.277855][T16602] bridge12: entered allmulticast mode
[  248.281192][T16602] bond37: (slave bridge12): Enslaving as an active interface with an up link
[  248.759111][T16636] tun1: tun_chr_ioctl cmd 1074025675
[  248.761014][T16636] tun1: persist enabled
[  248.762708][T16636] tun1: tun_chr_ioctl cmd 1074025675
[  248.764552][T16636] tun1: persist disabled
[  249.067144][T16656] __nla_validate_parse: 20 callbacks suppressed
[  249.067155][T16656] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3062'.
[  249.115289][T16660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3063'.
[  249.133462][T16662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3064'.
[  249.162652][T16664] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3065'.
[  249.165544][T16665] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3065'.
[  249.188697][T16662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3064'.
[  249.226369][T16668] netlink: 67 bytes leftover after parsing attributes in process `syz.1.3066'.
[  249.268078][T16672] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3068'.
[  249.290025][T16668] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  249.350180][T16675] rdma_op ffff888023fa41f0 conn xmit_rdma 0000000000000000
[  249.414771][T16683] ipvlan0: entered promiscuous mode
[  249.815141][T16704] netlink: 'syz.2.3077': attribute type 1 has an invalid length.
[  249.890684][T16704] bond39: (slave bridge0): Enslaving as a backup interface with an up link
[  249.899697][T16704] macvlan3: entered promiscuous mode
[  249.901618][T16704] macvlan3: entered allmulticast mode
[  249.903789][T16704] bond39: entered promiscuous mode
[  249.905593][T16704] bridge0: entered promiscuous mode
[  249.908266][T16704] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  249.955300][T16704] bond39: left promiscuous mode
[  249.957556][T16704] bridge0: left promiscuous mode
[  250.153021][T16717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3081'.
[  250.156895][T16717] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3081'.
[  250.253503][T16721] bridge0: port 1(wlan1) entered blocking state
[  250.259674][T16721] bridge0: port 1(wlan1) entered disabled state
[  250.264563][T16721] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode
[  250.278869][T16721] mac80211_hwsim hwsim41 wlan1: entered promiscuous mode
[  250.290076][T16721] mac80211_hwsim hwsim41 wlan1 (unregistering): left allmulticast mode
[  250.301417][T16721] mac80211_hwsim hwsim41 wlan1 (unregistering): left promiscuous mode
[  250.309832][T16721] bridge0: port 1(wlan1) entered disabled state
[  250.425480][T16731] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  250.554601][T16744] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  250.599196][T16749] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  250.640482][T16750] pim6reg: entered allmulticast mode
[  250.855010][T16772] netlink: 'syz.2.3094': attribute type 2 has an invalid length.
[  251.074731][T16779] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[  251.127947][T16779] hsr_slave_1 (unregistering): left promiscuous mode
[  251.151655][T16783] 0: renamed from hsr0
[  251.157586][T16783] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  251.171226][T16783] 0: entered allmulticast mode
[  251.178557][T16783] hsr_slave_0: entered allmulticast mode
[  251.208127][T16783] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  251.761842][T16804] bond38: option xmit_hash_policy: invalid value (10)
[  251.770175][T16804] bond38 (unregistering): Released all slaves
[  251.984408][   T53] block nbd0: Possible stuck request ffff88810acf0000: control (read@0,1024B). Runtime 120 seconds
[  251.987933][   T53] block nbd0: Possible stuck request ffff88810acf0200: control (read@1024,1024B). Runtime 120 seconds
[  251.991237][   T53] block nbd0: Possible stuck request ffff88810acf0400: control (read@2048,1024B). Runtime 120 seconds
[  251.994587][   T53] block nbd0: Possible stuck request ffff88810acf0600: control (read@3072,1024B). Runtime 120 seconds
[  252.150536][T16827] batadv0: left promiscuous mode
[  252.157763][T16827] 8021q: adding VLAN 0 to HW filter on device batadv0
[  252.174759][T16827] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  252.478748][T16839] netlink: 'syz.0.3116': attribute type 1 has an invalid length.
[  252.613920][T16839] Bluetooth: MGMT ver 1.23
[  252.619559][T16849] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  252.633926][T16839] bridge14: entered promiscuous mode
[  252.639641][T16839] bond38: (slave bridge14): making interface the new active one
[  252.642541][T16839] bond38: (slave bridge14): Enslaving as an active interface with an up link
[  252.650339][T16850] --map-set only usable from mangle table
[  252.825881][T16860] netlink: 'syz.0.3123': attribute type 3 has an invalid length.
[  252.832266][T16859] netlink: 'syz.0.3123': attribute type 3 has an invalid length.
[  253.181333][T16874] netlink: 'syz.0.3127': attribute type 10 has an invalid length.
[  253.205895][T16876] netlink: 'syz.0.3127': attribute type 10 has an invalid length.
[  253.315379][T16878] syzkaller0: entered promiscuous mode
[  253.327161][T16878] syzkaller0: entered allmulticast mode
[  253.579133][T16880] bond34: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  253.603935][T16880] bond34: (slave lo): Enslaving as an active interface with an up link
[  253.618822][T16880] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  253.629892][T13399] lo speed is unknown, defaulting to 1000
[  253.631800][T12536] lo speed is unknown, defaulting to 1000
[  253.633716][T13394] lo speed is unknown, defaulting to 1000
[  254.307568][T16934] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  254.450559][T16953] syzkaller0: entered promiscuous mode
[  254.458136][T16953] syzkaller0: entered allmulticast mode
[  255.065484][T16975] __nla_validate_parse: 28 callbacks suppressed
[  255.065495][T16975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3156'.
[  255.073268][T16975] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  255.271724][T16983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3159'.
[  255.353059][T16987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3160'.
[  255.472014][T16987] bond40: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  255.485786][T16987] bond40 (unregistering): Released all slaves
[  255.642061][ T7986] tipc: Subscription rejected, illegal request
[  255.901536][T17007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3163'.
[  255.916395][T17007] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  256.664090][T17034] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  256.922058][T17056] ip6gre4: entered promiscuous mode
[  256.926188][T17056] ip6gre4: entered allmulticast mode
[  256.933615][ T7986] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  256.939681][T17051] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  256.943585][ T7986] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  256.967314][T13392] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  257.376602][T12536] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  257.389235][T17086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3185'.
[  257.649260][T12536] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  257.904631][T17111] syzkaller0: left promiscuous mode
[  257.908016][T17113] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3196'.
[  257.913421][T17111] syzkaller0: left allmulticast mode
[  257.923332][T17111] netlink: 212 bytes leftover after parsing attributes in process `syz.2.3195'.
[  258.287512][T17132] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  259.002418][T17143] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3204'.
[  259.010122][T17143] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3204'.
[  259.017414][T17143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3204'.
[  259.083437][T17131] tipc: Disabling bearer <eth:syzkaller0>
[  259.378036][T17154] netlink: 'syz.2.3209': attribute type 1 has an invalid length.
[  259.407728][T17154] 8021q: adding VLAN 0 to HW filter on device bond40
[  259.422479][T17154] vlan0: entered promiscuous mode
[  259.425717][T17154] bond40: entered promiscuous mode
[  259.431060][T17154] vlan0: entered allmulticast mode
[  259.434201][T17154] bond40: entered allmulticast mode
[  259.459340][T17157] dvmrp0: entered allmulticast mode
[  259.544573][T17154] bond40: (slave bridge37): making interface the new active one
[  259.555817][T17154] bridge37: entered promiscuous mode
[  259.568441][T17154] bridge37: entered allmulticast mode
[  259.590195][T17154] bond40: (slave bridge37): Enslaving as an active interface with an up link
[  259.708375][T17176] netlink: 'syz.0.3211': attribute type 1 has an invalid length.
[  260.606837][    C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  260.823051][T17240] netlink: 'syz.0.3221': attribute type 2 has an invalid length.
[  260.826283][T17240] netlink: 'syz.0.3221': attribute type 11 has an invalid length.
[  260.830237][T17240] __nla_validate_parse: 3 callbacks suppressed
[  260.830249][T17240] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3221'.
[  260.896225][T17238] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3220'.
[  261.107034][T17249] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3224'.
[  261.115835][T17250] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3224'.
[  261.131520][T17249] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3224'.
[  261.144684][T17250] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3224'.
[  261.312777][T17256] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3225'.
[  261.442607][T17268] netlink: 'syz.1.3228': attribute type 1 has an invalid length.
[  261.837153][T17282] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3231'.
[  261.859823][T17289] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3231'.
[  262.235288][T17314] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  262.238955][T17314] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  262.331951][T17324] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  262.630763][T17342] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3244'.
[  262.962061][T17350] netlink: 'syz.0.3247': attribute type 12 has an invalid length.
[  262.976899][T17352] netlink: 'syz.1.3248': attribute type 32 has an invalid length.
[  263.392010][T17376] ipt_REJECT: TCP_RESET invalid for non-tcp
[  265.420851][T17393] mac80211_hwsim hwsim2 wlan0: Caught tx_queue_len zero misconfig
[  265.445586][T17393] netlink: 'syz.1.3257': attribute type 26 has an invalid length.
[  265.555860][T17401] pim6reg0: tun_chr_ioctl cmd 1074025675
[  265.559137][T17401] pim6reg0: persist disabled
[  265.752395][T17408] syzkaller1: entered promiscuous mode
[  265.754800][T17408] syzkaller1: entered allmulticast mode
[  266.195958][T17428] __nla_validate_parse: 7 callbacks suppressed
[  266.195975][T17428] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3266'.
[  266.223837][T17426] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3267'.
[  266.225997][T17423] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3266'.
[  266.235529][T17426] ip_tables: iptables: counters copy to user failed while replacing table
[  266.322371][T17430] netlink: 'syz.1.3268': attribute type 17 has an invalid length.
[  266.344901][T13392] lo speed is unknown, defaulting to 1000
[  266.615814][T17446] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3273'.
[  266.690507][T17446] syzkaller0: entered promiscuous mode
[  266.696507][T17446] syzkaller0: entered allmulticast mode
[  266.701950][T17451] netlink: 'syz.0.3274': attribute type 10 has an invalid length.
[  266.711403][T17446] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  266.714769][T17451] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3274'.
[  266.731994][T17451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3274'.
[  266.863272][T17461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3276'.
[  266.926243][T17464] openvswitch: netlink: IPv4 tunnel dst address is zero
[  266.941957][T17466] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3276'.
[  266.961682][T17466] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3276'.
[  267.212484][T17476] can: request_module (can-proto-4) failed.
[  267.270965][T17476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3282'.
[  267.500223][T17492] netlink: 'syz.0.3286': attribute type 11 has an invalid length.
[  267.625515][T17496] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  267.636885][T17496] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  267.799534][T17501] can: request_module (can-proto-4) failed.
[  267.966719][    C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  270.927063][T17573] smc: net device wg2 applied user defined pnetid SYZ0
[  271.067153][T17582] netlink: 'syz.0.3296': attribute type 1 has an invalid length.
[  271.153728][T17582] bond40: entered promiscuous mode
[  271.158550][T17582] 8021q: adding VLAN 0 to HW filter on device bond40
[  271.166400][T17587] sock: sock_set_timeout: `syz.2.3298' (pid 17587) tries to set negative timeout
[  271.187484][T17582] bond40: (slave bridge15): making interface the new active one
[  271.190525][T17582] bridge15: entered promiscuous mode
[  271.193997][T17582] bond40: (slave bridge15): Enslaving as an active interface with an up link
[  271.377227][T12536] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  271.736889][T17609] bond35: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  271.742392][T17609] bond35 (unregistering): Released all slaves
[  271.767688][T17607] __nla_validate_parse: 6 callbacks suppressed
[  271.767704][T17607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3305'.
[  271.775168][T17607] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  271.988874][T17621] netlink: 'syz.0.3308': attribute type 10 has an invalid length.
[  272.047964][T13392] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  272.115548][T17626] openvswitch: netlink: IP tunnel dst address not specified
[  272.137519][T17626] netlink: 'syz.2.3313': attribute type 21 has an invalid length.
[  272.143529][T17626] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3313'.
[  272.149950][T17626] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3313'.
[  272.290347][T17639] gre0: entered promiscuous mode
[  272.292039][T17639] gre0: entered allmulticast mode
[  272.483160][T17652] 8021q: adding VLAN 0 to HW filter on device batadv4
[  272.552259][T17656] netlink: 'syz.2.3324': attribute type 39 has an invalid length.
[  272.605998][T17661] netlink: 'syz.1.3326': attribute type 9 has an invalid length.
[  273.127608][T17688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3332'.
[  273.135174][T17688] netlink: 'syz.0.3332': attribute type 10 has an invalid length.
[  273.142704][T17688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3332'.
[  273.290148][T17696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3335'.
[  273.405352][T17700] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3336'.
[  273.693096][T17711] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3339'.
[  273.881194][T17714] netlink: 'syz.1.3340': attribute type 1 has an invalid length.
[  273.902425][T17714] 8021q: adding VLAN 0 to HW filter on device bond35
[  273.920363][T17714] bond35: (slave veth15): Enslaving as an active interface with a down link
[  273.930207][T17714] 8021q: adding VLAN 0 to HW filter on device batadv3
[  273.935822][T17714] bond35: (slave batadv3): making interface the new active one
[  273.941392][T17714] batadv3: entered promiscuous mode
[  273.943910][T17714] bond35: (slave batadv3): Enslaving as an active interface with an up link
[  274.075755][T17723] netlink: 'syz.1.3341': attribute type 1 has an invalid length.
[  274.092935][T17723] bond36: entered promiscuous mode
[  274.094709][T17723] bond36: entered allmulticast mode
[  274.096953][T17723] 8021q: adding VLAN 0 to HW filter on device bond36
[  282.048070][   T53] block nbd0: Possible stuck request ffff88810acf0000: control (read@0,1024B). Runtime 150 seconds
[  282.051426][   T53] block nbd0: Possible stuck request ffff88810acf0200: control (read@1024,1024B). Runtime 150 seconds
[  282.055615][   T53] block nbd0: Possible stuck request ffff88810acf0400: control (read@2048,1024B). Runtime 150 seconds
[  282.060525][   T53] block nbd0: Possible stuck request ffff88810acf0600: control (read@3072,1024B). Runtime 150 seconds
[  282.686636][    C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  284.906988][ T5650] batadv3: left promiscuous mode
[  288.357924][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  288.369170][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  288.372944][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  288.379379][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  288.382886][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  288.436172][ T5601] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  288.439392][ T5601] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  288.445197][ T5601] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  288.455129][ T5601] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  288.461782][ T5601] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  288.767815][T17732] lo speed is unknown, defaulting to 1000
[  289.022310][T17732] bridge0: port 1(bridge_slave_0) entered blocking state
[  289.025352][T17732] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.028717][T17732] bridge_slave_0: entered allmulticast mode
[  289.033416][T17732] bridge_slave_0: entered promiscuous mode
[  289.041867][T17732] bridge0: port 2(bridge_slave_1) entered blocking state
[  289.044835][T17732] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.048836][T17732] bridge_slave_1: entered allmulticast mode
[  289.052913][T17732] bridge_slave_1: entered promiscuous mode
[  289.091055][T17732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  289.101789][T17732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  289.134043][T17732] team0: Port device team_slave_0 added
[  289.140065][T17732] team0: Port device team_slave_1 added
[  289.170670][T17732] batman_adv: batadv0: Adding interface: batadv_slave_0
[  289.173434][T17732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  289.184062][T17732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  289.190416][T17732] batman_adv: batadv0: Adding interface: batadv_slave_1
[  289.193218][T17732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  289.203071][T17732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  289.259377][T17732] hsr_slave_0: entered promiscuous mode
[  289.269211][T17732] hsr_slave_1: entered promiscuous mode
[  289.283511][T17732] debugfs: 'hsr0' already exists in 'hsr'
[  289.298314][T17732] Cannot create hsr debugfs directory
[  289.623636][   T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  289.636810][   T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  289.649333][   T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  289.654948][   T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  289.660587][   T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  289.749210][ T5601] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  289.761131][ T5601] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  289.767419][ T5601] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  289.775687][ T5601] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  289.780815][ T5601] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  290.329426][T17752] lo speed is unknown, defaulting to 1000
[  290.342700][T17755] lo speed is unknown, defaulting to 1000
[  290.528208][   T55] Bluetooth: hci3: command tx timeout
[  290.607025][T17752] bridge0: port 1(bridge_slave_0) entered blocking state
[  290.610003][T17752] bridge0: port 1(bridge_slave_0) entered disabled state
[  290.612499][T17752] bridge_slave_0: entered allmulticast mode
[  290.616081][T17752] bridge_slave_0: entered promiscuous mode
[  290.621189][T17752] bridge0: port 2(bridge_slave_1) entered blocking state
[  290.623708][T17752] bridge0: port 2(bridge_slave_1) entered disabled state
[  290.628362][T17752] bridge_slave_1: entered allmulticast mode
[  290.631465][T17752] bridge_slave_1: entered promiscuous mode
[  290.655333][T17752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  290.660153][T17752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  290.690619][T17752] team0: Port device team_slave_0 added
[  290.695183][T17752] team0: Port device team_slave_1 added
[  290.712970][T17752] batman_adv: batadv0: Adding interface: batadv_slave_0
[  290.715190][T17752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  290.723309][T17752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  290.728150][T17752] batman_adv: batadv0: Adding interface: batadv_slave_1
[  290.730481][T17752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  290.738633][T17752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  290.772358][T17752] hsr_slave_0: entered promiscuous mode
[  290.775325][T17752] hsr_slave_1: entered promiscuous mode
[  290.778361][T17752] debugfs: 'hsr0' already exists in 'hsr'
[  290.780244][T17752] Cannot create hsr debugfs directory
[  290.974167][T17755] bridge0: port 1(bridge_slave_0) entered blocking state
[  290.977233][T17755] bridge0: port 1(bridge_slave_0) entered disabled state
[  290.979798][T17755] bridge_slave_0: entered allmulticast mode
[  290.982598][T17755] bridge_slave_0: entered promiscuous mode
[  290.986874][T17755] bridge0: port 2(bridge_slave_1) entered blocking state
[  290.989143][T17755] bridge0: port 2(bridge_slave_1) entered disabled state
[  290.991421][T17755] bridge_slave_1: entered allmulticast mode
[  290.994210][T17755] bridge_slave_1: entered promiscuous mode
[  291.017575][T17755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  291.023357][T17755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  291.043681][T17755] team0: Port device team_slave_0 added
[  291.048294][T17755] team0: Port device team_slave_1 added
[  291.066874][T17755] batman_adv: batadv0: Adding interface: batadv_slave_0
[  291.069388][T17755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  291.077746][T17755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  291.082098][T17755] batman_adv: batadv0: Adding interface: batadv_slave_1
[  291.084240][T17755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  291.094522][T17755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  291.122861][T17755] hsr_slave_0: entered promiscuous mode
[  291.125418][T17755] hsr_slave_1: entered promiscuous mode
[  291.128097][T17755] debugfs: 'hsr0' already exists in 'hsr'
[  291.129948][T17755] Cannot create hsr debugfs directory
[  291.726759][   T55] Bluetooth: hci4: command tx timeout
[  291.806837][   T55] Bluetooth: hci5: command tx timeout
[  292.606850][   T55] Bluetooth: hci3: command tx timeout
[  293.806562][   T55] Bluetooth: hci4: command tx timeout
[  293.886789][   T55] Bluetooth: hci5: command tx timeout
[  294.686719][   T55] Bluetooth: hci3: command tx timeout
[  295.886512][   T55] Bluetooth: hci4: command tx timeout
[  295.966945][   T55] Bluetooth: hci5: command tx timeout
[  296.767007][   T55] Bluetooth: hci3: command tx timeout
[  297.966568][   T55] Bluetooth: hci4: command tx timeout
[  298.046795][   T55] Bluetooth: hci5: command tx timeout
[  312.128067][   T53] block nbd0: Possible stuck request ffff88810acf0000: control (read@0,1024B). Runtime 180 seconds
[  312.128333][    C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  312.131399][   T53] block nbd0: Possible stuck request ffff88810acf0200: control (read@1024,1024B). Runtime 180 seconds
[  312.138099][   T53] block nbd0: Possible stuck request ffff88810acf0400: control (read@2048,1024B). Runtime 180 seconds
[  312.141597][   T53] block nbd0: Possible stuck request ffff88810acf0600: control (read@3072,1024B). Runtime 180 seconds
[  312.351732][ T5047] udevd[5047]: worker [9394] /devices/virtual/block/nbd0 timeout; kill it
[  312.355135][ T5047] udevd[5047]: seq 14735 '/devices/virtual/block/nbd0' killed
[  342.208025][   T53] block nbd0: Possible stuck request ffff88810acf0000: control (read@0,1024B). Runtime 210 seconds
[  342.212111][   T53] block nbd0: Possible stuck request ffff88810acf0200: control (read@1024,1024B). Runtime 210 seconds
[  342.218251][   T53] block nbd0: Possible stuck request ffff88810acf0400: control (read@2048,1024B). Runtime 210 seconds
[  342.222340][   T53] block nbd0: Possible stuck request ffff88810acf0600: control (read@3072,1024B). Runtime 210 seconds
[  349.139177][ T5601] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  349.149231][ T5601] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  349.154174][ T5601] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  349.160543][ T5601] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  349.167804][ T5601] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  349.426286][T17790] lo speed is unknown, defaulting to 1000
[  349.674353][T17790] bridge0: port 1(bridge_slave_0) entered blocking state
[  349.677552][T17790] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.680606][T17790] bridge_slave_0: entered allmulticast mode
[  349.684789][T17790] bridge_slave_0: entered promiscuous mode
[  349.692164][T17790] bridge0: port 2(bridge_slave_1) entered blocking state
[  349.695172][T17790] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.702213][T17790] bridge_slave_1: entered allmulticast mode
[  349.706198][T17790] bridge_slave_1: entered promiscuous mode
[  349.740635][T17790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  349.748259][T17790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  349.781329][T17790] team0: Port device team_slave_0 added
[  349.787159][T17790] team0: Port device team_slave_1 added
[  349.815866][T17790] batman_adv: batadv0: Adding interface: batadv_slave_0
[  349.819249][T17790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  349.830628][T17790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  349.837241][T17790] batman_adv: batadv0: Adding interface: batadv_slave_1
[  349.840220][T17790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  349.851551][T17790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  349.899735][T17790] hsr_slave_0: entered promiscuous mode
[  349.903168][T17790] hsr_slave_1: entered promiscuous mode
[  349.906269][T17790] debugfs: 'hsr0' already exists in 'hsr'
[  349.909552][T17790] Cannot create hsr debugfs directory
[  350.353533][   T55] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  350.374068][   T55] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  350.379317][   T55] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  350.385107][   T55] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  350.393290][   T55] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  350.496759][ T5601] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  350.509000][ T5601] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  350.515277][ T5601] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  350.519302][ T5601] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  350.524597][ T5601] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  351.046990][T17809] lo speed is unknown, defaulting to 1000
[  351.132951][T17812] lo speed is unknown, defaulting to 1000
[  351.247266][   T55] Bluetooth: hci6: command tx timeout
[  351.820574][T17809] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.823926][T17809] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.837360][T17809] bridge_slave_0: entered allmulticast mode
[  351.841928][T17809] bridge_slave_0: entered promiscuous mode
[  351.879374][T17812] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.883862][T17812] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.888207][T17812] bridge_slave_0: entered allmulticast mode
[  351.892427][T17812] bridge_slave_0: entered promiscuous mode
[  351.897460][T17809] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.901398][T17809] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.904596][T17809] bridge_slave_1: entered allmulticast mode
[  351.910301][T17809] bridge_slave_1: entered promiscuous mode
[  351.914430][T17812] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.917613][T17812] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.920867][T17812] bridge_slave_1: entered allmulticast mode
[  351.924875][T17812] bridge_slave_1: entered promiscuous mode
[  352.043856][T17809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  352.065735][T17812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  352.085794][T17809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  352.114149][T17812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  352.146123][T17809] team0: Port device team_slave_0 added
[  352.165875][T17809] team0: Port device team_slave_1 added
[  352.184137][T17812] team0: Port device team_slave_0 added
[  352.190317][T17812] team0: Port device team_slave_1 added
[  352.206748][T17809] batman_adv: batadv0: Adding interface: batadv_slave_0
[  352.209771][T17809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  352.223194][T17809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  352.254338][T17809] batman_adv: batadv0: Adding interface: batadv_slave_1
[  352.258424][T17809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  352.269140][T17809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  352.274903][T17812] batman_adv: batadv0: Adding interface: batadv_slave_0
[  352.278595][T17812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  352.289481][T17812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  352.295889][T17812] batman_adv: batadv0: Adding interface: batadv_slave_1
[  352.299675][T17812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  352.311348][T17812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  352.391219][T17809] hsr_slave_0: entered promiscuous mode
[  352.394672][T17809] hsr_slave_1: entered promiscuous mode
[  352.398367][T17809] debugfs: 'hsr0' already exists in 'hsr'
[  352.400829][T17809] Cannot create hsr debugfs directory
[  352.447093][   T55] Bluetooth: hci7: command tx timeout
[  352.519496][T17812] hsr_slave_0: entered promiscuous mode
[  352.522003][T17812] hsr_slave_1: entered promiscuous mode
[  352.524337][T17812] debugfs: 'hsr0' already exists in 'hsr'
[  352.526125][T17812] Cannot create hsr debugfs directory
[  352.606685][   T55] Bluetooth: hci8: command tx timeout
[  353.327585][   T55] Bluetooth: hci6: command tx timeout
[  354.526797][   T55] Bluetooth: hci7: command tx timeout
[  354.686865][   T55] Bluetooth: hci8: command tx timeout
[  355.406588][   T55] Bluetooth: hci6: command tx timeout
[  356.606640][   T55] Bluetooth: hci7: command tx timeout
[  356.766995][   T55] Bluetooth: hci8: command tx timeout
[  357.486594][   T55] Bluetooth: hci6: command tx timeout
[  358.686653][   T55] Bluetooth: hci7: command tx timeout
[  358.846966][   T55] Bluetooth: hci8: command tx timeout
[  372.287396][   T53] block nbd0: Possible stuck request ffff88810acf0000: control (read@0,1024B). Runtime 240 seconds
[  372.290796][   T53] block nbd0: Possible stuck request ffff88810acf0200: control (read@1024,1024B). Runtime 240 seconds
[  372.294081][   T53] block nbd0: Possible stuck request ffff88810acf0400: control (read@2048,1024B). Runtime 240 seconds
[  372.298282][   T53] block nbd0: Possible stuck request ffff88810acf0600: control (read@3072,1024B). Runtime 240 seconds
[  373.566587][    C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  402.367702][   T53] block nbd0: Possible stuck request ffff88810acf0000: control (read@0,1024B). Runtime 270 seconds
[  402.371091][   T53] block nbd0: Possible stuck request ffff88810acf0200: control (read@1024,1024B). Runtime 270 seconds
[  402.375240][   T53] block nbd0: Possible stuck request ffff88810acf0400: control (read@2048,1024B). Runtime 270 seconds
[  402.378849][   T53] block nbd0: Possible stuck request ffff88810acf0600: control (read@3072,1024B). Runtime 270 seconds
[  409.267268][ T5601] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  409.278673][ T5601] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  409.282075][ T5601] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  409.285369][ T5601] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  409.288934][ T5601] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  409.499105][T17854] lo speed is unknown, defaulting to 1000
[  409.658659][T17854] bridge0: port 1(bridge_slave_0) entered blocking state
[  409.660945][T17854] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.663210][T17854] bridge_slave_0: entered allmulticast mode
[  409.665996][T17854] bridge_slave_0: entered promiscuous mode
[  409.669933][T17854] bridge0: port 2(bridge_slave_1) entered blocking state
[  409.672185][T17854] bridge0: port 2(bridge_slave_1) entered disabled state
[  409.674675][T17854] bridge_slave_1: entered allmulticast mode
[  409.678265][T17854] bridge_slave_1: entered promiscuous mode
[  409.705352][T17854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  409.710519][T17854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  409.730386][T17854] team0: Port device team_slave_0 added
[  409.734128][T17854] team0: Port device team_slave_1 added
[  409.751933][T17854] batman_adv: batadv0: Adding interface: batadv_slave_0
[  409.754096][T17854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  409.763999][T17854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  409.769009][T17854] batman_adv: batadv0: Adding interface: batadv_slave_1
[  409.771090][T17854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  409.779339][T17854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  409.806035][T17854] hsr_slave_0: entered promiscuous mode
[  409.809967][T17854] hsr_slave_1: entered promiscuous mode
[  409.812152][T17854] debugfs: 'hsr0' already exists in 'hsr'
[  409.814025][T17854] Cannot create hsr debugfs directory
[  410.355258][T17876] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  410.361980][T17876] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  410.365480][T17876] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  410.372622][T17876] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  410.377854][T17876] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  410.444625][T17876] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  410.455463][T17876] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  410.462994][T17876] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  410.468969][T17876] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  410.472687][T17876] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  410.825569][T17875] lo speed is unknown, defaulting to 1000
[  410.897340][T17879] lo speed is unknown, defaulting to 1000
[  411.326728][T17876] Bluetooth: hci9: command tx timeout
[  411.350816][T17875] bridge0: port 1(bridge_slave_0) entered blocking state
[  411.354764][T17875] bridge0: port 1(bridge_slave_0) entered disabled state
[  411.358248][T17875] bridge_slave_0: entered allmulticast mode
[  411.361136][T17875] bridge_slave_0: entered promiscuous mode
[  411.364528][T17879] bridge0: port 1(bridge_slave_0) entered blocking state
[  411.374243][T17879] bridge0: port 1(bridge_slave_0) entered disabled state
[  411.383990][T17879] bridge_slave_0: entered allmulticast mode
[  411.400734][T17879] bridge_slave_0: entered promiscuous mode
[  411.411529][T17875] bridge0: port 2(bridge_slave_1) entered blocking state
[  411.422328][T17875] bridge0: port 2(bridge_slave_1) entered disabled state
[  411.424691][T17875] bridge_slave_1: entered allmulticast mode
[  411.428649][T17875] bridge_slave_1: entered promiscuous mode
[  411.432417][T17879] bridge0: port 2(bridge_slave_1) entered blocking state
[  411.435236][T17879] bridge0: port 2(bridge_slave_1) entered disabled state
[  411.438672][T17879] bridge_slave_1: entered allmulticast mode
[  411.442304][T17879] bridge_slave_1: entered promiscuous mode
[  411.492618][T17875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  411.497066][T17876] Bluetooth: hci3: command 0x0406 tx timeout
[  411.509623][T17879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  411.516010][T17875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  411.532512][T17879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  411.552439][T17875] team0: Port device team_slave_0 added
[  411.570509][T17875] team0: Port device team_slave_1 added
[  411.595896][T17879] team0: Port device team_slave_0 added
[  411.598464][T17875] batman_adv: batadv0: Adding interface: batadv_slave_0
[  411.601064][T17875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  411.609559][T17875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  411.615574][T17879] team0: Port device team_slave_1 added
[  411.625831][T17875] batman_adv: batadv0: Adding interface: batadv_slave_1
[  411.628430][T17875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  411.636264][T17875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  411.655718][T17879] batman_adv: batadv0: Adding interface: batadv_slave_0
[  411.658387][T17879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  411.667050][T17879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  411.689801][T17879] batman_adv: batadv0: Adding interface: batadv_slave_1
[  411.692539][T17879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  411.702323][T17879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  411.718935][T17875] hsr_slave_0: entered promiscuous mode
[  411.722030][T17875] hsr_slave_1: entered promiscuous mode
[  411.724844][T17875] debugfs: 'hsr0' already exists in 'hsr'
[  411.729781][T17875] Cannot create hsr debugfs directory
[  411.764423][T17879] hsr_slave_0: entered promiscuous mode
[  411.767274][T17879] hsr_slave_1: entered promiscuous mode
[  411.769514][T17879] debugfs: 'hsr0' already exists in 'hsr'
[  411.771339][T17879] Cannot create hsr debugfs directory
[  412.447565][ T5601] Bluetooth: hci10: command tx timeout
[  412.526641][ T5601] Bluetooth: hci11: command tx timeout
[  413.406610][ T5601] Bluetooth: hci9: command tx timeout
[  414.528125][   T55] Bluetooth: hci10: command tx timeout
[  414.606660][T17855] Bluetooth: hci11: command tx timeout
[  415.486545][T17855] Bluetooth: hci9: command tx timeout
[  416.610078][T17855] Bluetooth: hci5: command 0x0406 tx timeout
[  416.617699][T17855] Bluetooth: hci10: command tx timeout
[  416.624355][T17855] Bluetooth: hci4: command 0x0406 tx timeout
[  416.686880][T17876] Bluetooth: hci11: command tx timeout
[  417.566558][T17876] Bluetooth: hci9: command tx timeout
[  418.366879][   T35] INFO: task syz.2.3331:17685 blocked for more than 143 seconds.
[  418.370082][   T35]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
[  418.372596][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  418.376160][   T35] task:syz.2.3331      state:D stack:26376 pid:17685 tgid:17684 ppid:5600   task_flags:0x480140 flags:0x00080002
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  418.381715][   T35] Call Trace:
[  418.383726][   T35]  <TASK>
[  418.384991][   T35]  __schedule+0x17d9/0x56c0
[  418.387390][   T35]  ? __lock_acquire+0x683/0x2cf0
[  418.389454][   T35]  ? __pfx___schedule+0x10/0x10
[  418.391415][   T35]  ? schedule+0x90/0x2b0
[  418.393132][   T35]  schedule+0x164/0x2b0
[  418.394808][   T35]  blk_mq_freeze_queue_wait+0x101/0x180
[  418.399183][   T35]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[  418.402013][   T35]  ? queue_limits_commit_update_frozen+0x55/0xd0
[  418.404725][   T35]  ? __pfx_autoremove_wake_function+0x10/0x10
[  418.407567][   T35]  queue_limits_commit_update_frozen+0x55/0xd0
[  418.410087][   T35]  nbd_set_size+0x454/0x680
[  418.411889][   T35]  ? __pfx_nbd_set_size+0x10/0x10
[  418.413899][   T35]  ? nla_memcpy+0x5b/0xc0
[  418.415618][   T35]  nbd_genl_reconfigure+0x7e9/0x1e80
[  418.420070][   T35]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  418.423911][   T35]  ? rcu_is_watching+0x15/0xb0
[  418.434953][   T35]  ? trace_kmalloc+0x2a/0xf0
[  418.437497][   T35]  ? __kmalloc_noprof+0x396/0x720
[  418.439578][   T35]  ? __nla_parse+0x40/0x60
[  418.442535][   T35]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  418.445154][   T35]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  418.448594][   T35]  genl_family_rcv_msg_doit+0x233/0x340
[  418.451396][   T35]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  418.453771][   T35]  ? __lock_acquire+0x683/0x2cf0
[  418.455650][   T35]  genl_rcv_msg+0x614/0x7a0
[  418.457953][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  418.459995][   T35]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  418.462218][   T35]  netlink_rcv_skb+0x226/0x4a0
[  418.464121][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  418.466094][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  418.469087][   T35]  ? down_read+0x2be/0x330
[  418.470937][   T35]  genl_rcv+0x28/0x40
[  418.472515][   T35]  netlink_unicast+0x7bb/0x940
[  418.474408][   T35]  netlink_sendmsg+0x813/0xb40
[  418.476293][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  418.480098][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  418.482139][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  418.484209][   T35]  sock_sendmsg_nosec+0x13a/0x180
[  418.486172][   T35]  ____sys_sendmsg+0x54e/0x850
[  418.488803][   T35]  ? __pfx_____sys_sendmsg+0x10/0x10
[  418.491015][   T35]  ? import_iovec+0x73/0xa0
[  418.492827][   T35]  ___sys_sendmsg+0x2a5/0x360
[  418.494722][   T35]  ? __lock_acquire+0x683/0x2cf0
[  418.497076][   T35]  ? __pfx____sys_sendmsg+0x10/0x10
[  418.499689][   T35]  ? futex_wake+0x51b/0x5f0
[  418.501646][   T35]  ? __fget_files+0x2a/0x420
[  418.503470][   T35]  ? __fget_files+0x3a2/0x420
[  418.505430][   T35]  __x64_sys_sendmsg+0x1b1/0x290
[  418.509038][   T35]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  418.511354][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.514037][   T35]  do_syscall_64+0x174/0x580
[  418.515940][   T35]  ? trace_irq_disable+0x3b/0x140
[  418.518251][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.521119][   T35] RIP: 0033:0x7f232ed9e0d9
[  418.523001][   T35] RSP: 002b:00007f232fc7c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  418.526225][   T35] RAX: ffffffffffffffda RBX: 00007f232f025fa0 RCX: 00007f232ed9e0d9
[  418.529946][   T35] RDX: 0000000000080000 RSI: 0000200000000c40 RDI: 0000000000000009
[  418.533119][   T35] RBP: 00007f232ee35024 R08: 0000000000000000 R09: 0000000000000000
[  418.536190][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  418.539856][   T35] R13: 00007f232f026038 R14: 00007f232f025fa0 R15: 00007ffd478b4498
[  418.543425][   T35]  </TASK>
[  418.544889][   T35] INFO: task syz.0.3339:17707 blocked for more than 143 seconds.
[  418.548615][   T35]       Not tainted syzkaller #0
[  418.550642][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  418.553993][   T35] task:syz.0.3339      state:D stack:24776 pid:17707 tgid:17706 ppid:5598   task_flags:0x400140 flags:0x00080002
[  418.559157][   T35] Call Trace:
[  418.560573][   T35]  <TASK>
[  418.561772][   T35]  __schedule+0x17d9/0x56c0
[  418.563542][   T35]  ? __lock_acquire+0x683/0x2cf0
[  418.565539][   T35]  ? __lock_acquire+0x683/0x2cf0
[  418.569593][   T35]  ? unwind_next_frame+0x8f/0x2550
[  418.571697][   T35]  ? __pfx___schedule+0x10/0x10
[  418.573538][   T35]  ? schedule+0x90/0x2b0
[  418.575217][   T35]  schedule+0x164/0x2b0
[  418.577531][   T35]  schedule_preempt_disabled+0x13/0x30
[  418.579781][   T35]  __mutex_lock+0x7bf/0x1550
[  418.581611][   T35]  ? __mutex_lock+0x5d4/0x1550
[  418.583513][   T35]  ? genl_rcv_msg+0x10b/0x7a0
[  418.585345][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  418.588949][   T35]  ? stack_trace_save+0xa9/0x100
[  418.591207][   T35]  ? __lock_acquire+0x683/0x2cf0
[  418.593244][   T35]  ? radix_tree_lookup+0x240/0x290
[  418.595241][   T35]  genl_rcv_msg+0x10b/0x7a0
[  418.597615][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  418.599623][   T35]  ? __lock_acquire+0x683/0x2cf0
[  418.601680][   T35]  netlink_rcv_skb+0x226/0x4a0
[  418.603577][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  418.605555][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  418.609808][   T35]  ? down_read+0x2be/0x330
[  418.611685][   T35]  genl_rcv+0x28/0x40
[  418.613263][   T35]  netlink_unicast+0x7bb/0x940
[  418.615139][   T35]  netlink_sendmsg+0x813/0xb40
[  418.618636][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  418.620852][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  418.622837][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  418.624859][   T35]  sock_sendmsg_nosec+0x13a/0x180
[  418.628822][   T35]  __sys_sendto+0x408/0x5a0
[  418.630740][   T35]  ? __pfx___sys_sendto+0x10/0x10
[  418.632754][   T35]  ? __pfx___se_sys_futex+0x10/0x10
[  418.634790][   T35]  __x64_sys_sendto+0xde/0x100
[  418.637030][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.639903][   T35]  do_syscall_64+0x174/0x580
[  418.641800][   T35]  ? trace_irq_disable+0x3b/0x140
[  418.643731][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.646014][   T35] RIP: 0033:0x7f3fbff5e90e
[  418.648481][   T35] RSP: 002b:00007f3fc0daee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  418.651793][   T35] RAX: ffffffffffffffda RBX: 00007f3fc0db06c0 RCX: 00007f3fbff5e90e
[  418.654866][   T35] RDX: 000000000000001c RSI: 00007f3fc0daf000 RDI: 0000000000000008
[  418.658938][   T35] RBP: 0000000000000000 R08: 00007f3fc0daef04 R09: 000000000000000c
[  418.662025][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[  418.665027][   T35] R13: 00007f3fc0daef58 R14: 00007f3fc0daf000 R15: 0000000000000000
[  418.668833][   T35]  </TASK>
[  418.670247][   T35] INFO: task syz.0.3339:17711 blocked for more than 143 seconds.
[  418.673271][   T35]       Not tainted syzkaller #0
[  418.675187][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  418.679335][   T35] task:syz.0.3339      state:D stack:24168 pid:17711 tgid:17706 ppid:5598   task_flags:0x400140 flags:0x00080002
[  418.683983][   T35] Call Trace:
[  418.685294][   T35]  <TASK>
[  418.686932][T17876] Bluetooth: hci10: command tx timeout
[  418.689783][   T35]  __schedule+0x17d9/0x56c0
[  418.691681][   T35]  ? __lock_acquire+0x683/0x2cf0
[  418.693613][   T35]  ? __lock_acquire+0x683/0x2cf0
[  418.695589][   T35]  ? unwind_next_frame+0x8f/0x2550
[  418.698612][   T35]  ? __pfx___schedule+0x10/0x10
[  418.701180][   T35]  ? schedule+0x90/0x2b0
[  418.702942][   T35]  schedule+0x164/0x2b0
[  418.704508][   T35]  schedule_preempt_disabled+0x13/0x30
[  418.707269][   T35]  __mutex_lock+0x7bf/0x1550
[  418.709158][   T35]  ? __mutex_lock+0x5d4/0x1550
[  418.711022][   T35]  ? genl_rcv_msg+0x10b/0x7a0
[  418.712868][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  418.714871][   T35]  ? stack_trace_save+0xa9/0x100
[  418.717578][   T35]  ? __lock_acquire+0x683/0x2cf0
[  418.719736][   T35]  ? radix_tree_lookup+0x240/0x290
[  418.721759][   T35]  genl_rcv_msg+0x10b/0x7a0
[  418.723562][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  418.725539][   T35]  ? __lock_acquire+0x683/0x2cf0
[  418.728846][   T35]  netlink_rcv_skb+0x226/0x4a0
[  418.731298][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  418.733359][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  418.735384][   T35]  ? down_read+0x2be/0x330
[  418.737593][   T35]  genl_rcv+0x28/0x40
[  418.739239][   T35]  netlink_unicast+0x7bb/0x940
[  418.741139][   T35]  netlink_sendmsg+0x813/0xb40
[  418.743052][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  418.745145][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  418.747990][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  418.750185][   T35]  sock_sendmsg_nosec+0x13a/0x180
[  418.752118][   T35]  __sys_sendto+0x408/0x5a0
[  418.753869][   T35]  ? __pfx___sys_sendto+0x10/0x10
[  418.755794][   T35]  ? errseq_sample+0x40/0x70
[  418.758460][   T35]  ? fd_install+0x94/0x3d0
[  418.760216][   T35]  ? fd_install+0x306/0x3d0
[  418.761990][   T35]  __x64_sys_sendto+0xde/0x100
[  418.764196][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.766952][T17876] Bluetooth: hci11: command tx timeout
[  418.769846][   T35]  do_syscall_64+0x174/0x580
[  418.771698][   T35]  ? trace_irq_disable+0x3b/0x140
[  418.773575][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.775829][   T35] RIP: 0033:0x7f3fbff5e90e
[  418.778191][   T35] RSP: 002b:00007f3fc0d8de88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  418.781398][   T35] RAX: ffffffffffffffda RBX: 00007f3fc0d8f6c0 RCX: 00007f3fbff5e90e
[  418.784391][   T35] RDX: 000000000000001c RSI: 00007f3fc0d8e000 RDI: 000000000000000c
[  418.788182][   T35] RBP: 0000000000000000 R08: 00007f3fc0d8df04 R09: 000000000000000c
[  418.791367][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c
[  418.794383][   T35] R13: 00007f3fc0d8df58 R14: 00007f3fc0d8e000 R15: 0000000000000000
[  418.798059][   T35]  </TASK>
[  418.799425][   T35] INFO: task syz.1.3342:17726 blocked for more than 143 seconds.
[  418.802492][   T35]       Not tainted syzkaller #0
[  418.804465][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  418.809256][   T35] task:syz.1.3342      state:D stack:26672 pid:17726 tgid:17725 ppid:5593   task_flags:0x400140 flags:0x00080002
[  418.813972][   T35] Call Trace:
[  418.815259][   T35]  <TASK>
[  418.816853][   T35]  __schedule+0x17d9/0x56c0
[  418.819048][   T35]  ? __lock_acquire+0x683/0x2cf0
[  418.821082][   T35]  ? __lock_acquire+0x683/0x2cf0
[  418.823073][   T35]  ? __pfx___schedule+0x10/0x10
[  418.824950][   T35]  ? schedule+0x90/0x2b0
[  418.827370][   T35]  schedule+0x164/0x2b0
[  418.829129][   T35]  schedule_preempt_disabled+0x13/0x30
[  418.831233][   T35]  __mutex_lock+0x7bf/0x1550
[  418.832935][   T35]  ? __mutex_lock+0x5d4/0x1550
[  418.834709][   T35]  ? genl_rcv_msg+0x10b/0x7a0
[  418.837976][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  418.840091][   T35]  ? __dev_queue_xmit+0x29b/0x3820
[  418.842033][   T35]  ? radix_tree_lookup+0x240/0x290
[  418.844031][   T35]  genl_rcv_msg+0x10b/0x7a0
[  418.845772][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  418.848211][   T35]  ? __pfx_ref_tracker_free+0x10/0x10
[  418.850972][   T35]  netlink_rcv_skb+0x226/0x4a0
[  418.852984][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  418.854945][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  418.857497][   T35]  ? down_read+0x2be/0x330
[  418.859316][   T35]  genl_rcv+0x28/0x40
[  418.860874][   T35]  netlink_unicast+0x7bb/0x940
[  418.862776][   T35]  netlink_sendmsg+0x813/0xb40
[  418.864699][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  418.867739][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  418.869791][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  418.871857][   T35]  sock_sendmsg_nosec+0x13a/0x180
[  418.873836][   T35]  ____sys_sendmsg+0x54e/0x850
[  418.875721][   T35]  ? __pfx_____sys_sendmsg+0x10/0x10
[  418.878956][   T35]  ? import_iovec+0x73/0xa0
[  418.880848][   T35]  ___sys_sendmsg+0x2a5/0x360
[  418.882690][   T35]  ? __lock_acquire+0x683/0x2cf0
[  418.884663][   T35]  ? __pfx____sys_sendmsg+0x10/0x10
[  418.887112][   T35]  ? futex_wake+0x51b/0x5f0
[  418.889437][   T35]  ? __fget_files+0x2a/0x420
[  418.891357][   T35]  ? __fget_files+0x3a2/0x420
[  418.893225][   T35]  __x64_sys_sendmsg+0x1b1/0x290
[  418.895145][   T35]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  418.897879][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.900375][   T35]  do_syscall_64+0x174/0x580
[  418.902215][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.904539][   T35] RIP: 0033:0x7f71d8f9e0d9
[  418.907985][   T35] RSP: 002b:00007f71d9dee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  418.911233][   T35] RAX: ffffffffffffffda RBX: 00007f71d9225fa0 RCX: 00007f71d8f9e0d9
[  418.914301][   T35] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000028
[  418.918286][   T35] RBP: 00007f71d9035024 R08: 0000000000000000 R09: 0000000000000000
[  418.921990][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  418.925207][   T35] R13: 00007f71d9226038 R14: 00007f71d9225fa0 R15: 00007ffd4e10f1f8
[  418.929022][   T35]  </TASK>
[  418.930407][   T35] INFO: task syz.1.3342:17727 blocked for more than 143 seconds.
[  418.933409][   T35]       Not tainted syzkaller #0
[  418.935401][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  418.939308][   T35] task:syz.1.3342      state:D stack:26672 pid:17727 tgid:17725 ppid:5593   task_flags:0x400140 flags:0x00080002
[  418.943887][   T35] Call Trace:
[  418.945200][   T35]  <TASK>
[  418.947544][   T35]  __schedule+0x17d9/0x56c0
[  418.949896][   T35]  ? __lock_acquire+0x683/0x2cf0
[  418.951975][   T35]  ? __lock_acquire+0x683/0x2cf0
[  418.953878][   T35]  ? __pfx___schedule+0x10/0x10
[  418.955739][   T35]  ? schedule+0x90/0x2b0
[  418.958107][   T35]  schedule+0x164/0x2b0
[  418.959874][   T35]  schedule_preempt_disabled+0x13/0x30
[  418.961972][   T35]  __mutex_lock+0x7bf/0x1550
[  418.963730][   T35]  ? __mutex_lock+0x5d4/0x1550
[  418.965656][   T35]  ? genl_rcv_msg+0x10b/0x7a0
[  418.968418][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  418.970518][   T35]  ? __dev_queue_xmit+0x29b/0x3820
[  418.972545][   T35]  ? radix_tree_lookup+0x240/0x290
[  418.974555][   T35]  genl_rcv_msg+0x10b/0x7a0
[  418.977187][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  418.979296][   T35]  ? __pfx_ref_tracker_free+0x10/0x10
[  418.981402][   T35]  netlink_rcv_skb+0x226/0x4a0
[  418.983308][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  418.985298][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  418.988291][   T35]  ? down_read+0x2be/0x330
[  418.990688][   T35]  genl_rcv+0x28/0x40
[  418.992300][   T35]  netlink_unicast+0x7bb/0x940
[  418.994110][   T35]  netlink_sendmsg+0x813/0xb40
[  418.995998][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  418.998663][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  419.000732][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  419.002698][   T35]  sock_sendmsg_nosec+0x13a/0x180
[  419.004698][   T35]  ____sys_sendmsg+0x54e/0x850
[  419.010683][   T35]  ? __pfx_____sys_sendmsg+0x10/0x10
[  419.013789][   T35]  ? import_iovec+0x73/0xa0
[  419.015712][   T35]  ___sys_sendmsg+0x2a5/0x360
[  419.018078][   T35]  ? __lock_acquire+0x683/0x2cf0
[  419.020105][   T35]  ? __pfx____sys_sendmsg+0x10/0x10
[  419.022131][   T35]  ? futex_wait+0x2a2/0x390
[  419.024009][   T35]  ? __fget_files+0x2a/0x420
[  419.025844][   T35]  ? __fget_files+0x3a2/0x420
[  419.029443][   T35]  __x64_sys_sendmsg+0x1b1/0x290
[  419.031486][   T35]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  419.033612][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.036045][   T35]  do_syscall_64+0x174/0x580
[  419.038443][   T35]  ? trace_irq_disable+0x3b/0x140
[  419.040850][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.043195][   T35] RIP: 0033:0x7f71d8f9e0d9
[  419.044963][   T35] RSP: 002b:00007f71d9dcd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  419.048824][   T35] RAX: ffffffffffffffda RBX: 00007f71d9226090 RCX: 00007f71d8f9e0d9
[  419.051938][   T35] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000028
[  419.055029][   T35] RBP: 00007f71d9035024 R08: 0000000000000000 R09: 0000000000000000
[  419.059681][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  419.063058][   T35] R13: 00007f71d9226128 R14: 00007f71d9226090 R15: 00007ffd4e10f1f8
[  419.066226][   T35]  </TASK>
[  419.068204][   T35] INFO: task syz.1.3342:17728 blocked for more than 144 seconds.
[  419.071331][   T35]       Not tainted syzkaller #0
[  419.073272][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  419.077033][   T35] task:syz.1.3342      state:D stack:27200 pid:17728 tgid:17725 ppid:5593   task_flags:0x400140 flags:0x00080002
[  419.082243][   T35] Call Trace:
[  419.083704][   T35]  <TASK>
[  419.084918][   T35]  __schedule+0x17d9/0x56c0
[  419.087411][   T35]  ? __lock_acquire+0x683/0x2cf0
[  419.089494][   T35]  ? __lock_acquire+0x683/0x2cf0
[  419.091454][   T35]  ? __pfx___schedule+0x10/0x10
[  419.093433][   T35]  ? schedule+0x90/0x2b0
[  419.095138][   T35]  schedule+0x164/0x2b0
[  419.097721][   T35]  schedule_preempt_disabled+0x13/0x30
[  419.099966][   T35]  __mutex_lock+0x7bf/0x1550
[  419.101706][   T35]  ? __mutex_lock+0x5d4/0x1550
[  419.103576][   T35]  ? genl_rcv_msg+0x10b/0x7a0
[  419.105431][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  419.108359][   T35]  ? __dev_queue_xmit+0x29b/0x3820
[  419.110467][   T35]  ? radix_tree_lookup+0x240/0x290
[  419.112470][   T35]  genl_rcv_msg+0x10b/0x7a0
[  419.114276][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  419.116275][   T35]  ? __pfx_ref_tracker_free+0x10/0x10
[  419.118831][   T35]  netlink_rcv_skb+0x226/0x4a0
[  419.121318][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  419.123424][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  419.125522][   T35]  ? down_read+0x2be/0x330
[  419.127932][   T35]  genl_rcv+0x28/0x40
[  419.129648][   T35]  netlink_unicast+0x7bb/0x940
[  419.131553][   T35]  netlink_sendmsg+0x813/0xb40
[  419.133414][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  419.135496][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  419.138711][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  419.141502][   T35]  sock_sendmsg_nosec+0x13a/0x180
[  419.143648][   T35]  ____sys_sendmsg+0x54e/0x850
[  419.145447][   T35]  ? __pfx_____sys_sendmsg+0x10/0x10
[  419.148254][   T35]  ? import_iovec+0x73/0xa0
[  419.150249][   T35]  ___sys_sendmsg+0x2a5/0x360
[  419.152104][   T35]  ? __lock_acquire+0x683/0x2cf0
[  419.154045][   T35]  ? __pfx____sys_sendmsg+0x10/0x10
[  419.156079][   T35]  ? futex_wait+0x2a2/0x390
[  419.158729][   T35]  ? __fget_files+0x2a/0x420
[  419.160689][   T35]  ? __fget_files+0x3a2/0x420
[  419.162637][   T35]  __x64_sys_sendmsg+0x1b1/0x290
[  419.164645][   T35]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  419.169153][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.171699][   T35]  do_syscall_64+0x174/0x580
[  419.173558][   T35]  ? trace_irq_disable+0x3b/0x140
[  419.175576][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.178574][   T35] RIP: 0033:0x7f71d8f9e0d9
[  419.180680][   T35] RSP: 002b:00007f71d9dac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  419.184083][   T35] RAX: ffffffffffffffda RBX: 00007f71d9226180 RCX: 00007f71d8f9e0d9
[  419.187763][   T35] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000028
[  419.190956][   T35] RBP: 00007f71d9035024 R08: 0000000000000000 R09: 0000000000000000
[  419.194063][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  419.197911][   T35] R13: 00007f71d9226218 R14: 00007f71d9226180 R15: 00007ffd4e10f1f8
[  419.201177][   T35]  </TASK>
[  419.202457][   T35] 
[  419.202457][   T35] Showing all locks held in the system:
[  419.205530][   T35] 1 lock held by khungtaskd/35:
[  419.208502][   T35]  #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  419.212496][   T35] 2 locks held by getty/5425:
[  419.214385][   T35]  #0: ffff8881604dd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  419.218820][   T35]  #1: ffffc900034762e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  419.222838][   T35] 2 locks held by kworker/u8:2/5465:
[  419.224931][   T35] 1 lock held by udevd/9394:
[  419.227413][   T35]  #0: ffff88810ac2e350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[  419.230981][   T35] 6 locks held by syz.2.3331/17685:
[  419.232776][   T35]  #0: ffffffff90098968 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  419.235779][   T35]  #1: ffffffff900987a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  419.239277][   T35]  #2: ffff88810aca1260 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4bc/0x1e80
[  419.243544][   T35]  #3: ffff88810acc47c8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680
[  419.248072][   T35]  #4: ffff88810acc4190 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  419.251941][   T35]  #5: ffff88810acc41c8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  419.255719][   T35] 2 locks held by syz.0.3339/17707:
[  419.258573][   T35]  #0: ffffffff90098968 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  419.261686][   T35]  #1: ffffffff900987a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  419.264767][   T35] 2 locks held by syz.0.3339/17711:
[  419.267249][   T35]  #0: ffffffff90098968 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  419.270291][   T35]  #1: ffffffff900987a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  419.273635][   T35] 2 locks held by syz.1.3342/17726:
[  419.275571][   T35]  #0: ffffffff90098968 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  419.280463][   T35]  #1: ffffffff900987a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  419.283979][   T35] 2 locks held by syz.1.3342/17727:
[  419.285946][   T35]  #0: ffffffff90098968 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  419.289642][   T35]  #1: ffffffff900987a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  419.293464][   T35] 2 locks held by syz.1.3342/17728:
[  419.295579][   T35]  #0: ffffffff90098968 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  419.299091][   T35]  #1: ffffffff900987a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  419.302571][   T35] 2 locks held by syz-executor/17732:
[  419.304592][   T35]  #0: ffffffff90098968 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  419.308522][   T35]  #1: ffffffff900987a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  419.312040][   T35] 2 locks held by syz-executor/17752:
[  419.314088][   T35]  #0: ffffffff90098968 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  419.318164][   T35]  #1: ffffffff900987a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  419.321665][   T35] 2 locks held by syz-executor/17755:
[  419.323734][   T35]  #0: ffffffff90098968 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  419.327748][   T35]  #1: ffffffff900987a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  419.331250][   T35] 2 locks held by syz-executor/17790:
[  419.333296][   T35]  #0: ffffffff90098968 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  419.337090][   T35]  #1: ffffffff900987a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  419.340972][   T35] 2 locks held by syz-executor/17809:
[  419.343126][   T35]  #0: ffffffff90098968 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  419.346279][   T35]  #1: ffffffff900987a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  419.350409][   T35] 2 locks held by syz-executor/17812:
[  419.352523][   T35]  #0: ffffffff90098968 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  419.355714][   T35]  #1: ffffffff900987a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  419.360587][   T35] 2 locks held by syz-executor/17854:
[  419.362889][   T35]  #0: ffffffff90098968 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  419.366197][   T35]  #1: ffffffff900987a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  419.371370][   T35] 2 locks held by syz-executor/17875:
[  419.373688][   T35]  #0: ffffffff90098968 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  419.377373][   T35]  #1: ffffffff900987a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  419.381040][   T35] 2 locks held by syz-executor/17879:
[  419.383130][   T35]  #0: ffffffff90098968 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  419.385941][   T35]  #1: ffffffff900987a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  419.390542][   T35] 
[  419.391321][   T35] =============================================
[  419.391321][   T35] 
[  419.394049][   T35] NMI backtrace for cpu 1
[  419.394059][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  419.394068][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  419.394073][   T35] Call Trace:
[  419.394078][   T35]  <TASK>
[  419.394083][   T35]  dump_stack_lvl+0xe8/0x150
[  419.394098][   T35]  nmi_cpu_backtrace+0x274/0x2d0
[  419.394108][   T35]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  419.394120][   T35]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[  419.394129][   T35]  sys_info+0x135/0x170
[  419.394137][   T35]  watchdog+0xfd7/0x1030
[  419.394150][   T35]  ? watchdog+0x1c7/0x1030
[  419.394161][   T35]  kthread+0x388/0x470
[  419.394172][   T35]  ? __pfx_watchdog+0x10/0x10
[  419.394179][   T35]  ? __pfx_kthread+0x10/0x10
[  419.394189][   T35]  ret_from_fork+0x514/0xb70
[  419.394201][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  419.394211][   T35]  ? __switch_to+0xc89/0x1420
[  419.394221][   T35]  ? __pfx_kthread+0x10/0x10
[  419.394231][   T35]  ret_from_fork_asm+0x1a/0x30
[  419.394248][   T35]  </TASK>
[  419.394251][   T35] Sending NMI from CPU 1 to CPUs 0:
[  419.432777][    C0] NMI backtrace for cpu 0
[  419.432790][    C0] CPU: 0 UID: 0 PID: 5465 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  419.432800][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  419.432810][    C0] Workqueue: bat_events batadv_dat_purge
[  419.432823][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x10/0x70
[  419.432834][    C0] Code: de 5b e9 93 12 62 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0d 98 de a5 11 <65> 8b 15 b9 de a5 11 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75
[  419.432841][    C0] RSP: 0018:ffffc90000007cb0 EFLAGS: 00000046
[  419.432847][    C0] RAX: ffffffff81b47a5f RBX: 000000000001430a RCX: ffff88810b8c8000
[  419.432853][    C0] RDX: ffff88810b8c8000 RSI: 0000000000000000 RDI: 0000000000000000
[  419.432857][    C0] RBP: ffff8881210283e8 R08: ffffffff81b47a3d R09: 0000000000080000
[  419.432862][    C0] R10: 0000000000000000 R11: ffffffff9a7c7748 R12: dffffc0000000000
[  419.432867][    C0] R13: 0000000000000000 R14: 1ffff11024205041 R15: ffff888121028214
[  419.432872][    C0] FS:  0000000000000000(0000) GS:ffff88818d952000(0000) knlGS:0000000000000000
[  419.432878][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  419.432883][    C0] CR2: 000055d34b798278 CR3: 000000000e946000 CR4: 00000000000006f0
[  419.432906][    C0] Call Trace:
[  419.432912][    C0]  <IRQ>
[  419.432915][    C0]  ktime_get_update_offsets_now+0x7f/0x3e0
[  419.432931][    C0]  hrtimer_interrupt+0x133/0x910
[  419.432938][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  419.432947][    C0]  ? sched_clock+0x3f/0x60
[  419.432955][    C0]  ? sched_clock_cpu+0x74/0x440
[  419.432966][    C0]  ? ktime_get+0x45/0x220
[  419.432973][    C0]  ? __pfx_sched_clock_cpu+0x10/0x10
[  419.432982][    C0]  ? kvm_clock_get_cycles+0x47/0x60
[  419.432992][    C0]  __sysvec_apic_timer_interrupt+0x102/0x430
[  419.433005][    C0]  sysvec_apic_timer_interrupt+0x52/0xc0
[  419.433014][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  419.433021][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80
[  419.433030][    C0] Code: f7 e8 2d bd cf f5 f7 c3 00 02 00 00 74 05 e8 90 9d fb f5 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> c4 d0 c0 f5 65 8b 05 bd 40 99 07 85 c0 74 18 5b 41 5e c3 cc cc
[  419.433036][    C0] RSP: 0018:ffffc90000007f40 EFLAGS: 00000206
[  419.433042][    C0] RAX: 0000000000000012 RBX: 0000000000000246 RCX: 0000000080000102
[  419.433047][    C0] RDX: 0000000000000002 RSI: ffffffff8e229857 RDI: 0000000000000001
[  419.433051][    C0] RBP: ffffffff8e80a100 R08: ffffffff90574b37 R09: 1ffffffff20ae966
[  419.433056][    C0] R10: dffffc0000000000 R11: fffffbfff20ae967 R12: 0000000000000009
[  419.433061][    C0] R13: 0000000000000008 R14: ffff8881210281c0 R15: 0000000000000000
[  419.433070][    C0]  handle_softirqs+0x225/0x840
[  419.433079][    C0]  ? do_softirq+0x76/0xd0
[  419.433087][    C0]  ? batadv_dat_purge+0x2d7/0x3c0
[  419.433094][    C0]  do_softirq+0x76/0xd0
[  419.433101][    C0]  </IRQ>
[  419.433103][    C0]  <TASK>
[  419.433106][    C0]  __local_bh_enable_ip+0xf8/0x130
[  419.433113][    C0]  batadv_dat_purge+0x2d7/0x3c0
[  419.433122][    C0]  ? process_scheduled_works+0xa20/0x14e0
[  419.433129][    C0]  process_scheduled_works+0xa8e/0x14e0
[  419.433143][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  419.433151][    C0]  ? assign_work+0x3cf/0x5d0
[  419.433159][    C0]  worker_thread+0xa47/0xfb0
[  419.433173][    C0]  kthread+0x388/0x470
[  419.433182][    C0]  ? __pfx_worker_thread+0x10/0x10
[  419.433188][    C0]  ? __pfx_kthread+0x10/0x10
[  419.433197][    C0]  ret_from_fork+0x514/0xb70
[  419.433206][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  419.433215][    C0]  ? __switch_to+0xc89/0x1420
[  419.433224][    C0]  ? __pfx_kthread+0x10/0x10
[  419.433232][    C0]  ret_from_fork_asm+0x1a/0x30
[  419.433246][    C0]  </TASK>
[  419.562574][   T35] Kernel panic - not syncing: hung_task: blocked tasks
[  419.564744][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  419.567465][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  419.570483][   T35] Call Trace:
[  419.571516][   T35]  <TASK>
[  419.572435][   T35]  vpanic+0x56c/0xa60
[  419.573698][   T35]  ? __pfx___schedule+0x10/0x10
[  419.575191][   T35]  ? __pfx_vpanic+0x10/0x10
[  419.576576][   T35]  ? nmi_trigger_cpumask_backtrace+0x207/0x380
[  419.578617][   T35]  panic+0xc5/0xd0
[  419.580001][   T35]  ? __pfx_panic+0x10/0x10
[  419.581391][   T35]  ? preempt_schedule_common+0x82/0xd0
[  419.583078][   T35]  ? preempt_schedule_thunk+0x16/0x40
[  419.584719][   T35]  ? nmi_trigger_cpumask_backtrace+0x314/0x380
[  419.586610][   T35]  ? nmi_trigger_cpumask_backtrace+0x319/0x380
[  419.588554][   T35]  watchdog+0x1030/0x1030
[  419.589889][   T35]  ? watchdog+0x1c7/0x1030
[  419.591245][   T35]  kthread+0x388/0x470
[  419.592484][   T35]  ? __pfx_watchdog+0x10/0x10
[  419.593911][   T35]  ? __pfx_kthread+0x10/0x10
[  419.595311][   T35]  ret_from_fork+0x514/0xb70
[  419.596709][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  419.598244][   T35]  ? __switch_to+0xc89/0x1420
[  419.599641][   T35]  ? __pfx_kthread+0x10/0x10
[  419.601107][   T35]  ret_from_fork_asm+0x1a/0x30
[  419.602608][   T35]  </TASK>
[  419.604277][   T35] Kernel Offset: disabled
[  419.605874][   T35] Rebooting in 86400 seconds..
