last executing test programs:

17.270445981s ago: executing program 2 (id=5816):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) (async)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0xf88ce2e0571bc7ea}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "000200"}, 0x38)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x1, 0x0, @remote}, 0x1c)

17.221468222s ago: executing program 2 (id=5818):
unshare(0x400)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$tun(r1, &(0x7f00000002c0)=ANY=[], 0x33) (async)
sendfile(r1, r0, 0x0, 0x10000) (async, rerun: 32)
r2 = socket(0x10, 0x803, 0x0) (rerun: 32)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x76583, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x44)

17.142006428s ago: executing program 2 (id=5820):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000380)="ff9c99d1d970ab73e96ee51483def41c328847f95b2594773208fd80b21de4a74bf2aca3a99d5ddd801b1b25d3030ca0e6df4f64c5cf129c42a85a67ff9b2979967224400599f08960ae4377bcdf8c04d7d97df729dd9b313b2793e507e1a36a51162c4e1b0f8c1563caafd2f52375d757be1504c68267bae4b5c6a89ba3266bbdc159b23816caf94a3312bde4f350073f261f92832488a242cb0e322a1cc20b2d66e67cd1c9db576c8822f84b9d915070cf7a516a63e79ad52c20b67fafa0e155ce114ed69e5eb06afcce165718e0b7a8d40e4f989fc7ebf6dc58d79679e38668", 0xe1}], 0x1, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x18}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x0, 0x4, 0x4002, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xb0, 0x6, [@fwd={0x6}, @enum={0x3, 0xa, 0x0, 0x6, 0x4, [{0xa, 0x2}, {0xd, 0x6}, {0xf, 0x7fff}, {0x0, 0x5}, {0x3, 0x7f}, {0x4, 0x9}, {0x2, 0x9}, {0x1, 0x7}, {0xa, 0xcf}, {0x7, 0x1}]}, @enum64={0xd, 0x4, 0x0, 0x13, 0x1, 0x8, [{0x5, 0xd6, 0x66}, {0x2, 0x5, 0x6}, {0xb, 0xfffffff7, 0x5}, {0xf, 0x8, 0x9}]}, @fwd={0x8}]}, {0x0, [0x10, 0x5f, 0x30, 0x61]}}, &(0x7f0000000600)=""/127, 0xce, 0x7f, 0x0, 0x2, 0x10000}, 0x28)
r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x18}, 0x18)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x2, &(0x7f0000000040)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x3, 0x0, 0x3, 0x822f2c0e28a0e00a, 0x4, 0xc, 0x10}], &(0x7f0000000080)='GPL\x00', 0x7, 0x7c, &(0x7f00000002c0)=""/124, 0x41100, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000006c0)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000800)=[r3, r4], &(0x7f0000000840)=[{0x2, 0x3, 0x1, 0x9}, {0x3, 0x2, 0x7, 0x7}, {0x4, 0x3, 0x9, 0x3}, {0x2, 0x1, 0x6, 0x3}], 0x10, 0x100}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r5=>0x0})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB='-4'], 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r5, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}}, 0x8000)

17.141142056s ago: executing program 2 (id=5821):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001380)=0x14)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000001240)=""/181, &(0x7f0000001340)=0xb5)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
readv(r2, &(0x7f0000001300)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/163, 0xfeb2}], 0x2)
write$cgroup_int(r3, &(0x7f0000000140), 0xfffffdef)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYRES8=r4, @ANYBLOB="0ee8edcb7a3e26ab5e57227bfb12e72eec3663cdd12b68b99880a3624517b9a0d5815b74fba48e34fc11e8b8a4457e74d2d9146d9c807d886973f1aa568de59d46319a607da78af448e618fa2d5a088cd1bc821fc0c24622a322d90a4162a6cb46d12ea3a83b3eaa0319ae0b465f92a1d2fa0a24df2ba20d9ceb5b99c665274b789b8a9c12f6513a9437604e3d0e665917ac8e7195390198012aebecae3ff82b0ad943f02ce995ea", @ANYBLOB="05072bbd7000ffeddf250100000018000180140002006c6f00"/38], 0x2c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x8061)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x24044081)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="980000001000010027bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="24040100000000001400030076657468315f746f5f626f6e6400000014001680100001800c0003007fff"], 0x98}, 0x1, 0x0, 0x0, 0x801}, 0x60000090)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
r8 = syz_init_net_socket$llc(0x1a, 0x802, 0x0)
bind$llc(r8, &(0x7f0000000000)={0x1a, 0x0, 0x2, 0x3, 0x3, 0x4a, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10)
close(r8)
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="08c80d0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x408d1}, 0x0)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
close(0x4)
close(r1)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r10, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x49)

16.721965166s ago: executing program 1 (id=5826):
r0 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000100)=0xffffffff, 0x4) (async, rerun: 64)
r2 = socket(0x2b, 0x1, 0x1) (rerun: 64)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00e2fb49d6000000ff020000000000000000000000000001"], 0x18) (async)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async)
sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000010701020000000000000000050000f196398f82adda24986d643e9f2b6323f59329fbe3cccf3b3fbea0664bc64ad450babf7b9cca0b76dc7e5e6699d7b2bdd87eb00d176c6514ab5cf3ce39b28957a344ce6dd6188db8fef00f2e5117c654dbe2ad94d70954"], 0x14}, 0x1, 0x0, 0x0, 0x40400d0}, 0xc0) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10)
connect$inet(r3, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) (async)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x800000000000, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x100}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10, 0x5, 0x0, 0xb7, 0x0, 0x0, 0x1}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) (async)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4, @multicast2}, 0x10) (async, rerun: 64)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f00000002c0)={0x1120000, 0x9, 0x4, 0xf2, 0x3, [0x9, 0xb27, 0x4, 0x2c3d3aff]}) (rerun: 64)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x48)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r4, &(0x7f0000000480), &(0x7f0000000580)=@tcp=r6}, 0x99) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r4, &(0x7f0000000280)="aa", &(0x7f0000000400)=@udp=r5}, 0x20) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x800000}, [@generic={0xd7, 0xa, 0x0, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x7}, 0x94) (async, rerun: 64)
r7 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)={0x30, 0x10, 0x1, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x18, 0x37, 0x0, 0x1, [@typed={0x14, 0xf, 0x0, 0x0, @ipv6=@mcast2}]}]}, 0x30}], 0x1, 0x0, 0x0, 0x20004080}, 0x4) (async, rerun: 64)
close(0x4) (async, rerun: 64)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e26, @multicast1}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0xf00)

16.641823786s ago: executing program 1 (id=5828):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket$unix(0x1, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x100000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, &(0x7f0000000180)=0x10) (async)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, 0x0, 0x0) (async)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000140)=0xdf6, 0x4) (async)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r3, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c)
accept(r2, &(0x7f0000000240)=@ax25={{0x3, @default}, [@remote, @netrom, @bcast, @remote, @rose, @null, @rose, @null]}, &(0x7f00000002c0)=0x80)

16.220676889s ago: executing program 2 (id=5833):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r0 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) (async, rerun: 32)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) (async, rerun: 32)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) (async)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async)
listen(r2, 0x0) (async)
connect$vsock_stream(r2, 0x0, 0x0) (async)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000ac0)=ANY=[@ANYBLOB="03000000000000000a004e2300000009ff010000000000000000000000000001"], 0x90)

16.169859044s ago: executing program 2 (id=5835):
socket$kcm(0x29, 0x5, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e00000010000000024000000000000000000000007000000071407"], 0x48}, 0x200040c4)
syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
r4 = socket(0x1d, 0x2, 0x6)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0xb8, r2, 0x9, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x24004420}, 0x24000004)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0xffff}, {}, {}, {0x5, 0x0, 0xb, 0xa}, {0x85, 0x0, 0x0, 0xaa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r9, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r9}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
r10 = socket(0x400000000010, 0x3, 0x0)
r11 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x4044848)
sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@gettfilter={0x24, 0x2e, 0x302, 0x70bd2c, 0x2ddfdbfb, {0x0, 0x0, 0x0, r12, {0x10, 0xb}, {0x8, 0xfff1}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041081)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_SETHMAC(r15, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x34, r14, 0x20d, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x26]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000)
sendmsg$SEG6_CMD_SETHMAC(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010028bd7000fcdbdf250100000005000600af0000000800030006000000050005000000000020"], 0x2c}}, 0x24000806)

16.11171062s ago: executing program 0 (id=5837):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000140)={0x6}, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x300, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x80}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}}, @NFT_MSG_DELOBJ={0xd8, 0x14, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_USERDATA={0xc1, 0x8, "a487797bb28e1a892aa9964df952ec877d19b87f39b3a67e236b6308098289f447021445c5fd92a07f8b1cb949105253d23f1e5ca0c218d9ca68fd3f95668da930823a7bc0dd819fd43e46704d58f58d12fd1d601e6bafd7c849004e9fc1cbb011e5a452b3e9498ec676d0de5beb910c943f27185fc999b5a3e9a7d5c849845a8f41a0773c760811cae2f20536dfda2e313fd41b863408e084eabea93cf8fff97a6f9e6c780d4ec71cd40b70ac8b8e6f62c29c86cae629935c305e07da"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x114}, 0x1, 0x0, 0x0, 0x24004855}, 0x20000840)
getpeername$unix(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000340)=0x6e)

16.052108949s ago: executing program 0 (id=5838):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, &(0x7f0000000180)) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000280)={0x1, {0x1, 0x1, 0x8, 0xfffffffffffffff7, 0x1}}) (async)
shutdown(r3, 0x0) (async, rerun: 64)
close(0x3) (async, rerun: 64)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={<r5=>r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r5, 0x8}, &(0x7f00000000c0)=0x8) (async)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
shutdown(r6, 0x0) (async)
recvmmsg(r6, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000fcdbdf9bc904001400010002000000ac14142f00000000000000001495a12a7b7da2cc5e00000000000000000000000000000d0001007564703a73797a32000000000000b52fa0996887430bf73dc0000000000000000000657a71cb37b9c0015a1826be22d6065e3bd61cd375a2a7e8a42df8a982e1cf0765574022486b57e32d5a5f5494b448a4060ed6052c3e36b98d41993e8738e805e506717537c9c5cab79177a89c5d358bcdc15c7fdb8bf5e5fa5c4e3b71b64b1437"], 0x54}}, 0x0) (async)
sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB='`\x00@\x00', @ANYRES16=r9, @ANYBLOB="997425bd7000fbdbdf25150000004c0001800e00010069623a767863616e3100000038000400200001000a004e2300000009fe8000000000000000000000000000bb010000001400020002004e23e00000010000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000) (async, rerun: 32)
r10 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 32)
connect$inet(r10, &(0x7f0000000240)={0x2, 0x4623, @rand_addr=0x64010104}, 0x10) (async, rerun: 64)
sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000810}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000040a050000000000030008000780c00005713e649dacb0af9e5084c767793b73a3d9025033990231a3651bca952dd51aa75f33d9116776c5fa46ebcfb0f1e12b80f9179a57da05d3c8b6e383217670564e4566f028dce19f0b5192b1368113709917a8c7e6c37cd39896ba5c660da4eb32422d9f3d4ef5a91e1723"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4004) (rerun: 64)
read(r6, &(0x7f0000000000)=""/31, 0x1f)
write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[], 0x10448) (async, rerun: 32)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async, rerun: 32)
r11 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r11, 0x6, 0x1f, 0x0, &(0x7f0000000300)) (async, rerun: 64)
socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)

16.001239898s ago: executing program 0 (id=5839):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r5, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60)
getsockopt$inet_buf(r5, 0x118, 0x1, 0x0, &(0x7f00000003c0))
setsockopt$packet_int(r4, 0x107, 0x18, &(0x7f0000000000)=0xc, 0x4)
sendto$packet(r4, &(0x7f0000000240)="4f3ec2f604115429e193efac9bf1be", 0xfffffffffffffed1, 0x0, &(0x7f00000003c0)={0x11, 0x17, r3, 0x1, 0x8, 0x6, @multicast}, 0x14)
r6 = socket$packet(0x11, 0x2, 0x300)
r7 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtaction={0x6c, 0x30, 0x1, 0x8000000, 0xfffffffd, {}, [{0x58, 0x1, [@m_tunnel_key={0x54, 0x1, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2}]}, {0x10, 0x6, "156c58e61400000000000000"}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x240400c0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$packet_int(r6, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4)
setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x700a}, 0x94)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000004e000100000000e2ff0080000003"], 0x20}}, 0x0)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})

15.889098859s ago: executing program 0 (id=5840):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r2, &(0x7f0000000340), &(0x7f0000000a00)=""/4096}, 0x20)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}}, 0x0)
r5 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000057e010008000a00", @ANYRES32=r9, @ANYBLOB="28001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00e21cc27540000040060000d5fb15dc9e3e5746cbedb65d90a82e8d46ccdb8d41e1da41c2229b840ee566a1cb079c6617ba9da6a1354f6ea380d685"], 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0)

15.761896289s ago: executing program 1 (id=5841):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_TIOCINQ(r1, 0x80108907, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x3a}}}, @rthdr={{0x48, 0x29, 0x39, {0xb3, 0x6, 0x1, 0x1, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @private1]}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x5e, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @enc_lim={0x4, 0x1, 0x50}, @hao={0xc9, 0x10, @local}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x5}}], 0xa8}, 0xc4)
ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000000))

15.71147257s ago: executing program 0 (id=5842):
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
syz_emit_ethernet(0x66, 0x0, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) (async, rerun: 64)
r0 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (rerun: 64)
sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet(0x2, 0x3, 0x33) (async, rerun: 32)
socket$unix(0x1, 0x5, 0x0) (async, rerun: 32)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40810}, 0x4040000) (async)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$l2tp6(0xa, 0x2, 0x73)
syz_emit_ethernet(0x46, 0x0, 0x0) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf200000000000001600020038e873a23d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (rerun: 32)
r2 = socket$nl_audit(0x10, 0x3, 0x9) (async)
socket$can_bcm(0x1d, 0x2, 0x2)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) (async)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000002c0)="fe2420b3b7d66e3ea4826aa3bdbf1e9a0e472690b5abd0fb00ce10fa0143be83a5fd96e52562c83624afc9f5f2877c99f5c41541b3bf865f3eba8c64a6f2a81a055bc5ffc08e73905eb4ee3ddae89f133a6defd111b76a3df0020353d897d5b1a0b0357dfc761e0aed6d4d3ad7d2891e8fa8589eac8a217a31cb0fa26310d4b049035fcfea784eff4e109ad655519cfb7e51fa188ffcf1691ca532819e37d614a391a0d604f0077c747f3b8b28fb038062d41254e55d23adbcd39e507d8b265f49762542e4289cf2c240d1bd0bf77dd5cd5ed98240f5e8727224c7874d9fbf6e46323fd32496d58b6c0265c6", 0xec) (async, rerun: 32)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) (rerun: 32)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) (async)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0300"/28], 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) (async, rerun: 32)
accept$alg(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
r4 = gettid() (async)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f00000000c0)) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 32)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000000000001f8ffdbdf2500007400", @ANYRES32=r3, @ANYBLOB="089805000750050008001300", @ANYRES32=r4, @ANYBLOB="08002c0005000000140003"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4040010) (rerun: 32)

15.710809207s ago: executing program 1 (id=5843):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) (async)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22, 0x8000}, 0x1c) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2}, 0x48) (async)
syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, 'D\x00', 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0xff6f, {[@generic={0x2, 0x2}, @md5sig={0x13, 0x12, "a4d40e239c6e5d57f8d88441b8183a4a"}]}}}}}}}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, <r4=>0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0600000014000100ff0500"], 0x30}, 0x1, 0xba01, 0x0, 0x18014}, 0x4000890) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000fc0)={r3, &(0x7f0000000140)="44108d4035aabe428d7c7955b35991f88f77051dbb37b2b2ae944fd2e943d04809b1816de810bba04f493cc731056c5df6", &(0x7f0000000f80)=@buf="d2406a56cdae67a6e2e2edcf75e90b02061a05040a36fefe917a9bb2879de7498b79fc086c32e4e92de438404587b13d61ee5939e00d2be199", 0x4}, 0x20) (async)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r4, 0x0, &(0x7f0000001780)=""/4096}, 0x20)
write(r0, &(0x7f0000000000)="29000000140005b7ff000000040860eb01cb02fcb2e4e6589b3e0ed7283f14b912685e684c42b9eeb970a0dfcdfc4004cdb70466518907efd04373a0e64e30bbd8f6d482f064874c320d3eda9067fc06ab58535c495fd89031c9c401da39256c0020e02ea50a3c870ad0f017b0821423efe16e048897f1364e6714c2841bce4aa427eadc87e949bbc8376e1d99f5a4c24a", 0x91) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003600)=ANY=[@ANYBLOB="340000003e0007010300a4fb00000000017c00000400428011000100686df33329f30001000000000000000008000280"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xd4}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x19)

15.646225582s ago: executing program 0 (id=5844):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000000000500000a80000000060a0154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a3100000000140000001100010000000000000000000100000a00"/168], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001}) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000280)={<r4=>r3, 0x7, 0x104, 0x7ff})
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (async)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRES32=r4], 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000005000000020000000000000f8300000044942d050000000400000f01000000050000000900000000000000040000000400000004000000830000000100000080002e616100"/105], &(0x7f00000014c0)=""/2, 0x69, 0x2, 0x1}, 0x28)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, 0x0, 0x0) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})

15.645684832s ago: executing program 1 (id=5845):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}, @hopopts_2292={{0x18}}], 0x40}, 0x0)
sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="1f913b82b49495ad85f4d3451fbaadceca498374e58a5fe173c301da3bec0e2fd4b2fbed82050cbe4a26170b13fd90c6", 0x30}, {&(0x7f0000000140)="d4bb064c949ba19b0de73dcc527e6bda8b173d436c771f422ddc23e69d3f1171b58b1dfcc111760c5302c2dd34024c", 0x2f}, {&(0x7f0000000180)="f86104c80abdf8bfaba6c4796b0eb3c229f32716ff6fd47bd9c26b2ce1ced40aea4c0c5312d80bc28f46f4e3294354aa1f1f7f74bab7108368387cbfbf422650e7aeb3ef27dfaaf01416ca74b8d5e3f598cc2c", 0x53}], 0x4, &(0x7f00000002c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x94, 0x0, 0x7, {[@rr={0x7, 0x17, 0xe2, [@local, @local, @multicast1, @private=0xa010100, @empty]}, @rr={0x7, 0x7, 0xf1, [@rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x1c, 0xc1, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x43}, {@multicast2, 0x2}]}, @cipso={0x86, 0x9, 0x1, [{0x2, 0x3, 'v'}]}, @timestamp_addr={0x44, 0x24, 0x9b, 0x1, 0x7, [{@loopback, 0x3}, {@empty, 0xffff8001}, {@rand_addr=0x64010101, 0x2}, {@multicast1, 0x8}]}, @lsrr={0x83, 0x7, 0x8d, [@local]}, @ssrr={0x89, 0x13, 0x2c, [@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}, @ip_retopts={{0x58, 0x0, 0x7, {[@lsrr={0x83, 0x17, 0x1b, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @remote, @multicast2]}, @timestamp_addr={0x44, 0x14, 0xbb, 0x1, 0x2, [{@private=0xa010100, 0x102}, {@local, 0x6}]}, @end, @timestamp_prespec={0x44, 0xc, 0xb7, 0x3, 0x8, [{@remote, 0x7}]}, @rr={0x7, 0xf, 0xaa, [@multicast1, @loopback, @private=0xa010100]}, @noop]}}}, @ip_retopts={{0x64, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0xfa, 0x1, 0x3, [{@rand_addr=0x64010100, 0xfffffffd}, {@private=0xa010100, 0x3c8000}, {@multicast2, 0x5}, {@loopback, 0x2}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xa8, 0x0, 0x8, [0xffffff35, 0x1000, 0x2, 0x1, 0x3, 0x1, 0xcc6, 0x0]}, @generic={0x82, 0x6, "5dc20f2d"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0xff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}], 0x1e8}, 0x40020)

15.591786831s ago: executing program 1 (id=5846):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x8000}}, @func_proto]}}, 0x0, 0x3e, 0x0, 0x1, 0x3}, 0x28)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001f80)={@ifindex, 0xffffffffffffffff, 0x15, 0x103c}, 0x20)
unshare(0x6a040000)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x5f, 0x3e, &(0x7f0000000180)="fce89de2690cd6dc35e03bb22fbb0cac7d8459955717c132cd9c0dd471d4307a3e19c0bea643071aab1938a595d27d657a55f5f8e48ffab486498b29eb52d72c17ccad11a6469b7bef94e049bcd8f36b5b4af9d1f5d342603196739d9123e6", &(0x7f0000000240)=""/62, 0x9, 0x0, 0x26, 0x15, &(0x7f0000000280)="5378680a9fb52db3456dcb5e4da4d2c9dc9109389ffa13e90a499f885b247fcd34071a39474c", &(0x7f00000002c0)="e648f8ab6eaf50b82049e83ccb402db6ee7d0a7b02", 0x6, 0x0, 0x8}, 0x50)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r6=>0x0)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840)
write$nci(r2, &(0x7f0000000300)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x7, @v={0x5, 0x0, 0x6, 0x6, {0x6, 0x81, "ec335984a2abc9ac"}, 0x2}}, 0x12)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0xe9, @dev={0xfe, 0x80, '\x00', 0xa}, 0x5}, 0x1c)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x2, @mcast1, 0x1}, 0x1c)

1.064746959s ago: executing program 32 (id=5835):
socket$kcm(0x29, 0x5, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e00000010000000024000000000000000000000007000000071407"], 0x48}, 0x200040c4)
syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
r4 = socket(0x1d, 0x2, 0x6)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0xb8, r2, 0x9, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x24004420}, 0x24000004)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0xffff}, {}, {}, {0x5, 0x0, 0xb, 0xa}, {0x85, 0x0, 0x0, 0xaa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r9, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r9}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
r10 = socket(0x400000000010, 0x3, 0x0)
r11 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x4044848)
sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@gettfilter={0x24, 0x2e, 0x302, 0x70bd2c, 0x2ddfdbfb, {0x0, 0x0, 0x0, r12, {0x10, 0xb}, {0x8, 0xfff1}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041081)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_SETHMAC(r15, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x34, r14, 0x20d, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x26]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000)
sendmsg$SEG6_CMD_SETHMAC(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010028bd7000fcdbdf250100000005000600af0000000800030006000000050005000000000020"], 0x2c}}, 0x24000806)

46.060434ms ago: executing program 33 (id=5844):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000000000500000a80000000060a0154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a3100000000140000001100010000000000000000000100000a00"/168], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001}) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000280)={<r4=>r3, 0x7, 0x104, 0x7ff})
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (async)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRES32=r4], 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000005000000020000000000000f8300000044942d050000000400000f01000000050000000900000000000000040000000400000004000000830000000100000080002e616100"/105], &(0x7f00000014c0)=""/2, 0x69, 0x2, 0x1}, 0x28)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, 0x0, 0x0) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})

0s ago: executing program 34 (id=5846):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x8000}}, @func_proto]}}, 0x0, 0x3e, 0x0, 0x1, 0x3}, 0x28)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001f80)={@ifindex, 0xffffffffffffffff, 0x15, 0x103c}, 0x20)
unshare(0x6a040000)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x5f, 0x3e, &(0x7f0000000180)="fce89de2690cd6dc35e03bb22fbb0cac7d8459955717c132cd9c0dd471d4307a3e19c0bea643071aab1938a595d27d657a55f5f8e48ffab486498b29eb52d72c17ccad11a6469b7bef94e049bcd8f36b5b4af9d1f5d342603196739d9123e6", &(0x7f0000000240)=""/62, 0x9, 0x0, 0x26, 0x15, &(0x7f0000000280)="5378680a9fb52db3456dcb5e4da4d2c9dc9109389ffa13e90a499f885b247fcd34071a39474c", &(0x7f00000002c0)="e648f8ab6eaf50b82049e83ccb402db6ee7d0a7b02", 0x6, 0x0, 0x8}, 0x50)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r6=>0x0)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840)
write$nci(r2, &(0x7f0000000300)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x7, @v={0x5, 0x0, 0x6, 0x6, {0x6, 0x81, "ec335984a2abc9ac"}, 0x2}}, 0x12)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0xffff, 0xe9, @dev={0xfe, 0x80, '\x00', 0xa}, 0x5}, 0x1c)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x2, @mcast1, 0x1}, 0x1c)

kernel console output (not intermixed with test programs):

] netlink: 199768 bytes leftover after parsing attributes in process `syz.0.4713'.
[  496.992913][T24327] netlink: 'syz.1.4714': attribute type 1 has an invalid length.
[  496.997468][T24327] workqueue: Failed to create a rescuer kthread for wq "bond46": -EINTR
[  497.085070][T24340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4716'.
[  497.121535][T24339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4716'.
[  497.135629][T24348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4718'.
[  497.157676][T24353] xt_bpf: check failed: parse error
[  497.423549][T24365] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  497.431142][T24365] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  497.481578][T24372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4727'.
[  497.514418][T24379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4729'.
[  497.573183][T24387] veth0: entered promiscuous mode
[  497.614288][T24376] veth0: left promiscuous mode
[  497.625181][T24389] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4730'.
[  497.688250][T24393] netlink: 'syz.0.4733': attribute type 2 has an invalid length.
[  497.736279][T24398] lo speed is unknown, defaulting to 1000
[  497.941601][   T34] audit: type=1800 audit(1780976985.088:18): pid=24418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4740" name="blkio.bfq.time_recursive" dev="tmpfs" ino=7787 res=0 errno=0
[  498.083482][T24420] xt_hashlimit: size too large, truncated to 1048576
[  498.135117][T24427] netlink: 'syz.1.4742': attribute type 13 has an invalid length.
[  498.144644][T24427] netlink: 'syz.1.4742': attribute type 17 has an invalid length.
[  498.244790][T24430] netlink: 'syz.1.4742': attribute type 1 has an invalid length.
[  498.360301][T24435] netlink: 'syz.2.4743': attribute type 1 has an invalid length.
[  498.517210][T24427] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  498.595103][T24440] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  498.626518][T24442] xt_hashlimit: size too large, truncated to 1048576
[  498.882807][T24457] lo speed is unknown, defaulting to 1000
[  499.075171][T24463] netlink: 'syz.2.4752': attribute type 2 has an invalid length.
[  499.078785][T24463] netlink: 'syz.2.4752': attribute type 2 has an invalid length.
[  499.964022][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  499.970185][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  499.976740][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  499.983482][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  500.080951][T24503] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  500.084385][T24503] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  500.142620][T24505] tipc: Resetting bearer <eth:syzkaller0>
[  500.640727][T24531] workqueue: Failed to create a rescuer kthread for wq "bond59": -EINTR
[  500.985379][T24551] tap0: tun_chr_ioctl cmd 1074025681
[  500.991102][T24549] tap0: tun_chr_ioctl cmd 1074025673
[  500.994607][T24546] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  500.998673][T24546] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  501.070529][T24555] netlink: 'syz.0.4772': attribute type 1 has an invalid length.
[  501.094546][T24555] 8021q: adding VLAN 0 to HW filter on device bond59
[  501.122493][T24555] bond59: (slave veth85): Enslaving as an active interface with a down link
[  501.146467][T24555] bond59: (slave veth87): Enslaving as an active interface with a down link
[  501.828867][T24572] __nla_validate_parse: 16 callbacks suppressed
[  501.828884][T24572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4775'.
[  501.901592][T24579] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4777'.
[  501.905852][T24579] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  501.915023][T24579] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4777'.
[  501.988846][T24581] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4778'.
[  501.992580][T24581] netlink: 'syz.1.4778': attribute type 3 has an invalid length.
[  501.995168][T24581] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4778'.
[  502.364402][T24602] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4782'.
[  502.375497][T24602] ip6gre7: entered promiscuous mode
[  502.378188][T24602] ip6gre7: entered allmulticast mode
[  502.386773][T24602] netlink: 'syz.0.4782': attribute type 6 has an invalid length.
[  502.390300][T24602] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4782'.
[  502.726884][T24619] netlink: 'syz.0.4787': attribute type 1 has an invalid length.
[  502.746194][T24619] 8021q: adding VLAN 0 to HW filter on device bond61
[  502.854873][T24622] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  502.876439][T24622] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  502.977288][T24639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4791'.
[  502.995347][T24636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4790'.
[  503.095842][T24645] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  503.129832][T24645] ip6gre7: left promiscuous mode
[  503.134016][T24645] ip6gre7: left allmulticast mode
[  504.018248][T24664] validate_nla: 1 callbacks suppressed
[  504.018268][T24664] netlink: 'syz.1.4798': attribute type 2 has an invalid length.
[  504.027757][T24664] netlink: 'syz.1.4798': attribute type 2 has an invalid length.
[  504.160296][T24675] netlink: 'syz.0.4801': attribute type 1 has an invalid length.
[  504.292473][T24663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4799'.
[  504.435416][T24695] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  504.565601][T24702] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  505.100103][ T6311] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  505.108268][ T6311] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  505.119325][ T6311] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  505.125378][ T6311] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  505.452993][T24751] netlink: 'syz.0.4822': attribute type 1 has an invalid length.
[  505.476412][T24751] 8021q: adding VLAN 0 to HW filter on device bond62
[  505.489745][T24751] bond62: (slave veth89): Enslaving as a backup interface with a down link
[  505.494301][T24755] gretap0: entered promiscuous mode
[  505.596607][T24763] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  505.601957][T24763] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  505.648657][T24765] netlink: 'syz.1.4827': attribute type 10 has an invalid length.
[  505.751793][T24784] netlink: 'syz.0.4831': attribute type 1 has an invalid length.
[  505.788396][T24784] netlink: 'syz.0.4831': attribute type 10 has an invalid length.
[  505.835587][T24784] bond63: (slave bridge25): making interface the new active one
[  505.839243][T24784] bond63: (slave bridge25): Enslaving as an active interface with an up link
[  505.851631][T24784] bond63: entered promiscuous mode
[  505.853611][T24784] bridge25: entered promiscuous mode
[  505.855571][T24784] bond63: entered allmulticast mode
[  505.857302][T24784] bridge25: entered allmulticast mode
[  505.859462][T24784] 8021q: adding VLAN 0 to HW filter on device bond63
[  506.058488][T24799] veth91: entered allmulticast mode
[  506.067958][T24799] bond64: (slave veth91): Enslaving as an active interface with an up link
[  506.278084][T24813] netlink: 'syz.0.4839': attribute type 21 has an invalid length.
[  506.285573][T24813] netlink: 'syz.0.4839': attribute type 21 has an invalid length.
[  507.129955][T24829] netlink: 'syz.2.4843': attribute type 10 has an invalid length.
[  507.146176][T24834] __nla_validate_parse: 16 callbacks suppressed
[  507.146189][T24834] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4844'.
[  507.275155][T24853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4849'.
[  507.297894][T24847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4846'.
[  507.408884][T24859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4850'.
[  507.458029][T24861] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  507.483038][T24861] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  507.486563][T24861] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  507.492054][T24861] tipc: Resetting bearer <eth:syzkaller0>
[  507.852429][T24887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4856'.
[  507.945621][T24892] 8021q: adding VLAN 0 to HW filter on device bond60
[  507.953054][T24892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4857'.
[  508.067161][T24898] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4858'.
[  508.138701][T24904] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4862'.
[  508.328107][T24914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4866'.
[  508.338956][T24919] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4867'.
[  508.481256][T24931] bond65: entered promiscuous mode
[  508.490601][T24931] 8021q: adding VLAN 0 to HW filter on device bond65
[  508.953365][T24950] netlink: 'syz.2.4876': attribute type 11 has an invalid length.
[  509.061623][T24954] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  509.541379][T25001] validate_nla: 2 callbacks suppressed
[  509.541395][T25001] netlink: 'syz.0.4888': attribute type 30 has an invalid length.
[  509.603426][T25001] bond66: option arp_missed_max: invalid value (0)
[  509.617532][T25001] bond66: option arp_missed_max: allowed values 1 - 255
[  509.630432][T25001] bond66 (unregistering): Released all slaves
[  509.788191][T25022] xt_bpf: check failed: parse error
[  509.881151][T25020] netlink: 'syz.0.4892': attribute type 2 has an invalid length.
[  509.889779][T25020] netlink: 'syz.0.4892': attribute type 2 has an invalid length.
[  509.897454][T25019] netlink: 'syz.0.4892': attribute type 2 has an invalid length.
[  509.906467][T25019] netlink: 'syz.0.4892': attribute type 2 has an invalid length.
[  509.959425][T25030] netlink: 'syz.1.4894': attribute type 10 has an invalid length.
[  510.228533][T25040] lo speed is unknown, defaulting to 1000
[  511.045868][T25080] lo speed is unknown, defaulting to 1000
[  511.140415][T25087] mac80211_hwsim hwsim29 wlan0: left promiscuous mode
[  511.148536][T25087] mac80211_hwsim hwsim29 wlan0: left allmulticast mode
[  511.152129][T25087] sit4: left allmulticast mode
[  511.156446][T25087] veth51: left allmulticast mode
[  511.158991][T25087] veth53: left allmulticast mode
[  511.161887][T25087] bond39: left promiscuous mode
[  511.164212][T25087] vlan0: left allmulticast mode
[  511.166211][T25087] bond44: left allmulticast mode
[  511.379083][T25101] netlink: 'syz.1.4912': attribute type 1 has an invalid length.
[  511.404582][T25101] 8021q: adding VLAN 0 to HW filter on device bond46
[  511.426489][T25101] veth69: entered allmulticast mode
[  511.435315][T25101] bond46: (slave veth69): Enslaving as an active interface with an up link
[  511.585642][T25111] netlink: 'syz.1.4915': attribute type 1 has an invalid length.
[  511.632228][T25111] 8021q: adding VLAN 0 to HW filter on device bond47
[  511.645276][T25113] 8021q: adding VLAN 0 to HW filter on device batadv2
[  511.655888][T25113] bond47: (slave batadv2): making interface the new active one
[  511.662227][T25113] bond47: (slave batadv2): Enslaving as an active interface with an up link
[  511.946494][T25130] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  511.959679][T25130] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  512.157969][T25133] tipc: Resetting bearer <eth:syzkaller0>
[  512.188886][T25143] netlink: 'syz.0.4923': attribute type 5 has an invalid length.
[  512.194568][T25143] __nla_validate_parse: 15 callbacks suppressed
[  512.194584][T25143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4923'.
[  512.218830][T25146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4921'.
[  512.232796][ T5673] lo speed is unknown, defaulting to 1000
[  512.269090][T25143] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  512.289052][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  512.296026][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  512.301384][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  512.305705][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  512.371695][T25155] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4925'.
[  512.377780][T25154] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4925'.
[  512.396826][T25150] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  512.407602][T25150] bond63: left promiscuous mode
[  512.410774][T25150] bridge25: left promiscuous mode
[  512.414871][T25150] bond65: left promiscuous mode
[  512.548330][T25164] lo speed is unknown, defaulting to 1000
[  513.560419][T25205] openvswitch: netlink: Key type 30 is not supported
[  513.567140][T25195] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4937'.
[  513.583749][T25195] netlink: 'syz.2.4937': attribute type 21 has an invalid length.
[  513.590362][T25195] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4937'.
[  513.596608][T25214] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4939'.
[  513.599795][T25195] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4937'.
[  513.693777][T25218] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  513.722028][T25216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4940'.
[  513.845216][T25226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4940'.
[  514.566714][T25232] validate_nla: 2 callbacks suppressed
[  514.566738][T25232] netlink: 'syz.1.4944': attribute type 1 has an invalid length.
[  514.608653][T25232] veth73: entered promiscuous mode
[  514.618304][T25232] bond48: (slave veth73): Enslaving as a backup interface with a down link
[  514.626673][T25232] 8021q: adding VLAN 0 to HW filter on device bond48
[  514.723106][T25242] bridge34: port 1(veth75) entered blocking state
[  514.726134][T25242] bridge34: port 1(veth75) entered disabled state
[  514.729360][T25242] veth75: entered allmulticast mode
[  514.734467][T25242] veth75: entered promiscuous mode
[  514.734489][T25245] netlink: 'syz.2.4948': attribute type 1 has an invalid length.
[  514.740423][T25242] bridge34: port 2(veth0_to_bond) entered blocking state
[  514.743429][T25242] bridge34: port 2(veth0_to_bond) entered disabled state
[  514.746406][T25242] veth0_to_bond: entered allmulticast mode
[  514.749360][T25242] veth0_to_bond: entered promiscuous mode
[  514.772655][T25242] bridge34: port 3(veth77) entered blocking state
[  514.779822][T25242] bridge34: port 3(veth77) entered disabled state
[  514.783829][T25242] veth77: entered allmulticast mode
[  514.789983][T25242] veth77: entered promiscuous mode
[  514.818929][T25245] veth61: entered promiscuous mode
[  514.928686][T25262] vlan1: left allmulticast mode
[  514.931026][T25262] geneve0: left allmulticast mode
[  514.934180][T25262] bridge0: port 1(vlan1) entered disabled state
[  514.942440][T25262] bond47: (slave veth1): Releasing active interface
[  514.945350][T25262] bond47: (slave veth1): the permanent HWaddr of slave - f6:67:52:82:4b:d0 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  514.956555][T25262] bond47: (slave veth63): Releasing active interface
[  514.961819][T25262] veth67: left allmulticast mode
[  514.964099][T25262] veth67: left promiscuous mode
[  514.966444][T25262] bridge21: port 1(veth67) entered disabled state
[  514.976450][T25262] bond50: (slave ip6gre6): Releasing backup interface
[  514.986498][T25262] bond52: (slave veth69): Releasing backup interface
[  514.993436][T25262] veth79: left allmulticast mode
[  514.995803][T25262] veth79: left promiscuous mode
[  514.998139][T25262] bridge22: port 1(veth79) entered disabled state
[  515.005035][T25262] veth81: left allmulticast mode
[  515.007440][T25262] veth81: left promiscuous mode
[  515.009387][T25262] bridge22: port 2(veth81) entered disabled state
[  515.018323][T25262] bond59: (slave veth85): Releasing active interface
[  515.021322][T25262] bond59: (slave veth85): the permanent HWaddr of slave - ee:07:05:c0:7d:59 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  515.028643][T25262] bond59: (slave veth87): Releasing active interface
[  515.034333][T25262] bond62: (slave veth89): Releasing backup interface
[  515.043135][T25262] bond63: (slave bridge25): Releasing active interface
[  515.045551][T25262] bridge25: left allmulticast mode
[  515.055775][T25262] bond64: (slave veth91): Releasing backup interface
[  515.149711][T25279] netlink: 'syz.1.4957': attribute type 29 has an invalid length.
[  515.177304][T25279] netlink: 'syz.1.4957': attribute type 29 has an invalid length.
[  515.183017][T25279] netlink: 'syz.1.4957': attribute type 29 has an invalid length.
[  515.187473][T25279] netlink: 'syz.1.4957': attribute type 29 has an invalid length.
[  515.191653][T25279] netlink: 'syz.1.4957': attribute type 29 has an invalid length.
[  515.194451][T25279] netlink: 'syz.1.4957': attribute type 29 has an invalid length.
[  515.197355][T25279] netlink: 'syz.1.4957': attribute type 29 has an invalid length.
[  515.200503][T25279] netlink: 'syz.1.4957': attribute type 29 has an invalid length.
[  515.350315][T25288] 8021q: adding VLAN 0 to HW filter on device bond66
[  515.444790][T25302] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[  515.484924][T25299] lo speed is unknown, defaulting to 1000
[  515.585098][T25305] bond67: entered promiscuous mode
[  515.587725][T25305] 8021q: adding VLAN 0 to HW filter on device bond67
[  515.615296][T25305] bond67: (slave bridge26): making interface the new active one
[  515.618290][T25305] bridge26: entered promiscuous mode
[  515.623298][T25305] bond67: (slave bridge26): Enslaving as an active interface with an up link
[  515.761523][T25309] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  515.765728][T25309] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  515.830487][T25311] tipc: Resetting bearer <eth:syzkaller0>
[  516.470737][T25326] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  516.475512][T25326] mac80211_hwsim hwsim5 +: renamed from syzkaller0
[  516.483321][T25326] tipc: Disabling bearer <eth:syzkaller0>
[  516.973775][T25376] lo speed is unknown, defaulting to 1000
[  517.323993][T25387] __nla_validate_parse: 93 callbacks suppressed
[  517.324008][T25387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4982'.
[  517.372083][T25389] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  517.548249][T25392] lo speed is unknown, defaulting to 1000
[  517.830345][T25396] lo speed is unknown, defaulting to 1000
[  518.242293][T25411] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4988'.
[  518.245704][T25411] openvswitch: netlink: Flow key attr not present in new flow.
[  518.252195][T25411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4988'.
[  518.431950][T25416] syzkaller0: entered promiscuous mode
[  518.442260][T25416] syzkaller0: entered allmulticast mode
[  518.678620][T25424] bond61: entered promiscuous mode
[  518.681047][T25424] 8021q: adding VLAN 0 to HW filter on device bond61
[  519.459966][T25465] bond62: entered promiscuous mode
[  519.646788][T25473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5001'.
[  519.713103][T25465] bond57: (slave geneve4): Releasing active interface
[  519.727237][T25465] bond58: (slave veth83): Releasing backup interface
[  519.731270][T25465] veth83: left promiscuous mode
[  519.772732][ T6838] lo speed is unknown, defaulting to 1000
[  519.779700][ T6838] syz2: Port: 1 Link DOWN
[  519.801815][T25464] bond62: left promiscuous mode
[  519.904753][T25486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5002'.
[  519.952898][T25486] 8021q: adding VLAN 0 to HW filter on device bond63
[  519.978045][T25486] ipvlan4: entered allmulticast mode
[  519.981871][T25486] bond63: entered allmulticast mode
[  519.994442][T25486] bond63: (slave ipip1): refused to change device type
[  520.081921][T25502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5005'.
[  520.135662][T25502] bridge27: port 1(veth93) entered blocking state
[  520.153812][T25502] bridge27: port 1(veth93) entered disabled state
[  520.160096][T25502] veth93: entered allmulticast mode
[  520.167076][T25502] veth93: entered promiscuous mode
[  520.176676][T25513] validate_nla: 75 callbacks suppressed
[  520.176697][T25513] netlink: 'syz.1.5008': attribute type 13 has an invalid length.
[  520.190726][T25513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5008'.
[  520.197827][T25502] netlink: 'syz.0.5005': attribute type 1 has an invalid length.
[  520.252473][T25502] bridge27: port 2(veth95) entered blocking state
[  520.257078][T25502] bridge27: port 2(veth95) entered disabled state
[  520.263757][T25502] veth95: entered allmulticast mode
[  520.267779][T25502] veth95: entered promiscuous mode
[  520.333254][T25523] bond0: (slave ip6tnl0): refused to change device type
[  520.390461][T25533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5009'.
[  520.580984][T25551] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5015'.
[  520.658730][T25551] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5015'.
[  520.803395][T25559] lo speed is unknown, defaulting to 1000
[  521.018402][T25560] bond68: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  521.025032][T25560] bond68 (unregistering): Released all slaves
[  521.050020][T25563] netlink: 'syz.0.5016': attribute type 4 has an invalid length.
[  521.221971][T25576] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  521.225279][T25576] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  521.235370][T25576] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  521.633597][T25594] veth0: entered promiscuous mode
[  521.644787][T25594] veth0 (unregistering): left promiscuous mode
[  521.841375][T25605] bond67: (slave bridge26): Releasing backup interface
[  521.846192][T25605] bridge26: left promiscuous mode
[  521.885285][T25605] veth93: left allmulticast mode
[  521.888944][T25605] veth93: left promiscuous mode
[  521.893639][T25605] bridge27: port 1(veth93) entered disabled state
[  521.905189][T25605] veth95: left allmulticast mode
[  521.910725][T25605] veth95: left promiscuous mode
[  521.912528][T25605] bridge27: port 2(veth95) entered disabled state
[  522.194657][T25621] bridge0: port 1(vlan4) entered blocking state
[  522.197246][T25621] bridge0: port 1(vlan4) entered disabled state
[  522.202384][T25621] vlan4: entered allmulticast mode
[  522.204478][T25621] geneve0: entered allmulticast mode
[  522.519477][T25642] xt_hashlimit: size too large, truncated to 1048576
[  522.738445][T25659] __nla_validate_parse: 3 callbacks suppressed
[  522.738460][T25659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5041'.
[  522.888137][T25664] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5042'.
[  523.213261][T25674] xt_hashlimit: size too large, truncated to 1048576
[  523.434251][T25683] netlink: 'syz.0.5047': attribute type 13 has an invalid length.
[  523.437769][T25683] netlink: 'syz.0.5047': attribute type 17 has an invalid length.
[  523.490960][T25683] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  523.708887][T25692] netlink: 292 bytes leftover after parsing attributes in process `syz.1.5049'.
[  523.856151][T25697] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5051'.
[  523.857479][T25698] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5051'.
[  523.878051][T25703] x_tables: duplicate underflow at hook 3
[  523.883996][T25696] ipt_ECN: cannot use operation on non-tcp rule
[  523.894157][T25697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5051'.
[  523.898125][T25696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5051'.
[  523.983304][T25708] 5: entered promiscuous mode
[  524.100351][T25712] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5055'.
[  524.103731][T25712] netlink: 'syz.1.5055': attribute type 3 has an invalid length.
[  524.106659][T25712] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5055'.
[  524.378215][T25734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5060'.
[  524.427944][T25734] bridge28: port 1(veth97) entered blocking state
[  524.432038][T25734] bridge28: port 1(veth97) entered disabled state
[  524.435254][T25734] veth97: entered allmulticast mode
[  524.440689][T25734] veth97: entered promiscuous mode
[  524.465080][T25734] bridge28: port 2(veth99) entered blocking state
[  524.468157][T25734] bridge28: port 2(veth99) entered disabled state
[  524.472016][T25734] veth99: entered allmulticast mode
[  524.476459][T25734] veth99: entered promiscuous mode
[  524.572709][T25742] netlink: 'syz.0.5063': attribute type 1 has an invalid length.
[  524.575463][T25743] netlink: 'syz.0.5063': attribute type 1 has an invalid length.
[  524.591151][T25742] bond68: entered promiscuous mode
[  524.593773][T25742] 8021q: adding VLAN 0 to HW filter on device bond68
[  524.625749][T25743] bond68: (slave veth101): making interface the new active one
[  524.631806][T25743] veth101: entered promiscuous mode
[  524.643918][T25743] bond68: (slave veth101): Enslaving as an active interface with an up link
[  524.942916][T25753] lo speed is unknown, defaulting to 1000
[  524.978117][T25760] IPVS: sh: FWM 3 0x00000003 - no destination available
[  525.296869][T25764] lo speed is unknown, defaulting to 1000
[  525.728727][T25784] netlink: 'syz.0.5072': attribute type 1 has an invalid length.
[  525.768176][T25784] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  525.791998][T25784] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  525.863297][T25791] netlink: 'syz.0.5074': attribute type 4 has an invalid length.
[  525.874550][T25791] netlink: 'syz.0.5074': attribute type 4 has an invalid length.
[  525.915389][T25791] netlink: 'syz.0.5074': attribute type 4 has an invalid length.
[  526.035124][T25794] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  526.041789][   T31] lo speed is unknown, defaulting to 1000
[  526.046201][   T31] syz2: Port: 1 Link ACTIVE
[  526.055132][T25797] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  526.263184][T25805] netlink: 'syz.0.5079': attribute type 2 has an invalid length.
[  527.402317][T25833] xt_bpf: check failed: parse error
[  527.407966][T25833] netlink: 'syz.2.5087': attribute type 1 has an invalid length.
[  527.436594][T25833] 8021q: adding VLAN 0 to HW filter on device bond65
[  527.505177][T25837] bridge35: port 1(veth79) entered blocking state
[  527.508204][T25837] bridge35: port 1(veth79) entered disabled state
[  527.513851][T25837] veth79: entered allmulticast mode
[  527.518021][T25837] veth79: entered promiscuous mode
[  527.527488][T25837] veth0_to_bond: left allmulticast mode
[  527.530619][T25837] veth0_to_bond: left promiscuous mode
[  527.533519][T25837] bridge34: port 2(veth0_to_bond) entered disabled state
[  527.540564][T25837] bridge35: port 2(veth0_to_bond) entered blocking state
[  527.543794][T25837] bridge35: port 2(veth0_to_bond) entered disabled state
[  527.546996][T25837] veth0_to_bond: entered allmulticast mode
[  527.552935][T25837] veth0_to_bond: entered promiscuous mode
[  527.575664][T25837] bridge35: port 3(veth81) entered blocking state
[  527.581869][T25837] bridge35: port 3(veth81) entered disabled state
[  527.585196][T25837] veth81: entered allmulticast mode
[  527.589344][T25837] veth81: entered promiscuous mode
[  527.823002][T25851] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  527.829742][T25851] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  527.833602][T25851] veth69: left allmulticast mode
[  527.836070][T25851] veth73: left promiscuous mode
[  527.854353][T25853] netlink: 'syz.2.5091': attribute type 1 has an invalid length.
[  527.878534][T25853] 8021q: adding VLAN 0 to HW filter on device bond66
[  527.914381][T25853] __nla_validate_parse: 11 callbacks suppressed
[  527.914396][T25853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5091'.
[  528.645146][T25886] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  528.648362][T25886] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  528.686827][T25885] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  528.698880][T25885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5098'.
[  528.745871][T25886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5098'.
[  528.889204][T25893] vlan4: left allmulticast mode
[  528.893920][T25893] geneve0: left allmulticast mode
[  528.895949][T25893] bridge0: port 1(vlan4) entered disabled state
[  528.953775][T25902] bond0: Error: Cannot enslave bond to itself.
[  528.956104][T25903] bridge0: entered allmulticast mode
[  528.980860][T25907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5103'.
[  528.990750][T25908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5103'.
[  528.993976][T25908] bridge: RTM_NEWNEIGH with invalid state 0x0
[  528.996656][T25907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5103'.
[  528.999937][T25907] bridge: RTM_NEWNEIGH with invalid state 0x0
[  529.007440][T25909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5101'.
[  529.019032][T25908] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5103'.
[  529.089849][T25912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5104'.
[  529.153986][T25918] netlink: 'syz.2.5106': attribute type 30 has an invalid length.
[  529.158382][T25918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5106'.
[  529.167096][T25918] netlink: 'syz.2.5106': attribute type 30 has an invalid length.
[  529.172554][T25918] IPVS: set_ctl: invalid protocol: 36 224.0.0.2:20000
[  529.261989][T25921] netlink: 'syz.2.5107': attribute type 10 has an invalid length.
[  529.287201][T25921] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  529.776040][T25925] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  529.922518][T25931] lo speed is unknown, defaulting to 1000
[  530.065846][T25938] ip6_vti0: entered promiscuous mode
[  530.803099][T25972] validate_nla: 87 callbacks suppressed
[  530.803122][T25972] netlink: 'syz.1.5122': attribute type 1 has an invalid length.
[  530.990833][T25979] bond51: (slave bridge36): making interface the new active one
[  530.997193][T25979] bond51: (slave bridge36): Enslaving as an active interface with an up link
[  531.035264][T25973] bond51: (slave bridge37): Enslaving as an active interface with a down link
[  531.105143][T25987] netlink: Conntrack attr has 3 unknown bytes
[  531.166207][T25995] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap6
[  531.173355][T25995] batman_adv: batadv0: Adding interface: gretap6
[  531.175536][T25995] batman_adv: batadv0: The MTU of interface gretap6 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  531.184072][T25995] batman_adv: batadv0: Interface activated: gretap6
[  531.324369][T26004] ipt_rpfilter: unknown options
[  531.455900][T26012] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  531.464623][T26010] xt_hashlimit: size too large, truncated to 1048576
[  531.470218][T26012] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  531.698637][   T31] lo speed is unknown, defaulting to 1000
[  531.850251][T26024] netlink: 'syz.1.5136': attribute type 6 has an invalid length.
[  531.853684][T26024] netlink: 'syz.1.5136': attribute type 6 has an invalid length.
[  531.858905][T26024] netlink: 'syz.1.5136': attribute type 4 has an invalid length.
[  531.877176][T26024] netlink: 'syz.1.5136': attribute type 4 has an invalid length.
[  532.592604][ T5727] lo speed is unknown, defaulting to 1000
[  532.602275][ T5727] syz2: Port: 1 Link DOWN
[  532.757566][T26041] syzkaller0: entered promiscuous mode
[  532.764010][T26041] syzkaller0: entered allmulticast mode
[  532.819172][T26043] bond52 (unregistering): Released all slaves
[  532.988712][T26060] __nla_validate_parse: 115 callbacks suppressed
[  532.988727][T26060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5144'.
[  533.074212][T26066] netlink: 'syz.1.5146': attribute type 1 has an invalid length.
[  533.670286][T26091] lo speed is unknown, defaulting to 1000
[  533.811730][T26092] netlink: 'syz.2.5152': attribute type 4 has an invalid length.
[  533.817913][ T5727] lo speed is unknown, defaulting to 1000
[  533.821289][ T5727] syz2: Port: 1 Link ACTIVE
[  534.778957][T26114] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5156'.
[  534.812424][T26115] bond67: option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  534.818142][T26115] bond67 (unregistering): Released all slaves
[  534.923293][T26118] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5157'.
[  535.052102][T26124] netlink: 'syz.1.5158': attribute type 83 has an invalid length.
[  535.054274][T26121] can: request_module (can-proto-0) failed.
[  535.055531][T26122] netlink: 'syz.1.5158': attribute type 83 has an invalid length.
[  535.058629][T26123] can: request_module (can-proto-0) failed.
[  535.143149][T26131] netlink: 'syz.1.5160': attribute type 13 has an invalid length.
[  535.428082][T26155] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5167'.
[  535.656034][T26164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5168'.
[  535.766230][T26170] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5170'.
[  536.329007][T26182] validate_nla: 2 callbacks suppressed
[  536.329029][T26182] netlink: 'syz.1.5173': attribute type 1 has an invalid length.
[  536.364917][T26182] 8021q: adding VLAN 0 to HW filter on device bond52
[  536.386469][T26178] lo speed is unknown, defaulting to 1000
[  536.396626][T26186] IPVS: wrr: FWM 3 0x00000003 - no destination available: all destinations are overloaded
[  536.557071][T26193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5175'.
[  536.647548][T26201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5177'.
[  536.761211][T26205] netlink: 'syz.1.5178': attribute type 10 has an invalid length.
[  536.776539][T26205] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5178'.
[  536.821391][T26207] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  536.829044][T11999] bridge35: port 2(veth0_to_bond) entered blocking state
[  536.831494][T11999] bridge35: port 2(veth0_to_bond) entered forwarding state
[  536.840335][ T6311] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  536.845842][ T6311] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  536.852013][ T6311] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  536.855973][ T6311] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  536.876904][T26210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5180'.
[  536.898497][T26210] lo speed is unknown, defaulting to 1000
[  537.160802][T26213] bridge35: port 2(veth0_to_bond) entered disabled state
[  537.264323][T26213] batman_adv: batadv0: Interface deactivated: gretap6
[  537.527994][ T5475] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  537.532783][ T5475] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  537.553954][ T5475] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  537.572901][ T5475] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  537.641330][T26220] bond68: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  537.717404][T26220] bond68: (slave lo): Enslaving as an active interface with an up link
[  537.732663][T26220] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  537.756113][  T932] lo speed is unknown, defaulting to 1000
[  537.759082][ T6845] lo speed is unknown, defaulting to 1000
[  537.764958][   T10] lo speed is unknown, defaulting to 1000
[  537.772281][T26236] netlink: 'syz.0.5183': attribute type 5 has an invalid length.
[  537.861569][T26240] netlink: 'syz.1.5184': attribute type 1 has an invalid length.
[  538.082577][   T34] audit: type=1107 audit(1780977025.228:19): pid=26258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  538.091158][T26259] tun0: tun_chr_ioctl cmd 2148553947
[  538.133504][T26259] __nla_validate_parse: 3 callbacks suppressed
[  538.133527][T26259] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5192'.
[  538.349117][T26265] xt_bpf: check failed: parse error
[  538.378566][T26265] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5193'.
[  538.389063][T26265] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5193'.
[  539.011484][T26296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5195'.
[  539.020886][T26296] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5195'.
[  539.025884][T26299] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5196'.
[  539.029769][T26296] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5195'.
[  539.056500][T26296] Cannot find add_set index 0 as target
[  539.090949][T26302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5197'.
[  539.146371][T26309] netlink: 'syz.2.5199': attribute type 11 has an invalid length.
[  539.166063][T26309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5199'.
[  539.171128][T26308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5199'.
[  539.303683][T26323] netlink: 'syz.2.5205': attribute type 1 has an invalid length.
[  539.428314][T26315] bond63: left allmulticast mode
[  539.435159][T26315] veth91: left allmulticast mode
[  539.456290][T26315] bond67: left promiscuous mode
[  539.476469][T26315] bond68: left promiscuous mode
[  539.483612][T26315] veth101: left promiscuous mode
[  539.515316][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  539.518107][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  539.524612][T26325] 8021q: adding VLAN 0 to HW filter on device bond69
[  539.530309][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  539.535434][T26323] netlink: 'syz.2.5205': attribute type 10 has an invalid length.
[  539.536871][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  539.667266][T26342] bridge29: entered promiscuous mode
[  539.669767][T26342] bridge29: entered allmulticast mode
[  539.673356][T26343] syzkaller1: entered promiscuous mode
[  539.677847][T26343] syzkaller1: entered allmulticast mode
[  539.937006][T26360] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[  539.945463][T26360] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[  540.144772][T26370] netlink: 'syz.2.5218': attribute type 13 has an invalid length.
[  540.149884][T26370] netlink: 'syz.2.5218': attribute type 17 has an invalid length.
[  540.162821][T26370] gretap0: left promiscuous mode
[  540.188779][T26370] ip6_vti0: left promiscuous mode
[  540.211958][T26370] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  540.214237][T26370] mac80211_hwsim hwsim5 wlan0: left allmulticast mode
[  540.216382][T26370] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  540.246624][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  540.253100][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  540.270942][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  540.275536][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  540.388627][T26397] bond70: Removing last ns target with arp_interval on
[  540.429033][T26393] netlink: 'syz.1.5226': attribute type 2 has an invalid length.
[  540.456812][T26395] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR
[  540.457550][T26395] block (null): Could not allocate knbd recv work queue.
[  540.503825][T26395] nbd: failed to add new device
[  540.810698][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  540.815229][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  540.820325][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  540.825059][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  541.349204][T26445] veth0_to_bond: left allmulticast mode
[  541.351437][T26445] veth0_to_bond: left promiscuous mode
[  541.353930][T26445] bridge35: port 2(veth0_to_bond) entered disabled state
[  541.363955][T26445] bond37: (slave bridge26): Releasing backup interface
[  541.368162][T26445] bond41: (slave veth55): Releasing active interface
[  541.372703][T26445] bond41: (slave veth55): the permanent HWaddr of slave - da:68:53:59:ad:fc - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  541.381029][T26445] bond41: (slave veth57): Releasing active interface
[  541.402128][T26445] bond43: (slave veth59): Releasing active interface
[  541.506455][T26445] bond45: (slave veth61): Releasing active interface
[  541.511040][T26445] bond45: (slave veth61): the permanent HWaddr of slave - a6:a8:b1:13:70:f1 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  541.522477][T26445] bond45: (slave veth63): Releasing active interface
[  541.530281][T26445] bond46: (slave veth69): Releasing backup interface
[  541.535918][T26445] bond47: (slave batadv2): Releasing active interface
[  541.545006][T26445] bond48: (slave veth73): Releasing backup interface
[  541.549339][T26445] veth75: left allmulticast mode
[  541.551820][T26445] veth75: left promiscuous mode
[  541.554085][T26445] bridge34: port 1(veth75) entered disabled state
[  541.559886][T26445] veth77: left allmulticast mode
[  541.562159][T26445] veth77: left promiscuous mode
[  541.564278][T26445] bridge34: port 3(veth77) entered disabled state
[  541.572475][T26445] veth79: left allmulticast mode
[  541.574827][T26445] veth79: left promiscuous mode
[  541.577253][T26445] bridge35: port 1(veth79) entered disabled state
[  541.583441][T26445] veth81: left allmulticast mode
[  541.586169][T26445] veth81: left promiscuous mode
[  541.588478][T26445] bridge35: port 3(veth81) entered disabled state
[  541.595979][T26445] bond51: (slave bridge36): Releasing active interface
[  541.598315][T26445] bond51: (slave bridge36): the permanent HWaddr of slave - 0e:07:db:14:c1:48 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  541.608566][T26445] bond51: (slave bridge37): Releasing active interface
[  541.612642][T26445] batman_adv: batadv0: Removing interface: gretap6
[  541.615463][T26441] bridge0: entered allmulticast mode
[  541.621605][T26450] vlan0: entered promiscuous mode
[  541.629788][T26450] bond44: entered promiscuous mode
[  541.696085][T26459] geneve5: entered promiscuous mode
[  541.699198][T26459] geneve5: entered allmulticast mode
[  541.914962][T26476] sctp: [Deprecated]: syz.2.5243 (pid 26476) Use of struct sctp_assoc_value in delayed_ack socket option.
[  541.914962][T26476] Use struct sctp_sack_info instead
[  542.037965][T26483] validate_nla: 2 callbacks suppressed
[  542.037979][T26483] netlink: 'syz.2.5245': attribute type 13 has an invalid length.
[  542.101128][ T6838] net_ratelimit: 4 callbacks suppressed
[  542.101142][ T6838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.340429][ T5475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.345458][ T5475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.350133][ T5475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.355589][ T5475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.540172][T26505] netlink: 'syz.2.5250': attribute type 2 has an invalid length.
[  542.597265][T26506] netlink: 'syz.2.5250': attribute type 2 has an invalid length.
[  542.600854][T26506] netlink: 'syz.2.5250': attribute type 2 has an invalid length.
[  542.685495][T26512] bond71 (unregistering): Released all slaves
[  542.756825][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.821616][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.825014][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.844767][T26522] netlink: 'syz.1.5255': attribute type 1 has an invalid length.
[  542.883965][T26522] bond53: entered promiscuous mode
[  542.886876][T26522] 8021q: adding VLAN 0 to HW filter on device bond53
[  542.900458][T26518] bond68: (slave lo): Releasing backup interface
[  542.904907][T26518] bond68: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  542.924870][ T6845] lo speed is unknown, defaulting to 1000
[  542.927437][ T5727] lo speed is unknown, defaulting to 1000
[  542.930928][ T6845] syz2: Port: 1 Link DOWN
[  542.950543][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  543.001822][T26529] ip6gre5: entered promiscuous mode
[  543.003965][T26529] ip6gre5: entered allmulticast mode
[  543.123512][T26533] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  543.296312][T26553] lo speed is unknown, defaulting to 1000
[  543.433604][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  543.507901][T26567] __nla_validate_parse: 27 callbacks suppressed
[  543.507917][T26567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5264'.
[  544.076578][T26575] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5266'.
[  544.079871][T26575] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5266'.
[  544.103617][T26575] gretap0: entered promiscuous mode
[  544.106615][T26575] gretap0: left promiscuous mode
[  544.244845][T26577] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20004
[  544.618329][T26597] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  544.620787][T26597] IPv6: NLM_F_CREATE should be set when creating new route
[  544.623213][T26597] IPv6: NLM_F_CREATE should be set when creating new route
[  544.625876][T26597] IPv6: NLM_F_CREATE should be set when creating new route
[  544.634212][T26597] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  544.674311][T26601] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5274'.
[  544.677816][T26601] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5274'.
[  544.893166][T26617] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5280'.
[  545.198137][T26624] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5281'.
[  545.242747][T26623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5281'.
[  545.275028][T26626] netlink: 'syz.1.5282': attribute type 29 has an invalid length.
[  545.314514][T26628] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  545.432638][T26634] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  545.653614][ T5475] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  545.659657][ T5475] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  545.662678][ T5475] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  545.665653][ T5475] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  545.704362][T26638] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5287'.
[  545.738620][T26643] netlink: 'syz.2.5289': attribute type 11 has an invalid length.
[  545.797858][T26643] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  545.801588][T26643] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  545.807264][ T6837] lo speed is unknown, defaulting to 1000
[  545.812210][T26649] xt_hashlimit: size too large, truncated to 1048576
[  545.815606][ T6837] syz2: Port: 1 Link ACTIVE
[  545.970156][T26661] netlink: 'syz.2.5293': attribute type 1 has an invalid length.
[  545.988877][T26661] bond71: entered promiscuous mode
[  546.082958][T26665] netlink: 292 bytes leftover after parsing attributes in process `syz.1.5294'.
[  546.186473][ T6837] lo speed is unknown, defaulting to 1000
[  546.192088][ T6837] syz2: Port: 1 Link DOWN
[  546.215755][T26660] bond71: left promiscuous mode
[  546.256183][T26674] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig
[  546.307942][T26676] netlink: 'syz.2.5297': attribute type 62 has an invalid length.
[  546.425187][T26697] netlink: 'syz.1.5300': attribute type 1 has an invalid length.
[  546.427963][T26698] netlink: 'syz.1.5300': attribute type 1 has an invalid length.
[  546.455954][T26697] bond54: entered promiscuous mode
[  546.460236][T26697] 8021q: adding VLAN 0 to HW filter on device bond54
[  546.471516][T26697] hm3): entered promiscuous mode
[  546.481225][T26697] bond54: (slave bridge39): making interface the new active one
[  546.484014][T26697] bridge39: entered promiscuous mode
[  546.486579][T26697] bond54: (slave bridge39): Enslaving as an active interface with an up link
[  546.505863][T26697] bond54: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  546.510361][T26697] bond54: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  546.644500][T26707] nbd: nbd0 already in use
[  546.647414][T26707] block nbd0: NBD_DISCONNECT
[  546.649068][T26707] block nbd0: Send disconnect failed -32
[  546.652401][T26707] block nbd0: shutting down sockets
[  546.706338][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  546.716242][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  546.719085][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  546.724822][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  546.947444][T26745] xt_hashlimit: overflow, try lower: 9/9223372036854775808
[  547.068369][T26753] lo speed is unknown, defaulting to 1000
[  547.553310][T26777] netlink: 'syz.1.5321': attribute type 1 has an invalid length.
[  547.667959][T26783] bond55: (slave bridge40): making interface the new active one
[  547.675843][T26783] bond55: (slave bridge40): Enslaving as an active interface with an up link
[  547.975226][T26801] netlink: 'syz.2.5327': attribute type 3 has an invalid length.
[  548.246214][T26834] SET target dimension over the limit!
[  548.265127][T26834] net_ratelimit: 7 callbacks suppressed
[  548.265148][T26834] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  548.977190][T26838] __nla_validate_parse: 12 callbacks suppressed
[  548.977205][T26838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5337'.
[  549.004799][T26838] lo speed is unknown, defaulting to 1000
[  549.038502][T26849] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5337'.
[  549.175971][T26858] netlink: 'syz.1.5341': attribute type 16 has an invalid length.
[  549.180523][T26858] netlink: 'syz.1.5341': attribute type 17 has an invalid length.
[  549.187910][T26855] netlink: 'syz.0.5340': attribute type 5 has an invalid length.
[  549.193890][T26855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5340'.
[  549.221748][T26858] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  549.246973][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  549.254636][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  549.263641][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  549.269789][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  549.347630][T26855] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  549.703804][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  549.709946][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  549.715363][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  549.718993][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  549.727572][T26878] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  549.739752][T26878] mac80211_hwsim hwsim5 wlan0: left allmulticast mode
[  549.753452][T26878] mac80211_hwsim hwsim5 +: left promiscuous mode
[  549.755981][T26878] mac80211_hwsim hwsim5 +: left allmulticast mode
[  549.765589][T26878] ip6tnl6: left allmulticast mode
[  549.768213][T26878] veth59: left allmulticast mode
[  549.772088][T26878] veth65: left allmulticast mode
[  549.780561][T26878] bond58: left promiscuous mode
[  549.782822][T26878] bridge34: left promiscuous mode
[  549.784978][T26878] bridge34: left allmulticast mode
[  549.787576][T26878] bridge0: left allmulticast mode
[  549.789437][T26878] bond61: left promiscuous mode
[  549.791425][T26878] ipvlan4: left allmulticast mode
[  549.793171][T26878] bond63: left allmulticast mode
[  549.796649][T26878] geneve5: left promiscuous mode
[  549.798419][T26878] geneve5: left allmulticast mode
[  549.800643][T26878] ip6gre5: left promiscuous mode
[  549.802308][T26878] ip6gre5: left allmulticast mode
[  549.805460][T26880] syzkaller1: entered promiscuous mode
[  549.809658][T26880] syzkaller1: entered allmulticast mode
[  549.813177][T26879] ip6gre0: Caught tx_queue_len zero misconfig
[  549.815887][T26879] sch_tbf: burst 0 is lower than device ip6gre0 mtu (32769) !
[  549.965538][T26886] bond72: option all_slaves_active: invalid value (127)
[  549.984182][T26886] bond72 (unregistering): Released all slaves
[  550.069278][T26895] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5348'.
[  550.071810][T26894] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5349'.
[  550.072373][T26895] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5348'.
[  550.199974][T26897] netlink: 'syz.2.5350': attribute type 1 has an invalid length.
[  550.228439][T26897] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5350'.
[  550.235593][T26897] 8021q: adding VLAN 0 to HW filter on device bond72
[  550.334011][ T6837] lo speed is unknown, defaulting to 1000
[  550.452443][T26914] netlink: 'syz.2.5354': attribute type 1 has an invalid length.
[  550.475571][T26914] 8021q: adding VLAN 0 to HW filter on device bond73
[  550.482480][T26914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5354'.
[  550.496612][T26914] bond73 (unregistering): Released all slaves
[  550.525645][T26918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5355'.
[  550.528600][T26918] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5355'.
[  551.554778][T26946] netlink: 'syz.1.5365': attribute type 13 has an invalid length.
[  551.558553][T26946] netlink: 'syz.1.5365': attribute type 17 has an invalid length.
[  551.648908][T26946] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  551.662403][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  551.668875][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  551.679216][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  551.685367][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  551.824603][T26965] netlink: 'syz.1.5369': attribute type 9 has an invalid length.
[  552.028804][T26976] IPVS: sh: FWM 3 0x00000003 - no destination available
[  552.735356][T26990] validate_nla: 1 callbacks suppressed
[  552.735379][T26990] netlink: 'syz.2.5376': attribute type 10 has an invalid length.
[  552.806482][T26990] lo: Caught tx_queue_len zero misconfig
[  552.809137][T26990] netlink: 'syz.2.5376': attribute type 15 has an invalid length.
[  553.100370][T27011] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  553.102991][T27011] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  553.109115][T27011] vlan0: left promiscuous mode
[  553.113643][T27011] bond44: left promiscuous mode
[  553.116336][T27011] bond53: left promiscuous mode
[  553.118519][T27011] bond54: left promiscuous mode
[  553.121279][T27011] bridge39: left promiscuous mode
[  553.177393][T27015] netlink: 'syz.2.5384': attribute type 4 has an invalid length.
[  553.231787][T27023] ip6tnl0: Caught tx_queue_len zero misconfig
[  553.561845][T27043] netlink: 'syz.1.5392': attribute type 4 has an invalid length.
[  553.565720][T27042] atomic_op ffff88816ef76998 conn xmit_atomic 0000000000000000
[  553.626390][T27050] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  553.646521][T27050] bond73: option xmit_hash_policy: invalid value (10)
[  553.650142][T27050] bond73 (unregistering): Released all slaves
[  553.757935][T27056] netlink: 'syz.2.5396': attribute type 1 has an invalid length.
[  553.760996][T27056] NCSI netlink: No device for ifindex 0
[  553.763697][T27055] netlink: 'syz.2.5396': attribute type 1 has an invalid length.
[  553.766488][T27055] NCSI netlink: No device for ifindex 0
[  553.770606][T27055] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  553.770630][T27056] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  554.167219][T27072] __nla_validate_parse: 25 callbacks suppressed
[  554.167237][T27072] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5400'.
[  554.296429][T27079] netlink: 292 bytes leftover after parsing attributes in process `syz.0.5401'.
[  554.370820][T27081] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5402'.
[  554.436788][T27083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5403'.
[  554.516980][T27089] veth97: left allmulticast mode
[  554.519346][T27089] veth97: left promiscuous mode
[  554.522785][T27089] bridge28: port 1(veth97) entered disabled state
[  554.528941][T27089] veth99: left allmulticast mode
[  554.531307][T27089] veth99: left promiscuous mode
[  554.534352][T27089] bridge28: port 2(veth99) entered disabled state
[  554.546446][T27089] bond68: (slave veth101): Releasing backup interface
[  554.565120][T27086] netlink: 'syz.0.5404': attribute type 21 has an invalid length.
[  554.568942][T27086] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5404'.
[  554.573304][T27086] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5404'.
[  554.713991][T27094] bond56: Unable to set up delay as MII monitoring is disabled
[  554.717512][T27094] bond56 (unregistering): Released all slaves
[  554.783925][T27105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5407'.
[  554.787423][T27106] netlink: 'syz.2.5408': attribute type 1 has an invalid length.
[  554.815000][T27107] bond73: entered promiscuous mode
[  554.939224][T27119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5411'.
[  555.051477][T27104] bond73: left promiscuous mode
[  555.125460][T27132] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  555.155024][T27134] netlink: 'syz.0.5415': attribute type 10 has an invalid length.
[  555.262753][T27138] bond70 (unregistering): Released all slaves
[  555.296137][T27137] bond0: (slave ip6tnl0): refused to change device type
[  555.834839][T27152] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5418'.
[  555.838430][T27151] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5418'.
[  556.013044][T27158] bond54: (slave bridge39): Releasing backup interface
[  556.022251][T27158] bond55: (slave bridge40): Releasing active interface
[  556.070231][T27168] netlink: 'syz.1.5422': attribute type 13 has an invalid length.
[  556.424586][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  556.432316][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  556.440900][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  556.447133][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  556.556408][T27184] lo speed is unknown, defaulting to 1000
[  557.119004][T27202] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  557.125585][   T10] lo speed is unknown, defaulting to 1000
[  557.129964][   T10] syz2: Port: 1 Link ACTIVE
[  557.170088][ T6837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.174553][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.177957][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.185437][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.460119][ T6837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.756123][ T5727] lo speed is unknown, defaulting to 1000
[  557.761279][ T5727] syz2: Port: 1 Link DOWN
[  558.365252][T27233] bond70: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  558.371666][T27233] bond70 (unregistering): Released all slaves
[  558.815817][T27275] validate_nla: 2 callbacks suppressed
[  558.815830][T27275] netlink: 'syz.2.5443': attribute type 8 has an invalid length.
[  558.828986][T27277] net_ratelimit: 1 callbacks suppressed
[  558.829007][T27277] openvswitch: netlink: Flow key attr not present in new flow.
[  559.198497][T27290] __nla_validate_parse: 9 callbacks suppressed
[  559.198509][T27290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5448'.
[  559.226386][T27290] veth91: entered allmulticast mode
[  559.284207][T27295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5449'.
[  559.401654][T27308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5453'.
[  559.497111][T27309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5452'.
[  559.527827][T27309] tipc: Enabling of bearer <eth:team0> rejected, max 3 bearers permitted
[  559.551608][T27316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5454'.
[  559.596114][T27310] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  559.713893][T27332] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5458'.
[  559.763267][T27334] netlink: set zone limit has 4 unknown bytes
[  559.876904][T27340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5460'.
[  559.881284][T27340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5460'.
[  559.916837][T27340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5460'.
[  559.925893][T27340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5460'.
[  559.935093][T27349] netlink: 'syz.2.5462': attribute type 10 has an invalid length.
[  560.237673][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  560.241530][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  560.245505][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  560.252837][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  560.484857][T27384] netlink: 'syz.1.5470': attribute type 1 has an invalid length.
[  560.520033][T27384] bond56: entered promiscuous mode
[  560.533367][T27383] bond56: left promiscuous mode
[  560.646880][T27394] netlink: 'syz.2.5473': attribute type 1 has an invalid length.
[  560.683106][T27394] bond74: entered promiscuous mode
[  560.686469][T27394] 8021q: adding VLAN 0 to HW filter on device bond74
[  560.714676][T27394] vlan0: entered allmulticast mode
[  560.717100][T27394] bond74: entered allmulticast mode
[  560.741388][T27397] netlink: 'syz.1.5474': attribute type 5 has an invalid length.
[  560.747853][T27394] bond74: (slave bridge40): making interface the new active one
[  560.751317][T27394] bridge40: entered promiscuous mode
[  560.753953][T27394] bridge40: entered allmulticast mode
[  560.758016][T27394] bond74: (slave bridge40): Enslaving as an active interface with an up link
[  560.851441][T27397] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  560.872483][ T6311] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  560.881132][ T6311] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  560.884536][ T6311] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  560.887313][ T6311] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  560.895253][T27401] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  560.900992][T27401] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  560.937789][T27405] netlink: 'syz.1.5476': attribute type 1 has an invalid length.
[  560.962687][T27405] bond57: entered promiscuous mode
[  560.966508][T27405] bond57: entered allmulticast mode
[  560.971570][T27405] 8021q: adding VLAN 0 to HW filter on device bond57
[  560.985221][T27405] erspan2: entered allmulticast mode
[  560.999435][T27405] bond57: (slave erspan2): making interface the new active one
[  561.002006][T27405] erspan2: entered promiscuous mode
[  561.009398][T27405] bond57: (slave erspan2): Enslaving as an active interface with an up link
[  561.017301][T27414] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  561.022655][T27414] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  561.025370][T27414] bond74: left promiscuous mode
[  561.027181][T27414] bridge40: left promiscuous mode
[  561.029874][T27414] vlan0: left allmulticast mode
[  561.031515][T27414] bond74: left allmulticast mode
[  561.033469][T27414] bridge40: left allmulticast mode
[  561.040849][T27405] syz.1.5476 (27405) used obsolete PPPIOCDETACH ioctl
[  562.276620][T27470] netlink: 'syz.2.5492': attribute type 58 has an invalid length.
[  562.435293][T27485] Unsupported ieee802154 address type: 0
[  562.470710][T27485] bond75: option ad_user_port_key: invalid value (65535)
[  562.473365][T27485] bond75: option ad_user_port_key: allowed values 0 - 1023
[  562.476915][T27485] bond75 (unregistering): Released all slaves
[  562.764807][T27514] netlink: 'syz.2.5500': attribute type 1 has an invalid length.
[  562.783785][T27514] bond75: entered promiscuous mode
[  562.785924][T27514] 8021q: adding VLAN 0 to HW filter on device bond75
[  562.883067][T27521] bond75: (slave bridge41): making interface the new active one
[  562.888711][T27521] bridge41: entered promiscuous mode
[  562.893314][T27521] bond75: (slave bridge41): Enslaving as an active interface with an up link
[  562.972441][T27528] veth0: entered promiscuous mode
[  563.085024][T27527] veth0: left promiscuous mode
[  563.413022][T27556] netlink: 'syz.1.5512': attribute type 10 has an invalid length.
[  563.457176][T27563] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  563.686768][T27579] ip6gretap0: left promiscuous mode
[  563.694699][T27579] ip6gretap0: left allmulticast mode
[  563.724906][T27579] lo speed is unknown, defaulting to 1000
[  563.894034][T27592] lo speed is unknown, defaulting to 1000
[  564.348281][T27623] rdma_rxe: rxe_newlink: failed to add bond0
[  564.390620][T27623] netlink: 'syz.0.5526': attribute type 13 has an invalid length.
[  564.523389][T27625] syzkaller1: entered promiscuous mode
[  564.525287][T27625] syzkaller1: entered allmulticast mode
[  564.546197][T27632] __nla_validate_parse: 18 callbacks suppressed
[  564.546220][T27632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5528'.
[  564.607912][T27635] netlink: 81 bytes leftover after parsing attributes in process `syz.2.5529'.
[  564.611690][T27635] bond0: Caught tx_queue_len zero misconfig
[  564.618850][T27635] netlink: 'syz.2.5529': attribute type 1 has an invalid length.
[  564.641713][T27635] bond76: entered promiscuous mode
[  564.643855][T27635] 8021q: adding VLAN 0 to HW filter on device bond76
[  564.673996][T27635] bond76: (slave bridge42): making interface the new active one
[  564.676377][T27635] bridge42: entered promiscuous mode
[  564.678960][T27635] bond76: (slave bridge42): Enslaving as an active interface with an up link
[  564.918712][T27662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5532'.
[  564.944400][T27662] netlink: 'syz.2.5532': attribute type 1 has an invalid length.
[  564.951725][T27666] netlink: 'syz.1.5534': attribute type 10 has an invalid length.
[  564.954529][T27662] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5532'.
[  564.999409][T27666] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5534'.
[  565.273529][T27672] nbd0: detected capacity change from 0 to 63
[  565.324185][T27675] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  565.343228][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  565.347120][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  565.357814][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  565.361411][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  565.841333][T27697] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  565.845509][T27697] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  565.892658][   T55] block nbd0: Receive control failed (result -104)
[  565.967885][ T6845] lo speed is unknown, defaulting to 1000
[  566.251205][T27709] netlink: 'syz.1.5542': attribute type 13 has an invalid length.
[  566.253958][T27709] netlink: 'syz.1.5542': attribute type 17 has an invalid length.
[  566.368756][T27709] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  566.446931][T27713] IPVS: set_ctl: invalid protocol: 137 224.0.0.1:20003
[  566.458298][T27718] IPVS: set_ctl: invalid protocol: 137 224.0.0.1:20003
[  566.676133][T27734] tap0: tun_chr_ioctl cmd 1074025676
[  566.678106][T27734] tap0: owner set to 0
[  566.746485][T27741] xt_TPROXY: Can be used only with -p tcp or -p udp
[  566.749978][T27742] xt_TPROXY: Can be used only with -p tcp or -p udp
[  566.802385][T27744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5551'.
[  566.848479][T27744] 8021q: adding VLAN 0 to HW filter on device bond58
[  566.923704][T27757] team_slave_1: entered promiscuous mode
[  566.949857][T27757] bond58: (slave team_slave_1): Enslaving as an active interface with an up link
[  566.976737][T27759] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5554'.
[  567.024493][T27763] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5556'.
[  567.166968][T27772] block nbd0: NBD_DISCONNECT
[  567.169043][T27772] block nbd0: Send disconnect failed -32
[  567.173752][T27772] block nbd0: shutting down sockets
[  567.186356][    C1] blk_print_req_error: 123 callbacks suppressed
[  567.186379][    C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  567.187950][T27772] vlan0: entered promiscuous mode
[  567.188849][    C1] buffer_io_error: 122 callbacks suppressed
[  567.188866][    C1] Buffer I/O error on dev nbd0, logical block 0, async page read
[  567.193024][T27772] bond74: entered promiscuous mode
[  567.194373][    C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  567.196831][T27772] bridge40: entered promiscuous mode
[  567.199400][    C1] Buffer I/O error on dev nbd0, logical block 1, async page read
[  567.199476][    C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  567.211961][    C1] Buffer I/O error on dev nbd0, logical block 2, async page read
[  567.214929][    C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  567.218338][    C1] Buffer I/O error on dev nbd0, logical block 3, async page read
[  567.221744][T27684] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  567.224735][T27684] Buffer I/O error on dev nbd0, logical block 0, async page read
[  567.227313][T27684] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  567.231429][T27684] Buffer I/O error on dev nbd0, logical block 1, async page read
[  567.240145][T27684] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  567.245441][T27684] Buffer I/O error on dev nbd0, logical block 2, async page read
[  567.253756][T27684] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  567.257821][T27684] Buffer I/O error on dev nbd0, logical block 3, async page read
[  567.262010][T27684] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  567.264939][T27684] Buffer I/O error on dev nbd0, logical block 0, async page read
[  567.268092][T27684] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  567.272021][T27684] Buffer I/O error on dev nbd0, logical block 1, async page read
[  567.275728][T27684] ldm_validate_partition_table(): Disk read failed.
[  567.282195][T27684] Dev nbd0: unable to read RDB block 0
[  567.288870][T27684]  nbd0: unable to read partition table
[  567.297399][T27787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5563'.
[  567.302953][T27789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5563'.
[  567.303822][T27684] ldm_validate_partition_table(): Disk read failed.
[  567.311004][T27684] Dev nbd0: unable to read RDB block 0
[  567.314051][T27684]  nbd0: unable to read partition table
[  567.353165][T27795] netlink: 'syz.2.5564': attribute type 1 has an invalid length.
[  567.353267][T27796] netlink: 'syz.2.5564': attribute type 1 has an invalid length.
[  567.380554][T27795] 8021q: adding VLAN 0 to HW filter on device bond77
[  567.401355][T27795] vlan2: entered allmulticast mode
[  567.404949][T27795] bond77: entered allmulticast mode
[  567.451356][T27808] bond59: Removing last arp target with arp_interval on
[  567.493421][T27813] netlink: 'syz.2.5567': attribute type 1 has an invalid length.
[  567.498606][T27813] workqueue: Failed to create a rescuer kthread for wq "bond78": -EINTR
[  567.666951][T27836] netlink: 'syz.1.5575': attribute type 13 has an invalid length.
[  567.676758][T27836] team_slave_1: left promiscuous mode
[  567.679390][T27836] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  567.773035][T27844] bond74: (slave bridge40): Releasing backup interface
[  567.776063][T27844] bridge40: left promiscuous mode
[  567.789275][T27844] bond75: (slave bridge41): Releasing backup interface
[  567.792793][T27844] bridge41: left promiscuous mode
[  567.802054][T27844] bond76: (slave bridge42): Releasing backup interface
[  567.804307][T27844] bridge42: left promiscuous mode
[  569.120162][T27947] xt_hashlimit: size too large, truncated to 1048576
[  569.123231][T27947] xt_hashlimit: max too large, truncated to 1048576
[  569.316515][T27960] dvmrp0: left allmulticast mode
[  569.352246][T27957] syzkaller1: entered promiscuous mode
[  569.354719][T27957] syzkaller1: entered allmulticast mode
[  569.466487][T27964] validate_nla: 2 callbacks suppressed
[  569.466509][T27964] netlink: 'syz.0.5594': attribute type 10 has an invalid length.
[  570.214538][T27994] __nla_validate_parse: 14 callbacks suppressed
[  570.214582][T27994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5604'.
[  570.257866][T27997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5605'.
[  570.325880][T28001] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  570.358598][T28005] SET target dimension over the limit!
[  570.378473][T27994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5604'.
[  570.651521][T28018] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  570.689893][T28022] netlink: 120 bytes leftover after parsing attributes in process `syz.2.5612'.
[  570.696104][T28022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5612'.
[  571.370032][T28040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5616'.
[  571.374334][T28040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5616'.
[  572.539383][T28062] netlink: 732 bytes leftover after parsing attributes in process `syz.0.5621'.
[  572.544617][T28062] netlink: 732 bytes leftover after parsing attributes in process `syz.0.5621'.
[  572.564976][T28062] netlink: 'syz.0.5621': attribute type 10 has an invalid length.
[  572.578136][T28064] netlink: 'syz.2.5622': attribute type 1 has an invalid length.
[  572.608678][T28064] 8021q: adding VLAN 0 to HW filter on device bond78
[  572.793932][T28070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5624'.
[  573.120757][T28102] bond43: left allmulticast mode
[  573.444636][ T5475] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  573.451576][ T5475] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  573.456908][ T5475] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  573.462465][ T5475] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  573.481215][T28136] vlan2: entered promiscuous mode
[  573.483518][T28136] bridge0: entered promiscuous mode
[  573.550896][T28136] netlink: 'syz.0.5638': attribute type 4 has an invalid length.
[  573.697711][T28152] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  573.701919][T28150] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[  574.340228][T28190] netlink: 'syz.0.5653': attribute type 1 has an invalid length.
[  574.364510][T28190] 8021q: adding VLAN 0 to HW filter on device bond72
[  574.402379][T28190] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  574.455398][T28190] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  574.517010][T28190] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  574.566861][T28190] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  574.758076][ T5475] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  574.773831][ T5475] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  574.794458][ T5475] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  574.814891][ T5475] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  574.938155][T28242] netlink: 'syz.1.5660': attribute type 16 has an invalid length.
[  574.941790][T28242] netlink: 'syz.1.5660': attribute type 17 has an invalid length.
[  574.986045][T28242] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  575.007748][ T5475] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  575.014066][ T5475] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  575.026281][ T5475] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  575.031769][ T5475] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  575.122694][T23735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.127239][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.138333][T28243] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  575.143682][ T5727] lo speed is unknown, defaulting to 1000
[  575.148216][ T5727] syz2: Port: 1 Link ACTIVE
[  575.180069][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.183202][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.185929][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.260236][ T6311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.262860][ T6311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.432909][T28260] __nla_validate_parse: 25 callbacks suppressed
[  575.432923][T28260] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5664'.
[  575.502447][T28264] netlink: 'syz.1.5665': attribute type 10 has an invalid length.
[  575.597123][T28272] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5668'.
[  575.607974][T28272] netlink: 324 bytes leftover after parsing attributes in process `syz.1.5668'.
[  575.687593][T28274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5669'.
[  575.718792][T28274] veth85: entered allmulticast mode
[  575.726383][T28274] bond60: (slave veth85): Enslaving as an active interface with an up link
[  575.771625][T28274] bond60 (unregistering): (slave veth85): Releasing backup interface
[  575.776707][T28274] bond60 (unregistering): Released all slaves
[  575.859962][    C1] net_ratelimit: 3 callbacks suppressed
[  575.859976][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.870052][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.874633][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.877790][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.951698][T28284] tipc: Resetting bearer <eth:syzkaller0>
[  576.042676][T28286] siw: device registration error -23
[  576.077152][T28290] netlink: 'syz.2.5673': attribute type 10 has an invalid length.
[  576.093751][T28290] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5673'.
[  576.155505][T28292] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5675'.
[  576.180442][ T6311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  576.183990][ T6311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  576.241355][T28298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5677'.
[  576.254891][T28297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5677'.
[  576.315748][T28311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  576.321461][T28311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  576.324328][T28311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  576.342430][T28311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  576.455728][T28320] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5683'.
[  576.462055][T28320] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5683'.
[  576.473256][T28317] xt_hashlimit: size too large, truncated to 1048576
[  576.644901][T28340] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  576.817205][T28360] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  577.274943][T28384] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  577.438795][T28394] netlink: 'syz.2.5701': attribute type 1 has an invalid length.
[  577.504881][T28394] netlink: 'syz.2.5701': attribute type 10 has an invalid length.
[  577.521901][T28394] netlink: 'syz.2.5701': attribute type 10 has an invalid length.
[  577.535483][T28401] ipt_rpfilter: unknown options
[  577.728950][T28423] bond57: left promiscuous mode
[  577.731904][T28423] erspan2: left promiscuous mode
[  577.733791][T28423] bond57: left allmulticast mode
[  577.735529][T28423] erspan2: left allmulticast mode
[  577.737281][T28423] veth85: left allmulticast mode
[  577.986129][T28450] netlink: 'syz.0.5711': attribute type 2 has an invalid length.
[  579.009196][T28498] netlink: 'syz.0.5728': attribute type 1 has an invalid length.
[  579.050820][T28498] netlink: 'syz.0.5728': attribute type 39 has an invalid length.
[  579.053940][T28498] bond73: entered promiscuous mode
[  579.069009][T28501] RDS: rds_bind could not find a transport for ::ffff:172.20.20.68, load rds_tcp or rds_rdma?
[  579.353651][ T5475] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  579.358229][ T5475] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  579.365811][ T5475] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  579.371321][T28497] bond73: left promiscuous mode
[  579.373944][ T5475] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  579.462086][T28512] nbd2: detected capacity change from 0 to 63
[  579.465576][T28514] nbd: must specify an index to disconnect
[  579.498127][   T56] block nbd2: Receive control failed (result -104)
[  580.203609][T28565] validate_nla: 1 callbacks suppressed
[  580.203634][T28565] netlink: 'syz.0.5746': attribute type 1 has an invalid length.
[  580.228819][T28565] 8021q: adding VLAN 0 to HW filter on device bond74
[  580.626443][T28576] __nla_validate_parse: 29 callbacks suppressed
[  580.626458][T28576] netlink: 85 bytes leftover after parsing attributes in process `syz.2.5750'.
[  580.666554][T28580] netlink: 'syz.2.5752': attribute type 1 has an invalid length.
[  580.701133][T28580] 8021q: adding VLAN 0 to HW filter on device bond79
[  580.731482][T28580] bond79: (slave veth0_to_bond): making interface the new active one
[  580.736837][T28580] bond79: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  580.756918][T28580] macvlan0: entered promiscuous mode
[  580.759240][T28580] macvlan0: entered allmulticast mode
[  580.763096][T28580] bond79: entered promiscuous mode
[  580.765017][T28580] veth0_to_bond: entered promiscuous mode
[  580.767753][T28580] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  580.771251][T28580] bond79: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  580.776725][T28580] bond79: left promiscuous mode
[  580.778860][T28580] veth0_to_bond: left promiscuous mode
[  580.794603][T28585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5754'.
[  580.847577][T28585] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5754'.
[  580.889334][T28585] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5754'.
[  580.898001][T28588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5755'.
[  580.910588][T28588] netlink: 'syz.2.5755': attribute type 1 has an invalid length.
[  580.969419][T28590] netlink: 'syz.1.5756': attribute type 1 has an invalid length.
[  580.999318][T28590] 8021q: adding VLAN 0 to HW filter on device bond60
[  581.018654][T28590] vlan4: entered promiscuous mode
[  581.021523][T28590] bond60: entered promiscuous mode
[  581.024002][T28590] vlan4: entered allmulticast mode
[  581.026262][T28590] bond60: entered allmulticast mode
[  581.033093][T28590] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5756'.
[  581.043104][T28590] 8021q: adding VLAN 0 to HW filter on device batadv3
[  581.047609][T28590] bond60: (slave batadv3): making interface the new active one
[  581.050450][T28590] batadv3: entered promiscuous mode
[  581.052439][T28590] batadv3: entered allmulticast mode
[  581.057518][T28590] bond60: (slave batadv3): Enslaving as an active interface with an up link
[  581.128607][T28596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5757'.
[  581.134899][T28596] netlink: 'syz.1.5757': attribute type 7 has an invalid length.
[  581.233253][    C0] net_ratelimit: 24 callbacks suppressed
[  581.233275][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  581.241675][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  581.302880][T28601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5759'.
[  581.311048][   T56] block nbd0: Receive control failed (result -32)
[  581.356162][T28615] xt_bpf: check failed: parse error
[  581.367625][T28613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5761'.
[  581.450605][T28621] lo speed is unknown, defaulting to 1000
[  581.571971][T28632] lo speed is unknown, defaulting to 1000
[  581.785307][T28638] xt_hashlimit: size too large, truncated to 1048576
[  581.862822][T28633] vti1: entered promiscuous mode
[  581.869841][T28633] vti1: entered allmulticast mode
[  582.353991][T28655] lo speed is unknown, defaulting to 1000
[  583.163951][T28680] xt_TPROXY: Can be used only with -p tcp or -p udp
[  583.298191][T28684] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5780'.
[  583.407814][T28688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  583.619968][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  583.622862][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  584.266771][T28734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  584.655002][T28741] xt_hashlimit: size too large, truncated to 1048576
[  585.006221][T28758] bridge0: entered allmulticast mode
[  585.484672][T28788] lo speed is unknown, defaulting to 1000
[  586.190269][ T1126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  586.195494][T28818] netlink: 'syz.1.5807': attribute type 3 has an invalid length.
[  586.199797][T28818] netlink: 'syz.1.5807': attribute type 3 has an invalid length.
[  586.368625][T28825] x_tables: unsorted entry at hook 2
[  586.681099][T28842] __nla_validate_parse: 5 callbacks suppressed
[  586.681112][T28842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5814'.
[  586.692661][T28842] netlink: 'syz.0.5814': attribute type 1 has an invalid length.
[  586.731799][T28844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  586.736435][T28845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  586.788043][T28851] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  586.867907][T28858] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  586.870613][T28858] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  586.873113][T28858] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  587.034183][T28863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5821'.
[  587.039019][T28863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  587.155730][T28873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5823'.
[  587.235441][T28880] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  587.243017][T28880] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  587.246924][T28880] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  587.258295][T28883] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5825'.
[  587.391184][T28890] batman_adv: batadv0: Adding interface: vlan2
[  587.394748][T28890] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  587.405589][T28890] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active
[  587.902366][T28928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5837'.
[  587.958160][T28929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5835'.
[  588.000140][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  588.004845][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  588.008044][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  588.013080][T28938] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  588.019435][T28938] netlink: 'syz.0.5839': attribute type 7 has an invalid length.
[  588.121902][T28941] netlink: 'syz.0.5840': attribute type 1 has an invalid length.
[  588.139482][T28941] 8021q: adding VLAN 0 to HW filter on device bond75
[  588.159580][T28941] veth109: entered allmulticast mode
[  588.164260][T28941] bond75: (slave veth109): Enslaving as an active interface with an up link
[  588.182311][T28941] bond75 (unregistering): (slave veth109): Releasing backup interface
[  588.192039][T28941] bond75 (unregistering): Released all slaves
[  588.259784][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  588.262994][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  588.352955][T28954] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5844'.
[  588.452983][T28963] lo speed is unknown, defaulting to 1000
[  588.979971][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  591.940566][ T1126] net_ratelimit: 3 callbacks suppressed
[  591.940590][ T1126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  597.710763][T11999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.047028][T28974] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  603.053398][T28974] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  603.058349][T28974] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  603.064128][T28974] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  603.070783][T28974] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  603.092708][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  603.099343][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  603.103012][ T5622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  603.106310][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  603.109021][ T5622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  603.266381][T28972] lo speed is unknown, defaulting to 1000
[  603.462554][T10354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.493532][T28972] bridge0: port 1(bridge_slave_0) entered blocking state
[  603.495997][T28972] bridge0: port 1(bridge_slave_0) entered disabled state
[  603.498888][T28972] bridge_slave_0: entered allmulticast mode
[  603.502541][T28972] bridge_slave_0: entered promiscuous mode
[  603.506610][T28972] bridge0: port 2(bridge_slave_1) entered blocking state
[  603.509104][T28972] bridge0: port 2(bridge_slave_1) entered disabled state
[  603.512170][T28972] bridge_slave_1: entered allmulticast mode
[  603.515261][T28972] bridge_slave_1: entered promiscuous mode
[  603.534820][T28972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  603.540236][T28972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  603.560011][T28972] team0: Port device team_slave_0 added
[  603.564459][T28972] team0: Port device team_slave_1 added
[  603.580260][T28972] batman_adv: batadv0: Adding interface: batadv_slave_0
[  603.582468][T28972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  603.590575][T28972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  603.595086][T28972] batman_adv: batadv0: Adding interface: batadv_slave_1
[  603.597315][T28972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  603.605339][T28972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  603.633466][T28972] hsr_slave_0: entered promiscuous mode
[  603.636083][T28972] hsr_slave_1: entered promiscuous mode
[  604.065837][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  604.073024][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  604.081524][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  604.084832][ T5622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  604.089105][ T5622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  604.108584][T28974] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  604.119189][T28974] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  604.125042][T28974] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  604.129206][T28974] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  604.131903][T28974] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  604.301740][T28996] lo speed is unknown, defaulting to 1000
[  604.320040][T28998] lo speed is unknown, defaulting to 1000
[  604.562058][T28996] bridge0: port 1(bridge_slave_0) entered blocking state
[  604.564556][T28996] bridge0: port 1(bridge_slave_0) entered disabled state
[  604.567086][T28996] bridge_slave_0: entered allmulticast mode
[  604.570128][T28996] bridge_slave_0: entered promiscuous mode
[  604.580300][T28996] bridge0: port 2(bridge_slave_1) entered blocking state
[  604.583316][T28996] bridge0: port 2(bridge_slave_1) entered disabled state
[  604.586752][T28996] bridge_slave_1: entered allmulticast mode
[  604.590592][T28996] bridge_slave_1: entered promiscuous mode
[  604.637226][T28996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  604.653404][T28996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  604.679189][T28996] team0: Port device team_slave_0 added
[  604.683336][T28996] team0: Port device team_slave_1 added
[  604.703045][T28996] batman_adv: batadv0: Adding interface: batadv_slave_0
[  604.705642][T28996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  604.714546][T28996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  604.723824][T28996] batman_adv: batadv0: Adding interface: batadv_slave_1
[  604.726126][T28996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  604.734457][T28996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  604.739942][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  604.743386][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  604.834591][T28996] hsr_slave_0: entered promiscuous mode
[  604.837309][T28996] hsr_slave_1: entered promiscuous mode
[  604.840284][T28996] debugfs: 'hsr0' already exists in 'hsr'
[  604.842173][T28996] Cannot create hsr debugfs directory
[  604.853005][T28998] bridge0: port 1(bridge_slave_0) entered blocking state
[  604.856163][T28998] bridge0: port 1(bridge_slave_0) entered disabled state
[  604.859480][T28998] bridge_slave_0: entered allmulticast mode
[  604.864619][T28998] bridge_slave_0: entered promiscuous mode
[  604.877643][T28998] bridge0: port 2(bridge_slave_1) entered blocking state
[  604.881041][T28998] bridge0: port 2(bridge_slave_1) entered disabled state
[  604.884253][T28998] bridge_slave_1: entered allmulticast mode
[  604.888245][T28998] bridge_slave_1: entered promiscuous mode
[  604.952683][T28998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  604.957948][T28998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  604.998632][T28998] team0: Port device team_slave_0 added
[  605.009901][T28998] team0: Port device team_slave_1 added
[  605.045034][T28998] batman_adv: batadv0: Adding interface: batadv_slave_0
[  605.047318][T28998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  605.055753][T28998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  605.065956][T28998] batman_adv: batadv0: Adding interface: batadv_slave_1
[  605.068372][T28998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  605.077299][T28998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  605.125130][T28998] hsr_slave_0: entered promiscuous mode
[  605.128038][T28998] hsr_slave_1: entered promiscuous mode
[  605.130875][T28998] debugfs: 'hsr0' already exists in 'hsr'
[  605.132938][T28998] Cannot create hsr debugfs directory
[  605.141423][ T5622] Bluetooth: hci3: command tx timeout
[  606.019905][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  606.024036][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  606.179989][ T5622] Bluetooth: hci5: command tx timeout
[  606.180701][T28974] Bluetooth: hci4: command tx timeout
[  607.219895][T28974] Bluetooth: hci3: command tx timeout
[  608.259818][ T5622] Bluetooth: hci5: command tx timeout
[  608.260599][T28974] Bluetooth: hci4: command tx timeout
[  609.230688][T10351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  609.299958][T28974] Bluetooth: hci3: command tx timeout
[  609.873304][   T98] block nbd2: Possible stuck request ffff888104bd2800: control (read@0,1024B). Runtime 30 seconds
[  609.883082][   T98] block nbd2: Possible stuck request ffff888104bd2a00: control (read@1024,1024B). Runtime 30 seconds
[  609.887533][   T98] block nbd2: Possible stuck request ffff888104bd2c00: control (read@2048,1024B). Runtime 30 seconds
[  609.897306][   T98] block nbd2: Possible stuck request ffff888104bd2e00: control (read@3072,1024B). Runtime 30 seconds
[  610.339868][T28974] Bluetooth: hci4: command tx timeout
[  610.349901][T28974] Bluetooth: hci5: command tx timeout
[  611.380759][T28974] Bluetooth: hci3: command tx timeout
[  612.420390][T28974] Bluetooth: hci5: command tx timeout
[  612.421259][ T5622] Bluetooth: hci4: command tx timeout
[  614.980196][ T1126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  620.020526][T10354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  625.860282][T10350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  631.621593][T10350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  636.750261][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  637.380305][T10354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  639.940563][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  639.943789][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  639.959754][   T98] block nbd2: Possible stuck request ffff888104bd2800: control (read@0,1024B). Runtime 60 seconds
[  639.963161][   T98] block nbd2: Possible stuck request ffff888104bd2a00: control (read@1024,1024B). Runtime 60 seconds
[  639.966724][   T98] block nbd2: Possible stuck request ffff888104bd2c00: control (read@2048,1024B). Runtime 60 seconds
[  639.971252][   T98] block nbd2: Possible stuck request ffff888104bd2e00: control (read@3072,1024B). Runtime 60 seconds
[  641.406979][ T5065] udevd[5065]: worker [28060] /devices/virtual/block/nbd2 is taking a long time
[  642.420541][ T1126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  648.260633][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  654.030294][T10354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  659.140577][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  664.062353][T28974] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  664.066574][T28974] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  664.073913][T28974] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  664.078984][T28974] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  664.086088][T28974] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  664.180596][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  664.298357][T29035] lo speed is unknown, defaulting to 1000
[  664.542288][T29035] bridge0: port 1(bridge_slave_0) entered blocking state
[  664.544684][T29035] bridge0: port 1(bridge_slave_0) entered disabled state
[  664.547142][T29035] bridge_slave_0: entered allmulticast mode
[  664.550192][T29035] bridge_slave_0: entered promiscuous mode
[  664.554627][T29035] bridge0: port 2(bridge_slave_1) entered blocking state
[  664.557381][T29035] bridge0: port 2(bridge_slave_1) entered disabled state
[  664.560086][T29035] bridge_slave_1: entered allmulticast mode
[  664.563073][T29035] bridge_slave_1: entered promiscuous mode
[  664.584930][T29035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  664.590920][T29035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  664.611426][T29035] team0: Port device team_slave_0 added
[  664.615477][T29035] team0: Port device team_slave_1 added
[  664.630900][T29035] batman_adv: batadv0: Adding interface: batadv_slave_0
[  664.633330][T29035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  664.642586][T29035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  664.648229][T29035] batman_adv: batadv0: Adding interface: batadv_slave_1
[  664.651269][T29035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  664.661113][T29035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  664.690722][T29035] hsr_slave_0: entered promiscuous mode
[  664.693413][T29035] hsr_slave_1: entered promiscuous mode
[  664.695564][T29035] debugfs: 'hsr0' already exists in 'hsr'
[  664.697353][T29035] Cannot create hsr debugfs directory
[  665.080267][ T5622] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  665.086276][ T5622] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  665.090189][ T5622] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  665.096351][ T5622] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  665.099983][ T5622] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  665.147817][ T5622] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  665.155143][ T5622] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  665.159228][ T5622] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  665.165809][ T5622] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  665.169051][ T5622] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  665.265376][T29054] lo speed is unknown, defaulting to 1000
[  665.415364][T29058] lo speed is unknown, defaulting to 1000
[  665.494329][T29054] bridge0: port 1(bridge_slave_0) entered blocking state
[  665.496626][T29054] bridge0: port 1(bridge_slave_0) entered disabled state
[  665.498974][T29054] bridge_slave_0: entered allmulticast mode
[  665.502488][T29054] bridge_slave_0: entered promiscuous mode
[  665.506039][T29054] bridge0: port 2(bridge_slave_1) entered blocking state
[  665.508424][T29054] bridge0: port 2(bridge_slave_1) entered disabled state
[  665.511254][T29054] bridge_slave_1: entered allmulticast mode
[  665.514454][T29054] bridge_slave_1: entered promiscuous mode
[  665.538808][T29054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  665.545137][T29054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  665.565773][T29054] team0: Port device team_slave_0 added
[  665.570403][T29054] team0: Port device team_slave_1 added
[  665.606595][T29054] batman_adv: batadv0: Adding interface: batadv_slave_0
[  665.609313][T29054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  665.617677][T29054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  665.626571][T29054] batman_adv: batadv0: Adding interface: batadv_slave_1
[  665.628814][T29054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  665.637381][T29054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  665.692391][T29054] hsr_slave_0: entered promiscuous mode
[  665.695604][T29054] hsr_slave_1: entered promiscuous mode
[  665.698513][T29054] debugfs: 'hsr0' already exists in 'hsr'
[  665.701617][T29054] Cannot create hsr debugfs directory
[  665.917594][T29058] bridge0: port 1(bridge_slave_0) entered blocking state
[  665.920183][T29058] bridge0: port 1(bridge_slave_0) entered disabled state
[  665.922695][T29058] bridge_slave_0: entered allmulticast mode
[  665.925409][T29058] bridge_slave_0: entered promiscuous mode
[  665.928868][T29058] bridge0: port 2(bridge_slave_1) entered blocking state
[  665.933039][T29058] bridge0: port 2(bridge_slave_1) entered disabled state
[  665.935799][T29058] bridge_slave_1: entered allmulticast mode
[  665.938868][T29058] bridge_slave_1: entered promiscuous mode
[  665.961694][T29058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  665.982532][T29058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  666.006156][T29058] team0: Port device team_slave_0 added
[  666.011930][T29058] team0: Port device team_slave_1 added
[  666.042905][T29058] batman_adv: batadv0: Adding interface: batadv_slave_0
[  666.045806][T29058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  666.056911][T29058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  666.067734][T29058] batman_adv: batadv0: Adding interface: batadv_slave_1
[  666.070808][T29058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  666.081192][T29058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  666.100060][T28974] Bluetooth: hci6: command tx timeout
[  666.135277][T29058] hsr_slave_0: entered promiscuous mode
[  666.138589][T29058] hsr_slave_1: entered promiscuous mode
[  666.141678][T29058] debugfs: 'hsr0' already exists in 'hsr'
[  666.143915][T29058] Cannot create hsr debugfs directory
[  667.139789][T28974] Bluetooth: hci7: command tx timeout
[  667.220224][T28974] Bluetooth: hci8: command tx timeout
[  668.180623][T28974] Bluetooth: hci6: command tx timeout
[  669.220243][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  669.229791][T28974] Bluetooth: hci7: command tx timeout
[  669.299761][T28974] Bluetooth: hci8: command tx timeout
[  670.021033][   T98] block nbd2: Possible stuck request ffff888104bd2800: control (read@0,1024B). Runtime 90 seconds
[  670.025180][   T98] block nbd2: Possible stuck request ffff888104bd2a00: control (read@1024,1024B). Runtime 90 seconds
[  670.029411][   T98] block nbd2: Possible stuck request ffff888104bd2c00: control (read@2048,1024B). Runtime 90 seconds
[  670.033561][   T98] block nbd2: Possible stuck request ffff888104bd2e00: control (read@3072,1024B). Runtime 90 seconds
[  670.259851][T28974] Bluetooth: hci6: command tx timeout
[  671.299808][T28974] Bluetooth: hci7: command tx timeout
[  671.379813][T28974] Bluetooth: hci8: command tx timeout
[  672.339731][T28974] Bluetooth: hci6: command tx timeout
[  673.379875][T28974] Bluetooth: hci7: command tx timeout
[  673.459796][T28974] Bluetooth: hci8: command tx timeout
[  674.500488][T23735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  680.260730][T23735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  689.861369][T11999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  695.621004][T10354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  700.103156][  T977] block nbd2: Possible stuck request ffff888104bd2800: control (read@0,1024B). Runtime 120 seconds
[  700.107399][  T977] block nbd2: Possible stuck request ffff888104bd2a00: control (read@1024,1024B). Runtime 120 seconds
[  700.112045][  T977] block nbd2: Possible stuck request ffff888104bd2c00: control (read@2048,1024B). Runtime 120 seconds
[  700.116522][  T977] block nbd2: Possible stuck request ffff888104bd2e00: control (read@3072,1024B). Runtime 120 seconds
[  700.741078][T10353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  701.380133][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  705.790179][T10353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  711.619875][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  711.623084][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  711.628456][T10350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  716.741536][T10353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  722.500791][T10353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  724.069976][ T5622] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  724.080370][ T5622] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  724.084842][ T5622] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  724.088538][ T5622] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  724.092179][ T5622] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  724.282988][T29089] lo speed is unknown, defaulting to 1000
[  724.542183][T29089] bridge0: port 1(bridge_slave_0) entered blocking state
[  724.544842][T29089] bridge0: port 1(bridge_slave_0) entered disabled state
[  724.548080][T29089] bridge_slave_0: entered allmulticast mode
[  724.551212][T29089] bridge_slave_0: entered promiscuous mode
[  724.554792][T29089] bridge0: port 2(bridge_slave_1) entered blocking state
[  724.557296][T29089] bridge0: port 2(bridge_slave_1) entered disabled state
[  724.559869][T29089] bridge_slave_1: entered allmulticast mode
[  724.563139][T29089] bridge_slave_1: entered promiscuous mode
[  724.588215][T29089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  724.595180][T29089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  724.623240][T29089] team0: Port device team_slave_0 added
[  724.627634][T29089] team0: Port device team_slave_1 added
[  724.650347][T29089] batman_adv: batadv0: Adding interface: batadv_slave_0
[  724.653193][T29089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  724.667078][T29089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  724.672782][T29089] batman_adv: batadv0: Adding interface: batadv_slave_1
[  724.675365][T29089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  724.684761][T29089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  724.711065][T29089] hsr_slave_0: entered promiscuous mode
[  724.713544][T29089] hsr_slave_1: entered promiscuous mode
[  724.715790][T29089] debugfs: 'hsr0' already exists in 'hsr'
[  724.717603][T29089] Cannot create hsr debugfs directory
[  726.081350][T28974] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  726.088391][T28974] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  726.092546][T28974] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  726.096133][T28974] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  726.099328][T28974] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  726.132802][ T5622] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  726.142907][ T5622] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  726.148797][ T5622] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  726.153100][ T5622] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  726.160159][ T5622] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  726.189954][ T5622] Bluetooth: hci9: command tx timeout
[  726.346215][T29108] lo speed is unknown, defaulting to 1000
[  726.387162][T29110] lo speed is unknown, defaulting to 1000
[  726.669283][T29108] bridge0: port 1(bridge_slave_0) entered blocking state
[  726.672394][T29108] bridge0: port 1(bridge_slave_0) entered disabled state
[  726.674920][T29108] bridge_slave_0: entered allmulticast mode
[  726.677757][T29108] bridge_slave_0: entered promiscuous mode
[  726.682061][T29108] bridge0: port 2(bridge_slave_1) entered blocking state
[  726.684824][T29108] bridge0: port 2(bridge_slave_1) entered disabled state
[  726.687547][T29108] bridge_slave_1: entered allmulticast mode
[  726.692497][T29108] bridge_slave_1: entered promiscuous mode
[  726.717041][T29108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  726.726907][T29108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  726.757191][T29108] team0: Port device team_slave_0 added
[  726.765155][T29108] team0: Port device team_slave_1 added
[  726.797293][T29108] batman_adv: batadv0: Adding interface: batadv_slave_0
[  726.800327][T29108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  726.809473][T29108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  726.817406][T29108] batman_adv: batadv0: Adding interface: batadv_slave_1
[  726.820817][T29108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  726.830577][T29108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  726.881793][T29108] hsr_slave_0: entered promiscuous mode
[  726.884317][T29108] hsr_slave_1: entered promiscuous mode
[  726.886561][T29108] debugfs: 'hsr0' already exists in 'hsr'
[  726.888474][T29108] Cannot create hsr debugfs directory
[  726.943136][T29110] bridge0: port 1(bridge_slave_0) entered blocking state
[  726.946317][T29110] bridge0: port 1(bridge_slave_0) entered disabled state
[  726.950230][T29110] bridge_slave_0: entered allmulticast mode
[  726.954326][T29110] bridge_slave_0: entered promiscuous mode
[  726.965814][T29110] bridge0: port 2(bridge_slave_1) entered blocking state
[  726.968950][T29110] bridge0: port 2(bridge_slave_1) entered disabled state
[  726.972449][T29110] bridge_slave_1: entered allmulticast mode
[  726.976578][T29110] bridge_slave_1: entered promiscuous mode
[  727.045918][T29110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  727.059096][T29110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  727.103955][T29110] team0: Port device team_slave_0 added
[  727.116108][T29110] team0: Port device team_slave_1 added
[  727.161444][T29110] batman_adv: batadv0: Adding interface: batadv_slave_0
[  727.164358][T29110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  727.174767][T29110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  727.181376][T29110] batman_adv: batadv0: Adding interface: batadv_slave_1
[  727.184241][T29110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  727.195184][T29110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  727.264961][T29110] hsr_slave_0: entered promiscuous mode
[  727.268451][T29110] hsr_slave_1: entered promiscuous mode
[  727.274124][T29110] debugfs: 'hsr0' already exists in 'hsr'
[  727.279401][T29110] Cannot create hsr debugfs directory
[  727.631134][T10350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  728.179913][T29001] Bluetooth: hci10: command tx timeout
[  728.260115][T29001] Bluetooth: hci9: command tx timeout
[  728.260272][T29143] Bluetooth: hci11: command tx timeout
[  729.059951][T29143] Bluetooth: hci3: command 0x0406 tx timeout
[  729.060040][T29001] Bluetooth: hci5: command 0x0406 tx timeout
[  729.070837][T29001] Bluetooth: hci4: command 0x0406 tx timeout
[  730.180112][  T977] block nbd2: Possible stuck request ffff888104bd2800: control (read@0,1024B). Runtime 150 seconds
[  730.183946][  T977] block nbd2: Possible stuck request ffff888104bd2a00: control (read@1024,1024B). Runtime 150 seconds
[  730.188905][  T977] block nbd2: Possible stuck request ffff888104bd2c00: control (read@2048,1024B). Runtime 150 seconds
[  730.193236][  T977] block nbd2: Possible stuck request ffff888104bd2e00: control (read@3072,1024B). Runtime 150 seconds
[  730.259821][T28974] Bluetooth: hci10: command tx timeout
[  730.339933][T28974] Bluetooth: hci11: command tx timeout
[  730.349920][T28974] Bluetooth: hci9: command tx timeout
[  732.339789][T28974] Bluetooth: hci10: command tx timeout
[  732.419912][ T5622] Bluetooth: hci11: command tx timeout
[  732.426651][T28974] Bluetooth: hci9: command tx timeout
[  732.740456][T10350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  734.021060][   T35] INFO: task syz.2.5835:28924 blocked for more than 143 seconds.
[  734.023732][   T35]       Not tainted syzkaller #0
[  734.026315][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  734.029824][   T35] task:syz.2.5835      state:D stack:26328 pid:28924 tgid:28923 ppid:5625   task_flags:0x480140 flags:0x00080002
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  734.035522][   T35] Call Trace:
[  734.036931][   T35]  <TASK>
[  734.038091][   T35]  __schedule+0x1821/0x5740
[  734.039907][   T35]  ? __pfx___schedule+0x10/0x10
[  734.041486][   T35]  ? schedule+0x90/0x360
[  734.042991][   T35]  schedule+0x164/0x360
[  734.044776][   T35]  blk_mq_freeze_queue_wait+0x101/0x180
[  734.047114][   T35]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[  734.056163][   T35]  ? queue_limits_commit_update_frozen+0x55/0xd0
[  734.064205][   T35]  ? __pfx_autoremove_wake_function+0x10/0x10
[  734.080203][   T35]  queue_limits_commit_update_frozen+0x55/0xd0
[  734.082947][   T35]  nbd_set_size+0x454/0x680
[  734.084818][   T35]  ? __pfx_nbd_set_size+0x10/0x10
[  734.086907][   T35]  ? nla_memcpy+0x5b/0xc0
[  734.089371][   T35]  nbd_genl_reconfigure+0x7f5/0x1ea0
[  734.092644][   T35]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  734.095126][   T35]  ? rcu_is_watching+0x15/0xb0
[  734.097338][   T35]  ? trace_kmalloc+0x2a/0xf0
[  734.100006][   T35]  ? __nla_parse+0x40/0x60
[  734.101955][   T35]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  734.104541][   T35]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  734.107072][   T35]  genl_family_rcv_msg_doit+0x22a/0x330
[  734.109384][   T35]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  734.112155][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  734.114182][   T35]  genl_rcv_msg+0x61c/0x7a0
[  734.115782][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  734.117743][   T35]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  734.119636][   T35]  netlink_rcv_skb+0x232/0x4b0
[  734.121145][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  734.122751][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  734.124777][   T35]  ? down_read+0x270/0x2e0
[  734.126538][   T35]  ? genl_rcv+0xd/0x40
[  734.128151][   T35]  genl_rcv+0x28/0x40
[  734.130505][   T35]  netlink_unicast+0x75c/0x8e0
[  734.132625][   T35]  netlink_sendmsg+0x813/0xb40
[  734.134529][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  734.136670][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  734.138726][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  734.141100][   T35]  ____sys_sendmsg+0x972/0x9f0
[  734.143106][   T35]  ? __might_fault+0xaf/0x130
[  734.144827][   T35]  ? __pfx_____sys_sendmsg+0x10/0x10
[  734.146995][   T35]  ? import_iovec+0x73/0xa0
[  734.148759][   T35]  ___sys_sendmsg+0x2a5/0x360
[  734.151019][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  734.153217][   T35]  ? __pfx____sys_sendmsg+0x10/0x10
[  734.155397][   T35]  ? futex_wake+0x4ac/0x580
[  734.157321][   T35]  ? __fget_files+0x2a/0x420
[  734.159258][   T35]  ? __fget_files+0x3a0/0x420
[  734.161442][   T35]  __x64_sys_sendmsg+0x1bd/0x2a0
[  734.163496][   T35]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  734.165734][   T35]  ? rcu_is_watching+0x15/0xb0
[  734.167739][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  734.170754][   T35]  do_syscall_64+0x174/0x580
[  734.172779][   T35]  ? trace_irq_disable+0x3b/0x140
[  734.174762][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  734.176970][   T35] RIP: 0033:0x7f97c719ce59
[  734.178750][   T35] RSP: 002b:00007f97c53f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  734.181713][   T35] RAX: ffffffffffffffda RBX: 00007f97c7415fa0 RCX: 00007f97c719ce59
[  734.184294][   T35] RDX: 0000000024000004 RSI: 00002000000007c0 RDI: 0000000000000006
[  734.187154][   T35] RBP: 00007f97c7232d6f R08: 0000000000000000 R09: 0000000000000000
[  734.189863][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  734.192433][   T35] R13: 00007f97c7416038 R14: 00007f97c7415fa0 R15: 00007ffca7749c28
[  734.194962][   T35]  </TASK>
[  734.196199][   T35] INFO: task syz.2.5835:28929 blocked for more than 143 seconds.
[  734.199292][   T35]       Not tainted syzkaller #0
[  734.201980][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  734.204983][   T35] task:syz.2.5835      state:D stack:23512 pid:28929 tgid:28923 ppid:5625   task_flags:0x400140 flags:0x00080002
[  734.209908][   T35] Call Trace:
[  734.211424][   T35]  <TASK>
[  734.212699][   T35]  __schedule+0x1821/0x5740
[  734.214626][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  734.216714][   T35]  ? __pfx___schedule+0x10/0x10
[  734.218751][   T35]  ? schedule+0x90/0x360
[  734.224725][   T35]  schedule+0x164/0x360
[  734.226546][   T35]  schedule_preempt_disabled+0x13/0x30
[  734.228769][   T35]  __mutex_lock+0x7f7/0x1550
[  734.231060][   T35]  ? __mutex_lock+0x608/0x1550
[  734.233170][   T35]  ? genl_rcv_msg+0x10b/0x7a0
[  734.235185][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  734.237268][   T35]  ? radix_tree_lookup+0x240/0x290
[  734.239729][   T35]  genl_rcv_msg+0x10b/0x7a0
[  734.241631][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  734.243646][   T35]  ? __pfx_ref_tracker_free+0x10/0x10
[  734.245862][   T35]  netlink_rcv_skb+0x232/0x4b0
[  734.247859][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  734.250683][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  734.253079][   T35]  ? down_read+0x270/0x2e0
[  734.254913][   T35]  ? genl_rcv+0xd/0x40
[  734.256557][   T35]  genl_rcv+0x28/0x40
[  734.258126][   T35]  netlink_unicast+0x75c/0x8e0
[  734.260885][   T35]  netlink_sendmsg+0x813/0xb40
[  734.263039][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  734.265294][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  734.267381][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  734.269997][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  734.272309][   T35]  __sys_sendto+0x672/0x710
[  734.274126][   T35]  ? __pfx___sys_sendto+0x10/0x10
[  734.276164][   T35]  ? fd_install+0x94/0x3d0
[  734.278029][   T35]  ? rcu_is_watching+0x15/0xb0
[  734.280495][   T35]  __x64_sys_sendto+0xde/0x100
[  734.282491][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  734.284901][   T35]  do_syscall_64+0x174/0x580
[  734.286831][   T35]  ? trace_irq_disable+0x3b/0x140
[  734.288889][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  734.291608][   T35] RIP: 0033:0x7f97c715d68e
[  734.293440][   T35] RSP: 002b:00007f97c53d3e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  734.296849][   T35] RAX: ffffffffffffffda RBX: 00007f97c53d56c0 RCX: 00007f97c715d68e
[  734.300062][   T35] RDX: 0000000000000020 RSI: 00007f97c53d4000 RDI: 0000000000000013
[  734.303089][   T35] RBP: 0000000000000000 R08: 00007f97c53d3f04 R09: 000000000000000c
[  734.306248][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013
[  734.308848][   T35] R13: 00007f97c53d3f58 R14: 00007f97c53d4000 R15: 0000000000000000
[  734.311346][   T35]  </TASK>
[  734.312423][   T35] INFO: task syz.0.5844:28953 blocked for more than 143 seconds.
[  734.315006][   T35]       Not tainted syzkaller #0
[  734.316927][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  734.320654][   T35] task:syz.0.5844      state:D stack:25976 pid:28953 tgid:28952 ppid:5621   task_flags:0x400140 flags:0x00080002
[  734.325609][   T35] Call Trace:
[  734.326949][   T35]  <TASK>
[  734.327923][   T35]  __schedule+0x1821/0x5740
[  734.329368][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  734.331316][   T35]  ? __pfx___schedule+0x10/0x10
[  734.333013][   T35]  ? schedule+0x90/0x360
[  734.334441][   T35]  schedule+0x164/0x360
[  734.335954][   T35]  schedule_preempt_disabled+0x13/0x30
[  734.337755][   T35]  __mutex_lock+0x7f7/0x1550
[  734.339261][   T35]  ? __mutex_lock+0x608/0x1550
[  734.341775][   T35]  ? genl_rcv_msg+0x10b/0x7a0
[  734.343422][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  734.345111][   T35]  ? radix_tree_lookup+0x240/0x290
[  734.347088][   T35]  genl_rcv_msg+0x10b/0x7a0
[  734.348559][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  734.350557][   T35]  ? __pfx_ref_tracker_free+0x10/0x10
[  734.352788][   T35]  netlink_rcv_skb+0x232/0x4b0
[  734.354732][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  734.356740][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  734.358856][   T35]  ? down_read+0x270/0x2e0
[  734.360831][   T35]  ? genl_rcv+0xd/0x40
[  734.362337][   T35]  genl_rcv+0x28/0x40
[  734.363810][   T35]  netlink_unicast+0x75c/0x8e0
[  734.365518][   T35]  netlink_sendmsg+0x813/0xb40
[  734.367326][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  734.369221][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  734.371543][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  734.373392][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  734.375078][   T35]  __sys_sendto+0x672/0x710
[  734.376847][   T35]  ? __pfx___sys_sendto+0x10/0x10
[  734.378752][   T35]  ? exc_page_fault+0x6a/0xc0
[  734.380630][   T35]  ? do_user_addr_fault+0xc6f/0x1340
[  734.382495][   T35]  __x64_sys_sendto+0xde/0x100
[  734.384147][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  734.386358][   T35]  do_syscall_64+0x174/0x580
[  734.387917][   T35]  ? trace_irq_disable+0x3b/0x140
[  734.389892][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  734.391909][   T35] RIP: 0033:0x7efc4ad5d68e
[  734.393447][   T35] RSP: 002b:00007efc4bd25e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  734.396343][   T35] RAX: ffffffffffffffda RBX: 00007efc4bd276c0 RCX: 00007efc4ad5d68e
[  734.398826][   T35] RDX: 0000000000000020 RSI: 00007efc4bd26000 RDI: 0000000000000004
[  734.401487][   T35] RBP: 0000000000000000 R08: 00007efc4bd25f04 R09: 000000000000000c
[  734.404285][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  734.407134][   T35] R13: 00007efc4bd25f58 R14: 00007efc4bd26000 R15: 0000000000000000
[  734.410025][   T35]  </TASK>
[  734.411073][   T35] INFO: task syz.1.5846:28965 blocked for more than 143 seconds.
[  734.413668][   T35]       Not tainted syzkaller #0
[  734.415287][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  734.418274][   T35] task:syz.1.5846      state:D stack:26344 pid:28965 tgid:28962 ppid:5617   task_flags:0x400140 flags:0x00080002
[  734.419767][T28974] Bluetooth: hci10: command tx timeout
[  734.422511][   T35] Call Trace:
[  734.422523][   T35]  <TASK>
[  734.422532][   T35]  __schedule+0x1821/0x5740
[  734.422552][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  734.422574][   T35]  ? __pfx___schedule+0x10/0x10
[  734.422618][   T35]  ? schedule+0x90/0x360
[  734.422631][   T35]  schedule+0x164/0x360
[  734.422641][   T35]  schedule_preempt_disabled+0x13/0x30
[  734.422650][   T35]  __mutex_lock+0x7f7/0x1550
[  734.422660][   T35]  ? kernel_text_address+0xa5/0xe0
[  734.422675][   T35]  ? __mutex_lock+0x608/0x1550
[  734.422686][   T35]  ? genl_rcv_msg+0x10b/0x7a0
[  734.422699][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  734.422709][   T35]  ? stack_trace_save+0xa9/0x100
[  734.422723][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  734.422733][   T35]  ? radix_tree_lookup+0x240/0x290
[  734.422747][   T35]  genl_rcv_msg+0x10b/0x7a0
[  734.422762][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  734.422779][   T35]  netlink_rcv_skb+0x232/0x4b0
[  734.422789][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  734.422801][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  734.422816][   T35]  ? down_read+0x270/0x2e0
[  734.422826][   T35]  ? genl_rcv+0xd/0x40
[  734.422837][   T35]  genl_rcv+0x28/0x40
[  734.422848][   T35]  netlink_unicast+0x75c/0x8e0
[  734.422863][   T35]  netlink_sendmsg+0x813/0xb40
[  734.422877][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  734.422888][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  734.422904][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  734.422917][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  734.422926][   T35]  __sys_sendto+0x672/0x710
[  734.422938][   T35]  ? __pfx___sys_sendto+0x10/0x10
[  734.422956][   T35]  ? exc_page_fault+0x6a/0xc0
[  734.422967][   T35]  ? do_user_addr_fault+0xc6f/0x1340
[  734.422979][   T35]  __x64_sys_sendto+0xde/0x100
[  734.422990][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  734.423004][   T35]  do_syscall_64+0x174/0x580
[  734.423018][   T35]  ? trace_irq_disable+0x3b/0x140
[  734.423044][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  734.423059][   T35] RIP: 0033:0x7f1c2a95d68e
[  734.423068][   T35] RSP: 002b:00007f1c2b76fe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  734.423080][   T35] RAX: ffffffffffffffda RBX: 00007f1c2b7716c0 RCX: 00007f1c2a95d68e
[  734.423087][   T35] RDX: 000000000000001c RSI: 00007f1c2b770000 RDI: 0000000000000008
[  734.423092][   T35] RBP: 0000000000000000 R08: 00007f1c2b76ff04 R09: 000000000000000c
[  734.423098][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[  734.423104][   T35] R13: 00007f1c2b76ff58 R14: 00007f1c2b770000 R15: 0000000000000000
[  734.423117][   T35]  </TASK>
[  734.423157][   T35] 
[  734.423157][   T35] Showing all locks held in the system:
[  734.423168][   T35] 1 lock held by khungtaskd/35:
[  734.423174][   T35]  #0: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  734.423238][   T35] 2 locks held by getty/5443:
[  734.423244][   T35]  #0: ffff88816dbcf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  734.423268][   T35]  #1: ffffc900034732e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0
[  734.423345][   T35] 1 lock held by udevd/28060:
[  734.423351][   T35]  #0: ffff888104b89350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  734.423388][   T35] 6 locks held by syz.2.5835/28924:
[  734.423396][   T35]  #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  734.423430][   T35]  #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  734.423469][   T35]  #2: ffff888104b22a60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0
[  734.423509][   T35]  #3: ffff8881047a3528 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680
[  734.423542][   T35]  #4: ffff8881047a2ef0 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  734.423617][   T35]  #5: ffff8881047a2f28 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  734.423643][   T35] 2 locks held by syz.2.5835/28929:
[  734.423648][   T35]  #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  734.423671][   T35]  #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  734.423695][   T35] 2 locks held by syz.0.5844/28953:
[  734.423702][   T35]  #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  734.423735][   T35]  #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  734.423771][   T35] 2 locks held by syz.1.5846/28965:
[  734.423779][   T35]  #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  734.423809][   T35]  #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  734.423842][   T35] 2 locks held by syz-executor/28972:
[  734.423851][   T35]  #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  734.423884][   T35]  #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  734.423915][   T35] 3 locks held by kworker/u11:0/28974:
[  734.423924][   T35] 2 locks held by syz-executor/28996:
[  734.423931][   T35]  #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  734.423965][   T35]  #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  734.424002][   T35] 2 locks held by syz-executor/28998:
[  734.424007][   T35]  #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  734.424029][   T35]  #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  734.424054][   T35] 2 locks held by syz-executor/29035:
[  734.424059][   T35]  #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  734.424081][   T35]  #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  734.424104][   T35] 2 locks held by syz-executor/29054:
[  734.424110][   T35]  #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  734.424131][   T35]  #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  734.424154][   T35] 2 locks held by syz-executor/29058:
[  734.424158][   T35]  #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  734.424180][   T35]  #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  734.424206][   T35] 2 locks held by syz-executor/29089:
[  734.424210][   T35]  #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  734.424235][   T35]  #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  734.502905][T28974] Bluetooth: hci11: command tx timeout
[  734.504911][   T35] 2 locks held by syz-executor/29108:
[  734.675610][   T35]  #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  734.679024][   T35]  #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  734.682712][   T35] 2 locks held by syz-executor/29110:
[  734.684894][   T35]  #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  734.688295][   T35]  #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  734.692182][   T35] 
[  734.693237][   T35] =============================================
[  734.693237][   T35] 
[  734.696654][   T35] NMI backtrace for cpu 1
[  734.696674][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  734.696688][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  734.696697][   T35] Call Trace:
[  734.696707][   T35]  <TASK>
[  734.696715][   T35]  dump_stack_lvl+0xe8/0x150
[  734.696738][   T35]  nmi_cpu_backtrace+0x274/0x2d0
[  734.696758][   T35]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  734.696779][   T35]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  734.696799][   T35]  sys_info+0x135/0x170
[  734.696816][   T35]  watchdog+0xfd3/0x1030
[  734.696841][   T35]  ? watchdog+0x1c9/0x1030
[  734.696864][   T35]  kthread+0x389/0x470
[  734.696883][   T35]  ? __pfx_watchdog+0x10/0x10
[  734.696898][   T35]  ? __pfx_kthread+0x10/0x10
[  734.696916][   T35]  ret_from_fork+0x514/0xb70
[  734.696939][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  734.696952][   T35]  ? __switch_to+0xc79/0x1410
[  734.696973][   T35]  ? __pfx_kthread+0x10/0x10
[  734.696990][   T35]  ret_from_fork_asm+0x1a/0x30
[  734.697018][   T35]  </TASK>
[  734.697023][   T35] Sending NMI from CPU 1 to CPUs 0:
[  734.743312][    C0] NMI backtrace for cpu 0
[  734.743332][    C0] CPU: 0 UID: 0 PID: 32 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) 
[  734.743346][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  734.743354][    C0] Workqueue:  0x0 (events_unbound)
[  734.743376][    C0] RIP: 0010:native_apic_msr_write+0x39/0x50
[  734.743407][    C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 e9 00 29 37 0a cc 89 f6 31 d2 e9 66 47 7a 03 66 0f 1f 44 00
[  734.743418][    C0] RSP: 0018:ffffc90000a878b0 EFLAGS: 00000046
[  734.743428][    C0] RAX: 0000000000015d1f RBX: ffff888121023e40 RCX: 0000000000000838
[  734.743437][    C0] RDX: 0000000000000000 RSI: 0000000000015d1f RDI: 0000000000000838
[  734.743444][    C0] RBP: ffffc90000a87970 R08: ffffffff81b2d795 R09: ffffffff9a490588
[  734.743453][    C0] R10: 0000000000000003 R11: ffffffff817436c0 R12: 0000000000015d1f
[  734.743461][    C0] R13: dffffc0000000000 R14: 000000001000192a R15: 0000000000000020
[  734.743469][    C0] FS:  0000000000000000(0000) GS:ffff88818dc8a000(0000) knlGS:0000000000000000
[  734.743479][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  734.743487][    C0] CR2: 0000562478a62e38 CR3: 000000000e74a000 CR4: 00000000000006f0
[  734.743526][    C0] Call Trace:
[  734.743532][    C0]  <TASK>
[  734.743538][    C0]  lapic_next_event+0x11/0x20
[  734.743552][    C0]  clockevents_program_event+0x385/0x630
[  734.743567][    C0]  ? do_raw_spin_unlock+0x4d/0x210
[  734.743624][    C0]  ? __pfx_clockevents_program_event+0x10/0x10
[  734.743640][    C0]  ? tick_program_event+0x8f/0x120
[  734.743656][    C0]  hrtimer_start_range_ns+0x940/0xed0
[  734.743677][    C0]  finish_task_switch+0x3cd/0xbe0
[  734.743691][    C0]  __schedule+0x1829/0x5740
[  734.743704][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  734.743725][    C0]  ? __pfx___schedule+0x10/0x10
[  734.743739][    C0]  ? schedule+0x90/0x360
[  734.743751][    C0]  schedule+0x164/0x360
[  734.743762][    C0]  worker_thread+0xc21/0xfc0
[  734.743785][    C0]  kthread+0x389/0x470
[  734.743799][    C0]  ? __pfx_worker_thread+0x10/0x10
[  734.743810][    C0]  ? __pfx_kthread+0x10/0x10
[  734.743825][    C0]  ret_from_fork+0x514/0xb70
[  734.743839][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  734.743851][    C0]  ? __switch_to+0xc79/0x1410
[  734.743868][    C0]  ? __pfx_kthread+0x10/0x10
[  734.743882][    C0]  ret_from_fork_asm+0x1a/0x30
[  734.743903][    C0]  </TASK>
[  734.830913][   T35] Kernel panic - not syncing: hung_task: blocked tasks
[  734.833152][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  734.836058][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  734.839261][   T35] Call Trace:
[  734.840317][   T35]  <TASK>
[  734.841272][   T35]  vpanic+0x56c/0xa60
[  734.842569][   T35]  ? __pfx___schedule+0x10/0x10
[  734.844304][   T35]  ? __pfx_vpanic+0x10/0x10
[  734.845946][   T35]  ? nmi_trigger_cpumask_backtrace+0x1f4/0x300
[  734.848290][   T35]  panic+0xc5/0xd0
[  734.849865][   T35]  ? __pfx_panic+0x10/0x10
[  734.851616][   T35]  ? preempt_schedule_thunk+0x16/0x30
[  734.853550][   T35]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  734.855780][   T35]  watchdog+0x102c/0x1030
[  734.857386][   T35]  ? watchdog+0x1c9/0x1030
[  734.859107][   T35]  kthread+0x389/0x470
[  734.860615][   T35]  ? __pfx_watchdog+0x10/0x10
[  734.862189][   T35]  ? __pfx_kthread+0x10/0x10
[  734.863955][   T35]  ret_from_fork+0x514/0xb70
[  734.865798][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  734.867867][   T35]  ? __switch_to+0xc79/0x1410
[  734.869840][   T35]  ? __pfx_kthread+0x10/0x10
[  734.871683][   T35]  ret_from_fork_asm+0x1a/0x30
[  734.873273][   T35]  </TASK>
[  734.875067][   T35] Kernel Offset: disabled
[  734.876456][   T35] Rebooting in 86400 seconds..
