last executing test programs:

17.827942851s ago: executing program 1 (id=2704):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x13}, {}, {0x7, 0x1, 0xb, 0x2, 0xa, 0x1200}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000003}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7b, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)

17.7074413s ago: executing program 1 (id=2707):
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0)
ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, &(0x7f0000000000)=0xfffffff7)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b40), r3)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000b80)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x4000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500, 0x1882}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x800}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)

16.849002247s ago: executing program 1 (id=2720):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000280)={0x0, 0x1, 0x1})
r1 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
accept$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x50)
ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000600)={{r2}, "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"})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r5, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x2, 0xa, 0x2)
setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
write$tun(r6, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x18, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xb, 0x10000}}}}}}}}, 0x52)
connect$inet(r3, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00000002c0)=""/183, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8}, 0x94)
r8 = socket$kcm(0x29, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r8)
ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000180)={r3, r7})

16.659702153s ago: executing program 0 (id=2721):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket(0x2, 0x3, 0xff)
setsockopt$inet_int(r1, 0x0, 0x3, 0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10)
recvfrom$inet(r1, 0x0, 0x0, 0x10022, 0x0, 0x0)
recvmsg$kcm(r1, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x150)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000100))
r4 = accept4(r2, 0x0, 0x0, 0x80800)
sendmsg$alg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@iv={0x10}], 0x10, 0x48880}, 0x14000012)
getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="000086000000120000000000000060fc0000000000000000008a6d0093cf003a000000000000008500907800000000"], 0x46)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r5}, 0x8)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYRES8=r1, @ANYRESHEX=r5, @ANYBLOB="8f92ab404807295237bfbe1323059e"], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x406, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x227, 0x0, &(0x7f00000009c0)="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", 0x0, 0x6ae053d2c3e58519}, 0x50)
write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef)

16.239626832s ago: executing program 2 (id=2726):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000030a01020000000000000000010000000900030073797a32000000000900010073797a310000f5ff2c000000050a01020000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000053"], 0xa8}, 0x1, 0x0, 0x0, 0x4040000}, 0x80)

16.18959351s ago: executing program 2 (id=2727):
getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, &(0x7f0000000000)=""/5, &(0x7f0000000040)=0x5)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ipvlan0\x00', 0x1000})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4cc0, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'ip6_vti0\x00', @random="473316e8e5e8"})
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x3, 0x1, 0x204, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2004}, @CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x80}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xe}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffffc}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x20000001)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e24, 0xc, @empty, 0x4}, 0x1c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xc0, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1e}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7ff}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x32, 0x8}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x820}, 0x814)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000440)='dvmrp0\x00', 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000480)=0xffffffffffffffff, 0x4)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x16, &(0x7f00000004c0)=@raw=[@btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x3}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x5}], &(0x7f0000000580)='GPL\x00', 0x6, 0x88, &(0x7f00000005c0)=""/136, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x20652, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[r3, 0x1], 0x0, 0x10, 0x1ff}, 0x94)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000007c0)={<r7=>r1, 0xfffffffffffff001, 0x100000000, 0xd412})
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000800)={r5, r6, 0x4, r7}, 0x10)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000840)={<r8=>0x0, @in6={{0xa, 0x3, 0xd, @private2, 0x1ff}}}, &(0x7f0000000900)=0x84)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f0000000940)={r8, 0x5, 0x7f}, 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000980))
ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f00000009c0)={0x2, 0x25a})
getsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000a00), &(0x7f0000000a40)=0x4)
connect$inet6(r7, &(0x7f0000000a80)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x2}, 0x1c)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b00), r2)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x50, r9, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x1000}, {0xc, 0x90, 0x3}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x850)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r7)
sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000e80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x170, r10, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x0, 0x4, 0x8, 0x1, 0x4, 0x8, 0x0, 0x3]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x30}]}, @NL80211_ATTR_CQM={0x64, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x61}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1c}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x11}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x580a}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x200}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0xd5, 0x3c63, 0x2d, 0xfffffffd, 0x4]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x59}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x9, 0x5, 0x1ff]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x29e}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8001}]}, @NL80211_ATTR_CQM={0x5c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x70d4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x51b}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x8000000, 0x867, 0x7, 0x3ff, 0x800]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x8, 0x2, 0x1, 0x401, 0x7, 0x9, 0x8]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x39}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x2, 0x0, 0x66]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xe}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x42}, 0x40080d0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r11, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x3c, 0x2, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9000}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8}, 0x8000)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f0000000fc0), &(0x7f0000001000)=0x4)

16.18890898s ago: executing program 2 (id=2728):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0xe, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000001c0)={<r4=>r1, 0x6, 0x10001, 0x3})
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, 0x1, 0x4, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}, @NFULA_CFG_MODE={0xa, 0x2, {0xfffffff7, 0xbc8a30a7104daf65}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x3, 0x1}}, @NFULA_CFG_MODE={0xa, 0x2, {0x1000, 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x4, &(0x7f00000007c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x24}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r6, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054)
sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan1\x00'})
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40c0)
socket$inet_sctp(0x2, 0x1, 0x84)
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', <r8=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@deltfilter={0x204, 0x2d, 0x8, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x1, 0xe}, {0x9, 0x3}, {0xe, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x3}}, @filter_kind_options=@f_cgroup={{0xb}, {0x1cc, 0x2, [@TCA_CGROUP_EMATCHES={0x1c8, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x101}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x6}, [@TCA_EM_META_LVALUE={0x13, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="95588fed184221"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xf9, 0x7, 0x2}, {{0x3, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x120, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x3, 0x2, 0xc00}, {0x0, 0x4, 0x0, "fc585ae4"}}}, @TCF_EM_CONTAINER={0x68, 0x2, 0x0, 0x0, {{0x9, 0x0, 0x4}, "4632c94aac159d10e6623a8e84b4dcee9f88b80ac5cc81ced0f285d22ac250a7286c5759c5a188e8b79696cc7aeeb670a5c4eb4fb0bf445691a21d6394c37df2347dce30bec0e709ab184437138695d544cf409ed205790476554a"}}, @TCF_EM_CONTAINER={0xa0, 0x3, 0x0, 0x0, {{0x5, 0x0, 0x7ff}, "5354a3d093e573750683102e19570c32e3574664345e4110b74279bf59d022e53990c342c7a516a82198e9f5217e4266f466986c00b8c315908b60469d0b7e53e78fa5a7208820a19d7ca3a70b6342cd2d9469a57f1d253abf3ecde218b41e93898e1224618c73fc71896c397d8ee069f61444f09825a2f0630e021898b883401bbe88065961f1a088c7e74c85a29961e0e547f3"}}]}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xffff, 0x3, 0x7}, {0x4, 0x2, 0x7, 0x5}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0xa68, 0x2, 0xd7}, {0x101, 0x5, 0x0, "990f972ce5"}}}]}]}]}}]}, 0x204}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r7, 0x89e4)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

15.9286177s ago: executing program 1 (id=2729):
r0 = socket$kcm(0x10, 0x2, 0x0)
read(r0, &(0x7f0000000380)=""/152, 0x98)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x1bc, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x200, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x104, 0x5, [{{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x640100ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2000, 0x3c}, 0x2, @in6=@dev, 0x0, 0x0, 0x1, 0x0, 0x6}, {{@in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x33}, 0x0, @in=@remote}, {{@in=@remote, 0x4d2, 0x33}, 0x1, @in6=@remote, 0x0, 0x5, 0x0, 0x3}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x800005, 0x32, 0xffffffffffffffff, 0x852ac000)
r2 = socket$inet6(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f00000000c0)="9a", 0x1, 0x804, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c)
getsockopt$bt_hci(r2, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="19070000000000998eb017000200000000000000ad00bdde87dacace2452298e595000b73420ac1767bae5e81482a3375a0f58dec092c7246b1c423f79e49f7aac39c08a5287f3d187242c24ad632745e99485a5b78cfd79d21bc232d09509702605670fb50b003984f513e37d9f59efda20fb72c1ea49d17847fe2e561886b1eb78b46e8368e3a5ddd32ddfd4cc43b044c15557d484d67f55e7298eec754b99530af2b1bb9da036636608518d1257876d3e9c00"/190, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES16=r0], 0x48)
r4 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e23, 0x300100, @private2={0xfc, 0x2, '\x00', 0x1}, 0x400009}, 0x1c)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f00000000c0)="ad57877f678615cea5858470ef9a9ce63f4388845b68d100479307c5d3db3216b7807206e76d92cff1013bd30a2e69ed768a65bc12b293c353bfd1a7c490b96aa3b3ee5d2f8197de941b151d00e13907b094edaa74621c59ccb3f96c04cacc0a81e98e6c72427f5a9775c5e4f2c8d78f12cdff12ebf387c786566c3de8cbf582d7", &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)

15.709878287s ago: executing program 0 (id=2730):
socketpair(0x6, 0x9cc2b9ffcccc16d0, 0x7, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
getpeername$netlink(r2, &(0x7f0000000040), &(0x7f0000000080)=0xc)
unshare(0x20000000) (async)
socket$kcm(0x29, 0x0, 0x0) (async)
unshare(0x8020900)
recvfrom$netrom(r1, &(0x7f00000000c0)=""/244, 0xf4, 0x20, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48)
r3 = accept$inet(r0, &(0x7f0000000240)={0x2, 0x0, @private}, &(0x7f0000000280)=0x10)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f00000002c0)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78)
r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000380)=r4, 0x4) (async)
getsockname$netrom(r1, &(0x7f00000003c0)={{0x3, @rose}, [@rose, @null, @null, @rose, @null, @remote, @null, @netrom]}, &(0x7f0000000440)=0x48) (async)
syz_genetlink_get_family_id$smc(&(0x7f0000000480), r1) (async)
write(r1, &(0x7f00000004c0)="9bfd0a2ed2211a2f5d8b06a2d4b8bd653689b863abd4b658037814fdd39b039d105e4ba6d9f656d6984ce1c7bef09c2c2fb5e6b736b3e37f34e21f1d655fa6b6ee1c46f83e6396b323eff0c63b86be51b05864a8e475600e7e2a171b4027cb28dae77284e272f73ef9f3ddad1d88f613d3c5ae6f275170e54f7501f3bd47aefb9ed3977d2260684533ae2a485d75fb4870969f3af9d19659594abe37183ecdb96f16b58f00beb9ec2016cb55e212e664980bf0942dbc30ca8cb571382b4fac83b3deef650a99fe0b7669b967e4a11bdcf03f9ec6d8768430224aee260cc132c88605b1840e2754e261", 0xe9) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x74, r6, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x10}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5e}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3f}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x80000000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xde}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xffffc041, 0x0]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x33}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}]}]}, 0x74}}, 0x4000)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000a00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x1a4, r8, 0x400, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x79e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5, @mcast1}}}}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_NODE={0xbc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xb3, 0x3, "ab439dd6400d48ba1c3a55168b1f44af747bdeb7005140f76d8393bbc8f92739ddcef43f4cef0b9d5f61f8ae430226b1c2a85c290c01c9de32af638909348e81100dccaabba35f73cc273f16f26cdc82284ff180444b27379c9a3d3ddcf8f20e6ba8d7bb1009f8a27090b16b48ce7532473256f42bd18748626c43afba73d19d288858b597586a3e91507853addb3451d51f21c3e4cb80cd732f8a0a2eef0c49b2024281f83fa98a5f9e71fdb38362"}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4048801}, 0x4000040) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000c00)={'erspan0\x00', &(0x7f0000000a80)={'gre0\x00', <r9=>0x0, 0x1, 0x80, 0x9, 0x7ff, {{0x56, 0x4, 0x3, 0x2, 0x158, 0x65, 0x0, 0x5, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x89, 0xb, "f9972c54ac4faeabf4"}, @timestamp_prespec={0x44, 0x2c, 0xa7, 0x3, 0x4, [{@multicast1, 0x4}, {@loopback, 0x9}, {@local, 0x2}, {@rand_addr=0x64010100, 0x4}, {@local, 0x1000}]}, @timestamp_prespec={0x44, 0x2c, 0xc6, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@multicast1, 0x10001}, {@loopback, 0x81}, {@broadcast, 0xf6f}, {@loopback, 0x8000}]}, @end, @timestamp_prespec={0x44, 0x34, 0xdc, 0x3, 0xb, [{@multicast2, 0x82b8}, {@loopback, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@remote, 0x8}, {@remote, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @timestamp_addr={0x44, 0xc, 0xaa, 0x1, 0x1, [{@multicast1, 0x2}]}, @cipso={0x86, 0x62, 0x0, [{0x7, 0xe, "55da68fd5376a0a64d195674"}, {0x2, 0x6, "b5e7cd1e"}, {0x2, 0xb, "99589a3f3a3a473add"}, {0x6, 0x4, "51b6"}, {0x7, 0x10, "fb573b1cd27aeb17709fd4864b46"}, {0x0, 0xe, "3ce15ecd726056bb30e1469a"}, {0x7, 0x6, "0df346ce"}, {0x0, 0x4, "129f"}, {0x2, 0x9, "1b198e8c27d3d7"}, {0x2, 0x8, '#xi*Cu'}]}, @noop, @timestamp_prespec={0x44, 0x3c, 0x48, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@loopback, 0xfffff521}, {@local, 0xfcf2}, {@local, 0x8}, {@multicast1, 0x3}, {@private=0xa010102}, {@multicast2, 0x9}]}]}}}}})
sendmsg$nl_route_sched(r0, &(0x7f0000000d80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)=@newqdisc={0xe8, 0x24, 0x100, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xa, 0x3}, {0x10}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x36}}, @qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x9}]}}, @TCA_STAB={0xa4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6e, 0x2, 0x5e6, 0x0, 0x3, 0x2, 0x1, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0xf, 0x2, 0x9, 0x400, 0x0, 0x1e, 0x5, 0x2}}, {0x8, 0x2, [0xc9, 0xbd]}}, {{0x1c, 0x1, {0x4, 0x2c, 0x4, 0x7, 0x2, 0x1, 0x5aa2, 0x6}}, {0x10, 0x2, [0x5, 0x10, 0x9515, 0xffff, 0x89c2, 0x9]}}, {{0x1c, 0x1, {0x6, 0x10, 0x6, 0x1800000, 0x2, 0x1, 0x10001, 0x3}}, {0xa, 0x2, [0x8001, 0x2, 0x2]}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x14}, 0x24000000) (async)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e00), r1)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r5, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x30100000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, r10, 0x200, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004004}, 0x2004c0d4) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{0xffffffffffffffff, <r11=>0xffffffffffffffff}, &(0x7f0000000f00), &(0x7f0000000f40)=r4}, 0x20) (async)
r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000fc0)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@bloom_filter={0x1e, 0x0, 0xe7b, 0x4, 0x6840, r11, 0xfffffff3, '\x00', r9, r12, 0x0, 0x5, 0x0, 0x8}, 0x50) (async)
ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000001080)={'tunl0\x00', 0x5, 0x7}) (async)
socket$kcm(0x29, 0x2, 0x0)
socket$inet(0x2, 0x3, 0x410)

15.709203653s ago: executing program 0 (id=2731):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r1 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8}]}}]}, 0x3c}}, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0)
sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xfffd}], 0x1, &(0x7f00000002c0)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}], 0x38, 0x4855}, 0x24000052)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000001900)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000100fffc0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c00048028000180080001006e6174001c000280080002400000000a080001400000000108000340030000000900010073797a300000"], 0xc8}}, 0x0)
r5 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
writev(r6, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @rand_addr=0x64010101}, 0xc)
recvmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000000000)=""/41, 0x29}, {&(0x7f00000008c0)=""/4119, 0x1017}, {&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f0000000500)=""/236, 0xec}, {&(0x7f00000000c0)=""/237, 0xed}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x6}], 0x9, 0x4022, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000001dc0)={<r8=>0x0, 0x1000, "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"}, &(0x7f0000000040)=0x1008)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f00000001c0)={0x30bd, 0x6, 0x0, 0x7, 0x1, 0xc, 0x9, 0xfffffffb, r8}, 0x20)

15.639441519s ago: executing program 0 (id=2732):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000440), 0x2, 0x40088d4) (async)
socket$isdn(0x22, 0x2, 0x21)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x80) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x4000800)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) (async)
r10 = socket$netlink(0x10, 0x3, 0x0) (async)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async, rerun: 64)
r13 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x2, 0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async, rerun: 64)
r15 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
r16 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r17=>0x0})
sendmsg$nl_route_sched(r15, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r17, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)

15.530288389s ago: executing program 0 (id=2733):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080088a8ffff0500070007000000d3f58e35ff4f4b052bdd0122e50734e15e06ff2a2a6ef1321009b5d387a4819e1c36a00d804cd8c33edeb507df4b41b619673c9cdea3e0ee28b018aeb71fe4834bf4fc810c4992fa169c1a8f26fe37e909f534b1033dbe1aac"], 0x44}}, 0x0)

15.529401308s ago: executing program 0 (id=2734):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet(0x2, 0x3, 0x5)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000680), 0xffffffffffffffff)
r4 = socket$kcm(0x2, 0x1000000000000005, 0x0)
sendmsg$inet(r4, &(0x7f0000007940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003001100000000000000000000001c00000000000000000f00fdffff0700", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f020c000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000084"], 0x98}, 0x4dc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005940)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$sock(r5, &(0x7f0000006e40)={&(0x7f0000005980)=@generic={0x1, "7f2a5c186b32b4c3e37e9db0cc4d174988d2a7485e8abf2e0d364ef46996432a3c1f52de9d37bbd65c4381f1e88065069a4c67aeb01cefdda4f74f30b0d0cc3280305951c1a9f9bd942b1080f8fe1f9709a4e70d778a658977ef70f8aa3d710a5f78e96bb6f5530f87548ac4914e4cb5a19987d62bb82525306ab2479ead"}, 0x80, 0x0}, 0x4004010)
r6 = socket$l2tp(0x2, 0x2, 0x73)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$sock_int(r7, 0x1, 0x7, 0x0, &(0x7f0000000100))
bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e28, @multicast2}, 0x10)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r6, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
r8 = accept4(r1, 0x0, &(0x7f0000000080), 0x80000)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000100)={0x80, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7316}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000000}, 0x40800)
socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf250400000004000d8008000c00", @ANYRES32=r0, @ANYBLOB="562f5a8d885850c65e12afaeeebaa58644a239b9439a0113ed95962cd96a1a8da016026cdc92f6593b21c729b7be854b51461ab4267398f562b373482bf8e4a07f2d01e65e7e27f95672790f4f9e1dc259da886ec1c5b8e0f3fee06986d1105b7e8c77a18e0e9eac1d190e3f35541597c14666341ef500000000000000003058b983aea40d41733ce8506370164aaa0ef1f1211552d95a850647882424f9ef735605fb02892611c6bfa626a863c087b674082e7fb050bb0edfcef0eaaa7fc8ed9074466a394e7d9ba0e1619662b4436c26fe5f5fee03bb45b0"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

15.290255816s ago: executing program 2 (id=2735):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000030a01020000000000000000010000000900030073797a32000000000900010073797a31000000142c000000050a01020000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000053"], 0xa8}, 0x1, 0x0, 0x0, 0x4040000}, 0x80)

15.290038703s ago: executing program 2 (id=2736):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0xfd, 0x0}}, {0x0, @multicast}, 0x14, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth0\x00'})
syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff07, [{0x0, 0xa, "a70ce54006598080a8030037004023493b87aafaffffffffffffff23532472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x3, 0x1, "000000050000000026000400"}, {0x1, 0x18, "fe90000005dc9393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5fe0000000000000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)

15.240028406s ago: executing program 2 (id=2737):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818e10000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000540)={0x1ff, {{0xa, 0x4e20, 0x3, @loopback, 0x7f}}, {{0xa, 0x4e21, 0x40, @empty, 0x2}}}, 0x108)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x3, 0x1, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x749, 0x700, 0x0, 0x6}})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x6, 0x0, 0xff, 0x5, 0x0, 0xa001}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r6, 0x0, r8, 0x0, 0xf3a, 0x0)
close(r7)
write(r5, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r9 = socket(0x15, 0x5, 0x0)
getsockopt(r9, 0x200000000114, 0x2711, &(0x7f0000000600)=""/102389, &(0x7f0000000000)=0x18ff5)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r10, 0x8b27, &(0x7f0000000040))
r11 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r11, 0x65, 0x7, &(0x7f0000001c40)=0x2000ff, 0x4)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r12=>0x0})
sendmsg$can_raw(r11, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r12}, 0x10, &(0x7f00000005c0)={&(0x7f00000000c0)=@can={{}, 0x80, 0x3, 0x4, 0x2}, 0x210}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180))
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00082cbd7000fbdbdf250100000005002a00100004000500330000000000080034000200000005002f0000000000086fb5098fe3ffc8002c00f80b000005002e0000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000d40)=[{{&(0x7f0000000280)={0xa, 0x4e24, 0x1df6b78c, @private2, 0x44}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x800}}, @flowinfo={{0x14, 0x29, 0xb, 0x334}}], 0x30}}], 0x1, 0x24047f40)

15.060084764s ago: executing program 1 (id=2738):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xffffffff, 0xa05, 0x40, 0x8180, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x50)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0)
splice(r0, &(0x7f0000000080)=0x80000000, r1, &(0x7f0000000100)=0x40000000000000, 0x2, 0x0)

15.055315045s ago: executing program 1 (id=2739):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket(0x400000000010, 0x3, 0x0) (async)
r2 = socket$unix(0x1, 0x1, 0x0) (async)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r3, 0x0, 0x32, 0x89e8, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
r6 = socket$unix(0x1, 0x1, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (async, rerun: 32)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x58, 0x28, 0x1, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x81, 0xff}}, @TCA_RATE={0x6, 0x5, {0xe, 0x5}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xff, 0x0, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240480dd}, 0x0) (rerun: 32)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r9 = socket(0x10, 0x3, 0x0) (async)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x40, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x200, 0xa, 0x20, 0x0, 0x18}, {0x0, 0x7, 0x0, 0x2, 0x1000000, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@remote, 0x4d3, 0x32}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x41}, 0x0, 0x4, 0x0, 0x8, 0x5, 0x80000000, 0x7}]}]}, 0xfc}}, 0xc000) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {0xffff, 0xffff}, {0x7, 0xffe5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10040084}, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x48840}, 0x0) (async, rerun: 32)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000240)={<r13=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x22}}]}, &(0x7f0000000140)=0x10) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async)
sendmsg$NFULNL_MSG_CONFIG(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010401010000000000000000010004000500010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) (async)
sendmsg$NFULNL_MSG_CONFIG(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000010405000000000000000000030000104500010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888)
setsockopt$CAN_RAW_FD_FRAMES(r9, 0x65, 0x5, &(0x7f0000000180)=0x2000000, 0x4) (async)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (async, rerun: 32)
getsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r13, 0x9}, &(0x7f0000000300)=0x8) (rerun: 32)

57.753579ms ago: executing program 32 (id=2734):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet(0x2, 0x3, 0x5)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000680), 0xffffffffffffffff)
r4 = socket$kcm(0x2, 0x1000000000000005, 0x0)
sendmsg$inet(r4, &(0x7f0000007940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003001100000000000000000000001c00000000000000000f00fdffff0700", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f020c000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000084"], 0x98}, 0x4dc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005940)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$sock(r5, &(0x7f0000006e40)={&(0x7f0000005980)=@generic={0x1, "7f2a5c186b32b4c3e37e9db0cc4d174988d2a7485e8abf2e0d364ef46996432a3c1f52de9d37bbd65c4381f1e88065069a4c67aeb01cefdda4f74f30b0d0cc3280305951c1a9f9bd942b1080f8fe1f9709a4e70d778a658977ef70f8aa3d710a5f78e96bb6f5530f87548ac4914e4cb5a19987d62bb82525306ab2479ead"}, 0x80, 0x0}, 0x4004010)
r6 = socket$l2tp(0x2, 0x2, 0x73)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$sock_int(r7, 0x1, 0x7, 0x0, &(0x7f0000000100))
bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e28, @multicast2}, 0x10)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r6, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
r8 = accept4(r1, 0x0, &(0x7f0000000080), 0x80000)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000100)={0x80, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7316}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000000}, 0x40800)
socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf250400000004000d8008000c00", @ANYRES32=r0, @ANYBLOB="562f5a8d885850c65e12afaeeebaa58644a239b9439a0113ed95962cd96a1a8da016026cdc92f6593b21c729b7be854b51461ab4267398f562b373482bf8e4a07f2d01e65e7e27f95672790f4f9e1dc259da886ec1c5b8e0f3fee06986d1105b7e8c77a18e0e9eac1d190e3f35541597c14666341ef500000000000000003058b983aea40d41733ce8506370164aaa0ef1f1211552d95a850647882424f9ef735605fb02892611c6bfa626a863c087b674082e7fb050bb0edfcef0eaaa7fc8ed9074466a394e7d9ba0e1619662b4436c26fe5f5fee03bb45b0"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

192.688µs ago: executing program 33 (id=2739):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket(0x400000000010, 0x3, 0x0) (async)
r2 = socket$unix(0x1, 0x1, 0x0) (async)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r3, 0x0, 0x32, 0x89e8, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
r6 = socket$unix(0x1, 0x1, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (async, rerun: 32)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x58, 0x28, 0x1, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x81, 0xff}}, @TCA_RATE={0x6, 0x5, {0xe, 0x5}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xff, 0x0, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240480dd}, 0x0) (rerun: 32)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r9 = socket(0x10, 0x3, 0x0) (async)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x40, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x200, 0xa, 0x20, 0x0, 0x18}, {0x0, 0x7, 0x0, 0x2, 0x1000000, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@remote, 0x4d3, 0x32}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x41}, 0x0, 0x4, 0x0, 0x8, 0x5, 0x80000000, 0x7}]}]}, 0xfc}}, 0xc000) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {0xffff, 0xffff}, {0x7, 0xffe5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10040084}, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x48840}, 0x0) (async, rerun: 32)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000240)={<r13=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x22}}]}, &(0x7f0000000140)=0x10) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async)
sendmsg$NFULNL_MSG_CONFIG(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010401010000000000000000010004000500010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) (async)
sendmsg$NFULNL_MSG_CONFIG(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000010405000000000000000000030000104500010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888)
setsockopt$CAN_RAW_FD_FRAMES(r9, 0x65, 0x5, &(0x7f0000000180)=0x2000000, 0x4) (async)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (async, rerun: 32)
getsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r13, 0x9}, &(0x7f0000000300)=0x8) (rerun: 32)

0s ago: executing program 34 (id=2737):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818e10000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000540)={0x1ff, {{0xa, 0x4e20, 0x3, @loopback, 0x7f}}, {{0xa, 0x4e21, 0x40, @empty, 0x2}}}, 0x108)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x3, 0x1, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x749, 0x700, 0x0, 0x6}})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x6, 0x0, 0xff, 0x5, 0x0, 0xa001}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r6, 0x0, r8, 0x0, 0xf3a, 0x0)
close(r7)
write(r5, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r9 = socket(0x15, 0x5, 0x0)
getsockopt(r9, 0x200000000114, 0x2711, &(0x7f0000000600)=""/102389, &(0x7f0000000000)=0x18ff5)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r10, 0x8b27, &(0x7f0000000040))
r11 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r11, 0x65, 0x7, &(0x7f0000001c40)=0x2000ff, 0x4)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r12=>0x0})
sendmsg$can_raw(r11, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r12}, 0x10, &(0x7f00000005c0)={&(0x7f00000000c0)=@can={{}, 0x80, 0x3, 0x4, 0x2}, 0x210}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180))
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00082cbd7000fbdbdf250100000005002a00100004000500330000000000080034000200000005002f0000000000086fb5098fe3ffc8002c00f80b000005002e0000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000d40)=[{{&(0x7f0000000280)={0xa, 0x4e24, 0x1df6b78c, @private2, 0x44}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x800}}, @flowinfo={{0x14, 0x29, 0xb, 0x334}}], 0x30}}], 0x1, 0x24047f40)

kernel console output (not intermixed with test programs):

 left promiscuous mode
[  207.097052][T11906] netdevsim netdevsim0 eth0: entered allmulticast mode
[  207.103452][T11906] netdevsim netdevsim0 eth1: entered allmulticast mode
[  207.107041][T11906] netdevsim netdevsim0 eth2: entered allmulticast mode
[  207.110507][T11906] netdevsim netdevsim0 eth3: entered allmulticast mode
[  207.113446][T11906] gretap1: left promiscuous mode
[  207.115498][T11906] gretap1: entered allmulticast mode
[  207.267090][T11928] IPVS: set_ctl: invalid protocol: 137 127.0.0.1:20003
[  207.272117][T11930] netlink: 'syz.1.1642': attribute type 15 has an invalid length.
[  207.652561][T11976] bond23: entered promiscuous mode
[  207.654440][T11976] bond23: entered allmulticast mode
[  207.656402][T11976] 8021q: adding VLAN 0 to HW filter on device bond23
[  208.522510][T12009] xt_l2tp: v2 doesn't support IP mode
[  208.716151][T12016] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20001
[  209.432783][T12021] validate_nla: 6 callbacks suppressed
[  209.432799][T12021] netlink: 'syz.2.1665': attribute type 8 has an invalid length.
[  209.545987][T12025] netlink: 'syz.2.1667': attribute type 1 has an invalid length.
[  209.574949][T12025] bond33: entered promiscuous mode
[  209.580590][T12025] bond33: entered allmulticast mode
[  209.584380][T12025] 8021q: adding VLAN 0 to HW filter on device bond33
[  209.709647][T12038] netlink: 'syz.2.1672': attribute type 8 has an invalid length.
[  209.760135][T12044] bridge_slave_1: left promiscuous mode
[  209.763028][T12044] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.770805][T12044] bridge_slave_0: left promiscuous mode
[  209.772771][T12044] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.832992][T12046] __nla_validate_parse: 21 callbacks suppressed
[  209.833004][T12046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1676'.
[  209.908329][T12053] netlink: 'syz.2.1677': attribute type 1 has an invalid length.
[  209.925404][T12053] bond34: entered promiscuous mode
[  209.926979][T12053] bond34: entered allmulticast mode
[  209.930854][T12053] 8021q: adding VLAN 0 to HW filter on device bond34
[  209.956729][T12056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1678'.
[  210.124487][T12064] syzkaller1: entered promiscuous mode
[  210.126609][T12064] syzkaller1: entered allmulticast mode
[  210.345493][T12067] syzkaller1: entered promiscuous mode
[  210.347671][T12067] syzkaller1: entered allmulticast mode
[  210.513680][T12069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1684'.
[  210.733009][T12082] SET target dimension over the limit!
[  210.802835][T12087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1690'.
[  210.885311][T12089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1691'.
[  210.888554][T12089] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1691'.
[  210.951689][T12089] syz.0.1691 (12089) used obsolete PPPIOCDETACH ioctl
[  210.956148][T12089] netlink: 'syz.0.1691': attribute type 10 has an invalid length.
[  210.960965][T12089] `: Device ipvlan1 failed to register rx_handler
[  211.046900][T12098] sctp: [Deprecated]: syz.0.1695 (pid 12098) Use of int in max_burst socket option.
[  211.046900][T12098] Use struct sctp_assoc_value instead
[  211.075507][T12102] netlink: 'syz.0.1696': attribute type 1 has an invalid length.
[  211.095832][T12105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1697'.
[  211.098291][T12102] bond24: entered promiscuous mode
[  211.101325][T12102] bond24: entered allmulticast mode
[  211.103217][T12102] 8021q: adding VLAN 0 to HW filter on device bond24
[  211.139972][T12110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1698'.
[  211.164632][T12115] netlink: 'syz.2.1699': attribute type 12 has an invalid length.
[  211.345028][T12127] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  211.363993][T12127] tipc: Disabling bearer <eth:syzkaller0>
[  211.393243][T12134] netlink: 'syz.2.1704': attribute type 1 has an invalid length.
[  211.426617][T12134] bond35: entered promiscuous mode
[  211.428474][T12134] bond35: entered allmulticast mode
[  211.430375][T12134] 8021q: adding VLAN 0 to HW filter on device bond35
[  211.836328][T12166] netlink: 'syz.2.1712': attribute type 1 has an invalid length.
[  211.864913][T12166] bond36: entered promiscuous mode
[  211.866558][T12166] bond36: entered allmulticast mode
[  211.870623][T12166] 8021q: adding VLAN 0 to HW filter on device bond36
[  211.895175][ T5843] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  211.901432][ T5843] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  211.906982][ T5843] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  211.912689][ T5843] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  211.949943][T12171] vti2: entered promiscuous mode
[  211.951444][T12171] vti2: entered allmulticast mode
[  211.989985][T12174] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1715'.
[  212.049650][T12181] syzkaller1: entered promiscuous mode
[  212.053492][T12181] syzkaller1: entered allmulticast mode
[  212.105331][T12183] tipc: Enabled bearer <eth:vlan1>, priority 10
[  212.109808][T12183] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1717'.
[  212.436901][T12218] syzkaller0: entered promiscuous mode
[  212.441025][T12218] syzkaller0: entered allmulticast mode
[  212.511289][T12224] netlink: 'syz.0.1728': attribute type 1 has an invalid length.
[  212.526929][T12224] 8021q: adding VLAN 0 to HW filter on device bond25
[  212.539412][T12224] 8021q: adding VLAN 0 to HW filter on device batadv1
[  212.543423][T12224] bond25: (slave batadv1): making interface the new active one
[  212.546485][T12224] bond25: (slave batadv1): Enslaving as an active interface with an up link
[  212.658942][T12231] lo: left allmulticast mode
[  212.660931][T12231] tunl0: left allmulticast mode
[  212.663000][T12231] gre0: left allmulticast mode
[  212.665045][T12231] erspan0: left allmulticast mode
[  212.666752][T12231] ip_vti0: left allmulticast mode
[  212.668672][T12231] ip6_vti0: left allmulticast mode
[  212.670385][T12231] sit0: left allmulticast mode
[  212.671947][T12231] ip6tnl0: left allmulticast mode
[  212.673624][T12231] ip6gre0: left allmulticast mode
[  212.675322][T12231] ip6gretap0: left allmulticast mode
[  212.677010][T12231] bond0: left allmulticast mode
[  212.679311][T12231] `: left allmulticast mode
[  212.680888][T12231] dummy0: left allmulticast mode
[  212.682515][T12231] nlmon0: left allmulticast mode
[  212.684168][T12231] caif0: left allmulticast mode
[  212.685875][T12231] veth0: left allmulticast mode
[  212.687464][T12231] veth1: left allmulticast mode
[  212.689177][T12231] wg0: left allmulticast mode
[  212.690739][T12231] wg1: left allmulticast mode
[  212.692309][T12231] wg2: left allmulticast mode
[  212.693846][T12231] veth0_to_bridge: left allmulticast mode
[  212.695754][T12231] bridge_slave_0: left allmulticast mode
[  212.698157][T12231] veth1_to_bridge: left allmulticast mode
[  212.700059][T12231] bridge_slave_1: left allmulticast mode
[  212.701944][T12231] veth0_to_bond: left allmulticast mode
[  212.703756][T12231] bond_slave_0: left allmulticast mode
[  212.705562][T12231] veth1_to_bond: left allmulticast mode
[  212.707443][T12231] bond_slave_1: left allmulticast mode
[  212.709609][T12231] veth0_to_team: left allmulticast mode
[  212.711452][T12231] team_slave_0: left allmulticast mode
[  212.713234][T12231] veth1_to_team: left allmulticast mode
[  212.715040][T12231] team_slave_1: left allmulticast mode
[  212.716792][T12231] veth0_to_batadv: left allmulticast mode
[  212.718818][T12231] batadv_slave_0: left allmulticast mode
[  212.720666][T12231] veth1_to_batadv: left allmulticast mode
[  212.722549][T12231] xfrm0: left allmulticast mode
[  212.724137][T12231] veth0_to_hsr: left allmulticast mode
[  212.725957][T12231] veth1_to_hsr: left allmulticast mode
[  212.727767][T12231] hsr0: left allmulticast mode
[  212.730068][T12231] hsr_slave_0: left allmulticast mode
[  212.731826][T12231] hsr_slave_1: left allmulticast mode
[  212.733823][T12231] veth1_virt_wifi: left allmulticast mode
[  212.735843][T12231] veth0_virt_wifi: left allmulticast mode
[  212.738453][T12231] vlan0: left allmulticast mode
[  212.740519][T12231] vlan1: left allmulticast mode
[  212.742695][T12231] veth1_vlan: left allmulticast mode
[  212.744833][T12231] macvlan0: left allmulticast mode
[  212.747436][T12231] macvlan1: left allmulticast mode
[  212.749259][T12231] ipvlan0: left allmulticast mode
[  212.751386][T12231] ipvlan1: left allmulticast mode
[  212.752970][T12231] veth0_vlan: left allmulticast mode
[  212.755397][T12231] geneve1: left allmulticast mode
[  212.757257][T12231] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  212.759818][T12231] ipip0: left allmulticast mode
[  212.761638][T12231] bond1: left allmulticast mode
[  212.763325][T12231] erspan1: left allmulticast mode
[  212.765155][T12231] veth2: left allmulticast mode
[  212.766963][T12231] veth3: left allmulticast mode
[  212.768746][T12231] bond2: left allmulticast mode
[  212.770374][T12231] : left allmulticast mode
[  212.771939][T12231] bond3: left allmulticast mode
[  212.773561][T12231] ipvlan2: left allmulticast mode
[  212.775160][T12231] batadv_slave_1: left allmulticast mode
[  212.777123][T12231] ipvlan3: left allmulticast mode
[  212.779312][T12231] gretap0: left allmulticast mode
[  212.781436][T12231] geneve0: left allmulticast mode
[  212.783163][T12231] bond4: left allmulticast mode
[  212.784822][T12231] bond5: left allmulticast mode
[  212.786829][T12231] bridge1: left allmulticast mode
[  212.789386][T12231] bridge2: left allmulticast mode
[  212.791088][T12231] ip6tnl1: left allmulticast mode
[  212.792773][T12231] bridge3: left allmulticast mode
[  212.794695][T12231] batadv0.5: left allmulticast mode
[  212.796392][T12231] batadv0: left allmulticast mode
[  212.798172][T12231] vxlan0: left allmulticast mode
[  212.799950][T12231] bond6: left allmulticast mode
[  212.801549][T12231] bridge4: left allmulticast mode
[  212.803297][T12231] macvlan2: left allmulticast mode
[  212.805142][T12231] bond7: left allmulticast mode
[  212.806896][T12231] bond8: left allmulticast mode
[  212.808599][T12231] bridge5: left allmulticast mode
[  212.810340][T12231] geneve2: left allmulticast mode
[  212.811994][T12231] geneve3: left allmulticast mode
[  212.813728][T12231] gre1: left allmulticast mode
[  212.815600][T12231] bond9: left allmulticast mode
[  212.817644][T12231] bond10: left allmulticast mode
[  212.819920][T12231] bridge6: left allmulticast mode
[  212.821998][T12231] vxlan1: left allmulticast mode
[  212.824013][T12231] bond11: left allmulticast mode
[  212.826245][T12231] ip6gretap1: left allmulticast mode
[  212.828490][T12231] veth4: left allmulticast mode
[  212.830517][T12231] veth5: left allmulticast mode
[  212.832516][T12231] mac80211_hwsim hwsim14 wlan2: left allmulticast mode
[  212.835088][T12231] bond12: left allmulticast mode
[  212.836805][T12231] bridge7: left allmulticast mode
[  212.839463][T12231] : left allmulticast mode
[  212.841283][T12231] bond13: left allmulticast mode
[  212.843299][T12231] bridge8: left allmulticast mode
[  212.845348][T12231] ip6erspan0: left allmulticast mode
[  212.847591][T12231] bond14: left allmulticast mode
[  212.849873][T12231] bond15: left allmulticast mode
[  212.851717][T12231] sit1: left allmulticast mode
[  212.853616][T12231] mac80211_hwsim hwsim16 wlan3: left allmulticast mode
[  212.856361][T12231] bond16: left allmulticast mode
[  212.858573][T12231] bond17: left allmulticast mode
[  212.860654][T12231] ip6tnl2: left allmulticast mode
[  212.862703][T12231] bond18: left allmulticast mode
[  212.864694][T12231] bond19: left allmulticast mode
[  212.866745][T12231] bridge9: left allmulticast mode
[  212.868687][T12231] ip6gretap2: left allmulticast mode
[  212.870475][T12231] bridge10: left allmulticast mode
[  212.872121][T12231] bond20: left allmulticast mode
[  212.873776][T12231] bond21: left allmulticast mode
[  212.875618][T12231] bridge11: left allmulticast mode
[  212.877344][T12231] bond22: left allmulticast mode
[  212.879277][T12231] bridge12: left allmulticast mode
[  212.881270][T12231] netdevsim netdevsim0 eth0: left allmulticast mode
[  212.883428][T12231] netdevsim netdevsim0 eth1: left allmulticast mode
[  212.885725][T12231] netdevsim netdevsim0 eth2: left allmulticast mode
[  212.888476][T12231] netdevsim netdevsim0 eth3: left allmulticast mode
[  212.891106][T12231] gretap1: left allmulticast mode
[  212.893377][T12231] bond23: left promiscuous mode
[  212.895055][T12231] bond23: left allmulticast mode
[  212.901856][T12231] bond24: left promiscuous mode
[  212.903765][T12231] bond24: left allmulticast mode
[  212.915317][T12232] lo: Caught tx_queue_len zero misconfig
[  212.933422][ T5826] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  212.936165][ T5826] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  212.940124][ T5826] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  212.942870][ T5826] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  213.417643][T12240] xt_hashlimit: size too large, truncated to 1048576
[  213.796984][T12252] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  214.556820][T12267] netlink: 'syz.2.1740': attribute type 1 has an invalid length.
[  214.572108][T12267] bond37: entered promiscuous mode
[  214.573748][T12267] bond37: entered allmulticast mode
[  214.575479][T12267] 8021q: adding VLAN 0 to HW filter on device bond37
[  214.582250][T12266] syzkaller0: entered promiscuous mode
[  214.583982][T12266] syzkaller0: entered allmulticast mode
[  214.627262][T12270] netlink: 'syz.2.1741': attribute type 6 has an invalid length.
[  214.631581][T12270] netlink: 'syz.2.1741': attribute type 4 has an invalid length.
[  214.635594][T12270] netlink: 'syz.2.1741': attribute type 4 has an invalid length.
[  214.674015][T12272] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  214.676646][T12272] syzkaller0: entered promiscuous mode
[  214.678666][T12272] syzkaller0: entered allmulticast mode
[  214.718942][T12272] tipc: Resetting bearer <eth:syzkaller0>
[  214.732347][T12272] tipc: Disabling bearer <eth:syzkaller0>
[  214.825554][T12280] sctp: [Deprecated]: syz.0.1744 (pid 12280) Use of struct sctp_assoc_value in delayed_ack socket option.
[  214.825554][T12280] Use struct sctp_sack_info instead
[  214.832819][T12280] sctp: [Deprecated]: syz.0.1744 (pid 12280) Use of struct sctp_assoc_value in delayed_ack socket option.
[  214.832819][T12280] Use struct sctp_sack_info instead
[  214.885216][T12284] __nla_validate_parse: 11 callbacks suppressed
[  214.885231][T12284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1745'.
[  214.918206][T12287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1744'.
[  215.134325][T12306] netlink: 'syz.0.1750': attribute type 1 has an invalid length.
[  215.151916][T12306] bond26: entered promiscuous mode
[  215.153712][T12306] 8021q: adding VLAN 0 to HW filter on device bond26
[  215.203591][T12311] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1752'.
[  215.206490][T12311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1752'.
[  215.210553][T12311] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1752'.
[  215.271637][T12315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1754'.
[  215.424439][T12325] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1757'.
[  215.430075][T12325] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1757'.
[  215.499567][T12331] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1759'.
[  215.543114][T12334] netlink: 'syz.2.1760': attribute type 3 has an invalid length.
[  215.545596][T12334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1760'.
[  215.724719][T12340] netlink: 'syz.2.1763': attribute type 1 has an invalid length.
[  215.752545][T12340] 8021q: adding VLAN 0 to HW filter on device bond38
[  215.775148][T12340] veth15: entered promiscuous mode
[  215.781017][T12340] bond38: (slave veth15): Enslaving as an active interface with a down link
[  215.794382][T12340] bond38: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  215.921193][T12345] m1Ie5n: entered promiscuous mode
[  216.010155][T12357] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  216.013133][T12357] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  216.025765][T12361] netlink: 'syz.2.1770': attribute type 3 has an invalid length.
[  216.029363][T12361] netlink: 'syz.2.1770': attribute type 1 has an invalid length.
[  216.074328][T12364] pim6reg99999999: entered allmulticast mode
[  216.400758][T12395] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  216.403329][T12395] tipc: Enabled bearer <udp:syz0>, priority 10
[  216.530289][T12406] sit0: Master is either lo or non-ether device
[  216.533710][T12406] sit0: Master is either lo or non-ether device
[  216.610275][T12417] netlink: 'syz.2.1785': attribute type 1 has an invalid length.
[  216.705415][T12417] bond39: entered promiscuous mode
[  216.707151][T12417] bond39: entered allmulticast mode
[  216.710101][T12417] 8021q: adding VLAN 0 to HW filter on device bond39
[  217.159057][  T111] block nbd1: Possible stuck request ffff88810aad5000: control (read@0,1024B). Runtime 60 seconds
[  217.162255][  T111] block nbd1: Possible stuck request ffff88810aad5200: control (read@1024,1024B). Runtime 60 seconds
[  217.165671][  T111] block nbd1: Possible stuck request ffff88810aad5400: control (read@2048,1024B). Runtime 60 seconds
[  217.169279][  T111] block nbd1: Possible stuck request ffff88810aad5600: control (read@3072,1024B). Runtime 60 seconds
[  217.220756][T12456] bond26: left promiscuous mode
[  217.355086][T12471] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  217.547535][T12496] pimreg: tun_chr_ioctl cmd 1074025677
[  217.549934][T12496] pimreg: linktype set to 6
[  217.552452][T12495] pimreg: tun_chr_ioctl cmd 1074025677
[  217.554934][T12495] pimreg: linktype set to 6
[  217.593001][T12498] veth1_vlan (unregistering): left allmulticast mode
[  217.770619][T12501] workqueue: Failed to create a rescuer kthread for wq "bond40": -EINTR
[  217.880852][T12507] batadv0: entered promiscuous mode
[  217.887454][T12507] 8021q: adding VLAN 0 to HW filter on device batadv0
[  217.897085][T12507] ip6tnl0: Caught tx_queue_len zero misconfig
[  217.944853][T12509] gretap2: entered allmulticast mode
[  218.222528][T12532] pimreg: entered allmulticast mode
[  218.884444][T12567] bond25: entered promiscuous mode
[  218.886822][T12567] bond25: entered allmulticast mode
[  218.889504][T12567] 8021q: adding VLAN 0 to HW filter on device bond25
[  218.898663][T12567] syzkaller0: entered promiscuous mode
[  218.900765][T12567] syzkaller0: entered allmulticast mode
[  219.138099][T12576] gre0: entered promiscuous mode
[  219.139743][T12576] gre0: entered allmulticast mode
[  219.273155][T12594] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  219.276408][T12594] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  219.397473][T12610] gre0: left promiscuous mode
[  219.401890][T12610] gre0: left allmulticast mode
[  219.491110][T12623] geneve1: entered promiscuous mode
[  219.492747][T12623] geneve1: entered allmulticast mode
[  219.495080][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.497709][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.500960][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.503577][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.779389][T12648] block nbd3: server does not support multiple connections per device.
[  219.789121][T12648] block nbd3: shutting down sockets
[  219.945819][T12654] __nla_validate_parse: 31 callbacks suppressed
[  219.945832][T12654] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1854'.
[  219.951117][T12654] ip6tnl0: Master is either lo or non-ether device
[  220.053259][T12660] bridge0: port 2(macvlan0) entered blocking state
[  220.055463][T12660] bridge0: port 2(macvlan0) entered disabled state
[  220.057470][T12660] macvlan0: entered allmulticast mode
[  220.059492][T12660] bridge0: entered allmulticast mode
[  220.062319][T12660] macvlan0: left allmulticast mode
[  220.063839][T12660] bridge0: left allmulticast mode
[  220.099065][T12662] validate_nla: 11 callbacks suppressed
[  220.099081][T12662] netlink: 'syz.1.1857': attribute type 58 has an invalid length.
[  220.103190][T12662] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1857'.
[  220.341151][T12674] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  220.344216][T12674] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  220.436755][T12675] tipc: Resetting bearer <eth:vlan1>
[  220.904494][T12679] syzkaller0: entered promiscuous mode
[  220.906137][T12679] syzkaller0: entered allmulticast mode
[  220.916725][T12679] bond0: entered promiscuous mode
[  220.919376][T12679] batadv0: entered promiscuous mode
[  220.922596][T12679] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  220.927215][T12679] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  220.931619][T12679] 8021q: adding VLAN 0 to HW filter on device hsr1
[  220.935597][T12679] bond0: left promiscuous mode
[  220.937652][T12679] batadv0: left promiscuous mode
[  221.003520][   T11] block nbd0: Possible stuck request ffff88810aa77800: control (read@0,1024B). Runtime 90 seconds
[  221.007260][   T11] block nbd0: Possible stuck request ffff88810aa77a00: control (read@1024,1024B). Runtime 90 seconds
[  221.010489][   T11] block nbd0: Possible stuck request ffff88810aa77c00: control (read@2048,1024B). Runtime 90 seconds
[  221.014052][   T11] block nbd0: Possible stuck request ffff88810aa77e00: control (read@3072,1024B). Runtime 90 seconds
[  222.593985][T12693] veth1_to_bridge: entered allmulticast mode
[  222.621771][T12698] netlink: 'syz.0.1869': attribute type 8 has an invalid length.
[  222.669458][T12701] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  222.672348][T12701] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  222.693825][T12695] vlan0: entered promiscuous mode
[  222.695461][T12695] bond0: entered promiscuous mode
[  222.697004][T12695] bond_slave_0: entered promiscuous mode
[  222.699059][T12695] bond_slave_1: entered promiscuous mode
[  222.700895][T12695] bridge_slave_1: entered promiscuous mode
[  222.702859][T12695] vlan0: entered allmulticast mode
[  222.704379][T12695] bond0: entered allmulticast mode
[  222.708330][T12695] bond_slave_0: entered allmulticast mode
[  222.710210][T12695] bond_slave_1: entered allmulticast mode
[  222.711955][T12695] bridge_slave_1: entered allmulticast mode
[  222.738900][T12695] team0: Port device bridge11 added
[  222.811112][T12714] netlink: 'syz.0.1872': attribute type 1 has an invalid length.
[  222.820150][T12713] netlink: 'syz.1.1873': attribute type 1 has an invalid length.
[  222.822689][T12713] netlink: 'syz.1.1873': attribute type 2 has an invalid length.
[  222.848653][T12713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1873'.
[  222.866430][T12714] 8021q: adding VLAN 0 to HW filter on device bond27
[  222.922523][T12714] xt_CT: You must specify a L4 protocol and not use inversions on it
[  222.943914][T12722] bond27: (slave veth7): Enslaving as an active interface with a down link
[  222.948440][T12714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1872'.
[  223.005275][T12729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1876'.
[  223.005316][T12735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1876'.
[  223.015363][T12729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1876'.
[  223.187562][T12748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  224.071654][T12775] bond40: Removing last arp target with arp_interval on
[  224.098454][T12776] bond41: Removing last arp target with arp_interval on
[  224.281565][T12792] netlink: 'syz.2.1890': attribute type 7 has an invalid length.
[  224.283865][T12792] netlink: 'syz.2.1890': attribute type 27 has an invalid length.
[  224.630904][T12810] pimreg: tun_chr_ioctl cmd 1074025673
[  224.642379][T12810] pimreg: tun_chr_ioctl cmd 1074025673
[  224.646420][T12810] pimreg: tun_chr_ioctl cmd 1074025673
[  224.651961][T12810] pimreg: tun_chr_ioctl cmd 1074025673
[  224.658515][T12810] pimreg: tun_chr_ioctl cmd 1074025673
[  224.663702][T12810] pimreg: tun_chr_ioctl cmd 1074025673
[  224.667674][T12810] pimreg: tun_chr_ioctl cmd 1074025673
[  224.674421][T12810] pimreg: tun_chr_ioctl cmd 1074025673
[  224.687410][T12810] pimreg: tun_chr_ioctl cmd 1074025673
[  224.691160][T12810] pimreg: tun_chr_ioctl cmd 1074025673
[  224.697448][T12810] pimreg: tun_chr_ioctl cmd 1074025673
[  224.699466][T12810] pimreg: tun_chr_ioctl cmd 1074025673
[  224.702000][T12810] pimreg: tun_chr_ioctl cmd 1074025673
[  224.704908][T12810] pimreg: tun_chr_ioctl cmd 1074025673
[  224.849100][T12814] syzkaller0: entered promiscuous mode
[  224.851973][T12814] syzkaller0: entered allmulticast mode
[  224.921860][T12814] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1896'.
[  224.934894][T12820] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1898'.
[  225.019059][T12822] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1899'.
[  225.044980][T12824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1900'.
[  225.783324][T12839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  226.004488][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  226.007337][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  227.241833][T12903] netlink: 'syz.2.1918': attribute type 9 has an invalid length.
[  227.331165][T12900] gre0: left promiscuous mode
[  227.332597][T12900] gre0: left allmulticast mode
[  227.380953][T12900] veth1_macvtap: left allmulticast mode
[  227.386087][T12900] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  227.391235][T12900] bond9: left promiscuous mode
[  227.392683][T12900] bond9: left allmulticast mode
[  227.412675][T12900] bond10: left promiscuous mode
[  227.415078][T12900] bond11: left promiscuous mode
[  227.416516][T12900] bond11: left allmulticast mode
[  227.424600][T12900] bond12: left promiscuous mode
[  227.426123][T12900] bridge7: left promiscuous mode
[  227.435014][T12900] bond15: left promiscuous mode
[  227.436620][T12900] bond15: left allmulticast mode
[  227.442092][T12900] bond16: left promiscuous mode
[  227.443673][T12900] bond16: left allmulticast mode
[  227.451446][T12900] bond17: left promiscuous mode
[  227.453707][T12900] bridge8: left promiscuous mode
[  227.459951][T12900] bond18: left promiscuous mode
[  227.461408][T12900] bond18: left allmulticast mode
[  227.466915][T12900] bond19: left promiscuous mode
[  227.469191][T12900] bridge9: left promiscuous mode
[  227.477395][T12900] bond20: left promiscuous mode
[  227.479757][T12900] bond20: left allmulticast mode
[  227.483847][T12900] bond22: left promiscuous mode
[  227.485704][T12900] bond22: left allmulticast mode
[  227.488639][T12900] bond23: left promiscuous mode
[  227.490177][T12900] bond23: left allmulticast mode
[  227.494075][T12900] batadv0: left promiscuous mode
[  227.497218][T12908] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1919'.
[  227.502299][T12908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1919'.
[  227.505937][T12900] bond25: left promiscuous mode
[  227.507608][T12900] bond25: left allmulticast mode
[  227.510818][T12900] vlan0: left promiscuous mode
[  227.512306][T12900] bond0: left promiscuous mode
[  227.513788][T12900] bond_slave_0: left promiscuous mode
[  227.515574][T12900] bond_slave_1: left promiscuous mode
[  227.517461][T12900] bridge_slave_1: left promiscuous mode
[  227.521617][T12900] vlan0: left allmulticast mode
[  227.523373][T12900] bond0: left allmulticast mode
[  227.525212][T12900] bond_slave_0: left allmulticast mode
[  227.527265][T12900] bond_slave_1: left allmulticast mode
[  227.530704][T12900] bridge_slave_1: left allmulticast mode
[  227.541454][ T5843] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  227.545617][T12907] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1919'.
[  227.551378][ T5843] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  227.554261][ T5843] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  227.557162][ T5843] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  227.598611][T12910] netlink: 'syz.1.1920': attribute type 1 has an invalid length.
[  227.659521][T12910] bond26: entered promiscuous mode
[  227.661330][T12910] 8021q: adding VLAN 0 to HW filter on device bond26
[  227.693268][T12910] netlink: 'syz.1.1920': attribute type 1 has an invalid length.
[  227.695558][T12910] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1920'.
[  227.715434][T12910] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1920'.
[  227.728926][T12910] netlink: 'syz.1.1920': attribute type 1 has an invalid length.
[  227.731801][T12910] netlink: 'syz.1.1920': attribute type 8 has an invalid length.
[  227.734293][T12910] netlink: 582 bytes leftover after parsing attributes in process `syz.1.1920'.
[  227.738386][T12910] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1920'.
[  227.742910][T12910] bond26: entered allmulticast mode
[  227.774115][T12910] bond26: (slave bridge12): making interface the new active one
[  227.781635][T12910] bridge12: entered promiscuous mode
[  227.784041][T12910] bridge12: entered allmulticast mode
[  227.787228][T12910] bond26: (slave bridge12): Enslaving as an active interface with an up link
[  227.831421][T12927] netlink: 'syz.2.1925': attribute type 1 has an invalid length.
[  227.912265][T12927] bond42: entered promiscuous mode
[  227.914289][T12927] bond42: entered allmulticast mode
[  227.937390][T12927] 8021q: adding VLAN 0 to HW filter on device bond42
[  228.693608][T12951] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1930'.
[  228.724004][ T5257] udevd[5257]: worker [8444] /devices/virtual/block/nbd1 is taking a long time
[  228.851450][T12959] netlink: 'syz.0.1933': attribute type 1 has an invalid length.
[  228.894256][T12959] bond28: entered promiscuous mode
[  228.896369][T12959] bond28: entered allmulticast mode
[  228.899754][T12959] 8021q: adding VLAN 0 to HW filter on device bond28
[  228.909705][T12960] bond26: left promiscuous mode
[  228.911898][T12960] bridge12: left promiscuous mode
[  228.914558][T12960] bond26: left allmulticast mode
[  228.916372][T12960] bridge12: left allmulticast mode
[  228.995963][T12967] 8021q: adding VLAN 0 to HW filter on device bond0
[  229.002390][T12967] 8021q: adding VLAN 0 to HW filter on device `
[  229.006981][T12967] batman_adv: batadv0: Interface activated: dummy0
[  229.010119][T12967] batadv0: mtu less than device minimum
[  229.012690][T12967] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  229.017213][T12967] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  229.020999][T12967] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  229.025187][T12967] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  229.029147][T12967] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  229.032886][T12967] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  229.036991][T12967] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  229.040694][T12967] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  229.044402][T12967] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  229.103502][T12971] 8021q: adding VLAN 0 to HW filter on device bond43
[  229.231736][T12979] netlink: 'syz.0.1939': attribute type 7 has an invalid length.
[  229.243375][T12979] bridge13: the hash_elasticity option has been deprecated and is always 16
[  229.246645][T12979] bridge13: entered allmulticast mode
[  229.530391][T12994] syzkaller0: entered promiscuous mode
[  229.532107][T12994] syzkaller0: entered allmulticast mode
[  229.742238][T13000] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  229.800232][T13006] netlink: 'syz.0.1948': attribute type 1 has an invalid length.
[  229.973310][T13018] TCP: TCP_TX_DELAY enabled
[  230.023308][T13022] netlink: 'syz.2.1954': attribute type 1 has an invalid length.
[  230.081797][T13028] __nla_validate_parse: 10 callbacks suppressed
[  230.081809][T13028] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1955'.
[  230.153215][T13034] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  230.156390][T13034] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  230.293207][T13040] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1959'.
[  230.300091][T13040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1959'.
[  230.475171][T13053] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1961'.
[  230.491439][T13053] bond45: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  230.495852][T13053] bond45 (unregistering): Released all slaves
[  230.737239][T13063] vlan0: entered promiscuous mode
[  230.739877][T13063] bond0: entered promiscuous mode
[  230.874393][   T34] audit: type=1804 audit(1770248569.327:6): pid=13069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1966" name="/newroot/669/memory.events" dev="tmpfs" ino=3427 res=1 errno=0
[  230.985427][T13074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1967'.
[  231.000669][T13074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1967'.
[  231.039261][T13076] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1968'.
[  231.144205][T13093] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1972'.
[  231.147546][T13093] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1972'.
[  231.151243][T13093] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1972'.
[  231.460849][T13118] Cannot find del_set index 1 as target
[  231.633194][T13120] syzkaller0: entered allmulticast mode
[  232.056555][T13149] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  232.127930][T13149] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  232.824163][T13162] validate_nla: 8 callbacks suppressed
[  232.824183][T13162] netlink: 'syz.0.1989': attribute type 12 has an invalid length.
[  232.856385][T13165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  232.865721][T13166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  233.029728][T13163] netlink: 'syz.1.1988': attribute type 1 has an invalid length.
[  233.694911][T13193] tls_set_device_offload_rx: netdev not found
[  234.159995][T13211] netlink: 'syz.1.2002': attribute type 10 has an invalid length.
[  234.233330][T13211] syz_tun: entered promiscuous mode
[  234.261411][T13211] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  234.283767][T13218] net_ratelimit: 13 callbacks suppressed
[  234.283780][T13218] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  234.396459][T13230] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  234.444915][T13233] gre0: entered promiscuous mode
[  234.448883][T13233] gre0: entered allmulticast mode
[  234.774024][T13265] tipc: Resetting bearer <eth:vlan1>
[  234.827402][T13267] openvswitch: netlink: Message has 592 unknown bytes.
[  234.829668][T13267] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  235.177985][T13281] __nla_validate_parse: 10 callbacks suppressed
[  235.178001][T13281] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2022'.
[  235.212099][T13281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2022'.
[  235.214731][T13281] openvswitch: netlink: Key type 12292 is out of range max 32
[  235.237737][T13291] netlink: 'syz.0.2025': attribute type 1 has an invalid length.
[  235.244073][T13288] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  235.280244][T13291] bond29: entered promiscuous mode
[  235.282000][T13291] 8021q: adding VLAN 0 to HW filter on device bond29
[  235.300075][T13291] 8021q: adding VLAN 0 to HW filter on device bond29
[  235.309788][T13291] bond29: (slave gre2): The slave device specified does not support setting the MAC address
[  235.312778][T13291] bond29: (slave gre2): Setting fail_over_mac to active for active-backup mode
[  235.316054][T13297] netlink: 516 bytes leftover after parsing attributes in process `syz.1.2027'.
[  235.332872][T13291] bond29: (slave gre2): making interface the new active one
[  235.336747][T13291] gre2: entered promiscuous mode
[  235.342904][T13291] bond29: (slave gre2): Enslaving as an active interface with an up link
[  235.376013][T13297] 8021q: adding VLAN 0 to HW filter on device bond0
[  235.387112][T13297] 8021q: adding VLAN 0 to HW filter on device team0
[  235.405085][T13297] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  235.439182][T13302] netlink: 'syz.0.2028': attribute type 16 has an invalid length.
[  235.442060][T13302] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.2028'.
[  235.469191][T13297] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  235.801066][T13314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2031'.
[  235.805645][T13314] IPVS: nq: FWM 3 0x00000003 - no destination available
[  235.844046][T13316] netlink: 'syz.1.2032': attribute type 1 has an invalid length.
[  235.892041][T13316] 8021q: adding VLAN 0 to HW filter on device bond27
[  235.910289][T13316] macvlan1: entered promiscuous mode
[  235.912064][T13316] macvlan1: entered allmulticast mode
[  235.914194][T13316] bond27: entered allmulticast mode
[  235.916046][T13316] bond27: entered promiscuous mode
[  235.918795][T13316] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  235.922672][T13316] team0: Port device macvlan1 added
[  235.925692][T13316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2032'.
[  235.929929][T13316] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2032'.
[  236.032728][T13326] netlink: 'syz.1.2034': attribute type 1 has an invalid length.
[  236.056317][T13326] bond28: entered promiscuous mode
[  236.061189][T13326] bond28: entered allmulticast mode
[  236.063261][T13326] 8021q: adding VLAN 0 to HW filter on device bond28
[  236.105192][T13329] vlan1: entered allmulticast mode
[  236.107206][T13329] bridge0: port 2(vlan1) entered blocking state
[  236.109867][T13329] bridge0: port 2(vlan1) entered disabled state
[  236.113143][T13329] vlan1: entered promiscuous mode
[  236.333972][T13342] netlink: 'syz.0.2039': attribute type 12 has an invalid length.
[  236.405250][T13349] netlink: 'syz.0.2041': attribute type 1 has an invalid length.
[  236.455944][T13349] bond30: entered promiscuous mode
[  236.457547][T13349] bond30: entered allmulticast mode
[  236.468836][T13349] 8021q: adding VLAN 0 to HW filter on device bond30
[  236.520751][T13359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2042'.
[  239.380844][T13350] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  239.468480][T13376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2047'.
[  239.535871][T13378] netlink: 'syz.1.2046': attribute type 1 has an invalid length.
[  239.535941][T13382] netlink: 'syz.1.2046': attribute type 1 has an invalid length.
[  239.579110][T13385] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  239.582009][T13385] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  239.692757][T13390] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2050'.
[  239.752353][T13392] tipc: Resetting bearer <eth:vlan1>
[  239.899972][T13407] netlink: 'syz.1.2054': attribute type 10 has an invalid length.
[  240.446704][T13416] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  241.263744][T13414] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  241.409145][T13454] netlink: 'syz.2.2064': attribute type 8 has an invalid length.
[  241.486715][T13461] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  241.780214][T13477] erspan0: left allmulticast mode
[  241.782176][T13477] syz_tun: left promiscuous mode
[  241.787234][T13477] geneve1: left promiscuous mode
[  241.793457][T13477] geneve1: left allmulticast mode
[  241.799242][T13477] vlan0: left promiscuous mode
[  241.800930][T13477] bond0: left promiscuous mode
[  241.805245][T13477] veth13: left promiscuous mode
[  241.820957][T13477] bond33: left promiscuous mode
[  241.822813][T13477] bond33: left allmulticast mode
[  241.831036][T13477] bond34: left promiscuous mode
[  241.832835][T13477] bond34: left allmulticast mode
[  241.840397][T13477] bond35: left promiscuous mode
[  241.841801][T13477] bond35: left allmulticast mode
[  241.849552][T13477] bond36: left promiscuous mode
[  241.851011][T13477] bond36: left allmulticast mode
[  241.853690][T13477] vti2: left promiscuous mode
[  241.855034][T13477] vti2: left allmulticast mode
[  241.857525][T13477] bond37: left promiscuous mode
[  241.859213][T13477] bond37: left allmulticast mode
[  241.868551][T13477] veth15: left promiscuous mode
[  241.872036][T13477] bond39: left promiscuous mode
[  241.873442][T13477] bond39: left allmulticast mode
[  241.879217][T13477] bond42: left promiscuous mode
[  241.880638][T13477] bond42: left allmulticast mode
[  241.888155][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  241.890996][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  241.930204][T13480] gre0: left promiscuous mode
[  241.932201][T13480] gre0: left allmulticast mode
[  241.976123][T13480] syz_tun: left promiscuous mode
[  242.015140][T13480] bond27: left allmulticast mode
[  242.016702][T13480] bond27: left promiscuous mode
[  242.020473][T13480] macvlan1: left promiscuous mode
[  242.022048][T13480] macvlan1: left allmulticast mode
[  242.024662][T13480] bond28: left promiscuous mode
[  242.026348][T13480] bond28: left allmulticast mode
[  242.028935][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  242.076671][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  242.615085][T13493] netlink: 'syz.2.2075': attribute type 8 has an invalid length.
[  242.621248][T13495] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  242.625026][T13495] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  242.952119][T13512] netlink: 'syz.2.2080': attribute type 12 has an invalid length.
[  243.075926][T13514] IPVS: persistence engine module ip_vs_pe_ not found
[  243.330870][T13524] __nla_validate_parse: 3 callbacks suppressed
[  243.330881][T13524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2084'.
[  243.347975][T13524] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2084'.
[  243.473141][T13533] netlink: 'syz.1.2087': attribute type 1 has an invalid length.
[  243.492812][T13533] bond29: entered promiscuous mode
[  243.494403][T13533] bond29: entered allmulticast mode
[  243.496278][T13533] 8021q: adding VLAN 0 to HW filter on device bond29
[  243.831755][T13557] netlink: 'syz.2.2094': attribute type 1 has an invalid length.
[  243.865700][T13557] bond45: entered promiscuous mode
[  243.870840][T13557] bond45: entered allmulticast mode
[  243.874083][T13557] 8021q: adding VLAN 0 to HW filter on device bond45
[  244.019049][T13563] netlink: 'syz.2.2095': attribute type 1 has an invalid length.
[  244.045985][T13563] bond46: entered promiscuous mode
[  244.048297][T13563] 8021q: adding VLAN 0 to HW filter on device bond46
[  244.058520][T13563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2095'.
[  244.061212][T13563] bond46: entered allmulticast mode
[  244.191198][T13568] netlink: 'syz.2.2097': attribute type 8 has an invalid length.
[  244.246995][T13572] bond47: option resend_igmp: invalid value (2878)
[  244.259399][T13572] bond47: option resend_igmp: allowed values 0 - 255
[  244.264215][T13572] bond47 (unregistering): Released all slaves
[  244.358370][T13578] sctp: [Deprecated]: syz.2.2099 (pid 13578) Use of struct sctp_assoc_value in delayed_ack socket option.
[  244.358370][T13578] Use struct sctp_sack_info instead
[  244.469021][T13583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2100'.
[  244.471602][T13583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2100'.
[  244.509307][T13585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2101'.
[  244.587760][T13592] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2103'.
[  244.633210][T13600] netlink: 'syz.1.2105': attribute type 1 has an invalid length.
[  244.653044][T13604] netlink: 'syz.2.2106': attribute type 1 has an invalid length.
[  244.657575][T13600] bond30: entered promiscuous mode
[  244.659899][T13600] bond30: entered allmulticast mode
[  244.661975][T13600] 8021q: adding VLAN 0 to HW filter on device bond30
[  244.692600][T13604] bond47: entered promiscuous mode
[  244.694599][T13604] 8021q: adding VLAN 0 to HW filter on device bond47
[  244.710149][T13604] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2106'.
[  244.714084][T13604] bond47: entered allmulticast mode
[  244.717272][T13604] netlink: 340 bytes leftover after parsing attributes in process `syz.2.2106'.
[  244.731076][T13604] bond47: (slave bridge15): making interface the new active one
[  244.733356][T13604] bridge15: entered promiscuous mode
[  244.735037][T13604] bridge15: entered allmulticast mode
[  244.737436][T13604] bond47: (slave bridge15): Enslaving as an active interface with an up link
[  245.083868][T13632] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.2114'.
[  245.176959][T13634] bond31: (slave bridge13): Enslaving as an active interface with an up link
[  245.702886][T13671] macsec2: entered promiscuous mode
[  245.712759][T13671] dummy0: entered promiscuous mode
[  245.715098][T13671] macsec2: entered allmulticast mode
[  245.717117][T13671] dummy0: entered allmulticast mode
[  246.043354][T13691] netlink: 'syz.2.2132': attribute type 1 has an invalid length.
[  246.073728][T13691] bond48: entered promiscuous mode
[  246.075431][T13691] bond48: entered allmulticast mode
[  246.088142][T13691] 8021q: adding VLAN 0 to HW filter on device bond48
[  246.166729][T13697] pim6reg1: entered promiscuous mode
[  246.175930][T13697] pim6reg1: entered allmulticast mode
[  246.365648][T13708] netlink: 'syz.0.2137': attribute type 12 has an invalid length.
[  246.416420][T13710] netlink: 'syz.0.2138': attribute type 8 has an invalid length.
[  246.994026][T13739] IPVS: nq: FWM 3 0x00000003 - no destination available
[  247.245241][  T111] block nbd1: Possible stuck request ffff88810aad5000: control (read@0,1024B). Runtime 90 seconds
[  247.248646][  T111] block nbd1: Possible stuck request ffff88810aad5200: control (read@1024,1024B). Runtime 90 seconds
[  247.251752][  T111] block nbd1: Possible stuck request ffff88810aad5400: control (read@2048,1024B). Runtime 90 seconds
[  247.255019][  T111] block nbd1: Possible stuck request ffff88810aad5600: control (read@3072,1024B). Runtime 90 seconds
[  247.578211][T13771] netlink: 'syz.2.2154': attribute type 1 has an invalid length.
[  247.623377][T13771] bond49: entered promiscuous mode
[  247.625937][T13771] 8021q: adding VLAN 0 to HW filter on device bond49
[  247.656859][T13771] bond49: entered allmulticast mode
[  247.705492][T13771] bond49: (slave bridge16): making interface the new active one
[  247.740543][T13771] bridge16: entered promiscuous mode
[  247.742685][T13771] bridge16: entered allmulticast mode
[  247.751140][T13771] bond49: (slave bridge16): Enslaving as an active interface with an up link
[  248.011096][T13798] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  248.073956][T13804] netlink: 'syz.0.2163': attribute type 11 has an invalid length.
[  248.084090][T13804] sch_tbf: burst 2097152 is lower than device lo mtu (11337746) !
[  248.200880][T13808] netlink: 'syz.1.2164': attribute type 8 has an invalid length.
[  249.960540][T13829] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  250.055830][T13840] netlink: 'syz.0.2171': attribute type 3 has an invalid length.
[  250.058438][T13840] __nla_validate_parse: 140 callbacks suppressed
[  250.058446][T13840] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2171'.
[  250.070236][T13840] x_tables: duplicate underflow at hook 1
[  250.079858][T13843] netlink: 'syz.1.2172': attribute type 1 has an invalid length.
[  250.100625][T13841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2170'.
[  250.113779][T13843] bond32: (slave vxcan5): The slave device specified does not support setting the MAC address
[  250.116706][T13843] bond32: (slave vxcan5): Setting fail_over_mac to active for active-backup mode
[  250.138692][T13843] bond32: (slave vxcan5): making interface the new active one
[  250.141442][T13843] bond32: (slave vxcan5): Enslaving as an active interface with an up link
[  250.144255][T13847] batadv_slave_1: entered promiscuous mode
[  250.149534][T13847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2173'.
[  250.167169][T13843] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2172'.
[  250.175925][T13847] batadv_slave_1 (unregistering): left promiscuous mode
[  250.180485][T13847] batman_adv: batadv0: Removing interface: batadv_slave_1
[  250.219676][T13843] bond32 (unregistering): (slave vxcan5): Releasing backup interface
[  250.224309][T13843] bond32 (unregistering): Released all slaves
[  250.366282][T13856] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2178'.
[  250.435102][T13852] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2176'.
[  250.439289][T13852] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2176'.
[  250.442336][T13852] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2176'.
[  250.445070][T13852] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2176'.
[  251.090066][   T11] block nbd0: Possible stuck request ffff88810aa77800: control (read@0,1024B). Runtime 120 seconds
[  251.093648][   T11] block nbd0: Possible stuck request ffff88810aa77a00: control (read@1024,1024B). Runtime 120 seconds
[  251.097290][   T11] block nbd0: Possible stuck request ffff88810aa77c00: control (read@2048,1024B). Runtime 120 seconds
[  251.101500][   T11] block nbd0: Possible stuck request ffff88810aa77e00: control (read@3072,1024B). Runtime 120 seconds
[  251.292928][T13881] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  251.302283][T13875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2182'.
[  251.305733][T13880] bond0: entered promiscuous mode
[  251.309557][T13880] batadv0: entered promiscuous mode
[  251.311804][T13880] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  251.315146][T13880] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  251.319012][T13880] 8021q: adding VLAN 0 to HW filter on device hsr1
[  251.504452][T13897] openvswitch: netlink: Invalid VLAN frame
[  251.552779][T13902] netlink: 'syz.1.2190': attribute type 12 has an invalid length.
[  251.599419][T13904] netlink: 'syz.0.2191': attribute type 1 has an invalid length.
[  251.638251][T13904] bond32: entered promiscuous mode
[  251.640169][T13904] bond32: entered allmulticast mode
[  251.642410][T13904] 8021q: adding VLAN 0 to HW filter on device bond32
[  251.653375][T13908] macsec3: entered allmulticast mode
[  251.701138][T13910] netlink: 'syz.0.2193': attribute type 1 has an invalid length.
[  251.877774][T13919] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  251.886709][T13919] macvlan0: entered allmulticast mode
[  251.889376][T13919] veth1_vlan: entered allmulticast mode
[  252.024884][T13933] netlink: 'syz.1.2200': attribute type 83 has an invalid length.
[  252.057240][T13938] netlink: 'syz.0.2202': attribute type 8 has an invalid length.
[  252.588786][T13954] sctp: [Deprecated]: syz.2.2206 (pid 13954) Use of int in maxseg socket option.
[  252.588786][T13954] Use struct sctp_assoc_value instead
[  252.738889][T13959] netlink: 'syz.2.2208': attribute type 3 has an invalid length.
[  255.060127][T13937] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  255.202678][T13982] : renamed from bond_slave_0
[  255.720020][T14005] __nla_validate_parse: 13 callbacks suppressed
[  255.720033][T14005] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2218'.
[  255.797576][T14007] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2219'.
[  256.112329][T14017] netlink: 'syz.1.2222': attribute type 12 has an invalid length.
[  256.115303][T14017] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2222'.
[  256.267334][T14039] netlink: 'syz.2.2225': attribute type 3 has an invalid length.
[  256.271108][T14039] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2225'.
[  256.275153][T14039] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2225'.
[  256.302437][T14039] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2225'.
[  256.309477][T14039] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2225'.
[  256.319234][T14041] netlink: 'syz.1.2226': attribute type 1 has an invalid length.
[  256.381372][T14041] 8021q: adding VLAN 0 to HW filter on device bond32
[  256.465426][T14041] veth9: entered promiscuous mode
[  256.476566][T14041] bond32: (slave veth9): Enslaving as an active interface with a down link
[  256.508624][T14041] erspan0: entered allmulticast mode
[  256.515579][T14041] bond32: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  256.549560][T14051] syzkaller0: entered promiscuous mode
[  256.551418][T14051] syzkaller0: entered allmulticast mode
[  256.565304][T14053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2231'.
[  256.570930][T14051] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2230'.
[  256.687038][T14059] netlink: 'syz.2.2234': attribute type 12 has an invalid length.
[  256.698848][T14060] netlink: 'syz.1.2233': attribute type 1 has an invalid length.
[  256.724600][T14060] bond33: entered promiscuous mode
[  256.726177][T14060] bond33: entered allmulticast mode
[  256.737183][T14060] 8021q: adding VLAN 0 to HW filter on device bond33
[  256.826916][T14071] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2239'.
[  257.021416][T14087] netlink: 'syz.0.2243': attribute type 3 has an invalid length.
[  257.042275][T14090] xt_recent: Unsupported userspace flags (000000b1)
[  257.166952][T14101] sctp: [Deprecated]: syz.0.2246 (pid 14101) Use of int in max_burst socket option.
[  257.166952][T14101] Use struct sctp_assoc_value instead
[  257.241952][T14110] netlink: 'syz.1.2250': attribute type 8 has an invalid length.
[  257.285279][T14113] netlink: 'syz.2.2251': attribute type 3 has an invalid length.
[  257.581133][T14130] netlink: 'syz.0.2257': attribute type 1 has an invalid length.
[  257.606901][T14135] netlink: 'syz.1.2259': attribute type 22 has an invalid length.
[  257.630258][T14135] pim6reg1: entered promiscuous mode
[  257.632047][T14135] pim6reg1: entered allmulticast mode
[  257.819286][T14151] tipc: Can't bind to reserved service type 2
[  257.891674][T14155] IPVS: rr: FWM 3 0x00000003 - no destination available
[  257.992745][T14158] batman_adv: batadv0: Adding interface: dummy0
[  257.994626][T14158] batman_adv: batadv0: The MTU of interface dummy0 is too small (1480) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  258.005048][T14158] batman_adv: batadv0: Interface activated: dummy0
[  258.012271][T14158] batadv0: mtu less than device minimum
[  258.014410][T14158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  258.017995][T14158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  258.021412][T14158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  258.024875][T14158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  258.028395][T14158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  258.032050][T14158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  258.035516][T14158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  258.039092][T14158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  258.546379][T14194] bond50: entered promiscuous mode
[  258.551730][T14194] bond50: entered allmulticast mode
[  258.555873][T14194] 8021q: adding VLAN 0 to HW filter on device bond50
[  259.075342][T14216] bond33: entered promiscuous mode
[  259.077115][T14216] 8021q: adding VLAN 0 to HW filter on device bond33
[  259.524336][T14252] xfrm0: entered promiscuous mode
[  259.824757][T14279] bond51: entered promiscuous mode
[  259.831498][T14279] bond51: entered allmulticast mode
[  259.836933][T14279] 8021q: adding VLAN 0 to HW filter on device bond51
[  260.160577][T14304] 8021q: adding VLAN 0 to HW filter on device bond34
[  260.181577][T14304] 8021q: adding VLAN 0 to HW filter on device bond34
[  260.184112][T14304] bond34: (slave sit3): The slave device specified does not support setting the MAC address
[  260.187878][T14304] bond34: (slave sit3): Error -95 calling set_mac_address
[  260.506330][T14315] geneve0: entered promiscuous mode
[  260.509473][T14315] geneve0: entered allmulticast mode
[  260.724974][ T7057] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  260.731518][ T7057] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  260.748327][ T7057] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  260.751688][ T7057] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  260.964161][T14346] __nla_validate_parse: 28 callbacks suppressed
[  260.964175][T14346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2324'.
[  260.977581][T14346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2324'.
[  261.008166][T14346] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2324'.
[  261.084465][T14354] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2329'.
[  261.107124][T14354] netlink: 35 bytes leftover after parsing attributes in process `syz.2.2329'.
[  261.181707][T14364] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2331'.
[  261.186387][T14364] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2331'.
[  261.264567][T14368] lo: entered allmulticast mode
[  261.266440][T14368] lo: left allmulticast mode
[  261.322067][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  261.327165][T14368] validate_nla: 12 callbacks suppressed
[  261.327174][T14368] netlink: 'syz.0.2333': attribute type 1 has an invalid length.
[  261.334227][T14368] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2333'.
[  261.530378][T14382] bond35: option resend_igmp: invalid value (2878)
[  261.539923][T14382] bond35: option resend_igmp: allowed values 0 - 255
[  261.544575][T14382] bond35 (unregistering): Released all slaves
[  261.662980][T14392] netlink: 'syz.0.2339': attribute type 1 has an invalid length.
[  261.700134][T14392] bond35: (slave vxcan1): The slave device specified does not support setting the MAC address
[  261.703392][T14392] bond35: (slave vxcan1): Setting fail_over_mac to active for active-backup mode
[  261.707767][T14392] bond35: (slave vxcan1): making interface the new active one
[  261.711121][T14392] bond35: (slave vxcan1): Enslaving as an active interface with an up link
[  261.717572][T14392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2339'.
[  261.725768][T14392] bond35 (unregistering): (slave vxcan1): Releasing backup interface
[  261.730707][T14392] bond35 (unregistering): Released all slaves
[  261.878798][T14402] ieee802154 phy1 wpan1: encryption failed: -22
[  261.963704][T14404] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2342'.
[  262.193260][T14412] netlink: 'syz.2.2344': attribute type 8 has an invalid length.
[  262.267761][T14414] IPVS: length: 185 != 24
[  262.380433][T14416] netlink: 'syz.2.2346': attribute type 1 has an invalid length.
[  262.411890][T14416] bond52: entered promiscuous mode
[  262.413426][T14416] bond52: entered allmulticast mode
[  262.415115][T14416] 8021q: adding VLAN 0 to HW filter on device bond52
[  262.546045][T14422] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  262.563078][T14422] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  262.888512][T14436] netlink: 'syz.1.2353': attribute type 6 has an invalid length.
[  262.893332][T14436] netlink: 'syz.1.2353': attribute type 6 has an invalid length.
[  262.903754][T14436] netlink: 'syz.1.2353': attribute type 6 has an invalid length.
[  262.922201][T14433] netlink: 'syz.2.2352': attribute type 6 has an invalid length.
[  262.969383][T14443] netlink: 'syz.1.2354': attribute type 1 has an invalid length.
[  263.018629][T14443] bond34: entered promiscuous mode
[  263.023825][T14443] bond34: entered allmulticast mode
[  263.029119][T14443] 8021q: adding VLAN 0 to HW filter on device bond34
[  263.109498][T14448] netlink: 'syz.1.2355': attribute type 8 has an invalid length.
[  263.524180][T14459] bond35: entered promiscuous mode
[  263.526481][T14459] 8021q: adding VLAN 0 to HW filter on device bond35
[  263.541241][T14459] bond35: entered allmulticast mode
[  263.551352][T14459] bond35: (slave bridge14): making interface the new active one
[  263.555462][T14459] bridge14: entered promiscuous mode
[  263.557250][T14459] bridge14: entered allmulticast mode
[  263.561680][T14459] bond35: (slave bridge14): Enslaving as an active interface with an up link
[  264.227163][T14485] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  264.238664][T14485] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  264.391103][T14489] bond36: entered promiscuous mode
[  264.398136][T14489] bond36: entered allmulticast mode
[  264.400035][T14489] 8021q: adding VLAN 0 to HW filter on device bond36
[  264.591686][T14493] macvlan0: entered allmulticast mode
[  264.593332][T14493] team0: entered allmulticast mode
[  264.594755][T14493] team_slave_0: entered allmulticast mode
[  264.607447][T14493] team_slave_1: entered allmulticast mode
[  264.617169][T14493] bridge11: entered allmulticast mode
[  264.620322][T14493] macvlan1: entered allmulticast mode
[  264.627592][T14493] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  264.792005][T14507] bond35: option arp_all_targets: invalid value (129)
[  264.795312][T14507] bond35 (unregistering): Released all slaves
[  265.924561][T14538] bond53: entered promiscuous mode
[  265.926357][T14538] bond53: entered allmulticast mode
[  265.936885][T14538] 8021q: adding VLAN 0 to HW filter on device bond53
[  266.162434][T14553] syzkaller0: entered promiscuous mode
[  266.164058][T14553] syzkaller0: entered allmulticast mode
[  266.259439][T14571] bond35: entered promiscuous mode
[  266.261008][T14571] bond35: entered allmulticast mode
[  266.262799][T14571] 8021q: adding VLAN 0 to HW filter on device bond35
[  266.403491][T14585] nbd: must specify a size in bytes for the device
[  266.615001][T14591] validate_nla: 6 callbacks suppressed
[  266.615013][T14591] netlink: 'syz.0.2397': attribute type 16 has an invalid length.
[  266.619603][T14591] netlink: 'syz.0.2397': attribute type 17 has an invalid length.
[  266.640380][T14591] net_ratelimit: 18 callbacks suppressed
[  266.640384][T14591] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  266.733578][T14596] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  266.736426][T14596] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  266.896315][T14598] tipc: Resetting bearer <eth:vlan1>
[  267.095652][T14602] netlink: 'syz.2.2400': attribute type 1 has an invalid length.
[  267.136141][T14602] bond54: entered promiscuous mode
[  267.139066][T14602] bond54: entered allmulticast mode
[  267.141661][T14602] 8021q: adding VLAN 0 to HW filter on device bond54
[  267.494302][T14626] netlink: 'syz.1.2407': attribute type 1 has an invalid length.
[  267.513822][T14626] bond37: entered promiscuous mode
[  267.516066][T14626] 8021q: adding VLAN 0 to HW filter on device bond37
[  267.533837][T14626] __nla_validate_parse: 10 callbacks suppressed
[  267.533856][T14626] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2407'.
[  267.553683][T14626] bond37: entered allmulticast mode
[  267.582654][T14626] bond37: (slave bridge15): making interface the new active one
[  267.585115][T14626] bridge15: entered promiscuous mode
[  267.587263][T14626] bridge15: entered allmulticast mode
[  267.595963][T14626] bond37: (slave bridge15): Enslaving as an active interface with an up link
[  267.648774][T14632] netlink: 'syz.1.2409': attribute type 3 has an invalid length.
[  267.651206][T14632] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2409'.
[  267.668664][T14632] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2409'.
[  267.675627][T14632] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2409'.
[  267.692565][T14634] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.2410'.
[  267.710953][T14635] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.2410'.
[  267.781562][T14634] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2410'.
[  267.785435][T14635] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2410'.
[  267.929828][T14642] ip6tnl0: Caught tx_queue_len zero misconfig
[  268.236442][T14657] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2415'.
[  268.239221][T14657] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2415'.
[  269.912084][T14656] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  269.914546][T14656] tipc: Enabled bearer <udp:syz0>, priority 10
[  269.984496][T14663] sock: sock_set_timeout: `syz.2.2416' (pid 14663) tries to set negative timeout
[  269.988652][T14664] sock: sock_set_timeout: `syz.2.2416' (pid 14664) tries to set negative timeout
[  270.002397][T14664] netlink: 'syz.2.2416': attribute type 6 has an invalid length.
[  270.011070][T14664] netlink: 'syz.2.2416': attribute type 5 has an invalid length.
[  270.014506][T14663] netlink: 'syz.2.2416': attribute type 6 has an invalid length.
[  270.028177][T14663] netlink: 'syz.2.2416': attribute type 5 has an invalid length.
[  270.032927][T14663] netlink: 'syz.2.2416': attribute type 4 has an invalid length.
[  271.695307][T14744] validate_nla: 9 callbacks suppressed
[  271.695325][T14744] netlink: 'syz.0.2438': attribute type 8 has an invalid length.
[  272.116587][T14767] netlink: 'syz.1.2445': attribute type 8 has an invalid length.
[  272.225236][T14773] erspan0: left allmulticast mode
[  272.227483][T14773] batman_adv: batadv0: Interface deactivated: dummy0
[  272.240787][T14773] team0: left allmulticast mode
[  272.242241][T14773] team_slave_0: left allmulticast mode
[  272.243860][T14773] team_slave_1: left allmulticast mode
[  272.249104][T14773] bridge11: left allmulticast mode
[  272.250752][T14773] macvlan1: left allmulticast mode
[  272.268189][T14773] macvlan0: left allmulticast mode
[  272.279920][T14773] bond29: left promiscuous mode
[  272.281546][T14773] bond29: left allmulticast mode
[  272.288746][T14773] bond30: left promiscuous mode
[  272.290329][T14773] bond30: left allmulticast mode
[  272.295848][T14773] dummy0: left allmulticast mode
[  272.297596][T14773] macsec2: left promiscuous mode
[  272.305340][T14773] macsec2: left allmulticast mode
[  272.310494][T14773] macsec3: left allmulticast mode
[  272.314443][T14773] veth9: left promiscuous mode
[  272.317083][T14773] bond33: left promiscuous mode
[  272.322076][T14773] bond33: left allmulticast mode
[  272.327127][T14773] bond34: left promiscuous mode
[  272.330007][T14773] bond34: left allmulticast mode
[  272.335674][T14773] bond35: left promiscuous mode
[  272.337200][T14773] bridge14: left promiscuous mode
[  272.339012][T14773] bond35: left allmulticast mode
[  272.340452][T14773] bridge14: left allmulticast mode
[  272.345031][T14773] bond36: left promiscuous mode
[  272.346513][T14773] bond36: left allmulticast mode
[  272.353183][T14773] bond37: left promiscuous mode
[  272.354692][T14773] bridge15: left promiscuous mode
[  272.356256][T14773] bond37: left allmulticast mode
[  272.357760][T14773] bridge15: left allmulticast mode
[  272.374996][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  272.379866][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  272.392712][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  272.395606][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  272.509836][T14791] netlink: 'syz.0.2452': attribute type 8 has an invalid length.
[  272.591443][T14802] x_tables: duplicate underflow at hook 1
[  272.605382][T14801] netlink: 'syz.2.2454': attribute type 3 has an invalid length.
[  272.609295][T14801] __nla_validate_parse: 19 callbacks suppressed
[  272.609310][T14801] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2454'.
[  272.615609][T14801] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2454'.
[  272.621880][T14801] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2454'.
[  272.632674][T14804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2455'.
[  272.672199][T14806] netlink: 'syz.0.2457': attribute type 1 has an invalid length.
[  273.014648][T14834] netlink: 'syz.0.2462': attribute type 1 has an invalid length.
[  273.071957][T14834] bond36: entered promiscuous mode
[  273.074845][T14834] bond36: entered allmulticast mode
[  273.077535][T14834] 8021q: adding VLAN 0 to HW filter on device bond36
[  273.124985][T14839] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2463'.
[  273.144029][T14840] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2463'.
[  273.242900][T14846] syzkaller0: entered promiscuous mode
[  273.246944][T14846] syzkaller0: entered allmulticast mode
[  273.344364][T14849] IPVS: rr: FWM 3 0x00000003 - no destination available
[  273.529484][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  273.533574][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  273.569611][T14861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  273.658440][T14866] netlink: 'syz.1.2472': attribute type 3 has an invalid length.
[  273.660705][T14866] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2472'.
[  273.664239][T14866] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2472'.
[  273.666991][T14866] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2472'.
[  273.717180][T14869] bond37: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  273.723029][T14869] bond37 (unregistering): Released all slaves
[  273.841532][T14881] netlink: 'syz.1.2477': attribute type 1 has an invalid length.
[  273.886329][T14881] 8021q: adding VLAN 0 to HW filter on device bond39
[  273.894226][T14881] bond38: (slave bond39): making interface the new active one
[  273.897652][T14881] bond38: (slave bond39): Enslaving as an active interface with an up link
[  273.923906][T14881] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2477'.
[  273.929565][T14884] syzkaller1: entered promiscuous mode
[  273.939981][T14884] syzkaller1: entered allmulticast mode
[  273.954189][T14881] 8021q: adding VLAN 0 to HW filter on device bond38
[  273.971209][T14881] vlan2: entered promiscuous mode
[  273.973148][T14881] bond38: entered promiscuous mode
[  273.975005][T14881] bond39: entered promiscuous mode
[  274.132423][T14890] netlink: 'syz.2.2480': attribute type 3 has an invalid length.
[  274.255243][T14898] bridge: RTM_NEWNEIGH with invalid state 0x10
[  274.370475][T14908] netlink: 'syz.2.2485': attribute type 1 has an invalid length.
[  274.388960][T14908] bond55: entered promiscuous mode
[  274.390720][T14908] bond55: entered allmulticast mode
[  274.392702][T14908] 8021q: adding VLAN 0 to HW filter on device bond55
[  274.836193][T14922] dummy0: entered promiscuous mode
[  274.840452][T14922] macsec0: entered promiscuous mode
[  274.842829][T14922] macsec0: entered allmulticast mode
[  274.845103][T14922] dummy0: entered allmulticast mode
[  275.125897][T14933] bond40: entered promiscuous mode
[  275.131037][T14933] bond40: entered allmulticast mode
[  275.133642][T14933] 8021q: adding VLAN 0 to HW filter on device bond40
[  275.276154][T14937] bond40: left promiscuous mode
[  275.278389][T14937] bond40: left allmulticast mode
[  275.434196][T14944] bond56: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  275.443040][T14944] bond56 (unregistering): Released all slaves
[  275.533987][T14944] tipc: Enabled bearer <eth:vlan0>, priority 0
[  275.642043][T14957] xfrm0: left promiscuous mode
[  275.645128][T14957] bond45: left promiscuous mode
[  275.648872][T14957] bond46: left promiscuous mode
[  275.651407][T14957] bond47: left promiscuous mode
[  275.653365][T14957] bridge15: left promiscuous mode
[  275.656362][T14957] bond48: left promiscuous mode
[  275.660622][T14957] bond49: left promiscuous mode
[  275.662557][T14957] bridge16: left promiscuous mode
[  275.665976][T14957] bond50: left promiscuous mode
[  275.669555][T14957] bond51: left promiscuous mode
[  275.671920][T14957] bond52: left promiscuous mode
[  275.674445][T14957] bond53: left promiscuous mode
[  275.676917][T14957] bond54: left promiscuous mode
[  275.680046][T14957] bond55: left promiscuous mode
[  276.752661][T14993] validate_nla: 12 callbacks suppressed
[  276.752674][T14993] netlink: 'syz.2.2506': attribute type 3 has an invalid length.
[  277.371493][  T111] block nbd1: Possible stuck request ffff88810aad5000: control (read@0,1024B). Runtime 120 seconds
[  277.375649][  T111] block nbd1: Possible stuck request ffff88810aad5200: control (read@1024,1024B). Runtime 120 seconds
[  277.388342][  T111] block nbd1: Possible stuck request ffff88810aad5400: control (read@2048,1024B). Runtime 120 seconds
[  277.392603][  T111] block nbd1: Possible stuck request ffff88810aad5600: control (read@3072,1024B). Runtime 120 seconds
[  277.476220][T15025] nbd: illegal input index 38656
[  277.677193][T15028] netlink: 'syz.2.2513': attribute type 8 has an invalid length.
[  277.896440][T15031] team0: Caught tx_queue_len zero misconfig
[  277.938142][T15031] __nla_validate_parse: 25 callbacks suppressed
[  277.938160][T15031] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2515'.
[  277.992668][T15037] netlink: 'syz.0.2517': attribute type 1 has an invalid length.
[  278.025580][T15037] bond37: entered promiscuous mode
[  278.027410][T15037] 8021q: adding VLAN 0 to HW filter on device bond37
[  278.035178][T15037] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2517'.
[  278.039341][T15037] bond37: entered allmulticast mode
[  278.126211][T15044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2519'.
[  278.255981][T15051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2520'.
[  278.261228][T15051] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2520'.
[  278.264376][T15051] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2520'.
[  279.014912][T15059] netlink: 'syz.1.2524': attribute type 1 has an invalid length.
[  279.056429][T15059] bond41: entered promiscuous mode
[  279.058197][T15059] bond41: entered allmulticast mode
[  279.060103][T15059] 8021q: adding VLAN 0 to HW filter on device bond41
[  279.135993][T15065] 8021q: adding VLAN 0 to HW filter on device bond42
[  279.155897][T15056] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  279.159503][T15057] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  279.416327][T15080] veth1_vlan: left allmulticast mode
[  279.716986][T15088] netlink: 'syz.0.2532': attribute type 1 has an invalid length.
[  279.736290][T15088] bond38: entered promiscuous mode
[  279.737979][T15088] bond38: entered allmulticast mode
[  279.740267][T15088] 8021q: adding VLAN 0 to HW filter on device bond38
[  280.037149][T15100] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  280.042086][T15099] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  280.051756][T15093] batman_adv: batadv0: Interface deactivated: dummy0
[  280.060060][T15093] macvlan0: left allmulticast mode
[  280.081590][T15093] bond28: left promiscuous mode
[  280.083090][T15093] bond28: left allmulticast mode
[  280.091369][T15093] bridge13: left allmulticast mode
[  280.101834][T15093] bond29: left promiscuous mode
[  280.103328][T15093] gre2: left promiscuous mode
[  280.127195][T15093] bond30: left promiscuous mode
[  280.129747][T15093] bond30: left allmulticast mode
[  280.136913][T15093] bond32: left promiscuous mode
[  280.148774][T15093] bond32: left allmulticast mode
[  280.159170][T15093] bond33: left promiscuous mode
[  280.165100][T15093] bond35: left promiscuous mode
[  280.166585][T15093] bond35: left allmulticast mode
[  280.181154][T15115] netlink: 'syz.1.2539': attribute type 1 has an invalid length.
[  280.184483][T15093] bond36: left promiscuous mode
[  280.186017][T15093] bond36: left allmulticast mode
[  280.192832][T15093] dummy0: left allmulticast mode
[  280.194497][T15093] macsec0: left promiscuous mode
[  280.195965][T15093] macsec0: left allmulticast mode
[  280.200432][T15093] bond37: left promiscuous mode
[  280.202087][T15093] bond37: left allmulticast mode
[  280.213623][T15093] bond38: left promiscuous mode
[  280.218086][T15093] bond38: left allmulticast mode
[  280.251211][T15115] bond43: entered promiscuous mode
[  280.252802][T15115] bond43: entered allmulticast mode
[  280.254651][T15115] 8021q: adding VLAN 0 to HW filter on device bond43
[  280.374242][T15127] netlink: 'syz.0.2543': attribute type 8 has an invalid length.
[  280.466101][T15139] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  280.479681][T15139] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2545'.
[  280.482292][T15139] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2545'.
[  280.487483][T15139] macvlan0: entered allmulticast mode
[  280.490716][T15139] team0: entered allmulticast mode
[  280.493434][T15139] team_slave_0: entered allmulticast mode
[  280.495251][T15139] team_slave_1: entered allmulticast mode
[  280.497039][T15139] bridge11: entered allmulticast mode
[  280.499818][T15139] macvlan1: entered allmulticast mode
[  280.502854][T15139] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  280.582226][T15148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2547'.
[  280.661887][   T57] block nbd4: Receive control failed (result -32)
[  281.159884][   T11] block nbd0: Possible stuck request ffff88810aa77800: control (read@0,1024B). Runtime 150 seconds
[  281.163047][   T11] block nbd0: Possible stuck request ffff88810aa77a00: control (read@1024,1024B). Runtime 150 seconds
[  281.166216][   T11] block nbd0: Possible stuck request ffff88810aa77c00: control (read@2048,1024B). Runtime 150 seconds
[  281.171372][   T11] block nbd0: Possible stuck request ffff88810aa77e00: control (read@3072,1024B). Runtime 150 seconds
[  281.195598][T15164] netlink: 'syz.2.2551': attribute type 3 has an invalid length.
[  281.199928][T15164] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2551'.
[  281.236470][T15166] delete_channel: no stack
[  281.412048][T15169] netlink: 'syz.0.2553': attribute type 1 has an invalid length.
[  281.431287][T15169] bond39: entered promiscuous mode
[  281.434823][T15169] bond39: entered allmulticast mode
[  281.437085][T15169] 8021q: adding VLAN 0 to HW filter on device bond39
[  281.505740][T15177] netlink: 'syz.0.2555': attribute type 8 has an invalid length.
[  281.784266][T15199] netlink: 'syz.1.2560': attribute type 11 has an invalid length.
[  281.876988][T15203] validate_nla: 2 callbacks suppressed
[  281.877001][T15203] netlink: 'syz.1.2561': attribute type 3 has an invalid length.
[  281.946083][T15205] bond44: option miimon: invalid value (18446744073709551607)
[  281.949230][T15205] bond44: option miimon: allowed values 0 - 2147483647
[  281.954928][T15205] bond44 (unregistering): Released all slaves
[  282.176368][T15220] netlink: 'syz.2.2566': attribute type 1 has an invalid length.
[  282.195290][T15220] bond56: entered promiscuous mode
[  282.197299][T15220] bond56: entered allmulticast mode
[  282.200041][T15220] 8021q: adding VLAN 0 to HW filter on device bond56
[  282.274462][T15229] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  282.541010][T15243] netlink: 'syz.2.2574': attribute type 1 has an invalid length.
[  282.558764][T15243] bond57: entered promiscuous mode
[  282.560331][T15243] bond57: entered allmulticast mode
[  282.562218][T15243] 8021q: adding VLAN 0 to HW filter on device bond57
[  282.602866][T15246] netlink: 'syz.2.2575': attribute type 8 has an invalid length.
[  282.635761][T15251] netlink: 'syz.2.2577': attribute type 7 has an invalid length.
[  282.780522][T15270] netlink: 'syz.2.2581': attribute type 1 has an invalid length.
[  282.799888][T15270] bond58: entered promiscuous mode
[  282.801812][T15270] bond58: entered allmulticast mode
[  282.803909][T15270] 8021q: adding VLAN 0 to HW filter on device bond58
[  282.905202][T15282] netlink: 'syz.0.2582': attribute type 1 has an invalid length.
[  282.919792][T15282] bond40: entered promiscuous mode
[  282.921763][T15282] 8021q: adding VLAN 0 to HW filter on device bond40
[  282.923991][T15284] netlink: 'syz.2.2584': attribute type 3 has an invalid length.
[  283.082325][T15295] __nla_validate_parse: 21 callbacks suppressed
[  283.082344][T15295] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.2588'.
[  283.131392][T15297] netlink: 'syz.1.2589': attribute type 3 has an invalid length.
[  283.133955][T15297] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2589'.
[  283.137092][T15297] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2589'.
[  283.142644][T15297] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2589'.
[  283.212329][T15301] netlink: 'syz.1.2591': attribute type 3 has an invalid length.
[  283.217086][T15301] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2591'.
[  283.224955][T15301] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2591'.
[  283.238399][T15301] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2591'.
[  283.293638][T15305] bond59: entered promiscuous mode
[  283.295681][T15305] 8021q: adding VLAN 0 to HW filter on device bond59
[  283.301897][T15305] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2593'.
[  283.304624][T15305] bond59: entered allmulticast mode
[  283.325966][T15305] bond59: (slave bridge18): making interface the new active one
[  283.328965][T15305] bridge18: entered promiscuous mode
[  283.330958][T15305] bridge18: entered allmulticast mode
[  283.333603][T15305] bond59: (slave bridge18): Enslaving as an active interface with an up link
[  283.513806][T15313] team0: Port device dummy0 added
[  283.524644][T15313] team0: Port device dummy0 removed
[  283.653703][T15325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2600'.
[  283.696310][T15325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2600'.
[  283.792478][T15330] bond41: entered promiscuous mode
[  283.795959][T15330] bond41: entered allmulticast mode
[  283.798744][T15330] 8021q: adding VLAN 0 to HW filter on device bond41
[  283.939798][T15346] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  283.942756][T15346] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  284.210937][T15361] ..0{X: renamed from gretap0
[  284.214259][T15361] ..0{X: entered allmulticast mode
[  284.217424][T15361] A link change request failed with some changes committed already. Interface ..0{X may have been left with an inconsistent configuration, please check.
[  284.596048][T15381] bond44: entered promiscuous mode
[  284.599410][T15381] bond44: entered allmulticast mode
[  284.601714][T15381] 8021q: adding VLAN 0 to HW filter on device bond44
[  285.139928][T15410] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  285.143701][T15410] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  285.314336][T15419] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  285.594022][T15432] bond60: entered promiscuous mode
[  285.595849][T15432] 8021q: adding VLAN 0 to HW filter on device bond60
[  285.999058][T15474] bond42: entered promiscuous mode
[  286.000934][T15474] 8021q: adding VLAN 0 to HW filter on device bond42
[  286.007652][T15474] bond42: entered allmulticast mode
[  286.026921][T15474] IPVS: Unknown mcast interface: macvtap0
[  286.038703][T15474] bond42: (slave bridge20): making interface the new active one
[  286.041122][T15474] bridge20: entered promiscuous mode
[  286.042886][T15474] bridge20: entered allmulticast mode
[  286.045491][T15474] bond42: (slave bridge20): Enslaving as an active interface with an up link
[  286.318787][T15490] 8021q: adding VLAN 0 to HW filter on device bond44
[  286.322889][T15490] bond43: (slave bond44): making interface the new active one
[  286.326116][T15490] bond43: (slave bond44): Enslaving as an active interface with an up link
[  286.340774][T15490] bond43: (slave gretap0): Enslaving as a backup interface with an up link
[  286.347147][T15490] 8021q: adding VLAN 0 to HW filter on device bond43
[  286.359676][T15490] vlan2: entered promiscuous mode
[  286.361811][T15490] bond43: entered promiscuous mode
[  286.363772][T15490] bond44: entered promiscuous mode
[  286.664312][T15513] syzkaller0: entered promiscuous mode
[  286.666367][T15513] syzkaller0: entered allmulticast mode
[  286.873943][T15525] bond45: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  286.880847][T15525] bond45 (unregistering): Released all slaves
[  287.196783][T15541] geneve3: entered promiscuous mode
[  287.199135][T15541] geneve3: entered allmulticast mode
[  287.201784][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  287.205126][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  287.209871][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  287.215642][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  287.266009][T15543] gre0: entered promiscuous mode
[  287.269594][T15543] gre0: entered allmulticast mode
[  287.404161][T15557] bridge17: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  287.679946][T15565] gre0: left promiscuous mode
[  287.688883][T15565] gre0: left allmulticast mode
[  287.699143][T15565] team0: left allmulticast mode
[  287.700642][T15565] team_slave_0: left allmulticast mode
[  287.703520][T15565] team_slave_1: left allmulticast mode
[  287.705121][T15565] bridge11: left allmulticast mode
[  287.706606][T15565] macvlan1: left allmulticast mode
[  287.724540][T15565] macvlan0: left allmulticast mode
[  287.736474][T15565] bond41: left promiscuous mode
[  287.738063][T15565] bond41: left allmulticast mode
[  287.746793][T15565] bond43: left promiscuous mode
[  287.748643][T15565] bond43: left allmulticast mode
[  287.754322][T15565] bond44: left promiscuous mode
[  287.755811][T15565] bond44: left allmulticast mode
[  287.761199][T15565] geneve3: left promiscuous mode
[  287.762609][T15565] geneve3: left allmulticast mode
[  287.775521][ T7057] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  287.779011][ T7057] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  287.782336][ T7057] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  287.785795][ T7057] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  287.809194][T15574] ..0{X: left allmulticast mode
[  287.836272][T15574] bond39: left promiscuous mode
[  287.839289][T15574] bond39: left allmulticast mode
[  287.846501][T15574] bond40: left promiscuous mode
[  287.854793][T15574] bond41: left promiscuous mode
[  287.856706][T15574] bond41: left allmulticast mode
[  287.870921][T15574] bond42: left promiscuous mode
[  287.872503][T15574] bridge20: left promiscuous mode
[  287.874145][T15574] bond42: left allmulticast mode
[  287.875625][T15574] bridge20: left allmulticast mode
[  288.662908][T15614] validate_nla: 20 callbacks suppressed
[  288.662925][T15614] netlink: 'syz.0.2667': attribute type 1 has an invalid length.
[  288.704706][T15614] bond45: entered promiscuous mode
[  288.706586][T15614] 8021q: adding VLAN 0 to HW filter on device bond45
[  288.752039][T15622] __nla_validate_parse: 16 callbacks suppressed
[  288.752050][T15622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2668'.
[  288.758003][T15622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2668'.
[  288.763482][T15623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2668'.
[  288.770235][T15623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2668'.
[  289.032856][T15640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2673'.
[  289.132391][T15655] netlink: 'syz.0.2678': attribute type 8 has an invalid length.
[  289.338945][T15666] netlink: 'syz.2.2680': attribute type 15 has an invalid length.
[  289.558526][T15678] netlink: 'syz.2.2685': attribute type 12 has an invalid length.
[  289.567705][T15678] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2685'.
[  289.582551][T15678] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2685'.
[  289.588162][T15678] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2685'.
[  289.611488][T15678] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2685'.
[  289.614194][T15678] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2685'.
[  289.662356][T15684] netlink: 'syz.2.2685': attribute type 21 has an invalid length.
[  289.665238][T15684] IPv6: NLM_F_CREATE should be specified when creating new route
[  289.668997][T15684] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  289.671626][T15684] IPv6: NLM_F_CREATE should be set when creating new route
[  289.674225][T15684] IPv6: NLM_F_CREATE should be set when creating new route
[  289.676758][T15684] IPv6: NLM_F_CREATE should be set when creating new route
[  289.718667][T15688] netlink: 'syz.0.2686': attribute type 2 has an invalid length.
[  289.732686][T15688] bridge0: port 1(macvlan3) entered blocking state
[  289.734821][T15688] bridge0: port 1(macvlan3) entered disabled state
[  289.736900][T15688] macvlan3: entered allmulticast mode
[  289.739194][T15688] bridge0: entered allmulticast mode
[  289.743627][T15688] macvlan3: left allmulticast mode
[  289.745253][T15688] bridge0: left allmulticast mode
[  289.896231][T15703] bridge21: port 1(veth9) entered blocking state
[  289.899211][T15703] bridge21: port 1(veth9) entered disabled state
[  289.903136][T15703] veth9: entered allmulticast mode
[  289.906196][T15703] veth9: entered promiscuous mode
[  289.911343][T15703] bridge21: port 2(veth0_to_bond) entered blocking state
[  289.914212][T15703] bridge21: port 2(veth0_to_bond) entered disabled state
[  289.916836][T15703] veth0_to_bond: entered allmulticast mode
[  289.919904][T15703] veth0_to_bond: entered promiscuous mode
[  289.943952][T15703] bridge21: port 3(veth11) entered blocking state
[  289.948217][T15703] bridge21: port 3(veth11) entered disabled state
[  289.950313][T15703] veth11: entered allmulticast mode
[  289.952827][T15703] veth11: entered promiscuous mode
[  290.711170][T15718] netlink: 'syz.2.2694': attribute type 3 has an invalid length.
[  290.735048][T15720] netlink: 'syz.2.2695': attribute type 1 has an invalid length.
[  290.975491][T15739] netlink: 'syz.1.2701': attribute type 3 has an invalid length.
[  290.982987][T15735] gre0: entered promiscuous mode
[  290.984588][T15735] gre0: entered allmulticast mode
[  290.995557][T15733] bond45: left allmulticast mode
[  291.001260][T15733] bond46: left allmulticast mode
[  291.005126][T15733] bond47: left allmulticast mode
[  291.006606][T15733] bridge15: left allmulticast mode
[  291.017202][T15733] bond48: left allmulticast mode
[  291.025814][T15733] bond49: left allmulticast mode
[  291.027564][T15733] bridge16: left allmulticast mode
[  291.033869][T15733] bond50: left allmulticast mode
[  291.037689][T15742] netlink: 'syz.0.2702': attribute type 62 has an invalid length.
[  291.042476][T15733] bond51: left allmulticast mode
[  291.046133][T15733] bond52: left allmulticast mode
[  291.050610][T15733] bond53: left allmulticast mode
[  291.052884][T15733] bond54: left allmulticast mode
[  291.055436][T15733] bond55: left allmulticast mode
[  291.062323][T15733] bond56: left promiscuous mode
[  291.064955][T15733] bond56: left allmulticast mode
[  291.068534][T15733] bond57: left promiscuous mode
[  291.070529][T15733] bond57: left allmulticast mode
[  291.073589][T15733] bond58: left promiscuous mode
[  291.075449][T15733] bond58: left allmulticast mode
[  291.079190][T15733] bond59: left promiscuous mode
[  291.081210][T15733] bridge18: left promiscuous mode
[  291.083297][T15733] bond59: left allmulticast mode
[  291.085157][T15733] bridge18: left allmulticast mode
[  291.093168][T15733] bond60: left promiscuous mode
[  291.206800][T15746] bond61: entered promiscuous mode
[  291.212345][T15746] bond61: entered allmulticast mode
[  291.214412][T15746] 8021q: adding VLAN 0 to HW filter on device bond61
[  291.269574][T15756] bond47 (unregistering): Released all slaves
[  291.454190][T15777] bond62: entered promiscuous mode
[  291.456036][T15777] 8021q: adding VLAN 0 to HW filter on device bond62
[  291.467157][T15777] bond62: entered allmulticast mode
[  291.480562][T15777] bond62: (slave bridge19): making interface the new active one
[  291.485092][T15777] bridge19: entered promiscuous mode
[  291.486799][T15777] bridge19: entered allmulticast mode
[  291.490305][T15777] bond62: (slave bridge19): Enslaving as an active interface with an up link
[  291.536023][T15783] gre0: left allmulticast mode
[  291.604489][T15789] can: request_module (can-proto-0) failed.
[  291.663560][T15793] batadv2: entered promiscuous mode
[  291.665871][T15793] 8021q: adding VLAN 0 to HW filter on device batadv2
[  292.603285][T15809] bond63: entered promiscuous mode
[  292.605196][T15809] 8021q: adding VLAN 0 to HW filter on device bond63
[  292.609239][T15810] bond63: entered allmulticast mode
[  292.841388][T15826] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  292.844296][T15826] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  292.975978][T15828] tipc: Resetting bearer <eth:vlan0>
[  293.439245][T15842] delete_channel: no stack
[  307.399975][  T111] block nbd1: Possible stuck request ffff88810aad5000: control (read@0,1024B). Runtime 150 seconds
[  307.403641][  T111] block nbd1: Possible stuck request ffff88810aad5200: control (read@1024,1024B). Runtime 150 seconds
[  307.407678][  T111] block nbd1: Possible stuck request ffff88810aad5400: control (read@2048,1024B). Runtime 150 seconds
[  307.411847][  T111] block nbd1: Possible stuck request ffff88810aad5600: control (read@3072,1024B). Runtime 150 seconds
[  309.049577][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  309.053329][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  309.056073][ T5812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  309.059683][ T5812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  309.069285][ T5812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  309.150197][ T5812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  309.157045][ T5818] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  309.161351][ T5818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  309.163948][ T5818] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  309.166542][ T5818] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  309.168804][ T5812] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  309.173357][ T5818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  309.175507][ T5818] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  309.178502][ T5818] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  309.178780][ T5812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  309.269920][T15871] chnl_net:caif_netlink_parms(): no params data found
[  309.386132][T15871] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.389160][T15871] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.391275][T15871] bridge_slave_0: entered allmulticast mode
[  309.394036][T15871] bridge_slave_0: entered promiscuous mode
[  309.412492][T15871] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.415147][T15871] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.418657][T15871] bridge_slave_1: entered allmulticast mode
[  309.421735][T15871] bridge_slave_1: entered promiscuous mode
[  309.469835][T15871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  309.472784][T15874] chnl_net:caif_netlink_parms(): no params data found
[  309.484026][T15871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  309.486921][T15873] chnl_net:caif_netlink_parms(): no params data found
[  309.548744][T15871] team0: Port device team_slave_0 added
[  309.572250][T15871] team0: Port device team_slave_1 added
[  309.652440][T15873] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.654562][T15873] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.656718][T15873] bridge_slave_0: entered allmulticast mode
[  309.659562][T15873] bridge_slave_0: entered promiscuous mode
[  309.663464][T15871] batman_adv: batadv0: Adding interface: batadv_slave_0
[  309.665657][T15871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  309.673935][T15871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  309.677445][T15874] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.681047][T15874] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.684124][T15874] bridge_slave_0: entered allmulticast mode
[  309.688733][T15874] bridge_slave_0: entered promiscuous mode
[  309.692431][T15873] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.694579][T15873] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.696654][T15873] bridge_slave_1: entered allmulticast mode
[  309.699693][T15873] bridge_slave_1: entered promiscuous mode
[  309.702690][T15871] batman_adv: batadv0: Adding interface: batadv_slave_1
[  309.705270][T15871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  309.715183][T15871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  309.728528][T15874] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.730667][T15874] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.732759][T15874] bridge_slave_1: entered allmulticast mode
[  309.735429][T15874] bridge_slave_1: entered promiscuous mode
[  309.786444][T15874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  309.792219][T15874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  309.799122][T15873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  309.805283][T15871] hsr_slave_0: entered promiscuous mode
[  309.807667][T15871] hsr_slave_1: entered promiscuous mode
[  309.810842][T15871] debugfs: 'hsr0' already exists in 'hsr'
[  309.812553][T15871] Cannot create hsr debugfs directory
[  309.823648][T15873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  309.859510][T15873] team0: Port device team_slave_0 added
[  309.862950][T15874] team0: Port device team_slave_0 added
[  309.865834][T15873] team0: Port device team_slave_1 added
[  309.874646][T15874] team0: Port device team_slave_1 added
[  309.908301][T15873] batman_adv: batadv0: Adding interface: batadv_slave_0
[  309.910321][T15873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  309.918898][T15873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  309.934712][T15873] batman_adv: batadv0: Adding interface: batadv_slave_1
[  309.936716][T15873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  309.944795][T15873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  309.984799][T15874] batman_adv: batadv0: Adding interface: batadv_slave_0
[  309.986897][T15874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  309.994433][T15874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  310.017089][T15874] batman_adv: batadv0: Adding interface: batadv_slave_1
[  310.019336][T15874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  310.027663][T15874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  310.055766][T15873] hsr_slave_0: entered promiscuous mode
[  310.059455][T15873] hsr_slave_1: entered promiscuous mode
[  310.062204][T15873] debugfs: 'hsr0' already exists in 'hsr'
[  310.064418][T15873] Cannot create hsr debugfs directory
[  310.120668][T15874] hsr_slave_0: entered promiscuous mode
[  310.122921][T15874] hsr_slave_1: entered promiscuous mode
[  310.125174][T15874] debugfs: 'hsr0' already exists in 'hsr'
[  310.126814][T15874] Cannot create hsr debugfs directory
[  311.158354][ T5819] Bluetooth: hci3: command tx timeout
[  311.238152][ T5815] Bluetooth: hci5: command tx timeout
[  311.238178][   T11] block nbd0: Possible stuck request ffff88810aa77800: control (read@0,1024B). Runtime 180 seconds
[  311.241248][ T5819] Bluetooth: hci4: command tx timeout
[  311.244445][   T11] block nbd0: Possible stuck request ffff88810aa77a00: control (read@1024,1024B). Runtime 180 seconds
[  311.251401][   T11] block nbd0: Possible stuck request ffff88810aa77c00: control (read@2048,1024B). Runtime 180 seconds
[  311.255448][   T11] block nbd0: Possible stuck request ffff88810aa77e00: control (read@3072,1024B). Runtime 180 seconds
[  313.241065][ T5819] Bluetooth: hci3: command tx timeout
[  313.318480][ T5815] Bluetooth: hci5: command tx timeout
[  313.320833][ T5819] Bluetooth: hci4: command tx timeout
[  313.446934][ T5257] udevd[5257]: worker [5822] /devices/virtual/block/nbd0 timeout; kill it
[  313.449758][ T5257] udevd[5257]: seq 13738 '/devices/virtual/block/nbd0' killed
[  315.318168][ T5819] Bluetooth: hci3: command tx timeout
[  315.398326][ T5815] Bluetooth: hci5: command tx timeout
[  315.400148][ T5819] Bluetooth: hci4: command tx timeout
[  317.398238][ T5819] Bluetooth: hci3: command tx timeout
[  317.478249][ T5815] Bluetooth: hci5: command tx timeout
[  317.480146][ T5819] Bluetooth: hci4: command tx timeout
[  337.478755][  T111] block nbd1: Possible stuck request ffff88810aad5000: control (read@0,1024B). Runtime 180 seconds
[  337.483027][  T111] block nbd1: Possible stuck request ffff88810aad5200: control (read@1024,1024B). Runtime 180 seconds
[  337.487290][  T111] block nbd1: Possible stuck request ffff88810aad5400: control (read@2048,1024B). Runtime 180 seconds
[  337.491797][ T5257] udevd[5257]: worker [8444] /devices/virtual/block/nbd1 timeout; kill it
[  337.495113][  T111] block nbd1: Possible stuck request ffff88810aad5600: control (read@3072,1024B). Runtime 180 seconds
[  337.498116][ T5257] udevd[5257]: seq 16479 '/devices/virtual/block/nbd1' killed
[  341.318194][   T11] block nbd0: Possible stuck request ffff88810aa77800: control (read@0,1024B). Runtime 210 seconds
[  341.322128][   T11] block nbd0: Possible stuck request ffff88810aa77a00: control (read@1024,1024B). Runtime 210 seconds
[  341.326064][   T11] block nbd0: Possible stuck request ffff88810aa77c00: control (read@2048,1024B). Runtime 210 seconds
[  341.330172][   T11] block nbd0: Possible stuck request ffff88810aa77e00: control (read@3072,1024B). Runtime 210 seconds
[  367.560523][  T111] block nbd1: Possible stuck request ffff88810aad5000: control (read@0,1024B). Runtime 210 seconds
[  367.564378][  T111] block nbd1: Possible stuck request ffff88810aad5200: control (read@1024,1024B). Runtime 210 seconds
[  367.568919][  T111] block nbd1: Possible stuck request ffff88810aad5400: control (read@2048,1024B). Runtime 210 seconds
[  367.572781][  T111] block nbd1: Possible stuck request ffff88810aad5600: control (read@3072,1024B). Runtime 210 seconds
[  369.061764][ T5815] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  369.065070][ T5815] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  369.068260][ T5815] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  369.071206][ T5815] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  369.073999][ T5815] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  369.193454][T15900] chnl_net:caif_netlink_parms(): no params data found
[  369.251422][T15900] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.253780][T15900] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.256324][T15900] bridge_slave_0: entered allmulticast mode
[  369.259489][T15900] bridge_slave_0: entered promiscuous mode
[  369.263371][T15900] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.265651][T15900] bridge0: port 2(bridge_slave_1) entered disabled state
[  369.268552][T15900] bridge_slave_1: entered allmulticast mode
[  369.271810][T15900] bridge_slave_1: entered promiscuous mode
[  369.293953][T15900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  369.300038][T15900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  369.321133][T15900] team0: Port device team_slave_0 added
[  369.324715][T15900] team0: Port device team_slave_1 added
[  369.346705][T15900] batman_adv: batadv0: Adding interface: batadv_slave_0
[  369.349869][T15900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  369.358935][T15900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  369.363347][T15900] batman_adv: batadv0: Adding interface: batadv_slave_1
[  369.365403][T15900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  369.373098][T15900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  369.404841][T15900] hsr_slave_0: entered promiscuous mode
[  369.408033][T15900] hsr_slave_1: entered promiscuous mode
[  369.410446][T15900] debugfs: 'hsr0' already exists in 'hsr'
[  369.412164][T15900] Cannot create hsr debugfs directory
[  370.071401][ T5815] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  370.076117][ T5815] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  370.079325][ T5815] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  370.082154][ T5815] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  370.084857][ T5815] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  370.116222][ T5819] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  370.122237][ T5819] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  370.125350][ T5819] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  370.128629][ T5819] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  370.131393][ T5819] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  370.273004][T15910] chnl_net:caif_netlink_parms(): no params data found
[  370.330682][T15912] chnl_net:caif_netlink_parms(): no params data found
[  370.368457][T15910] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.370856][T15910] bridge0: port 1(bridge_slave_0) entered disabled state
[  370.373173][T15910] bridge_slave_0: entered allmulticast mode
[  370.376119][T15910] bridge_slave_0: entered promiscuous mode
[  370.388790][T15910] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.391291][T15910] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.393598][T15910] bridge_slave_1: entered allmulticast mode
[  370.396451][T15910] bridge_slave_1: entered promiscuous mode
[  370.437256][T15910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  370.452117][T15910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  370.470330][T15912] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.473169][T15912] bridge0: port 1(bridge_slave_0) entered disabled state
[  370.476056][T15912] bridge_slave_0: entered allmulticast mode
[  370.480710][T15912] bridge_slave_0: entered promiscuous mode
[  370.496729][T15912] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.500110][T15912] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.503288][T15912] bridge_slave_1: entered allmulticast mode
[  370.506864][T15912] bridge_slave_1: entered promiscuous mode
[  370.513591][T15910] team0: Port device team_slave_0 added
[  370.529692][T15910] team0: Port device team_slave_1 added
[  370.551043][T15912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  370.563127][T15912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  370.566538][T15910] batman_adv: batadv0: Adding interface: batadv_slave_0
[  370.568877][T15910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  370.576198][T15910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  370.591477][T15910] batman_adv: batadv0: Adding interface: batadv_slave_1
[  370.593561][T15910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  370.601820][T15910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  370.619243][T15912] team0: Port device team_slave_0 added
[  370.623898][T15912] team0: Port device team_slave_1 added
[  370.658794][T15912] batman_adv: batadv0: Adding interface: batadv_slave_0
[  370.661443][T15912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  370.669544][T15912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  370.677143][T15910] hsr_slave_0: entered promiscuous mode
[  370.679914][T15910] hsr_slave_1: entered promiscuous mode
[  370.682113][T15910] debugfs: 'hsr0' already exists in 'hsr'
[  370.683811][T15910] Cannot create hsr debugfs directory
[  370.686392][T15912] batman_adv: batadv0: Adding interface: batadv_slave_1
[  370.689764][T15912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  370.699745][T15912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  370.766868][T15912] hsr_slave_0: entered promiscuous mode
[  370.770389][T15912] hsr_slave_1: entered promiscuous mode
[  370.774029][T15912] debugfs: 'hsr0' already exists in 'hsr'
[  370.776221][T15912] Cannot create hsr debugfs directory
[  371.158158][ T5815] Bluetooth: hci6: command tx timeout
[  371.410306][   T11] block nbd0: Possible stuck request ffff88810aa77800: control (read@0,1024B). Runtime 240 seconds
[  371.413553][   T11] block nbd0: Possible stuck request ffff88810aa77a00: control (read@1024,1024B). Runtime 240 seconds
[  371.416867][   T11] block nbd0: Possible stuck request ffff88810aa77c00: control (read@2048,1024B). Runtime 240 seconds
[  371.421060][   T11] block nbd0: Possible stuck request ffff88810aa77e00: control (read@3072,1024B). Runtime 240 seconds
[  372.118628][ T5815] Bluetooth: hci7: command tx timeout
[  372.199623][ T5815] Bluetooth: hci8: command tx timeout
[  373.238434][ T5815] Bluetooth: hci6: command tx timeout
[  374.198088][ T5815] Bluetooth: hci7: command tx timeout
[  374.278290][ T5815] Bluetooth: hci8: command tx timeout
[  375.318515][ T5815] Bluetooth: hci6: command tx timeout
[  376.288237][ T5815] Bluetooth: hci7: command tx timeout
[  376.368243][ T5815] Bluetooth: hci8: command tx timeout
[  377.398078][ T5815] Bluetooth: hci6: command tx timeout
[  378.358237][ T5815] Bluetooth: hci7: command tx timeout
[  378.438351][ T5815] Bluetooth: hci8: command tx timeout
[  397.638947][  T111] block nbd1: Possible stuck request ffff88810aad5000: control (read@0,1024B). Runtime 240 seconds
[  397.642962][  T111] block nbd1: Possible stuck request ffff88810aad5200: control (read@1024,1024B). Runtime 240 seconds
[  397.646918][  T111] block nbd1: Possible stuck request ffff88810aad5400: control (read@2048,1024B). Runtime 240 seconds
[  397.651117][  T111] block nbd1: Possible stuck request ffff88810aad5600: control (read@3072,1024B). Runtime 240 seconds
[  401.508421][   T11] block nbd0: Possible stuck request ffff88810aa77800: control (read@0,1024B). Runtime 270 seconds
[  401.512704][   T11] block nbd0: Possible stuck request ffff88810aa77a00: control (read@1024,1024B). Runtime 270 seconds
[  401.517343][   T11] block nbd0: Possible stuck request ffff88810aa77c00: control (read@2048,1024B). Runtime 270 seconds
[  401.522147][   T11] block nbd0: Possible stuck request ffff88810aa77e00: control (read@3072,1024B). Runtime 270 seconds
[  427.719093][  T111] block nbd1: Possible stuck request ffff88810aad5000: control (read@0,1024B). Runtime 270 seconds
[  427.723152][  T111] block nbd1: Possible stuck request ffff88810aad5200: control (read@1024,1024B). Runtime 270 seconds
[  427.727197][  T111] block nbd1: Possible stuck request ffff88810aad5400: control (read@2048,1024B). Runtime 270 seconds
[  427.731773][  T111] block nbd1: Possible stuck request ffff88810aad5600: control (read@3072,1024B). Runtime 270 seconds
[  429.083296][ T5819] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  429.086476][ T5819] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  429.089723][ T5819] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  429.092796][ T5819] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  429.095663][ T5819] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  429.200580][T15927] chnl_net:caif_netlink_parms(): no params data found
[  429.259027][T15927] bridge0: port 1(bridge_slave_0) entered blocking state
[  429.261384][T15927] bridge0: port 1(bridge_slave_0) entered disabled state
[  429.263717][T15927] bridge_slave_0: entered allmulticast mode
[  429.266971][T15927] bridge_slave_0: entered promiscuous mode
[  429.271128][T15927] bridge0: port 2(bridge_slave_1) entered blocking state
[  429.273368][T15927] bridge0: port 2(bridge_slave_1) entered disabled state
[  429.275925][T15927] bridge_slave_1: entered allmulticast mode
[  429.279869][T15927] bridge_slave_1: entered promiscuous mode
[  429.305109][T15927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  429.312071][T15927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  429.337280][T15927] team0: Port device team_slave_0 added
[  429.341832][T15927] team0: Port device team_slave_1 added
[  429.362210][T15927] batman_adv: batadv0: Adding interface: batadv_slave_0
[  429.364311][T15927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  429.372540][T15927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  429.377123][T15927] batman_adv: batadv0: Adding interface: batadv_slave_1
[  429.379783][T15927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  429.387133][T15927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  429.424473][T15927] hsr_slave_0: entered promiscuous mode
[  429.427487][T15927] hsr_slave_1: entered promiscuous mode
[  429.430488][T15927] debugfs: 'hsr0' already exists in 'hsr'
[  429.432539][T15927] Cannot create hsr debugfs directory
[  430.104060][ T5815] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  430.108669][ T5815] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  430.112227][ T5815] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  430.114851][ T5815] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  430.117470][ T5815] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  430.145588][ T5815] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  430.151619][ T5815] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  430.154788][ T5815] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  430.157364][ T5815] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  430.160359][ T5815] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  430.356619][T15937] chnl_net:caif_netlink_parms(): no params data found
[  430.389307][T15939] chnl_net:caif_netlink_parms(): no params data found
[  430.477541][T15937] bridge0: port 1(bridge_slave_0) entered blocking state
[  430.480044][T15937] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.482740][T15937] bridge_slave_0: entered allmulticast mode
[  430.486621][T15937] bridge_slave_0: entered promiscuous mode
[  430.507078][T15937] bridge0: port 2(bridge_slave_1) entered blocking state
[  430.509920][T15937] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.512579][T15937] bridge_slave_1: entered allmulticast mode
[  430.515819][T15937] bridge_slave_1: entered promiscuous mode
[  430.535445][T15939] bridge0: port 1(bridge_slave_0) entered blocking state
[  430.537603][T15939] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.540043][T15939] bridge_slave_0: entered allmulticast mode
[  430.542788][T15939] bridge_slave_0: entered promiscuous mode
[  430.556753][T15939] bridge0: port 2(bridge_slave_1) entered blocking state
[  430.559741][T15939] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.562080][T15939] bridge_slave_1: entered allmulticast mode
[  430.565481][T15939] bridge_slave_1: entered promiscuous mode
[  430.571952][T15937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  430.589352][T15937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  430.617181][T15939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  430.633195][T15939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  430.638639][T15937] team0: Port device team_slave_0 added
[  430.650024][T15937] team0: Port device team_slave_1 added
[  430.677032][T15939] team0: Port device team_slave_0 added
[  430.680199][T15937] batman_adv: batadv0: Adding interface: batadv_slave_0
[  430.682236][T15937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  430.690445][T15937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  430.695517][T15939] team0: Port device team_slave_1 added
[  430.699100][T15937] batman_adv: batadv0: Adding interface: batadv_slave_1
[  430.701220][T15937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  430.710157][T15937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  430.736004][T15939] batman_adv: batadv0: Adding interface: batadv_slave_0
[  430.738539][T15939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  430.746009][T15939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  430.750990][T15939] batman_adv: batadv0: Adding interface: batadv_slave_1
[  430.753024][T15939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  430.760877][T15939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  430.803429][T15937] hsr_slave_0: entered promiscuous mode
[  430.806831][T15937] hsr_slave_1: entered promiscuous mode
[  430.810093][T15937] debugfs: 'hsr0' already exists in 'hsr'
[  430.811860][T15937] Cannot create hsr debugfs directory
[  430.845059][T15939] hsr_slave_0: entered promiscuous mode
[  430.847690][T15939] hsr_slave_1: entered promiscuous mode
[  430.850722][T15939] debugfs: 'hsr0' already exists in 'hsr'
[  430.852391][T15939] Cannot create hsr debugfs directory
[  431.158225][T15944] Bluetooth: hci9: command tx timeout
[  431.588058][   T11] block nbd0: Possible stuck request ffff88810aa77800: control (read@0,1024B). Runtime 300 seconds
[  431.591356][   T11] block nbd0: Possible stuck request ffff88810aa77a00: control (read@1024,1024B). Runtime 300 seconds
[  431.594602][   T11] block nbd0: Possible stuck request ffff88810aa77c00: control (read@2048,1024B). Runtime 300 seconds
[  431.597976][   T11] block nbd0: Possible stuck request ffff88810aa77e00: control (read@3072,1024B). Runtime 300 seconds
[  432.198677][T15944] Bluetooth: hci11: command tx timeout
[  432.199312][ T5818] Bluetooth: hci10: command tx timeout
[  432.358111][T15955] Bluetooth: hci4: command 0x0406 tx timeout
[  432.362023][ T5818] Bluetooth: hci3: command 0x0406 tx timeout
[  432.365590][T15955] Bluetooth: hci5: command 0x0406 tx timeout
[  433.238185][ T5815] Bluetooth: hci9: command tx timeout
[  434.278155][ T5815] Bluetooth: hci11: command tx timeout
[  434.278205][ T5812] Bluetooth: hci10: command tx timeout
[  435.318226][ T5812] Bluetooth: hci9: command tx timeout
[  436.358168][ T5812] Bluetooth: hci11: command tx timeout
[  436.373112][ T5812] Bluetooth: hci10: command tx timeout
[  437.408256][ T5812] Bluetooth: hci9: command tx timeout
[  438.448252][ T5812] Bluetooth: hci10: command tx timeout
[  438.448280][ T5815] Bluetooth: hci11: command tx timeout
[  446.278712][   T35] INFO: task syz.0.2734:15848 blocked for more than 143 seconds.
[  446.281747][   T35]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
[  446.283742][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  446.287079][   T35] task:syz.0.2734      state:D stack:25976 pid:15848 tgid:15847 ppid:5813   task_flags:0x480140 flags:0x00080002
[  446.292235][   T35] Call Trace:
[  446.293559][   T35]  <TASK>
[  446.294677][   T35]  __schedule+0x14ef/0x4fb0
[  446.296337][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  446.299311][   T35]  ? __pfx___schedule+0x10/0x10
[  446.301441][   T35]  ? schedule+0x90/0x360
[  446.303042][   T35]  schedule+0x164/0x360
[  446.304618][   T35]  blk_mq_freeze_queue_wait+0x101/0x180
[  446.306579][   T35]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[  446.308667][   T35]  ? queue_limits_commit_update_frozen+0x55/0xd0
[  446.310527][   T35]  ? __pfx_autoremove_wake_function+0x10/0x10
[  446.328272][   T35]  queue_limits_commit_update_frozen+0x55/0xd0
[  446.330667][   T35]  nbd_set_size+0x516/0x6d0
[  446.332098][   T35]  ? __pfx_nbd_set_size+0x10/0x10
[  446.333691][   T35]  ? nla_memcpy+0x5b/0xc0
[  446.334919][   T35]  nbd_genl_size_set+0x32c/0x400
[  446.336348][   T35]  ? __pfx_nbd_genl_size_set+0x10/0x10
[  446.342557][   T35]  ? __pfx_nbd_get_config_unlocked+0x10/0x10
[  446.344329][   T35]  ? bpf_lsm_capable+0x9/0x20
[  446.345705][   T35]  ? security_capable+0x7e/0x2c0
[  446.347200][   T35]  ? radix_tree_lookup+0x240/0x290
[  446.350549][   T35]  nbd_genl_reconfigure+0x428/0x1a70
[  446.352264][   T35]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  446.354415][   T35]  ? rcu_is_watching+0x15/0xb0
[  446.356215][   T35]  ? __nla_parse+0x40/0x60
[  446.358512][   T35]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  446.360897][   T35]  genl_family_rcv_msg_doit+0x22a/0x330
[  446.363025][   T35]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  446.365591][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  446.367522][   T35]  genl_rcv_msg+0x61c/0x7a0
[  446.369826][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  446.371836][   T35]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  446.374043][   T35]  netlink_rcv_skb+0x232/0x4b0
[  446.375895][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  446.378097][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  446.380069][   T35]  ? genl_rcv+0x19/0x40
[  446.381448][   T35]  ? down_read+0x272/0x2e0
[  446.383361][   T35]  ? genl_rcv+0xd/0x40
[  446.384946][   T35]  genl_rcv+0x28/0x40
[  446.386325][   T35]  netlink_unicast+0x80f/0x9b0
[  446.387714][   T35]  ? __pfx_netlink_unicast+0x10/0x10
[  446.389709][   T35]  ? __alloc_skb+0x193/0x390
[  446.391068][   T35]  ? netlink_sendmsg+0x650/0xb40
[  446.392770][   T35]  netlink_sendmsg+0x813/0xb40
[  446.394652][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  446.396610][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  446.398371][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  446.400011][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  446.401537][   T35]  __sock_sendmsg+0x21c/0x270
[  446.402901][   T35]  ____sys_sendmsg+0x4d7/0x810
[  446.404281][   T35]  ? __pfx_____sys_sendmsg+0x10/0x10
[  446.405786][   T35]  ? import_iovec+0x73/0xa0
[  446.407083][   T35]  ___sys_sendmsg+0x2a5/0x360
[  446.409131][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  446.410599][   T35]  ? __pfx____sys_sendmsg+0x10/0x10
[  446.412098][   T35]  ? futex_wait+0x29a/0x380
[  446.413444][   T35]  ? __fget_files+0x2a/0x420
[  446.414793][   T35]  ? __fget_files+0x3a0/0x420
[  446.416189][   T35]  __x64_sys_sendmsg+0x1bd/0x2a0
[  446.417743][   T35]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  446.419822][   T35]  ? rcu_is_watching+0x15/0xb0
[  446.421236][   T35]  do_syscall_64+0xe2/0xf80
[  446.422761][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.424888][   T35]  ? trace_irq_disable+0x37/0x100
[  446.426758][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.428892][   T35] RIP: 0033:0x7fcc1cf9acb9
[  446.430199][   T35] RSP: 002b:00007fcc1df28028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  446.432622][   T35] RAX: ffffffffffffffda RBX: 00007fcc1d215fa0 RCX: 00007fcc1cf9acb9
[  446.434886][   T35] RDX: 0000000000040800 RSI: 0000200000000780 RDI: 0000000000000006
[  446.437147][   T35] RBP: 00007fcc1d008bf7 R08: 0000000000000000 R09: 0000000000000000
[  446.439676][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  446.441962][   T35] R13: 00007fcc1d216038 R14: 00007fcc1d215fa0 R15: 00007fff2b579ca8
[  446.444234][   T35]  </TASK>
[  446.445226][   T35] INFO: task syz.0.2734:15849 blocked for more than 143 seconds.
[  446.447464][   T35]       Not tainted syzkaller #0
[  446.449367][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  446.452557][   T35] task:syz.0.2734      state:D stack:27824 pid:15849 tgid:15847 ppid:5813   task_flags:0x400040 flags:0x00080002
[  446.456935][   T35] Call Trace:
[  446.459847][   T35]  <TASK>
[  446.460992][   T35]  __schedule+0x14ef/0x4fb0
[  446.462711][   T35]  ? __pfx___schedule+0x10/0x10
[  446.464529][   T35]  ? schedule+0x90/0x360
[  446.466111][   T35]  schedule+0x164/0x360
[  446.467658][   T35]  schedule_preempt_disabled+0x13/0x30
[  446.469973][   T35]  __mutex_lock+0x7fe/0x1300
[  446.471487][   T35]  ? __mutex_lock+0x5ac/0x1300
[  446.473044][   T35]  ? genl_rcv_msg+0x10b/0x7a0
[  446.474487][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  446.475977][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  446.477425][   T35]  ? __pfx_stack_trace_save+0x10/0x10
[  446.479327][   T35]  ? radix_tree_lookup+0x240/0x290
[  446.480834][   T35]  genl_rcv_msg+0x10b/0x7a0
[  446.482156][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  446.483703][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  446.485318][   T35]  netlink_rcv_skb+0x232/0x4b0
[  446.486860][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  446.488818][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  446.490631][   T35]  ? genl_rcv+0x19/0x40
[  446.491926][   T35]  ? down_read+0x272/0x2e0
[  446.493251][   T35]  ? genl_rcv+0xd/0x40
[  446.494475][   T35]  genl_rcv+0x28/0x40
[  446.495895][   T35]  netlink_unicast+0x80f/0x9b0
[  446.497526][   T35]  ? __pfx_netlink_unicast+0x10/0x10
[  446.499296][   T35]  ? __alloc_skb+0x193/0x390
[  446.500896][   T35]  ? netlink_sendmsg+0x650/0xb40
[  446.502333][   T35]  ? skb_put+0x11b/0x210
[  446.503656][   T35]  netlink_sendmsg+0x813/0xb40
[  446.505053][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  446.506567][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  446.508424][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  446.510127][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  446.511647][   T35]  __sock_sendmsg+0x21c/0x270
[  446.512989][   T35]  ____sys_sendmsg+0x4d7/0x810
[  446.514386][   T35]  ? __might_fault+0xaf/0x130
[  446.515760][   T35]  ? __pfx_____sys_sendmsg+0x10/0x10
[  446.517261][   T35]  ? import_iovec+0x73/0xa0
[  446.519537][   T35]  ___sys_sendmsg+0x2a5/0x360
[  446.521026][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  446.522444][   T35]  ? __pfx____sys_sendmsg+0x10/0x10
[  446.523926][   T35]  ? futex_wait+0x29a/0x380
[  446.525136][   T35]  ? __fget_files+0x2a/0x420
[  446.526494][   T35]  ? __fget_files+0x3a0/0x420
[  446.528148][   T35]  __x64_sys_sendmsg+0x1bd/0x2a0
[  446.529965][   T35]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  446.531834][   T35]  do_syscall_64+0xe2/0xf80
[  446.533170][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.535195][   T35]  ? trace_irq_disable+0x37/0x100
[  446.537022][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.539269][   T35] RIP: 0033:0x7fcc1cf9acb9
[  446.540738][   T35] RSP: 002b:00007fcc1df07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  446.543139][   T35] RAX: ffffffffffffffda RBX: 00007fcc1d216090 RCX: 00007fcc1cf9acb9
[  446.545571][   T35] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003
[  446.548423][   T35] RBP: 00007fcc1d008bf7 R08: 0000000000000000 R09: 0000000000000000
[  446.550848][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  446.553390][   T35] R13: 00007fcc1d216128 R14: 00007fcc1d216090 R15: 00007fff2b579ca8
[  446.556297][   T35]  </TASK>
[  446.557527][   T35] INFO: task syz.2.2737:15855 blocked for more than 143 seconds.
[  446.560274][   T35]       Not tainted syzkaller #0
[  446.561965][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  446.564674][   T35] task:syz.2.2737      state:D stack:25304 pid:15855 tgid:15854 ppid:5809   task_flags:0x400140 flags:0x00080002
[  446.568796][   T35] Call Trace:
[  446.569875][   T35]  <TASK>
[  446.570793][   T35]  __schedule+0x14ef/0x4fb0
[  446.572218][   T35]  ? __pfx___schedule+0x10/0x10
[  446.573771][   T35]  ? schedule+0x90/0x360
[  446.575045][   T35]  schedule+0x164/0x360
[  446.576436][   T35]  schedule_preempt_disabled+0x13/0x30
[  446.578412][   T35]  __mutex_lock+0x7fe/0x1300
[  446.579868][   T35]  ? __mutex_lock+0x5ac/0x1300
[  446.581316][   T35]  ? genl_rcv_msg+0x10b/0x7a0
[  446.582795][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  446.584307][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  446.585834][   T35]  ? __pfx_stack_trace_save+0x10/0x10
[  446.587393][   T35]  ? radix_tree_lookup+0x240/0x290
[  446.589073][   T35]  genl_rcv_msg+0x10b/0x7a0
[  446.590451][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  446.591919][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  446.593438][   T35]  netlink_rcv_skb+0x232/0x4b0
[  446.594919][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  446.596423][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  446.600029][   T35]  ? genl_rcv+0x19/0x40
[  446.601391][   T35]  ? down_read+0x272/0x2e0
[  446.602715][   T35]  ? genl_rcv+0xd/0x40
[  446.604055][   T35]  genl_rcv+0x28/0x40
[  446.605394][   T35]  netlink_unicast+0x80f/0x9b0
[  446.606973][   T35]  ? __pfx_netlink_unicast+0x10/0x10
[  446.608968][   T35]  ? __alloc_skb+0x193/0x390
[  446.610714][   T35]  ? netlink_sendmsg+0x650/0xb40
[  446.612270][   T35]  ? skb_put+0x11b/0x210
[  446.613642][   T35]  netlink_sendmsg+0x813/0xb40
[  446.615141][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  446.616773][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  446.618729][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  446.620464][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  446.622013][   T35]  __sock_sendmsg+0x21c/0x270
[  446.623397][   T35]  __sys_sendto+0x3c0/0x550
[  446.624709][   T35]  ? __pfx___sys_sendto+0x10/0x10
[  446.626178][   T35]  ? fd_install+0x94/0x3d0
[  446.627495][   T35]  ? fd_install+0x306/0x3d0
[  446.629670][   T35]  __x64_sys_sendto+0xde/0x100
[  446.631165][   T35]  do_syscall_64+0xe2/0xf80
[  446.632543][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.634546][   T35]  ? trace_irq_disable+0x37/0x100
[  446.636115][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.638158][   T35] RIP: 0033:0x7f2604f5b58e
[  446.639969][   T35] RSP: 002b:00007f2605e3ae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  446.642398][   T35] RAX: ffffffffffffffda RBX: 00007f2605e3c6c0 RCX: 00007f2604f5b58e
[  446.644674][   T35] RDX: 0000000000000020 RSI: 00007f2605e3b000 RDI: 0000000000000007
[  446.646944][   T35] RBP: 0000000000000000 R08: 00007f2605e3af04 R09: 000000000000000c
[  446.649621][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  446.652020][   T35] R13: 00007f2605e3af58 R14: 00007f2605e3b000 R15: 0000000000000000
[  446.654293][   T35]  </TASK>
[  446.655166][   T35] INFO: task syz.1.2739:15862 blocked for more than 143 seconds.
[  446.658237][   T35]       Not tainted syzkaller #0
[  446.659932][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  446.662740][   T35] task:syz.1.2739      state:D stack:27320 pid:15862 tgid:15861 ppid:5816   task_flags:0x400140 flags:0x00080002
[  446.666333][   T35] Call Trace:
[  446.667407][   T35]  <TASK>
[  446.668625][   T35]  __schedule+0x14ef/0x4fb0
[  446.670086][   T35]  ? __pfx___schedule+0x10/0x10
[  446.671617][   T35]  ? schedule+0x90/0x360
[  446.672963][   T35]  schedule+0x164/0x360
[  446.674425][   T35]  schedule_preempt_disabled+0x13/0x30
[  446.676406][   T35]  __mutex_lock+0x7fe/0x1300
[  446.678300][   T35]  ? __mutex_lock+0x5ac/0x1300
[  446.680104][   T35]  ? genl_rcv_msg+0x10b/0x7a0
[  446.681600][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  446.683139][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  446.684573][   T35]  ? __pfx_stack_trace_save+0x10/0x10
[  446.686479][   T35]  ? radix_tree_lookup+0x240/0x290
[  446.688821][   T35]  genl_rcv_msg+0x10b/0x7a0
[  446.690530][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  446.692340][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  446.694167][   T35]  netlink_rcv_skb+0x232/0x4b0
[  446.695896][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  446.697702][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  446.699879][   T35]  ? genl_rcv+0x19/0x40
[  446.701430][   T35]  ? down_read+0x272/0x2e0
[  446.703026][   T35]  ? genl_rcv+0xd/0x40
[  446.704520][   T35]  genl_rcv+0x28/0x40
[  446.705949][   T35]  netlink_unicast+0x80f/0x9b0
[  446.707686][   T35]  ? __pfx_netlink_unicast+0x10/0x10
[  446.709850][   T35]  ? __alloc_skb+0x193/0x390
[  446.711556][   T35]  ? netlink_sendmsg+0x650/0xb40
[  446.713318][   T35]  ? skb_put+0x11b/0x210
[  446.714899][   T35]  netlink_sendmsg+0x813/0xb40
[  446.716640][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  446.718864][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  446.720658][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  446.722604][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  446.724491][   T35]  __sock_sendmsg+0x21c/0x270
[  446.726162][   T35]  __sys_sendto+0x3c0/0x550
[  446.728089][   T35]  ? __pfx___sys_sendto+0x10/0x10
[  446.729925][   T35]  ? exc_page_fault+0x6a/0xc0
[  446.731615][   T35]  ? do_user_addr_fault+0xc7c/0x1360
[  446.733482][   T35]  __x64_sys_sendto+0xde/0x100
[  446.735111][   T35]  do_syscall_64+0xe2/0xf80
[  446.736705][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.739097][   T35]  ? trace_irq_disable+0x37/0x100
[  446.740913][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.743034][   T35] RIP: 0033:0x7fbd2155b58e
[  446.744932][   T35] RSP: 002b:00007fbd22440e28 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  446.747774][   T35] RAX: ffffffffffffffda RBX: 00007fbd224426c0 RCX: 00007fbd2155b58e
[  446.751050][   T35] RDX: 0000000000000020 RSI: 00007fbd22440fe0 RDI: 0000000000000049
[  446.753513][   T35] RBP: 0000000000000000 R08: 00007fbd22440ea4 R09: 000000000000000c
[  446.756388][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000049
[  446.760248][   T35] R13: 00007fbd22440ef8 R14: 00007fbd22440fe0 R15: 0000000000000000
[  446.763161][   T35]  </TASK>
[  446.764277][   T35] 
[  446.764277][   T35] Showing all locks held in the system:
[  446.766638][   T35] 1 lock held by khungtaskd/35:
[  446.768408][   T35]  #0: ffffffff8e35a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  446.771587][   T35] 2 locks held by getty/5637:
[  446.773030][   T35]  #0: ffff888174aca0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  446.776007][   T35]  #1: ffffc9000357b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  446.779572][   T35] 1 lock held by udevd/5822:
[  446.781014][   T35]  #0: ffff88816ac66358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  446.784080][   T35] 1 lock held by udevd/8444:
[  446.785601][   T35]  #0: ffff88810aa13358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  446.788502][   T35] 6 locks held by syz.0.2734/15848:
[  446.790080][   T35]  #0: ffffffff8f817d90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  446.792466][   T35]  #1: ffffffff8f817ba8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  446.795497][   T35]  #2: ffff88810aa07278 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x38e/0x1a70
[  446.799030][   T35]  #3: ffff88816aba5c88 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x2ba/0x6d0
[  446.801750][   T35]  #4: ffff88816aba5628 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  446.805297][   T35]  #5: ffff88816aba5660 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  446.809430][   T35] 2 locks held by syz.0.2734/15849:
[  446.810973][   T35]  #0: ffffffff8f817d90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  446.813434][   T35]  #1: ffffffff8f817ba8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  446.816562][   T35] 2 locks held by syz.2.2737/15855:
[  446.818708][   T35]  #0: ffffffff8f817d90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  446.821810][   T35]  #1: ffffffff8f817ba8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  446.825128][   T35] 2 locks held by syz.1.2739/15862:
[  446.827077][   T35]  #0: ffffffff8f817d90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  446.830311][   T35]  #1: ffffffff8f817ba8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  446.833643][   T35] 2 locks held by syz-executor/15871:
[  446.835680][   T35]  #0: ffffffff8f817d90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  446.839099][   T35]  #1: ffffffff8f817ba8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  446.842404][   T35] 2 locks held by syz-executor/15873:
[  446.844421][   T35]  #0: ffffffff8f817d90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  446.847371][   T35]  #1: ffffffff8f817ba8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  446.851098][   T35] 2 locks held by syz-executor/15874:
[  446.853124][   T35]  #0: ffffffff8f817d90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  446.856195][   T35]  #1: ffffffff8f817ba8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  446.859684][   T35] 2 locks held by syz-executor/15900:
[  446.861548][   T35]  #0: ffffffff8f817d90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  446.864091][   T35]  #1: ffffffff8f817ba8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  446.866919][   T35] 2 locks held by syz-executor/15910:
[  446.869145][   T35]  #0: ffffffff8f817d90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  446.871499][   T35]  #1: ffffffff8f817ba8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  446.874237][   T35] 2 locks held by syz-executor/15912:
[  446.876305][   T35]  #0: ffffffff8f817d90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  446.879002][   T35]  #1: ffffffff8f817ba8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  446.881789][   T35] 2 locks held by syz-executor/15927:
[  446.883364][   T35]  #0: ffffffff8f817d90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  446.885728][   T35]  #1: ffffffff8f817ba8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  446.888556][   T35] 2 locks held by syz-executor/15937:
[  446.890101][   T35]  #0: ffffffff8f817d90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  446.892415][   T35]  #1: ffffffff8f817ba8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  446.894960][   T35] 2 locks held by syz-executor/15939:
[  446.896546][   T35]  #0: ffffffff8f817d90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  446.899161][   T35]  #1: ffffffff8f817ba8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  446.901765][   T35] 
[  446.902458][   T35] =============================================
[  446.902458][   T35] 
[  446.904824][   T35] NMI backtrace for cpu 1
[  446.904834][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  446.904843][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  446.904849][   T35] Call Trace:
[  446.904855][   T35]  <TASK>
[  446.904859][   T35]  dump_stack_lvl+0xe8/0x150
[  446.904877][   T35]  nmi_cpu_backtrace+0x274/0x2d0
[  446.904888][   T35]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  446.904898][   T35]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  446.904908][   T35]  sys_info+0x135/0x170
[  446.904916][   T35]  watchdog+0xf90/0xfe0
[  446.904931][   T35]  ? watchdog+0x209/0xfe0
[  446.904944][   T35]  kthread+0x726/0x8b0
[  446.904957][   T35]  ? __pfx_watchdog+0x10/0x10
[  446.904967][   T35]  ? __pfx_kthread+0x10/0x10
[  446.904978][   T35]  ? _raw_spin_unlock_irq+0x23/0x50
[  446.904989][   T35]  ? __pfx_kthread+0x10/0x10
[  446.904999][   T35]  ret_from_fork+0x51b/0xa40
[  446.905009][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  446.905016][   T35]  ? __switch_to+0xc82/0x1410
[  446.905030][   T35]  ? __pfx_kthread+0x10/0x10
[  446.905040][   T35]  ret_from_fork_asm+0x1a/0x30
[  446.905057][   T35]  </TASK>
[  446.905060][   T35] Sending NMI from CPU 1 to CPUs 0:
[  446.941220][    C0] NMI backtrace for cpu 0
[  446.941243][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  446.941258][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  446.941268][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  446.941295][    C0] Code: 08 5f 02 e9 d3 e5 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 97 10 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  446.941308][    C0] RSP: 0018:ffffffff8e007dc0 EFLAGS: 00000206
[  446.941322][    C0] RAX: 00000000002aad4b RBX: ffffffff8198427d RCX: 0000000080000001
[  446.941385][    C0] RDX: 0000000000000001 RSI: ffffffff8dacffe0 RDI: ffffffff8be73900
[  446.941395][    C0] RBP: ffffffff8e007eb0 R08: ffff8881210336db R09: 1ffff110242066db
[  446.941405][    C0] R10: dffffc0000000000 R11: ffffed10242066dc R12: ffffffff8fceef70
[  446.941415][    C0] R13: 1ffffffff1c12a78 R14: 0000000000000000 R15: 0000000000000000
[  446.941424][    C0] FS:  0000000000000000(0000) GS:ffff88818e326000(0000) knlGS:0000000000000000
[  446.941435][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  446.941444][    C0] CR2: 000055d25c937de0 CR3: 000000017512a000 CR4: 00000000000006f0
[  446.941476][    C0] Call Trace:
[  446.941484][    C0]  <TASK>
[  446.941490][    C0]  default_idle+0x9/0x20
[  446.941502][    C0]  default_idle_call+0x72/0xb0
[  446.941516][    C0]  do_idle+0x1bd/0x500
[  446.941528][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  446.941545][    C0]  ? __pfx_do_idle+0x10/0x10
[  446.941560][    C0]  cpu_startup_entry+0x43/0x60
[  446.941571][    C0]  rest_init+0x2de/0x300
[  446.941584][    C0]  start_kernel+0x380/0x3d0
[  446.941600][    C0]  x86_64_start_reservations+0x24/0x30
[  446.941623][    C0]  x86_64_start_kernel+0x143/0x1c0
[  446.941637][    C0]  common_startup_64+0x13e/0x147
[  446.941661][    C0]  </TASK>
[  446.997652][   T35] Kernel panic - not syncing: hung_task: blocked tasks
[  446.999631][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  447.002174][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  447.005130][   T35] Call Trace:
[  447.006111][   T35]  <TASK>
[  447.006994][   T35]  vpanic+0x1e0/0x670
[  447.008173][   T35]  panic+0xc5/0xd0
[  447.009276][   T35]  ? __pfx_panic+0x10/0x10
[  447.010593][   T35]  ? preempt_schedule_thunk+0x16/0x30
[  447.012144][   T35]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  447.013925][   T35]  watchdog+0xfda/0xfe0
[  447.015145][   T35]  ? watchdog+0x209/0xfe0
[  447.016448][   T35]  kthread+0x726/0x8b0
[  447.017644][   T35]  ? __pfx_watchdog+0x10/0x10
[  447.019005][   T35]  ? __pfx_kthread+0x10/0x10
[  447.020390][   T35]  ? _raw_spin_unlock_irq+0x23/0x50
[  447.021895][   T35]  ? __pfx_kthread+0x10/0x10
[  447.023193][   T35]  ret_from_fork+0x51b/0xa40
[  447.024528][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  447.026013][   T35]  ? __switch_to+0xc82/0x1410
[  447.027405][   T35]  ? __pfx_kthread+0x10/0x10
[  447.028749][   T35]  ret_from_fork_asm+0x1a/0x30
[  447.030199][   T35]  </TASK>
[  447.031770][   T35] Kernel Offset: disabled
[  447.033045][   T35] Rebooting in 86400 seconds..
