last executing test programs:

18.117560841s ago: executing program 2 (id=3904):
socket$netlink(0x10, 0x3, 0xe)
socket$isdn_base(0x22, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xca, 0x4)
r1 = socket$inet6(0xa, 0x1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r2, 0x29, 0x33, 0x0, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @remote, 0x3}, 0x1c)
r3 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
getsockopt(r3, 0x0, 0x49fa, &(0x7f0000000100)=""/100, &(0x7f0000000200)=0x64)
connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$MRT_ASSERT(r3, 0x0, 0xcf, &(0x7f0000000040)=0x1, 0x4)
ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000040)={0x43, "6a05342d09112d88bf509c120eabf525906b980d36315888dc015b8594a3653b413c11f755df11c4ce1fe4e0383aa4a7867cc1af0582e1b3b3a8addb4a40f5f7e390242d67c2ab9bf753ce46a1f69d720aa5d45d2bac63b1917acb2383dfeaa0e3c6dd93058d3d14d2f4083b4d5c15fbdcb8dfb6b8e5832aa811d090d16f1cab"})
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004840)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="3107000000fffa0400003800000008000100"], 0x38}, 0x1, 0x2, 0x0, 0x20040080}, 0x800)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000002000010031bd7000000000000a008000ff0000020600010014000200fc01000000000000000000000000000014000200fe800000001f"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4)
recvmmsg(r4, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x4000009}], 0x1, 0x2040, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x4000}, 0x0)

17.29710905s ago: executing program 2 (id=3910):
syz_emit_ethernet(0x4b4, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/1201], 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x800)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000000000000000000000010000850000002100000000020000000000000100000000da"], 0x0, 0x52, 0x0, 0x1}, 0x28)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)

17.165888312s ago: executing program 2 (id=3913):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000006c0)="b3", 0x1}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x4e24, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x42a}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000700)="98", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x35}, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000340)="2f63954f55", 0x5}], 0x1}}], 0x3, 0x44)
r1 = socket(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000440)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x7}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x7ff}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x2}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0xfffffffc}]}}]}, 0x50}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_freezer_state(r4, &(0x7f00000000c0), 0x2, 0x0)
r6 = openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000180), 0x12)
write$cgroup_freezer_state(r5, &(0x7f0000000200)='THAWED\x00', 0x7)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e22, @private=0xa010102}], 0x10)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r8, 0x84, 0xc, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @private=0xa010102}}, 0x9, 0x401}, &(0x7f0000000280)=0x90)
r9 = socket$alg(0x26, 0x5, 0x0)
pipe(&(0x7f0000000380)={<r10=>0xffffffffffffffff})
write$cgroup_int(r10, &(0x7f00000003c0)=0x7, 0x12)
bind$alg(r9, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0)
r11 = accept4(r9, 0x0, 0x0, 0x800)
recvfrom(r11, &(0x7f00000023c0)=""/231, 0xe7, 0x20, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xfffff01c}, {0x6, 0x0, 0x3, 0x9e46}]}, 0x10)
ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000800)="f7bf7367984068f91ed61f1ab628707a5f5dfa577a1df9e3629383e8026444a664ed6dcdf6cd74b66cb7972f7fe963569c318058598f774eb45ac875e7922877ece034cd93c9efba4414651e830dddb6e255eb260aa628ae97d363c3e8014b236ae51d7a6a9e854b51f68b0f150d7f5c014138f4b3678a8ec20db77c068f604ffa93b55b3fcf3441b92a1511fe2cab7f6f41262f3e17f8d81f3178e1a25cbc4afd029d0402830616d22a526f1d05e31476d936522392d8bb260c33f0a84204dcb347b96f22431e8a49497daa66149e4cfcadb43be1d977b387805b312f9f277c9903387af578cdf1b68d3ec1d16eba97ea33750a52f982348c3169a8a7f77aa2dacf907586ed4c0591ba0a4ead576fcb5da00b9650ea288a5aa4e14aec90c69c8fa960801970d7d3f75776fa2d77cde191e9db2efa9af7fdb1bd3839ed9c617b2f9978987ba7cc0a0931698056e8e119cd6b5a28172567e7519ce64192b5e42a3609ede54a4f4a28781e1d635d5a7086bd2421a53127ad69ba3a2c59de7c5293f0368fda43816b40de835e3444587d78ba8f1cad3188bb42e15ea906cfdba7d5f1dfdc19f86170bb77721d45379679b716df9d52df90e4f3a3be44f29bdd592c2cfb90fe40b062e3b974e33570de18002fa7c8208f1852afa2298b1db04be596d69b722792563a4cd0e010e9b90f25af6bf3dd9d6f22a39c1ef7972f045443afc70894275266cdbb40f636d16f607dd0de822d77873f0ae1bf0b46698753ea7f2e1f706945d8775011cef4ad0b991108bcaf54ffbfed18da735abd243e5e517a3a6ecddb3d523d45f508b1cf0bd31467d7c221165aa5c3ec3fc970e0e57352d9d940d2f2687f1e86bd71b69c6902304388316167024433acbcfc0720c7a100d4732bf21873a5dd19215269ab4241d3eec5718ee969bacf209ba7f845c66dd06a58ee5daf7720420056477c2d13ad918a2add05e6c02110078fda35054683bae39c345907f065db36ea2fce5aff1a3a5b6d64f04365cb3e25f170f0eac5d02e1393e40208f0c3590bdab83a8a4a5cca55d8fdcbb13e8a2e597d48c2b245755923b208f8df21763976c67066b435e768b988fd5bb7ba2b22f3c774e7de13733d301798f14fbaa5c9532b3cb5ad7d259fe62de25a5242bc8bfed16cff234d3215aa0bf42a4a778ddfce68b21b8e92f8f53cadb0791fd4bf87ca775eb059c68675ef366738a804a6aa54a64a181d38553fb079e4d723dc900a792a9ebba22d309ec0ece8b17ad8da172a0332f63497958291bd4f59ecb26aa38fd7598b5748a3bd03873d0a0a9036c4d95104274f2da7879dd5b21774d5de08949c3c880ee3f8d8c89318c24f360a4a8925ac3d9360b7097708beda8a2e9ecf96701688acd752ad2a91fd3f33c4d00c1da94fa534434249e8a2b0923490ab053b6983bf0a65f131bc34b417c412af46a5cc9b8ef949bf2c70034f5ad8700669dd340b6302928f1495b419fb9b681d0fdc68aba957bd2c746cd8e0b880670d556c7db75a65f863bc76829f0aeca87c085cdfe155b83273e2809ee992996c1a29fdc5ffe11fe3d5a7bd4541d8cb86a27bc8c0ae3020b94356547163debfe70e886960ecb39f7122d46dcfea4d1cfb54e11b481e4cc73b3e395b6f40e77168f1b48b85c0563593e90fbd008b2a963ff0b098988828972a5c0b94c5a95464af542204a2c1e50dc3808060dea8a580f3f465c60552d9f210133b60faf47fc59469b706852ccd0535608b7da3fad64d300cb8f0e8dac2cbeeaa40729b20e6a9ee94f0a7c4a2956ba213ada1d7ff5f0955d3ac5c82e6b1d3b8f77b5c99399ad7e522b6d58001a1d47d03a2c9a55c564b3d4b3c530c0365631cccea81f9a55c6167a642004d58966e28eb3f0851dbe9a944c0182f24b742a4c2c2b994734e504977d7d686a4a1949b2e8c96948896c9b30fa691f06e2cb317074b8f30bba0f992f6a996433ca78c4393f6746eec63b39965b062b3a6159931c5100901502a3c8fd98753b287474299fa50e9444f9a8a5ffe48bf1d3ea04fe82d8926bd6e79abff56c7ba27f748e1ef1d9f4c41fcfe51580a5aa8c84fbbdf1d620231f945b6cb8210fe6d8f65c1f40623afd32849ab6f579fac94bb397c61649bb8f249cdfde789b8d39c8f4974310a6eabaec8b0a52a77dfb36e42acecf1c31329b18254ee7435e85d6848990bf494cb91c00f745b89d1e230abdc82be95018b867bab877fe684ea0ce2ac6995b03cb5c9f77b7f38d8213273c3eb50f28ddab171d4e2b8e30f7a544afb82b3e4c2a795f37fee488a1263f8bd7da221329bdd5a5bfd99e3e36f39b97883c5fbd12e46a61be04449b63c61af0685feeee5ff4a7008634d4ea5e41aa6ba1ddf6b007b919581878ba05a17e40ce2e33294dd00750cdcd1872ee133f7792846851c20c032bed4476bfe464531a2d28f7ad527699b3374f3bda5dbbd396792c408b5025a503f367001e392d3c7d7f219b5aeb18830445c0a4368301cd8485437197b8fb1f54dab75f3d4f7942679686c3417720b5c667a407472040adacb02b7100491f9b5439489902bfa6e67294d236d9b72fd05a806f2ba04f4211d3b993631094fc3ca6217031fa55dcd1790a2fcca872b609ee7f63c929c66e2c6b6231b888de55d2fee5e12abe118ed644d00a67e6865b77b9f114f1828e362f885ae93fda3c30718e1fd24a2f6392fac84f6cc90c961344b12909ddae9a618a408f206d25785542736b010b528374e28dbbfea4297ada43d544f15fadaf1a38ebbe26888d429782f01a3705a1ef795429e0a19b4b2d037c87e4d05020cf8d93cdb3815cc22626bfc92a8e2df21587422e9ca466b1e4f3420614838c02b1f22ac4e2aa5a1fdf04a82812ea159ddf38f1b20087176bacb78de7f7368e36c7ff7ebee338f647df96129fbb2bb3c72c45c143574ca06cce4ae5cb8748dce46f67c7f6597dc882f8f7921b47c2e3b66734cc0c9cf5470ad6bb45f825560d01c8ce786ea2d32463eb935cf4a96bfec38c6ddc1792465c7747fa87158a0e1679a554dd5c2b64940895df9830c5f20c474b2b44428318b16bb38c4939e5da8ac22ddbd1ab966a235257a9eea14090c1d13c1c84a17cbde56c4e46005980a92c89838b1a373d7419e265a543a30d33d5e85ec549b4c38848abb6f07d28aff3d533d8d304fbb21d01586e116dde35f914eb949598842603604b222acdc04f5f5308505731bdd07a9b16b99e1caa1e8d4d91a43042f8e315d3a7efe66575f53b5cf3b11eb0944668e8d967afe37b3c6df672ab2b199bd7dae658ce694959def70611830fdc4a7f97d80092634ed93287671611abd53717f4d8b3ab8c0be7dbfc0976b834c941501e8d0005f61020af84835c8b0b360ee57614ab84a159c498b0a31f142a0a9c331356a586e35ec05e2300c6108bd7722e624e4b38762a28afe1924b895cfefde5f6294667f0327aaa27c4d0af0f44ebcb6312a61861985e1519ca883f5887f6d32546b3c22144e64abb573e1869dffa31a55aa03ded5f44c80ec6541e8e5da4ae035284dc287e9cfaea1338d6d3ab54587b29a76bb2c286d81397bf5d1ed617b49328d890649e28c15ab1e68d32e4edbc749415e10d63519b6e3aecabed1bf11f7b93163f62e68fbcfadd4c6d15489145d1b415ecd427c85b8c8eb5f03ee8cd1d24ad1c7f8e2263d80cf92b98c52e78fed649bcf3d479536cbe8a19184c70b7e17204b7b853a42ec1f199e8bfb9e6c9d8677a39c783ee07673dcb5b5c09ba1947ebbde431a74104f05c77df54e57d61d8e38014e06caed6193b07702dd88230eff6e53742ca8171eb93a8098045699bf32cf10001bde867c0b7398daf176df7beffc70e39756631ba03ed56f61b702a3d3f9c9ebe4936dee45124fc92e5b5fb5ed5adf07fd61e2536c456017f62c0d0bd5f6f16112562546785ac4114b87f31be8bdd71414a541327a9e4d3cbd1b042d599ff772e90ce2ed1ede43561a77a1251d666f9bb34b07095615689b1f5a1ef8968174a06ac9b8673823ea61f6200fabe572a12374ab26dc16078134b98c30ed08d6fcf374d4e71c32b054972ca82fee389ed034b107e87d0ba403e496b3563ddb519e49e1dc9a95a2ee54af7705e3d32c140e1d9ab0f2a656da0667675a581f42e447c4d7af11ffc066dfadf312fecf9a0f412882f45d16d7051291c031faa35b8aa90b34ea26d7de50a503e4996b9ba803d070611de97ec5413b498d516536dd39b5bbf8349fee26d22f180f0a7b33d93d523820d1994f1f51745887a57e45d9d10d666aa0ebe16d91fdf6e7e60a6d6e6a5c70643900c8c2c565b4059944aa4d121e5e2d9a8793ce222242c53c893782c5dc1a8738708da292bfc9f31a1abb7bc7694e71a79788f5bc565080f9a4fe2ebfcf3728539867096cb0589cab65975d80e95c4f9d18a81691fc53221b0779209660023d5660fdc7501928c67a83f7377afde00be7219f61ba6fc2b655c54df70db4957749d7694276b42503011a40ee6e72dc601735aa6f42390a56f42c2b6914ab40a7feec91ce52206c00daa1eb3436df7f6f182a29fe79979659ccaf11c3a6062e4676d745f07cdca1a25137f2134b9f49ae41945c5b7af6fce42ee6e4f2bb7ccf2f0984a5b6a4c87d6fe6270a6cda8b58020e322c00965452e0aab47eb42d453a0f82bea41bed29024d81a53d3d7e6a774febb60c3b5ba0562be51533a7bdf6b6b491b627d2a49183f9c8e05c314cb1c1aef526b5a0f25bee2553d008165acf67af53fb04cd56d44c7d8e057af41f20e18d4d9a10c2cd7dfbdf8fc74e543594fe0291cf924663ceba6f2649601917094a0f1f437fdb0ba7349f67a0a05da715b12c13f078b4c9558f1cd44e5bcf6cae1f5e30b1108d2dd8ab4613acffb39091e78787f34cb2f177f39687e1340165071f148f1a1f4223ea4c1530c8da8a046b9087579636ce025e2d49af0a8b6262f0e80ae00c7933452c54a785246406216939f9a0e8ea3662e25e563d4d28c83a80547f4009440b9651bb906db5c219ad030e4c6024093112281483db4d0f095d397a2436599df5c1f00d9cb81c4d400deecc9538697b4d77a42da8911bf36c5c78efea5480ddf901bca18d74fbb99a8384d19247444507154ae294a398aad923c139079a346995cb4dbb3288fc73e45190851a8e155dd627828395243a15617394c29889259eb568a594f6f85ecb26f63290827face6119bd59b4eba231c68c7f58758c39ce6340b1ad688c0d27c1a9ea3d673f797ba7c3d857456acab0a7f9cede184a02f09deae44990e9d0001cb61684576758ce16f5c4bb0c79927005488e57777a8f7f7f03dc514830ffc019817f76832e24a4ef0e86b3055c1c613d279fec9512e4b582c706c38528268b63d747a27526bd2d8972c0351953259eaf9f82d722777892383c9a881e133ec11b60f8c7ff1fc7c491ad262935ed3ab3098e0569d0e2995c5f64473895c8e750eaee82ca8f86ef93781c27f2b87b57e689325dc86e0c57445dc5b672b8d48224dd71e5dd1bbc63f4f56bece9a3dd8c539f24fc9df70d09a51b8767dad68ab57e1d2572a48544fb1f74247ec9f5cd6558f17d7b7e085a9354dd96d89faee1fc23977372ea4da54c86a3d085798658d3bc79c3b8031230d085a87fa3865041efa003f149bef725433766dad68b4bf58fe1a19d4ac7764baf468ed1790ea18683985a76a39128a6720abc146cce1e9d16acc6d46375699e3f3d77bc893b14401c179a463618550447bfe49a364")
setsockopt$packet_buf(r1, 0x107, 0x1, &(0x7f0000000300)="d51c598f8e87df8687ee59da65f42c2ace2c4109f04282d4f4301d61b14714d4380b6a0467c6b885553ca75de711b81c95b9798c5e38a6921063c2d05dae878d28867350ccc0ad80411f20ab9f3fd4a803a06265ad4330daac59dde3ff0e57a24e", 0x61)

17.163482264s ago: executing program 1 (id=3915):
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000002000000180c0000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000005609010000000000bfffffffffffffff18010000696c6c2500000000002020207b1af8ff00000000bda100000000000037010000f8ffffffb702000008000000b70300004000000025000000060000009c23000000000000b5030000010000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

17.094997628s ago: executing program 1 (id=3917):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d00)={0x14, 0x14, 0x1, 0x70bd2d, 0x0, "", [@generic='\t']}, 0x14}], 0x1}, 0x0) (async)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan1\x00', {0x2, 0x0, @multicast2}}) (async)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0xbbf19000) (async)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20)
r2 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000635776307ad18f878f5acbf1f2be22000000000c0000000c000000020000000000000000000004000000000000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x10000, @value=r2}, 0x28) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000ea1ffffffdffffe50100"], &(0x7f0000000180)='syzkaller\x00', 0x5, 0xea, &(0x7f00000005c0)=""/234, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x9, 0xfffffffc}, 0x10}, 0x94) (async)
close(0x4) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bind$inet(0xffffffffffffffff, 0x0, 0x0) (async)
connect$inet(0xffffffffffffffff, 0x0, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket(0x10, 0x80003, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "00000000000b0400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) (async)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r10=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x34, r8, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x10}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x84) (async)
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)

17.094444758s ago: executing program 1 (id=3918):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000000)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000280)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90)
r5 = socket(0xa, 0x3, 0x87)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_HANDLE(r7, 0x113, 0x3, 0x0, &(0x7f0000000a00))
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'lo\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000480)={@private2, 0x18, r8})
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x2e, 0x1000, 0x4}, 0x9c)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000540)=0xd172, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r9, &(0x7f0000000140)="41000200010001", 0x7)
socket$vsock_stream(0x28, 0x1, 0x0)

17.035595582s ago: executing program 1 (id=3920):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async)
unshare(0x6a040000)
r0 = socket$kcm(0x10, 0x2, 0x4) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="9f0e000000000000000000002400000024000000ccffffff08000032fa00000ffbffffff0e00000000000001030000002700000003000000fbffffff00000000000000612e00"], 0x0, 0x46, 0x0, 0x6}, 0x28) (async)
setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0x3, 0x8, 0x9bc6, 0x8, 0x4, 0x7fffffff], 0x1, 0x0, 0x0, [{}]}, 0x88) (async)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r2, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000340)={0x0, 0xff, 0xc, 0x5, 0xf, 0x9, 0x8, 0x3, {0x0, @in={{0x2, 0x4e24, @local}}, 0x7, 0xe, 0x7, 0x10001, 0xbf}}, &(0x7f00000001c0)=0xb0) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000000)={0x0, @aes256, 0x0, @desc1}) (async)
shutdown(r4, 0x0)
sendto$inet6(r4, 0x0, 0xfffffffffffffd2a, 0x20008045, &(0x7f0000000040)={0xa, 0x2, 0x1000, @private0, 0xfffffff7}, 0x1c) (async)
listen(r3, 0x39e) (async)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000900)=[@in6={0xa, 0x4e23, 0x3f, @remote, 0x5}], 0x1c) (async)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000200), 0x4) (async)
listen(r5, 0xfff)
accept4(r5, &(0x7f0000000240)=@x25, 0x0, 0x800) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3e7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00121000a6400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)

16.897594284s ago: executing program 1 (id=3921):
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x31)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x0)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000bc0))
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000037c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x301, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x50}}, 0x0)
sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)={0x24, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x24}}, 0x0)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0xf0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x7800, 0x40, 0xffffffff, 0x90d, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x64, 0x0, 0x1, 0x4, 0x0, @multicast1, @multicast2}}}})
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x2d, &(0x7f0000000000)=0xfffffffd, 0x4)
sendmsg$kcm(r2, 0x0, 0x40080)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r8, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
recvmmsg(r8, 0x0, 0x0, 0x40000001, 0x0)
setsockopt$sock_int(r8, 0x1, 0x2a, 0x0, 0x0)
sendto$inet6(r8, 0x0, 0x0, 0x2000, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0)
socket(0x10, 0x803, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r9)

16.897007007s ago: executing program 0 (id=3922):
socket$xdp(0x2c, 0x3, 0x0) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
socket$l2tp6(0xa, 0x2, 0x73)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0900000005000000fd09000084"], 0x48) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
socket$inet(0x2, 0x1, 0x9)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000003300)={'syzkaller1\x00', {0x2, 0x0, @broadcast}})
sendmsg$nl_route(r2, 0x0, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28)
pipe(&(0x7f0000000180)) (async, rerun: 32)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') (async, rerun: 32)
unshare(0xc020680) (async)
r5 = socket(0x10, 0x3, 0x0)
write(r5, &(0x7f0000000140)="240000005a001f001007f4d655c63589ce9e04020800038005000000ffc8bbb86ec81ffd", 0x24)
accept4(r1, 0x0, 0x0, 0x800) (async)
socket$nl_route(0x10, 0x3, 0x0)

16.79728926s ago: executing program 0 (id=3923):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x4}}, 0x2e)
syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x20001, 0x9684}}, 0x20}, 0x1, 0x0, 0x0, 0x20000050}, 0x2000c006)

16.707310997s ago: executing program 0 (id=3924):
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000002000000180c0000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000005609010000000000271800000000000018010000696c6c2500000000002020207b1af8ff00000000bda100000000000037010000f8ffffffb702000008000000b70300004000000025000000060000009c23000000000000b5030000010000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

16.645843601s ago: executing program 0 (id=3925):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000240)={{0x2, 0x4e22, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x4e20, @empty}, 'lo\x00'})
r1 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0x0, 0x77a, [0x7, 0x1, 0x80000001, 0x3, 0x1, 0x9, 0x101, 0x8, 0x94ee, 0x5]}})
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000000), 0x4)
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040), 0x10)
listen(r2, 0x0)
r3 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r3, &(0x7f0000000080), 0x10)
sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
r4 = accept4$unix(r2, 0x0, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
recvfrom$unix(r4, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x8, {0x2, 0x3, @empty}, 'team_slave_0\x00'})

16.641797037s ago: executing program 0 (id=3926):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x810, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
epoll_create1(0x80000)
sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000380)}, {0x0}], 0x2}}], 0x1, 0x20040005)

16.29431065s ago: executing program 2 (id=3927):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x8, 0x3, 0x0, 0x1}, 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r1}, 0x20)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000140)=""/118, &(0x7f0000000080)=0x76)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e22, 0x954, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x8, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x28}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x8, 0x3, 0x0, 0x1}, 0x50) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r1}, 0x20) (async)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000140)=""/118, &(0x7f0000000080)=0x76) (async)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e22, 0x954, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x8, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x28}, 0x0) (async)

16.293515299s ago: executing program 2 (id=3928):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
close(0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x80800)
setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
write$cgroup_int(r3, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x6})
r6 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f0000000080)={{0x2, 0x4e20, @loopback}, {0x0, @random="32b2c9c6645a"}, 0x2f, {0x2, 0x4e24, @empty}, 'veth1_macvtap\x00'})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000)

16.037025411s ago: executing program 1 (id=3929):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f8000000", @ANYBLOB="14fa8506b7558e4f5849a6bbc2b1086384c2f9e52f9931a8ec50438c0c79d66e9b62453c3f63780a8e38e40ede19651605e19195359089777299072e0c9b24ba53f5b6f3ae2552b55914b750fa036d412682bdac896a5c490fdaca6a50ae9965397d28d45b7c1ed2e96f9adf81068b799ec3299c891e09000000f422c55e19d19f27ca48202753b5", @ANYBLOB="010000400000000300003900000008000300", @ANYRES32=r3, @ANYBLOB="dc005a80d800018005000600020000e604000700"], 0xf8}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0})
r5 = socket$inet(0x2, 0x3, 0x1)
sendmsg$inet(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0xffe3}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="30000000000000000000000007000000890704ac1414aa0011000000000000000000000001"], 0x30}, 0x0)
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2e3d, 0x1d}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4d}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x450c0}, 0x20000000)
sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r2, 0x13, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}}, 0x20048000)
r6 = socket$inet(0x2, 0x3, 0x5)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000680), 0xffffffffffffffff)
r9 = accept4(r6, 0x0, &(0x7f0000000080), 0x80000)
sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000100)={0x80, r8, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7316}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000000}, 0x40800)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c80000002e00090027bd7000000000001b000000bde0fd43abc4563d8196898e3ce94e1640c94a75a8b27a47ce0db47e75fa969a8923b0b405484d8b45364cde5e2da1ebd172b83e31b69c95647cf0063e1444b0c64b7b2f1c175e67080ed249f86a032a7cf9a403ecc1f79273fb0c20ed2c32d73c23d4eed6cc2fd29aac9fec5e190344c511c3cef18a38ad3fa0045a5704017a5e4f52414bed368a7c2cd49627ed05da49bc8a7dedbaad876b2d2f60554c109369ad277bae37fd5dd0f2c7580d04001e000000"], 0xc8}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

15.727672466s ago: executing program 0 (id=3930):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r0)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="110029bd7000fbdbdf252400000045f5b24578bfa22e689f839430563a7f6c1655320ae25d475e323de7763721428fabf755f53400fc15f30e3de63b1c5bab6ff4dac696084189b0d12f5f98a75198bbe97f"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0xc0) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid\x00') (async)
unshare(0x6a040000) (async, rerun: 32)
socket$kcm(0x10, 0x2, 0x4) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0x2001, 0x0, 0x3, 0x8, 0x4, 0x8], 0x1238, 0x0}, 0x78) (async)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r3, 0x0) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000340)={0x0, 0xff, 0xc, 0x5, 0xf, 0x9, 0x8, 0x3, {0x0, @in={{0x2, 0x4e24, @local}}, 0x7, 0xe, 0x7, 0x10001, 0xbf}}, &(0x7f00000001c0)=0xb0) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000000)={0x0, @aes256, 0x0, @desc1})
shutdown(r5, 0x1)
sendto$inet6(r5, 0x0, 0xfffffffffffffd2a, 0x20008045, &(0x7f0000000040)={0xa, 0x2, 0x1000, @private0, 0xfffffff7}, 0x1c) (async)
listen(r4, 0x39e) (async)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}], 0x1c) (async)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000000200), 0x4) (async, rerun: 32)
listen(r6, 0xfff) (async, rerun: 32)
accept4(r6, &(0x7f0000000240)=@x25, 0x0, 0x5aa5fdfbc275c843) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

15.357650826s ago: executing program 2 (id=3931):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) (async)
mmap(&(0x7f0000c61000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
select(0x40, &(0x7f0000000280)={0x5, 0x4, 0x845, 0x7, 0x9, 0x192, 0x4, 0x8}, &(0x7f0000001300)={0x2, 0x100000001, 0xd01, 0x2, 0x100000000, 0x9, 0xff, 0x8}, 0x0, &(0x7f0000001380)={0x0, 0x2710}) (async)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x10) (async)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)={0x50, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x3a, 0xa8, @random="ae6a1c4d9b02c565299f9c5f68bf1e69a4066a5702d24579ac00af98cc525cd63f21d505a0c9ee01734eaae95d122272801d7f905fba"}]}, 0x50}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113a00010000008510000002000000850000004b00000095000000000000009500a52200000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffe7d}, 0x70) (async)
socket$kcm(0x2, 0x200000000000001, 0x106) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000014) (async)
write$tun(0xffffffffffffffff, 0x0, 0x3e)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0xf)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r8, 0x89b1, &(0x7f0000000040)={'bond0\x00', 0x7fff}) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x3}], 0x1c)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102)

1.004910673s ago: executing program 32 (id=3929):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f8000000", @ANYBLOB="14fa8506b7558e4f5849a6bbc2b1086384c2f9e52f9931a8ec50438c0c79d66e9b62453c3f63780a8e38e40ede19651605e19195359089777299072e0c9b24ba53f5b6f3ae2552b55914b750fa036d412682bdac896a5c490fdaca6a50ae9965397d28d45b7c1ed2e96f9adf81068b799ec3299c891e09000000f422c55e19d19f27ca48202753b5", @ANYBLOB="010000400000000300003900000008000300", @ANYRES32=r3, @ANYBLOB="dc005a80d800018005000600020000e604000700"], 0xf8}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0})
r5 = socket$inet(0x2, 0x3, 0x1)
sendmsg$inet(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0xffe3}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="30000000000000000000000007000000890704ac1414aa0011000000000000000000000001"], 0x30}, 0x0)
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2e3d, 0x1d}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4d}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x450c0}, 0x20000000)
sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r2, 0x13, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}}, 0x20048000)
r6 = socket$inet(0x2, 0x3, 0x5)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000680), 0xffffffffffffffff)
r9 = accept4(r6, 0x0, &(0x7f0000000080), 0x80000)
sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000100)={0x80, r8, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7316}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000000}, 0x40800)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c80000002e00090027bd7000000000001b000000bde0fd43abc4563d8196898e3ce94e1640c94a75a8b27a47ce0db47e75fa969a8923b0b405484d8b45364cde5e2da1ebd172b83e31b69c95647cf0063e1444b0c64b7b2f1c175e67080ed249f86a032a7cf9a403ecc1f79273fb0c20ed2c32d73c23d4eed6cc2fd29aac9fec5e190344c511c3cef18a38ad3fa0045a5704017a5e4f52414bed368a7c2cd49627ed05da49bc8a7dedbaad876b2d2f60554c109369ad277bae37fd5dd0f2c7580d04001e000000"], 0xc8}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

17.502319ms ago: executing program 33 (id=3930):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r0)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="110029bd7000fbdbdf252400000045f5b24578bfa22e689f839430563a7f6c1655320ae25d475e323de7763721428fabf755f53400fc15f30e3de63b1c5bab6ff4dac696084189b0d12f5f98a75198bbe97f"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0xc0) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid\x00') (async)
unshare(0x6a040000) (async, rerun: 32)
socket$kcm(0x10, 0x2, 0x4) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0x2001, 0x0, 0x3, 0x8, 0x4, 0x8], 0x1238, 0x0}, 0x78) (async)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r3, 0x0) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000340)={0x0, 0xff, 0xc, 0x5, 0xf, 0x9, 0x8, 0x3, {0x0, @in={{0x2, 0x4e24, @local}}, 0x7, 0xe, 0x7, 0x10001, 0xbf}}, &(0x7f00000001c0)=0xb0) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000000)={0x0, @aes256, 0x0, @desc1})
shutdown(r5, 0x1)
sendto$inet6(r5, 0x0, 0xfffffffffffffd2a, 0x20008045, &(0x7f0000000040)={0xa, 0x2, 0x1000, @private0, 0xfffffff7}, 0x1c) (async)
listen(r4, 0x39e) (async)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}], 0x1c) (async)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000000200), 0x4) (async, rerun: 32)
listen(r6, 0xfff) (async, rerun: 32)
accept4(r6, &(0x7f0000000240)=@x25, 0x0, 0x5aa5fdfbc275c843) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

0s ago: executing program 34 (id=3931):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) (async)
mmap(&(0x7f0000c61000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
select(0x40, &(0x7f0000000280)={0x5, 0x4, 0x845, 0x7, 0x9, 0x192, 0x4, 0x8}, &(0x7f0000001300)={0x2, 0x100000001, 0xd01, 0x2, 0x100000000, 0x9, 0xff, 0x8}, 0x0, &(0x7f0000001380)={0x0, 0x2710}) (async)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x10) (async)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)={0x50, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x3a, 0xa8, @random="ae6a1c4d9b02c565299f9c5f68bf1e69a4066a5702d24579ac00af98cc525cd63f21d505a0c9ee01734eaae95d122272801d7f905fba"}]}, 0x50}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113a00010000008510000002000000850000004b00000095000000000000009500a52200000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffe7d}, 0x70) (async)
socket$kcm(0x2, 0x200000000000001, 0x106) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000014) (async)
write$tun(0xffffffffffffffff, 0x0, 0x3e)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0xf)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r8, 0x89b1, &(0x7f0000000040)={'bond0\x00', 0x7fff}) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x3}], 0x1c)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102)

kernel console output (not intermixed with test programs):

after parsing attributes in process `syz.1.2890'.
[  332.559080][T16405] syz.0.2886 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  332.562759][T16405] CPU: 0 UID: 0 PID: 16405 Comm: syz.0.2886 Not tainted syzkaller #0 PREEMPT(full) 
[  332.562771][T16405] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  332.562777][T16405] Call Trace:
[  332.562782][T16405]  <TASK>
[  332.562787][T16405]  dump_stack_lvl+0xe8/0x150
[  332.562805][T16405]  dump_header+0xd3/0x4c0
[  332.562815][T16405]  oom_kill_process+0x263/0x800
[  332.562825][T16405]  out_of_memory+0xe55/0x11f0
[  332.562839][T16405]  ? __pfx___mutex_lock+0x10/0x10
[  332.562855][T16405]  ? __pfx_out_of_memory+0x10/0x10
[  332.562871][T16405]  mem_cgroup_out_of_memory+0x158/0x270
[  332.562885][T16405]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  332.562900][T16405]  ? _raw_spin_unlock+0x28/0x50
[  332.562909][T16405]  ? memcg1_oom_prepare+0x37e/0x450
[  332.562918][T16405]  try_charge_memcg+0xdfb/0x12a0
[  332.562934][T16405]  ? __pfx_try_charge_memcg+0x10/0x10
[  332.562943][T16405]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  332.562957][T16405]  charge_memcg+0x9f/0x180
[  332.562965][T16405]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  332.562972][T16405]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  332.562982][T16405]  __read_swap_cache_async+0x212/0x480
[  332.562997][T16405]  swap_cluster_readahead+0x358/0x680
[  332.563010][T16405]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  332.563027][T16405]  ? get_vma_policy+0x27b/0x3c0
[  332.563038][T16405]  swapin_readahead+0x196/0xc50
[  332.563049][T16405]  ? swap_table_get+0x1e/0x260
[  332.563062][T16405]  ? __pfx_swapin_readahead+0x10/0x10
[  332.563073][T16405]  ? swap_table_get+0x1e/0x260
[  332.563082][T16405]  ? swap_table_get+0x1e/0x260
[  332.563090][T16405]  ? swap_table_get+0x1e/0x260
[  332.563100][T16405]  ? swap_table_get+0x216/0x260
[  332.563110][T16405]  ? swap_cache_get_folio+0x513/0x520
[  332.563123][T16405]  do_swap_page+0x4d4/0x5e20
[  332.563141][T16405]  ? ___pte_offset_map+0x29/0x240
[  332.563154][T16405]  ? do_swap_page+0x192/0x5e20
[  332.563163][T16405]  ? __pfx_do_swap_page+0x10/0x10
[  332.563172][T16405]  ? __lock_acquire+0x6b5/0x2cf0
[  332.563181][T16405]  ? __pfx_default_wake_function+0x10/0x10
[  332.563190][T16405]  ? ___pte_offset_map+0x1ae/0x240
[  332.563202][T16405]  ? pte_offset_map_rw_nolock+0xea/0x160
[  332.563214][T16405]  handle_mm_fault+0x12d2/0x32a0
[  332.563231][T16405]  ? handle_mm_fault+0xee/0x32a0
[  332.563245][T16405]  ? __pfx_handle_mm_fault+0x10/0x10
[  332.563255][T16405]  ? lock_vma_under_rcu+0x45a/0x500
[  332.563278][T16405]  do_user_addr_fault+0xa73/0x1360
[  332.563290][T16405]  ? rcu_is_watching+0x15/0xb0
[  332.563325][T16405]  ? trace_page_fault_user+0x84/0x1c0
[  332.563334][T16405]  exc_page_fault+0x6a/0xc0
[  332.563346][T16405]  asm_exc_page_fault+0x26/0x30
[  332.563354][T16405] RIP: 0033:0x7f3b3446877e
[  332.563364][T16405] Code: 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 00 e8 e8 b8 ff ff 48 39 dd 75 df 0f 1f 00 8b 05 36 f6 3a 00 85 c0 0f 8e 53 fd ff ff <e8> 2d 8a fe ff 49 39 c4 73 88 48 8d 1d 11 d8 3a 00 83 3d 16 f6 3a
[  332.563370][T16405] RSP: 002b:00007ffc5937bb10 EFLAGS: 00010202
[  332.563378][T16405] RAX: 0000000000000002 RBX: 00007f3b34817da0 RCX: 000055555f365808
[  332.563383][T16405] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  332.563388][T16405] RBP: 00007f3b34817da0 R08: 0000000000000000 R09: 0000000000000000
[  332.563392][T16405] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000512ac
[  332.563396][T16405] R13: 00007f3b3481627c R14: 000000000005104a R15: 00007ffc5937bc10
[  332.563410][T16405]  </TASK>
[  332.563414][T16405] memory: usage 307200kB, limit 307200kB, failcnt 413
[  332.767360][T16438] wg1 speed is unknown, defaulting to 1000
[  332.776253][T16438] lo speed is unknown, defaulting to 1000
[  332.828027][T16405] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0
[  332.829673][T16445] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2895'.
[  332.830449][T16405] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0
[  332.835997][T16405] Memory cgroup stats for /syz0:
[  332.836238][T16405] cache 0
[  332.907707][T16405] rss 0
[  332.908752][T16405] rss_huge 0
[  332.909956][T16405] shmem 0
[  332.920836][T16405] mapped_file 0
[  332.929069][T16405] dirty 0
[  332.939659][T16451] validate_nla: 11 callbacks suppressed
[  332.939671][T16451] netlink: 'syz.1.2897': attribute type 6 has an invalid length.
[  332.943524][T16451] netlink: 'syz.1.2897': attribute type 5 has an invalid length.
[  332.967677][T16405] writeback 0
[  332.968735][T16405] workingset_refault_anon 4
[  332.970225][T16405] workingset_refault_file 64
[  332.971681][T16405] swap 188416
[  332.972662][T16405] swapcached 24576
[  332.973764][T16405] pgpgin 102388
[  332.974816][T16405] pgpgout 102380
[  332.975886][T16405] pgfault 179994
[  332.976923][T16405] pgmajfault 7
[  333.013301][T16405] inactive_anon 24576
[  333.014556][T16405] active_anon 8192
[  333.015660][T16405] inactive_file 0
[  333.016751][T16405] active_file 0
[  333.046748][T16405] unevictable 0
[  333.048807][T16405] hierarchical_memory_limit 314572800
[  333.050809][T16405] hierarchical_memsw_limit 9223372036854771712
[  333.052963][T16405] total_cache 0
[  333.053973][T16405] total_rss 0
[  333.054954][T16405] total_rss_huge 0
[  333.056031][T16405] total_shmem 0
[  333.057052][T16405] total_mapped_file 0
[  333.071230][T16405] total_dirty 0
[  333.072466][T16449] veth19: entered promiscuous mode
[  333.076585][T16451] netlink: 'syz.1.2897': attribute type 4 has an invalid length.
[  333.080332][T16405] total_writeback 0
[  333.084135][T16405] total_workingset_refault_anon 4
[  333.085802][T16405] total_workingset_refault_file 64
[  333.089470][T16405] total_swap 188416
[  333.090915][T16405] total_swapcached 24576
[  333.092908][T16405] total_pgpgin 102388
[  333.094513][T16405] total_pgpgout 102380
[  333.096009][T16405] total_pgfault 179994
[  333.097555][T16405] total_pgmajfault 7
[  333.105586][T16451] netlink: 'syz.1.2897': attribute type 4 has an invalid length.
[  333.108399][T16405] total_inactive_anon 24576
[  333.109756][T16405] total_active_anon 8192
[  333.111087][T16405] total_inactive_file 0
[  333.112459][T16405] total_active_file 0
[  333.113659][T16405] total_unevictable 0
[  333.114902][T16405] anon_cost 0
[  333.116085][T16405] file_cost 0
[  333.117225][T16405] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2886,pid=16405,uid=0
[  333.133555][T16405] Memory cgroup out of memory: Killed process 16405 (syz.0.2886) total-vm:106624kB, anon-rss:1336kB, file-rss:27492kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000
[  333.979659][T16472] netlink: 'syz.2.2903': attribute type 12 has an invalid length.
[  334.022517][T16474] netlink: 'syz.2.2904': attribute type 21 has an invalid length.
[  334.113773][T16480] veth21: entered promiscuous mode
[  334.218741][T16485] veth0_to_team: entered promiscuous mode
[  334.222290][T16485] veth0_to_team: left promiscuous mode
[  334.276544][T16486] veth0_to_team: entered promiscuous mode
[  334.279140][T16486] veth0_to_team: left promiscuous mode
[  334.301710][T16489] bond41: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  334.306919][T16489] bond41 (unregistering): Released all slaves
[  334.463374][T16494] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  334.471705][T16497] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  334.477920][T16497] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  334.640802][T16512] wg1 speed is unknown, defaulting to 1000
[  334.644185][T16512] lo speed is unknown, defaulting to 1000
[  334.975400][T16533] netlink: 'syz.1.2918': attribute type 1 has an invalid length.
[  335.006933][T16533] bond41: entered promiscuous mode
[  335.010044][T16533] 8021q: adding VLAN 0 to HW filter on device bond41
[  335.160791][T16542] veth13: entered promiscuous mode
[  335.176296][T16543] erspan0: entered allmulticast mode
[  335.225573][T16545] netlink: 'syz.2.2922': attribute type 6 has an invalid length.
[  335.231609][T16545] netlink: 'syz.2.2922': attribute type 5 has an invalid length.
[  335.303967][T16553] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  335.432285][T16560] IPVS: length: 35 != 24
[  335.790732][T16582] sctp: [Deprecated]: syz.1.2930 (pid 16582) Use of int in maxseg socket option.
[  335.790732][T16582] Use struct sctp_assoc_value instead
[  335.877152][T16585] wg1 speed is unknown, defaulting to 1000
[  335.881329][T16585] lo speed is unknown, defaulting to 1000
[  336.057146][T16585] netlink: 'syz.1.2931': attribute type 6 has an invalid length.
[  336.377064][T16594] .`: renamed from bond0
[  336.417556][T16592] wg1 speed is unknown, defaulting to 1000
[  336.421920][T16592] lo speed is unknown, defaulting to 1000
[  336.566207][T16605] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[  337.073897][T16630] __nla_validate_parse: 26 callbacks suppressed
[  337.073918][T16630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2944'.
[  337.080509][T16630] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2944'.
[  337.364371][T16632] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2945'.
[  337.369774][T16632] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2945'.
[  337.373156][T16632] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2945'.
[  337.384130][  T872] lo speed is unknown, defaulting to 1000
[  337.386329][  T872] syz2: Port: 1 Link DOWN
[  337.393041][  T872] lo speed is unknown, defaulting to 1000
[  337.395250][  T872] syz2: Port: 1 Link ACTIVE
[  337.929821][T16640] wg1 speed is unknown, defaulting to 1000
[  337.940538][T16640] lo speed is unknown, defaulting to 1000
[  338.119565][T16647] bond0: option primary_reselect: invalid value (4)
[  338.126751][T16647] bond0 (unregistering): Released all slaves
[  338.291206][T16654] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2952'.
[  338.424502][T16660] 8021q: adding VLAN 0 to HW filter on device bond0
[  338.426735][T16660] bond0: (slave gre0): The slave device specified does not support setting the MAC address
[  338.434754][T16660] bond0: (slave gre0): Error -95 calling set_mac_address
[  338.496984][T16668] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  338.500521][T16667] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  338.506585][T16668] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2954'.
[  338.506606][T16669] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2954'.
[  338.511215][T16668] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2954'.
[  338.528215][T16669] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2954'.
[  338.925441][T16695] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  338.943916][T16695] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  339.409842][T16722] wg1 speed is unknown, defaulting to 1000
[  339.412610][T16722] lo speed is unknown, defaulting to 1000
[  339.516360][T16733] validate_nla: 6 callbacks suppressed
[  339.516379][T16733] netlink: 'syz.2.2968': attribute type 4 has an invalid length.
[  339.772620][T16749] wg1 speed is unknown, defaulting to 1000
[  339.775778][T16749] lo speed is unknown, defaulting to 1000
[  340.002333][T16774] xt_hashlimit: overflow, try lower: 18446744073709551615/255
[  340.163472][T16792] netlink: 'syz.2.2984': attribute type 6 has an invalid length.
[  340.166159][T16792] netlink: 'syz.2.2984': attribute type 5 has an invalid length.
[  340.178119][T16792] netlink: 'syz.2.2984': attribute type 4 has an invalid length.
[  340.184274][T16792] netlink: 'syz.2.2984': attribute type 4 has an invalid length.
[  340.322791][T16799] wg1 speed is unknown, defaulting to 1000
[  340.326226][T16799] lo speed is unknown, defaulting to 1000
[  340.612876][T16807] netlink: 'syz.0.2989': attribute type 3 has an invalid length.
[  340.817932][T16818] netlink: 'syz.0.2992': attribute type 1 has an invalid length.
[  341.287300][T16865] erspan0: entered promiscuous mode
[  341.389183][T16874] netlink: 'syz.0.3007': attribute type 6 has an invalid length.
[  341.391625][T16874] netlink: 'syz.0.3007': attribute type 5 has an invalid length.
[  341.404244][T16868] wg1 speed is unknown, defaulting to 1000
[  341.406764][T16868] lo speed is unknown, defaulting to 1000
[  341.414509][T16875] openvswitch: netlink: Message has 572 unknown bytes.
[  341.416936][T16875] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  341.466210][T16881] can: request_module (can-proto-0) failed.
[  341.661517][T16891] ip6tnl0: entered promiscuous mode
[  341.776426][T16898] vlan5: entered promiscuous mode
[  341.778202][T16898] dummy0: entered promiscuous mode
[  341.933078][T16902] wg1 speed is unknown, defaulting to 1000
[  341.935798][T16902] lo speed is unknown, defaulting to 1000
[  342.314734][T16910] __nla_validate_parse: 19 callbacks suppressed
[  342.314750][T16910] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3015'.
[  342.364187][T16910] wg1 speed is unknown, defaulting to 1000
[  342.368533][T16910] lo speed is unknown, defaulting to 1000
[  342.586370][T16918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3016'.
[  342.610447][T16918] team3: entered promiscuous mode
[  342.612428][T16918] team3: entered allmulticast mode
[  342.614950][T16918] 8021q: adding VLAN 0 to HW filter on device team3
[  342.620345][T16918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3016'.
[  342.641612][T16918] team4: entered promiscuous mode
[  342.643569][T16918] team4: entered allmulticast mode
[  342.646067][T16918] 8021q: adding VLAN 0 to HW filter on device team4
[  342.943877][T16932] x_tables: duplicate underflow at hook 1
[  342.956897][T16933] bond44: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  342.965003][T16933] bond44 (unregistering): Released all slaves
[  342.990278][T16935] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3022'.
[  343.022414][T16935] tipc: Bearer <udp:s>: already 2 bearers with priority 10
[  343.025211][T16935] tipc: Bearer <udp:s>: trying with adjusted priority
[  343.037404][T16935] tipc: Enabling of bearer <udp:s> rejected, max 3 bearers permitted
[  343.320825][T16949] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  343.324221][T16949] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3027'.
[  343.326825][T16949] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3027'.
[  343.415118][T16960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3030'.
[  343.541850][T16967] wg1 speed is unknown, defaulting to 1000
[  343.544507][T16967] lo speed is unknown, defaulting to 1000
[  343.570223][T16974] netlink: 'syz.0.3032': attribute type 1 has an invalid length.
[  343.573359][T16974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3032'.
[  343.839279][T16987] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  343.845095][T16987] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3038'.
[  343.850624][T16987] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3038'.
[  343.876211][T16983] batadv0: entered promiscuous mode
[  343.878547][T16983] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  343.981833][T16996] tipc: Resetting bearer <eth:syzkaller0>
[  344.019213][T16999] wg1 speed is unknown, defaulting to 1000
[  344.022119][T16999] lo speed is unknown, defaulting to 1000
[  344.039271][T17002] bond0: (slave wlan1): Opening slave failed
[  344.071254][T17002] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  344.073745][T17002] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  344.080560][T17002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  344.108092][T17008] netlink: 'syz.2.3042': attribute type 11 has an invalid length.
[  344.210984][T17011] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  344.848464][T17035] wg1 speed is unknown, defaulting to 1000
[  344.851634][T17035] lo speed is unknown, defaulting to 1000
[  345.192767][T17060] validate_nla: 1 callbacks suppressed
[  345.192781][T17060] netlink: 'syz.2.3052': attribute type 21 has an invalid length.
[  345.202691][T17060] netlink: 'syz.2.3052': attribute type 22 has an invalid length.
[  345.205656][T17060] netlink: 'syz.2.3052': attribute type 23 has an invalid length.
[  345.209054][T17060] netlink: 'syz.2.3052': attribute type 25 has an invalid length.
[  345.212010][T17060] netlink: 'syz.2.3052': attribute type 26 has an invalid length.
[  345.589938][T17088] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  345.597121][T17090] syzkaller1: entered promiscuous mode
[  345.599608][T17090] syzkaller1: entered allmulticast mode
[  346.494684][ T5810] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  346.500518][ T5810] CPU: 1 UID: 0 PID: 5810 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  346.500537][ T5810] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  346.500544][ T5810] Call Trace:
[  346.500549][ T5810]  <TASK>
[  346.500555][ T5810]  dump_stack_lvl+0xe8/0x150
[  346.500575][ T5810]  dump_header+0xd3/0x4c0
[  346.500591][ T5810]  oom_kill_process+0x263/0x800
[  346.500606][ T5810]  out_of_memory+0xe55/0x11f0
[  346.500625][ T5810]  ? __pfx___mutex_lock+0x10/0x10
[  346.500647][ T5810]  ? __pfx_out_of_memory+0x10/0x10
[  346.500671][ T5810]  mem_cgroup_out_of_memory+0x158/0x270
[  346.500694][ T5810]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  346.500714][ T5810]  ? _raw_spin_unlock+0x28/0x50
[  346.500725][ T5810]  ? memcg1_oom_prepare+0x37e/0x450
[  346.500738][ T5810]  try_charge_memcg+0xdfb/0x12a0
[  346.500758][ T5810]  ? __pfx_try_charge_memcg+0x10/0x10
[  346.500771][ T5810]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  346.500790][ T5810]  charge_memcg+0x9f/0x180
[  346.500801][ T5810]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  346.500811][ T5810]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  346.500824][ T5810]  __read_swap_cache_async+0x212/0x480
[  346.500843][ T5810]  swap_cluster_readahead+0x358/0x680
[  346.500863][ T5810]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  346.500883][ T5810]  ? get_vma_policy+0x27b/0x3c0
[  346.500897][ T5810]  swapin_readahead+0x196/0xc50
[  346.500909][ T5810]  ? finish_task_switch+0x161/0x920
[  346.500926][ T5810]  ? swap_table_get+0x1e/0x260
[  346.500946][ T5810]  ? __pfx_swapin_readahead+0x10/0x10
[  346.500961][ T5810]  ? swap_table_get+0x1e/0x260
[  346.500973][ T5810]  ? swap_table_get+0x1e/0x260
[  346.500983][ T5810]  ? swap_table_get+0x1e/0x260
[  346.501000][ T5810]  ? swap_table_get+0x216/0x260
[  346.501016][ T5810]  ? swap_cache_get_folio+0x513/0x520
[  346.501038][ T5810]  do_swap_page+0x4d4/0x5e20
[  346.501067][ T5810]  ? ___pte_offset_map+0x29/0x240
[  346.501088][ T5810]  ? do_swap_page+0x192/0x5e20
[  346.501103][ T5810]  ? __pfx_do_swap_page+0x10/0x10
[  346.501120][ T5810]  ? __lock_acquire+0x6b5/0x2cf0
[  346.501133][ T5810]  ? __pfx_default_wake_function+0x10/0x10
[  346.501148][ T5810]  ? ___pte_offset_map+0x1ae/0x240
[  346.501197][ T5810]  ? pte_offset_map_rw_nolock+0xea/0x160
[  346.501217][ T5810]  handle_mm_fault+0x12d2/0x32a0
[  346.501238][ T5810]  ? handle_mm_fault+0xee/0x32a0
[  346.501259][ T5810]  ? __pfx_handle_mm_fault+0x10/0x10
[  346.501275][ T5810]  ? lock_vma_under_rcu+0x45a/0x500
[  346.501310][ T5810]  do_user_addr_fault+0xa73/0x1360
[  346.501329][ T5810]  ? rcu_is_watching+0x15/0xb0
[  346.501345][ T5810]  ? trace_page_fault_user+0x84/0x1c0
[  346.501361][ T5810]  exc_page_fault+0x6a/0xc0
[  346.501380][ T5810]  asm_exc_page_fault+0x26/0x30
[  346.501393][ T5810] RIP: 0033:0x7f30f235b58e
[  346.501406][ T5810] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  346.501418][ T5810] RSP: 002b:00007ffd4a56bcf8 EFLAGS: 00010246
[  346.501430][ T5810] RAX: 0000000000000000 RBX: 00005555564d4500 RCX: 00007f30f235b58e
[  346.501438][ T5810] RDX: 00007ffd4a56bd50 RSI: 0000000000000000 RDI: 0000000000000000
[  346.501447][ T5810] RBP: 00007ffd4a56bdbc R08: 0000000000000000 R09: 0000000000000000
[  346.501461][ T5810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  346.501470][ T5810] R13: 00000000000927c0 R14: 0000000000054827 R15: 00007ffd4a56be10
[  346.501493][ T5810]  </TASK>
[  346.501499][ T5810] memory: usage 307200kB, limit 307200kB, failcnt 415
[  346.635888][ T5810] memory+swap: usage 307892kB, limit 9007199254740988kB, failcnt 0
[  346.641043][ T5810] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0
[  346.643817][ T5810] Memory cgroup stats for /syz1:
[  346.644066][ T5810] cache 0
[  346.646867][ T5810] rss 0
[  346.649243][ T5810] rss_huge 0
[  346.650282][ T5810] shmem 0
[  346.651285][ T5810] mapped_file 0
[  346.653326][ T5810] dirty 0
[  346.654252][ T5810] writeback 0
[  346.655299][ T5810] workingset_refault_anon 19
[  346.656839][ T5810] workingset_refault_file 22
[  346.658873][ T5810] swap 708608
[  346.660449][ T5810] swapcached 40960
[  346.662119][ T5810] pgpgin 137306
[  346.663759][ T5810] pgpgout 137296
[  346.665325][ T5810] pgfault 233971
[  346.667441][ T5810] pgmajfault 19
[  346.669209][ T5810] inactive_anon 0
[  346.671379][ T5810] active_anon 40960
[  346.672664][ T5810] inactive_file 0
[  346.673831][ T5810] active_file 0
[  346.674909][ T5810] unevictable 0
[  346.676065][ T5810] hierarchical_memory_limit 314572800
[  346.677950][ T5810] hierarchical_memsw_limit 9223372036854771712
[  346.679945][ T5810] total_cache 0
[  346.681053][ T5810] total_rss 0
[  346.682304][ T5810] total_rss_huge 0
[  346.683368][ T5810] total_shmem 0
[  346.684387][ T5810] total_mapped_file 0
[  346.685651][ T5810] total_dirty 0
[  346.686691][ T5810] total_writeback 0
[  346.688310][ T5810] total_workingset_refault_anon 19
[  346.690066][ T5810] total_workingset_refault_file 22
[  346.691911][ T5810] total_swap 708608
[  346.693109][ T5810] total_swapcached 40960
[  346.694352][ T5810] total_pgpgin 137306
[  346.695514][ T5810] total_pgpgout 137296
[  346.696710][ T5810] total_pgfault 233971
[  346.698233][ T5810] total_pgmajfault 19
[  346.699586][ T5810] total_inactive_anon 0
[  346.700811][ T5810] total_active_anon 40960
[  346.702247][ T5810] total_inactive_file 0
[  346.703487][ T5810] total_active_file 0
[  346.704674][ T5810] total_unevictable 0
[  346.705840][ T5810] anon_cost 0
[  346.706867][ T5810] file_cost 0
[  346.708084][ T5810] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3064,pid=17105,uid=0
[  346.712444][ T5810] Memory cgroup out of memory: Killed process 17105 (syz.1.3064) total-vm:102388kB, anon-rss:1208kB, file-rss:23208kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  347.140173][T17130] bond44: (slave bridge21): Enslaving as an active interface with an up link
[  347.183823][T17125] bond44: entered promiscuous mode
[  347.207876][T17125] bridge21: entered promiscuous mode
[  347.219193][T17125] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  347.248041][T17125] bond44: left promiscuous mode
[  347.249947][T17125] bridge21: left promiscuous mode
[  347.464435][T17142] __nla_validate_parse: 9 callbacks suppressed
[  347.464456][T17142] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3073'.
[  347.579290][T17155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3077'.
[  347.588986][T17155] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  347.596681][T17155] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  347.606820][T17155] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  347.610759][T17157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3078'.
[  347.764126][T17169] netlink: 'syz.0.3081': attribute type 12 has an invalid length.
[  347.767149][T17169] netlink: 'syz.0.3081': attribute type 12 has an invalid length.
[  347.777421][T17169] netlink: 'syz.0.3081': attribute type 12 has an invalid length.
[  347.784887][T17170] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3082'.
[  347.791268][T17169] netlink: 'syz.0.3081': attribute type 12 has an invalid length.
[  347.823205][T17170] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3082'.
[  347.825881][T17170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3082'.
[  347.831846][T17170] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3082'.
[  347.882777][T17177] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001
[  347.929484][T17183] 8021q: adding VLAN 0 to HW filter on device bond42
[  347.933182][T17183] bond0: (slave bond42): Enslaving as an active interface with an up link
[  347.971646][T17189] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  347.994379][T17189] tipc: Resetting bearer <eth:syzkaller0>
[  348.376922][T17234] wg1 speed is unknown, defaulting to 1000
[  348.380764][T17234] lo speed is unknown, defaulting to 1000
[  348.382956][T17229] wg1 speed is unknown, defaulting to 1000
[  348.389441][T17236] netlink: 'syz.2.3099': attribute type 1 has an invalid length.
[  348.391530][T17229] lo speed is unknown, defaulting to 1000
[  348.496110][T17241] wg1 speed is unknown, defaulting to 1000
[  348.499307][T17241] lo speed is unknown, defaulting to 1000
[  348.543777][T17243] geneve6: entered promiscuous mode
[  348.552175][ T5863] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  348.556176][ T5863] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  348.564466][ T5863] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  348.566983][ T5863] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  348.781967][T17258] syz_tun: entered promiscuous mode
[  348.786200][T17258] syz_tun: entered allmulticast mode
[  348.799380][T17258] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  349.011006][T17275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3111'.
[  349.014549][T17275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3111'.
[  349.026661][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  349.026675][T17275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3111'.
[  349.026732][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  349.050399][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  349.053741][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  349.775879][T17291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  350.182360][T17304] pim6reg: entered allmulticast mode
[  350.185021][T17304] pim6reg: left allmulticast mode
[  350.975200][T17318] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.982177][T17318] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  350.997135][T17320] bridge22: entered promiscuous mode
[  350.999396][T17320] bridge22: entered allmulticast mode
[  351.040102][T17318] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.043757][T17318] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  351.084350][T17318] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.088376][T17318] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  351.144255][T17318] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.149558][T17318] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  351.211338][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  351.218647][   T13] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  351.231957][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  351.234570][   T13] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  351.240566][T17331] validate_nla: 3 callbacks suppressed
[  351.240579][T17331] netlink: 'syz.1.3128': attribute type 1 has an invalid length.
[  351.244733][T17331] netlink: 'syz.1.3128': attribute type 11 has an invalid length.
[  351.249750][T17329] bond45: option packets_per_slave: invalid value (1048582)
[  351.251961][T17329] bond45: option packets_per_slave: allowed values 0 - 65535
[  351.255202][T17329] bond45 (unregistering): Released all slaves
[  351.271875][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  351.275071][   T13] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  351.292563][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  351.295575][   T13] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  351.353109][T17336] netlink: 'syz.2.3129': attribute type 1 has an invalid length.
[  351.368366][T17336] bond0: entered promiscuous mode
[  351.370096][T17336] bond0: entered allmulticast mode
[  351.372082][T17336] 8021q: adding VLAN 0 to HW filter on device bond0
[  351.384536][T17336] netlink: 'syz.2.3129': attribute type 29 has an invalid length.
[  351.387488][T17336] netlink: 'syz.2.3129': attribute type 29 has an invalid length.
[  351.391256][T17336] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  351.445766][T17346] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  351.452003][T17346] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  351.459331][T17346] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  351.465651][T17346] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  351.500949][T17349] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  351.714075][T17361] wg1 speed is unknown, defaulting to 1000
[  351.716695][T17361] lo speed is unknown, defaulting to 1000
[  352.349695][T17381] wg1 speed is unknown, defaulting to 1000
[  352.352540][T17381] lo speed is unknown, defaulting to 1000
[  352.454540][T17392] netlink: 'syz.0.3144': attribute type 12 has an invalid length.
[  352.591822][T17399] netlink: 'syz.0.3145': attribute type 4 has an invalid length.
[  352.613286][T17399] netlink: 'syz.0.3145': attribute type 4 has an invalid length.
[  352.622114][  T782] lo speed is unknown, defaulting to 1000
[  352.627948][ T6676] lo speed is unknown, defaulting to 1000
[  352.659611][T17410] wg1 speed is unknown, defaulting to 1000
[  352.674122][T17410] lo speed is unknown, defaulting to 1000
[  352.863159][T17432] netlink: 'syz.0.3151': attribute type 4 has an invalid length.
[  353.007919][T17441] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  353.011795][T17441] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  353.108088][T17442] tipc: Resetting bearer <eth:syzkaller0>
[  353.139182][  T782] lo speed is unknown, defaulting to 1000
[  353.564752][T17450] __nla_validate_parse: 19 callbacks suppressed
[  353.564769][T17450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3157'.
[  353.775344][T17462] wg1 speed is unknown, defaulting to 1000
[  353.778916][T17462] lo speed is unknown, defaulting to 1000
[  354.104925][T17489] gre0: left promiscuous mode
[  354.106372][T17489] gre0: left allmulticast mode
[  354.111366][T17489] erspan0: left allmulticast mode
[  354.113741][T17489] veth1_vlan: left allmulticast mode
[  354.115635][T17489] macvlan0: left allmulticast mode
[  354.118673][T17489] tipc: Resetting bearer <eth:syzkaller0>
[  354.120664][T17489] syzkaller0: left promiscuous mode
[  354.122209][T17489] syzkaller0: left allmulticast mode
[  354.128617][T17489] bond35: left promiscuous mode
[  354.135487][T17489] bond40: left promiscuous mode
[  354.139248][T17489] bond41: left promiscuous mode
[  354.145024][T17489] team3: left promiscuous mode
[  354.146456][T17489] team3: left allmulticast mode
[  354.153153][T17489] team4: left promiscuous mode
[  354.154875][T17489] team4: left allmulticast mode
[  354.684832][T17492] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3166'.
[  354.703093][T17492] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3166'.
[  354.707493][T17492] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3166'.
[  354.982149][T17513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3173'.
[  355.112765][T17523] wg1 speed is unknown, defaulting to 1000
[  355.115592][T17523] lo speed is unknown, defaulting to 1000
[  355.117122][T17529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3177'.
[  355.242317][T17523] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3175'.
[  355.245047][T17523] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3175'.
[  355.247842][T17523] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3175'.
[  355.251933][T17523] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3175'.
[  355.744455][T17544] wg1 speed is unknown, defaulting to 1000
[  355.747301][T17544] lo speed is unknown, defaulting to 1000
[  355.942494][T17557] xt_connbytes: Forcing CT accounting to be enabled
[  356.302715][T17585] netlink: 'syz.0.3191': attribute type 1 has an invalid length.
[  356.311928][T17587] netlink: 'syz.0.3191': attribute type 1 has an invalid length.
[  356.340544][T17585] bond45: entered promiscuous mode
[  356.342978][T17585] 8021q: adding VLAN 0 to HW filter on device bond45
[  356.359496][T17587] bond45: entered allmulticast mode
[  356.374203][T17585] bond45: (slave bridge23): making interface the new active one
[  356.376677][T17585] bridge23: entered promiscuous mode
[  356.379714][T17585] bridge23: entered allmulticast mode
[  356.382200][T17585] bond45: (slave bridge23): Enslaving as an active interface with an up link
[  356.654269][T17607] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  356.658504][T17607] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  357.514489][T17626] syzkaller1: tun_chr_ioctl cmd 1074025677
[  357.516604][T17626] syzkaller1: Linktype set failed because interface is up
[  357.537991][ T6672] syzkaller1: tun_net_xmit 90
[  357.553546][T17628] x_tables: ip_tables: icmp match: only valid for protocol 1
[  357.638097][ T5863] syzkaller1: tun_net_xmit 86
[  357.708257][T17636] netlink: 'syz.2.3205': attribute type 10 has an invalid length.
[  357.719756][T17636] wlan1: mtu less than device minimum
[  357.721670][T17636] .`: (slave wlan1): Error -22 calling dev_set_mtu
[  357.725124][T17636] syzkaller0: left promiscuous mode
[  357.726793][T17636] syzkaller0: left allmulticast mode
[  357.730419][T17636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  357.918787][ T5862] syzkaller1: tun_net_xmit 90
[  358.668463][T17659] __nla_validate_parse: 10 callbacks suppressed
[  358.668477][T17659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3209'.
[  358.864024][T17666] xt_policy: too many policy elements
[  358.876940][T17666] vlan0: entered allmulticast mode
[  358.879664][T17666] bond0: entered allmulticast mode
[  358.881938][T17666] : entered allmulticast mode
[  358.884029][T17666] bond_slave_1: entered allmulticast mode
[  358.886418][T17666] bond31: entered allmulticast mode
[  358.888966][T17666] bond42: entered allmulticast mode
[  358.892602][T17666] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3212'.
[  358.936578][T17666] bond2: (slave macvlan2): Removing an active aggregator
[  358.940737][T17666] bond2: (slave macvlan2): Releasing backup interface
[  358.989089][T17666] bond0 (unregistering): (slave 30): Releasing backup interface
[  358.991923][T17666] : left allmulticast mode
[  358.996137][T17666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  359.002465][T17666] bond_slave_1: left allmulticast mode
[  359.006325][T17666] bond0 (unregistering): (slave bond31): Releasing backup interface
[  359.010672][T17666] bond31: left allmulticast mode
[  359.015016][T17666] bond0 (unregistering): (slave bond42): Releasing backup interface
[  359.023769][T17666] bond42: left allmulticast mode
[  359.026275][T17666] bond0 (unregistering): Released all slaves
[  359.356899][T17677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3216'.
[  359.392515][T17679] syzkaller0: entered promiscuous mode
[  359.394237][T17679] syzkaller0: entered allmulticast mode
[  359.425299][T17681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3218'.
[  359.429846][T17681] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3218'.
[  359.524446][T17684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3219'.
[  359.677787][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  359.713977][T17701] wg1 speed is unknown, defaulting to 1000
[  359.717508][T17701] lo speed is unknown, defaulting to 1000
[  359.970405][T17715] batman_adv: batadv0: Removing interface: wlan0
[  360.208338][T17734] erspan0: left promiscuous mode
[  360.210350][T17734] ip6tnl0: left promiscuous mode
[  360.215821][T17734] batadv0: left promiscuous mode
[  360.220449][T17734] veth1_vlan: left allmulticast mode
[  360.222492][T17734] macvlan0: left allmulticast mode
[  360.229538][T17734] tipc: Resetting bearer <eth:syzkaller0>
[  360.242918][T17734] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  360.245704][T17734] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  360.266913][T17734] bond37: left promiscuous mode
[  360.269652][T17734] bridge16: left promiscuous mode
[  360.271942][T17734] bond37: left allmulticast mode
[  360.274260][T17734] bridge16: left allmulticast mode
[  360.293816][T17734] bond38: left promiscuous mode
[  360.303126][T17734] vlan4: left promiscuous mode
[  360.307739][T17734] bond0: left promiscuous mode
[  360.309387][T17734] syz_tun: left promiscuous mode
[  360.311237][T17734] vlan4: left allmulticast mode
[  360.312817][T17734] bond0: left allmulticast mode
[  360.314442][T17734] syz_tun: left allmulticast mode
[  360.324664][T17734] bond39: left promiscuous mode
[  360.326315][T17734] erspan2: left promiscuous mode
[  360.328343][T17734] bond39: left allmulticast mode
[  360.333959][T17734] erspan2: left allmulticast mode
[  360.380807][T17734] bridge22: left promiscuous mode
[  360.387765][T17734] bridge22: left allmulticast mode
[  360.411769][T17734] bond45: left promiscuous mode
[  360.413782][T17734] bridge23: left promiscuous mode
[  360.415610][T17734] bond45: left allmulticast mode
[  360.417175][T17734] bridge23: left allmulticast mode
[  360.438682][ T5843] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  360.441985][  T782] lo speed is unknown, defaulting to 1000
[  360.444249][  T782] syz2: Port: 1 Link DOWN
[  360.447766][ T5843] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  360.450200][ T5843] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  360.457794][ T5843] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  360.694384][T17749] netlink: 'syz.0.3237': attribute type 1 has an invalid length.
[  360.878442][   T11] block nbd1: Possible stuck request ffff888109a78000: control (read@0,1024B). Runtime 60 seconds
[  360.882569][   T11] block nbd1: Possible stuck request ffff888109a78200: control (read@1024,1024B). Runtime 60 seconds
[  360.886609][   T11] block nbd1: Possible stuck request ffff888109a78400: control (read@2048,1024B). Runtime 60 seconds
[  360.887918][T17755] bond46 (unregistering): Released all slaves
[  360.891122][   T11] block nbd1: Possible stuck request ffff888109a78600: control (read@3072,1024B). Runtime 60 seconds
[  361.463150][T17759] wg1 speed is unknown, defaulting to 1000
[  361.466771][T17759] lo speed is unknown, defaulting to 1000
[  361.706833][T17770] syzkaller1: entered promiscuous mode
[  361.709609][T17770] syzkaller1: entered allmulticast mode
[  361.802864][T17772] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3242'.
[  362.036207][T17793] wg1 speed is unknown, defaulting to 1000
[  362.039137][T17793] lo speed is unknown, defaulting to 1000
[  362.212416][T17805] netlink: 'syz.2.3250': attribute type 1 has an invalid length.
[  362.226758][T17805] bond50: entered promiscuous mode
[  362.228798][T17805] 8021q: adding VLAN 0 to HW filter on device bond50
[  362.241690][T17805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3250'.
[  362.408976][T17811] xt_hashlimit: max too large, truncated to 1048576
[  363.040426][T17816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3253'.
[  363.234376][T17819] netlink: 'syz.2.3254': attribute type 1 has an invalid length.
[  363.477483][T17823] syzkaller0: entered promiscuous mode
[  363.479424][T17823] syzkaller0: entered allmulticast mode
[  363.483180][T17823] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3255'.
[  363.567911][T17825] wg1 speed is unknown, defaulting to 1000
[  363.572121][T17825] lo speed is unknown, defaulting to 1000
[  363.755735][T17831] netlink: 'syz.0.3257': attribute type 1 has an invalid length.
[  363.774071][T17831] bond46 (unregistering): Released all slaves
[  363.840817][T17831] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3257'.
[  364.009253][T17839] wg1 speed is unknown, defaulting to 1000
[  364.013278][T17839] lo speed is unknown, defaulting to 1000
[  364.646959][ T6944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  364.651003][ T6944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  364.670130][T17851] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3263'.
[  364.673424][T17851] openvswitch: netlink: Flow key attr not present in new flow.
[  364.772084][T17855] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  364.777839][T17855] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  364.924024][T17862] netlink: 'syz.1.3266': attribute type 11 has an invalid length.
[  364.962622][T17866] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  364.965567][T17866] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  365.026779][T17867] tipc: Resetting bearer <eth:syzkaller0>
[  365.049111][  T782] wg1 speed is unknown, defaulting to 1000
[  365.147173][T17869] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  365.212124][T17869] netlink: 'syz.0.3268': attribute type 12 has an invalid length.
[  365.427582][T17872] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3269'.
[  365.549591][T17878] bond51 (unregistering): Released all slaves
[  365.734074][T17885] tipc: Enabling of bearer <eth:veth1_to_batadv> rejected, failed to enable media
[  365.925267][T17901] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3277'.
[  366.421348][ T6944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  366.425044][ T6944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.436057][T17913] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3280'.
[  366.442325][T17913] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  366.541856][T17915] netlink: 'syz.0.3281': attribute type 1 has an invalid length.
[  366.568599][T17915] 8021q: adding VLAN 0 to HW filter on device bond46
[  366.572034][T17915] netlink: 'syz.0.3281': attribute type 1 has an invalid length.
[  366.574733][T17916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3281'.
[  366.718812][T17916] bond46 (unregistering): Released all slaves
[  366.750711][T17915] 8021q: adding VLAN 0 to HW filter on device bond46
[  366.758340][T17915] netlink: 'syz.0.3281': attribute type 1 has an invalid length.
[  366.765473][T17915] netlink: 'syz.0.3281': attribute type 1 has an invalid length.
[  366.786234][T17915] netlink: 'syz.0.3281': attribute type 1 has an invalid length.
[  366.788924][T17915] netlink: 'syz.0.3281': attribute type 1 has an invalid length.
[  366.870662][T17926] bond0: entered promiscuous mode
[  366.872716][T17926] 8021q: adding VLAN 0 to HW filter on device bond0
[  366.883719][T17926] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3284'.
[  366.883811][T17921] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3282'.
[  366.886420][T17926] bond0: entered allmulticast mode
[  366.906020][T17921] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3282'.
[  366.932985][T17935] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3285'.
[  366.936904][T17926] bond0: (slave bridge21): making interface the new active one
[  366.947961][T17926] bridge21: entered promiscuous mode
[  366.949874][T17926] bridge21: entered allmulticast mode
[  366.952801][T17926] bond0: (slave bridge21): Enslaving as an active interface with an up link
[  367.037929][    C1] af_packet: tpacket_rcv: packet too big, clamped from 120 to 4294967272. macoff=96
[  367.050184][T17940] xt_bpf: check failed: parse error
[  367.157305][T17949] ip6gre1: entered promiscuous mode
[  367.501296][T17958] validate_nla: 33 callbacks suppressed
[  367.501317][T17958] netlink: 'syz.0.3290': attribute type 1 has an invalid length.
[  367.890350][T17953] wg1 speed is unknown, defaulting to 1000
[  367.893235][T17953] lo speed is unknown, defaulting to 1000
[  368.118871][T17982] netlink: 'syz.1.3295': attribute type 1 has an invalid length.
[  368.136023][T17982] bond43: entered promiscuous mode
[  368.138315][T17982] 8021q: adding VLAN 0 to HW filter on device bond43
[  368.144676][T17982] bond43: entered allmulticast mode
[  368.206681][T17980] netlink: 'syz.0.3297': attribute type 10 has an invalid length.
[  368.505671][T17997] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  368.509449][T17997] macvlan0: entered allmulticast mode
[  368.511186][T17997] veth1_vlan: entered allmulticast mode
[  368.627289][T18004] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  368.630060][T18004] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  368.904583][T18012] netlink: 'syz.0.3306': attribute type 12 has an invalid length.
[  368.929724][T18021] __nla_validate_parse: 11 callbacks suppressed
[  368.929735][T18021] netlink: 1220 bytes leftover after parsing attributes in process `syz.1.3309'.
[  368.935410][T18021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3309'.
[  368.985122][T18031] netlink: 'syz.1.3312': attribute type 12 has an invalid length.
[  369.056653][T18030] wg1 speed is unknown, defaulting to 1000
[  369.080898][T18041] 8021q: adding VLAN 0 to HW filter on device bond47
[  369.083528][T18030] lo speed is unknown, defaulting to 1000
[  369.109727][T18043] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  369.224325][T18055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3318'.
[  369.241174][T18055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3318'.
[  369.284765][T18059] bond44: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  369.292303][T18059] bond44 (unregistering): Released all slaves
[  369.314960][T18062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3317'.
[  369.362578][T18062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3317'.
[  369.375474][T18064] netlink: 'syz.2.3320': attribute type 1 has an invalid length.
[  369.416195][T18064] bond51: entered promiscuous mode
[  369.418256][T18064] 8021q: adding VLAN 0 to HW filter on device bond51
[  369.442759][T18064] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3320'.
[  369.450211][T18064] bond51: entered allmulticast mode
[  369.538351][T18071] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  369.540451][T18071] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  369.632859][T18085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3326'.
[  369.661625][T18085] sit0: Master is either lo or non-ether device
[  369.663994][T18085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3326'.
[  369.666865][T18085] sit0: Master is either lo or non-ether device
[  369.670138][T18085] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3326'.
[  369.682735][T18087] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  369.859414][T18104] macvlan0: entered allmulticast mode
[  369.862438][T18104] veth1_vlan: entered allmulticast mode
[  369.909507][T18109] netlink: 'syz.2.3335': attribute type 2 has an invalid length.
[  369.912225][T18111] netlink: 'syz.2.3335': attribute type 2 has an invalid length.
[  370.437047][T18156] syzkaller0: left promiscuous mode
[  370.439192][T18156] syzkaller0: left allmulticast mode
[  370.575948][T18168] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  371.069327][T18194] veth1_vlan: left allmulticast mode
[  371.071535][T18194] macvlan0: left allmulticast mode
[  371.113709][T18196] netlink: 'syz.2.3356': attribute type 29 has an invalid length.
[  371.295802][T18205] netlink: 'syz.2.3358': attribute type 30 has an invalid length.
[  371.306038][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  371.309583][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  371.320525][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  371.325015][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  371.387358][T18207] wg1 speed is unknown, defaulting to 1000
[  371.391098][T18207] lo speed is unknown, defaulting to 1000
[  371.533783][T18214] wg1 speed is unknown, defaulting to 1000
[  371.536597][T18214] lo speed is unknown, defaulting to 1000
[  371.921344][T18230] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  371.924368][T18230] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  371.929415][T18230] tipc: Resetting bearer <eth:syzkaller0>
[  371.939456][T18230] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  372.416744][T18240] erspan0: left allmulticast mode
[  372.426279][T18240] vlan1: left promiscuous mode
[  372.433851][T18240] vlan1: left allmulticast mode
[  372.436783][T18240] veth0_vlan: left allmulticast mode
[  372.443936][T18240] veth1_vlan: left allmulticast mode
[  372.449779][T18240] macvlan0: left allmulticast mode
[  372.479613][T18240] tipc: Resetting bearer <eth:syzkaller0>
[  372.490599][T18240] bond35: left promiscuous mode
[  372.492208][T18240] bond35: left allmulticast mode
[  372.494259][T18240] bond36: left promiscuous mode
[  372.495808][T18240] bridge12: left promiscuous mode
[  372.497507][T18240] bond36: left allmulticast mode
[  372.499257][T18240] bridge12: left allmulticast mode
[  372.501004][T18240] macvlan3: left promiscuous mode
[  372.502763][T18240] vxcan3: left allmulticast mode
[  372.504989][T18240] macsec2: left allmulticast mode
[  372.506951][T18240] veth17: left promiscuous mode
[  372.517398][T18240] bond42: left promiscuous mode
[  372.519386][T18240] bond42: left allmulticast mode
[  372.524787][T18240] bond43: left promiscuous mode
[  372.528845][T18240] bond44: left promiscuous mode
[  372.530857][T18240] bridge13: left promiscuous mode
[  372.533194][T18240] bond44: left allmulticast mode
[  372.535330][T18240] bridge13: left allmulticast mode
[  372.573220][T18240] bond45: left promiscuous mode
[  372.611004][T18240] vlan3: left promiscuous mode
[  372.613052][T18240] bond48: left promiscuous mode
[  372.614745][T18240] vlan3: left allmulticast mode
[  372.616407][T18240] bond48: left allmulticast mode
[  372.618675][T18240] veth19: left promiscuous mode
[  372.620403][T18240] veth21: left promiscuous mode
[  372.645822][T18240] geneve6: left promiscuous mode
[  372.653415][T18240] bond0: left promiscuous mode
[  372.655374][T18240] bond0: left allmulticast mode
[  372.666181][T18240] bond50: left promiscuous mode
[  372.674834][T18240] ip6gre1: left promiscuous mode
[  372.683219][T18240] bond51: left promiscuous mode
[  372.684765][T18240] bond51: left allmulticast mode
[  372.710890][T18253] validate_nla: 2 callbacks suppressed
[  372.710909][T18253] netlink: 'syz.1.3373': attribute type 6 has an invalid length.
[  372.716205][ T5843] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  372.716290][T18253] netlink: 'syz.1.3373': attribute type 5 has an invalid length.
[  372.718813][ T5843] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  372.718830][ T5843] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  372.718873][ T5843] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  372.718884][ T5843] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  372.718894][ T5843] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  372.718909][ T5843] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  372.718919][ T5843] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  372.718929][ T5843] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  372.718943][ T5843] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  372.718953][ T5843] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  372.718963][ T5843] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  372.759606][T18253] netlink: 'syz.1.3373': attribute type 4 has an invalid length.
[  372.767172][T18253] netlink: 'syz.1.3373': attribute type 4 has an invalid length.
[  372.803069][T18258] netlink: 'syz.1.3375': attribute type 6 has an invalid length.
[  372.805560][T18258] netlink: 'syz.1.3375': attribute type 5 has an invalid length.
[  372.816093][T18258] netlink: 'syz.1.3375': attribute type 4 has an invalid length.
[  372.826554][T18258] netlink: 'syz.1.3375': attribute type 4 has an invalid length.
[  372.897405][T18262] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  372.901629][T18262] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  373.008417][T18264] tipc: Resetting bearer <eth:syzkaller0>
[  373.028680][  T782] lo speed is unknown, defaulting to 1000
[  373.367202][T18278] workqueue: Failed to create a rescuer kthread for wq "bond52": -EINTR
[  373.478303][T18286] wg1 speed is unknown, defaulting to 1000
[  373.484462][T18286] lo speed is unknown, defaulting to 1000
[  373.966356][T18311] __nla_validate_parse: 26 callbacks suppressed
[  373.966372][T18311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3387'.
[  374.032330][T18317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3388'.
[  374.333483][T18343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3396'.
[  374.357110][T18345] netlink: 'syz.2.3397': attribute type 1 has an invalid length.
[  374.387896][T18345] bond52: (slave bridge16): making interface the new active one
[  374.391020][T18345] bond52: (slave bridge16): Enslaving as an active interface with an up link
[  374.496323][T18350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3398'.
[  374.499338][T18350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3398'.
[  375.498258][T18363] netlink: 'syz.2.3403': attribute type 12 has an invalid length.
[  375.501411][T18363] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3403'.
[  375.857978][T18368] tc_dump_action: action bad kind
[  375.933264][T18370] delete_channel: no stack
[  376.100362][T18377] team0: entered promiscuous mode
[  376.102623][T18377] team_slave_0: entered promiscuous mode
[  376.106964][T18377] team_slave_1: entered promiscuous mode
[  376.109192][T18377] batadv2: entered promiscuous mode
[  376.113129][T18377] 8021q: adding VLAN 0 to HW filter on device team0
[  376.116138][T18377] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  376.186056][T18385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3408'.
[  376.266805][T18390] wg1 speed is unknown, defaulting to 1000
[  376.270624][T18390] lo speed is unknown, defaulting to 1000
[  376.321638][T18398] 8021q: adding VLAN 0 to HW filter on device bond49
[  376.336660][T18398] vlan5: entered promiscuous mode
[  376.338504][T18398] bond49: entered promiscuous mode
[  376.340611][T18398] vlan5: entered allmulticast mode
[  376.342586][T18398] bond49: entered allmulticast mode
[  376.349465][T18398] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3410'.
[  377.233442][T18422] lo: entered allmulticast mode
[  377.247940][T18422] lo: left allmulticast mode
[  377.462829][T18433] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  377.481800][T18435] wg1 speed is unknown, defaulting to 1000
[  377.484777][T18435] lo speed is unknown, defaulting to 1000
[  377.785256][T18444] wg1 speed is unknown, defaulting to 1000
[  377.789897][T18444] lo speed is unknown, defaulting to 1000
[  378.092012][T18450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3423'.
[  378.252365][T18466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3427'.
[  378.925252][T18479] validate_nla: 1 callbacks suppressed
[  378.925266][T18479] netlink: 'syz.2.3432': attribute type 12 has an invalid length.
[  379.135934][T18493] __nla_validate_parse: 5 callbacks suppressed
[  379.135947][T18493] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3435'.
[  379.141623][T18493] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3435'.
[  379.979105][T18537] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3443'.
[  380.534064][T18548] wg1 speed is unknown, defaulting to 1000
[  380.538171][T18548] lo speed is unknown, defaulting to 1000
[  380.768149][T18555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3449'.
[  380.798812][T18557] netlink: 'syz.0.3448': attribute type 1 has an invalid length.
[  380.847040][T18557] bond50: entered promiscuous mode
[  380.849529][T18557] 8021q: adding VLAN 0 to HW filter on device bond50
[  380.853244][T18560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3450'.
[  380.866692][T18560] 8021q: adding VLAN 0 to HW filter on device batadv3
[  380.871567][T18560] batadv3: entered promiscuous mode
[  380.873855][T18560] team0: Port device batadv3 added
[  380.899122][T18557] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3448'.
[  380.902881][T18557] bond50: entered allmulticast mode
[  380.924278][T18557] bond50: (slave bridge25): making interface the new active one
[  380.939958][T18557] bridge25: entered promiscuous mode
[  380.942069][T18557] bridge25: entered allmulticast mode
[  380.945477][T18557] bond50: (slave bridge25): Enslaving as an active interface with an up link
[  381.012905][T18574] wg1 speed is unknown, defaulting to 1000
[  381.016204][T18574] lo speed is unknown, defaulting to 1000
[  381.068600][T18572] wg1 speed is unknown, defaulting to 1000
[  381.076703][T18572] lo speed is unknown, defaulting to 1000
[  381.360913][T18591] netlink: 'syz.2.3461': attribute type 1 has an invalid length.
[  381.367273][T18592] tipc: Resetting bearer <eth:syzkaller0>
[  381.374750][T18592] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  381.377047][T18592] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  381.391557][T18592] vlan5: left promiscuous mode
[  381.393014][T18592] bond49: left promiscuous mode
[  381.394578][T18592] vlan5: left allmulticast mode
[  381.395921][T18592] bond49: left allmulticast mode
[  381.400286][T18592] bond50: left promiscuous mode
[  381.401759][T18592] bridge25: left promiscuous mode
[  381.403312][T18592] bond50: left allmulticast mode
[  381.404799][T18592] bridge25: left allmulticast mode
[  381.426646][T18594] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3461'.
[  381.445521][T18591] bond53: entered promiscuous mode
[  381.447342][T18591] 8021q: adding VLAN 0 to HW filter on device bond53
[  381.450272][T18594] bond53: entered allmulticast mode
[  381.515471][T18591] bond53: (slave bridge17): making interface the new active one
[  381.518575][T18591] bridge17: entered promiscuous mode
[  381.521033][T18591] bridge17: entered allmulticast mode
[  381.523810][T18591] bond53: (slave bridge17): Enslaving as an active interface with an up link
[  381.829639][T18603] netlink: 'syz.1.3464': attribute type 1 has an invalid length.
[  381.981230][T18613] x_tables: duplicate underflow at hook 3
[  381.990886][T18613] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  382.198831][T18621] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3469'.
[  382.205270][T18621] team0: Caught tx_queue_len zero misconfig
[  382.230703][T18624] netlink: 'syz.0.3470': attribute type 1 has an invalid length.
[  382.249718][T18624] bond51: entered promiscuous mode
[  382.251426][T18624] 8021q: adding VLAN 0 to HW filter on device bond51
[  382.270271][T18624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3470'.
[  382.447561][T18633] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3472'.
[  382.452924][T18633] netlink: 'syz.2.3472': attribute type 6 has an invalid length.
[  382.455727][T18633] netlink: 'syz.2.3472': attribute type 5 has an invalid length.
[  382.463185][T18633] netlink: 'syz.2.3472': attribute type 4 has an invalid length.
[  382.467384][T18633] netlink: 'syz.2.3472': attribute type 4 has an invalid length.
[  382.541664][T18636] netlink: 'syz.2.3473': attribute type 1 has an invalid length.
[  382.565201][T18636] bond54: (slave vxcan1): The slave device specified does not support setting the MAC address
[  382.571544][T18636] bond54: (slave vxcan1): Error -95 calling set_mac_address
[  382.615230][T18637] gre5: entered promiscuous mode
[  382.617021][T18637] bond54: (slave gre5): The slave device specified does not support setting the MAC address
[  382.620759][T18637] bond54: (slave gre5): Error -95 calling set_mac_address
[  382.789501][T18644] syzkaller1: entered promiscuous mode
[  382.791358][T18644] syzkaller1: entered allmulticast mode
[  383.295451][T18656] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20004
[  383.378702][T18665] bond52: entered promiscuous mode
[  383.384591][T18668] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input4
[  383.389607][T18665] 8021q: adding VLAN 0 to HW filter on device bond52
[  383.400301][T18665] bond52: entered allmulticast mode
[  383.436299][T18665] bond52: (slave bridge26): making interface the new active one
[  383.439760][T18665] bridge26: entered promiscuous mode
[  383.441833][T18665] bridge26: entered allmulticast mode
[  383.444416][T18665] bond52: (slave bridge26): Enslaving as an active interface with an up link
[  383.586526][T18683] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  384.033516][T18728] validate_nla: 2 callbacks suppressed
[  384.033531][T18728] netlink: 'syz.2.3499': attribute type 1 has an invalid length.
[  384.221651][T18744] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  384.224526][T18744] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  384.345095][T18746] tipc: Resetting bearer <eth:syzkaller0>
[  384.385113][ T6676] wg1 speed is unknown, defaulting to 1000
[  384.625005][T18749] __nla_validate_parse: 11 callbacks suppressed
[  384.625020][T18749] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3504'.
[  384.633454][T18749] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3504'.
[  384.712322][T18754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3505'.
[  384.715031][T18751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3505'.
[  384.805573][T18756] veth13: entered promiscuous mode
[  384.842956][T18756] erspan0: entered allmulticast mode
[  385.133765][T18779] netlink: 'syz.1.3514': attribute type 1 has an invalid length.
[  385.149507][T18779] bond44: entered promiscuous mode
[  385.151515][T18779] 8021q: adding VLAN 0 to HW filter on device bond44
[  385.156333][T18779] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3514'.
[  385.160023][T18779] bond44: entered allmulticast mode
[  385.211565][T18787] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3516'.
[  385.225939][T18787] veth0_to_team: entered promiscuous mode
[  385.230107][T18787] veth0_to_team: left promiscuous mode
[  385.345830][T18794] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3518'.
[  385.351194][T18794] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3518'.
[  385.354214][T18794] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3518'.
[  385.403439][T18796] wg1 speed is unknown, defaulting to 1000
[  385.405926][T18796] lo speed is unknown, defaulting to 1000
[  385.906888][T18815] netlink: 'syz.2.3525': attribute type 1 has an invalid length.
[  385.924877][T18815] bond56: entered promiscuous mode
[  385.926987][T18815] 8021q: adding VLAN 0 to HW filter on device bond56
[  385.935079][T18815] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3525'.
[  385.952561][T18815] bond56: entered allmulticast mode
[  386.018640][T18827] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  386.029049][T18829] netlink: 'syz.2.3529': attribute type 14 has an invalid length.
[  386.354670][T18863] bond33: (slave bridge0): Releasing backup interface
[  386.632913][T18889] syzkaller0: left promiscuous mode
[  386.635167][T18889] syzkaller0: left allmulticast mode
[  386.641239][T18889] sctp: [Deprecated]: syz.1.3543 (pid 18889) Use of int in maxseg socket option.
[  386.641239][T18889] Use struct sctp_assoc_value instead
[  386.859770][T18899] netlink: 'syz.1.3546': attribute type 2 has an invalid length.
[  386.933358][T18903] syzkaller0: entered promiscuous mode
[  386.935619][T18903] syzkaller0: entered allmulticast mode
[  387.173043][T18914] openvswitch: netlink: Flow key attr not present in new flow.
[  387.264161][T18918] bond57: entered promiscuous mode
[  387.900300][T18931] netlink: 'syz.1.3554': attribute type 4 has an invalid length.
[  388.081239][T18940] m1Ie5: entered promiscuous mode
[  390.299732][T18921] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  390.405216][T18960] __nla_validate_parse: 7 callbacks suppressed
[  390.405232][T18960] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3560'.
[  390.428307][T18961] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3561'.
[  390.469262][T18960] wg1 speed is unknown, defaulting to 1000
[  390.472832][T18960] lo speed is unknown, defaulting to 1000
[  390.642280][T18964] 8021q: VLANs not supported on gre0
[  390.831330][T18977] sctp: [Deprecated]: syz.0.3566 (pid 18977) Use of int in max_burst socket option deprecated.
[  390.831330][T18977] Use struct sctp_assoc_value instead
[  390.876532][   T34] audit: type=1804 audit(1770250892.427:9): pid=18979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3567" name="/newroot/1184/cgroup.controllers" dev="tmpfs" ino=6043 res=1 errno=0
[  390.885282][   T34] audit: type=1800 audit(1770250892.427:10): pid=18979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3567" name="cgroup.controllers" dev="tmpfs" ino=6043 res=0 errno=0
[  390.892827][   T34] audit: type=1800 audit(1770250892.447:11): pid=18979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3567" name="cgroup.controllers" dev="tmpfs" ino=6043 res=0 errno=0
[  390.900724][T18979] netlink: 'syz.0.3567': attribute type 11 has an invalid length.
[  390.958359][   T11] block nbd1: Possible stuck request ffff888109a78000: control (read@0,1024B). Runtime 90 seconds
[  390.962336][   T11] block nbd1: Possible stuck request ffff888109a78200: control (read@1024,1024B). Runtime 90 seconds
[  390.966178][   T11] block nbd1: Possible stuck request ffff888109a78400: control (read@2048,1024B). Runtime 90 seconds
[  390.970437][   T11] block nbd1: Possible stuck request ffff888109a78600: control (read@3072,1024B). Runtime 90 seconds
[  391.262078][T18988] wg1 speed is unknown, defaulting to 1000
[  391.266346][T18988] lo speed is unknown, defaulting to 1000
[  391.438050][T18998] wg1 speed is unknown, defaulting to 1000
[  391.440668][T18998] lo speed is unknown, defaulting to 1000
[  391.507261][T18995] wg1 speed is unknown, defaulting to 1000
[  391.510594][T18995] lo speed is unknown, defaulting to 1000
[  391.545218][T19000] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  391.545275][T18998] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  391.996178][T19015] netlink: 'syz.0.3575': attribute type 1 has an invalid length.
[  392.210281][T19020] syzkaller1: left promiscuous mode
[  392.211932][T19020] syzkaller1: left allmulticast mode
[  392.541816][T19048] syzkaller0: left promiscuous mode
[  392.543661][T19048] syzkaller0: left allmulticast mode
[  392.621877][T19055] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  392.624871][T19055] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  392.665108][T19059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3589'.
[  392.669492][T19059] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3589'.
[  392.712760][T19060] tipc: Resetting bearer <eth:syzkaller0>
[  392.749329][ T6676] wg1 speed is unknown, defaulting to 1000
[  392.894202][T19072] bond0: (slave syz_tun): Releasing backup interface
[  392.901275][T19072] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  392.913922][T19072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3592'.
[  393.267355][T19084] netlink: 'syz.0.3594': attribute type 1 has an invalid length.
[  393.294087][T19084] 8021q: adding VLAN 0 to HW filter on device bond53
[  393.297146][T19084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3594'.
[  393.413959][T19084] bond53 (unregistering): Released all slaves
[  393.602863][T19101] only policy match revision 0 supported
[  393.602876][T19101] unable to load match
[  393.645132][T19096] wg1 speed is unknown, defaulting to 1000
[  393.649823][T19096] lo speed is unknown, defaulting to 1000
[  393.699944][T19108] team0: left promiscuous mode
[  393.701654][T19108] team_slave_0: left promiscuous mode
[  393.704875][T19108] team_slave_1: left promiscuous mode
[  393.707190][T19108] batadv2: left promiscuous mode
[  393.715045][T19108] batadv3: left promiscuous mode
[  393.723145][T19108] veth1_vlan: left allmulticast mode
[  393.725204][T19108] macvlan0: left allmulticast mode
[  393.731253][T19108] tipc: Resetting bearer <eth:syzkaller0>
[  393.777814][T19108] bond0: left promiscuous mode
[  393.779384][T19108] bridge21: left promiscuous mode
[  393.780976][T19108] bond0: left allmulticast mode
[  393.787343][T19108] bridge21: left allmulticast mode
[  393.797698][T19108] bond43: left promiscuous mode
[  393.799240][T19108] bond43: left allmulticast mode
[  393.830831][T19108] bond44: left promiscuous mode
[  393.832246][T19108] bond44: left allmulticast mode
[  393.977418][T19119] bond53: left promiscuous mode
[  393.980668][T19119] bridge17: left promiscuous mode
[  393.983567][T19119] bond53: left allmulticast mode
[  393.986552][T19119] bridge17: left allmulticast mode
[  394.014278][T19119] bond56: left promiscuous mode
[  394.018546][T19119] bond56: left allmulticast mode
[  394.023298][T19119] bond57: left promiscuous mode
[  394.542503][T19122] wg1 speed is unknown, defaulting to 1000
[  394.547057][T19122] lo speed is unknown, defaulting to 1000
[  394.553945][T19126] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3605'.
[  394.565720][T19126] netlink: 'syz.1.3605': attribute type 21 has an invalid length.
[  394.571348][T19126] netlink: 'syz.1.3605': attribute type 22 has an invalid length.
[  394.573670][T19126] netlink: 'syz.1.3605': attribute type 23 has an invalid length.
[  394.575992][T19126] netlink: 'syz.1.3605': attribute type 25 has an invalid length.
[  394.579653][T19126] netlink: 'syz.1.3605': attribute type 26 has an invalid length.
[  394.582916][T19126] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3605'.
[  394.647118][T19122] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3604'.
[  394.652529][T19122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3604'.
[  394.695818][T19136] netlink: 'syz.1.3608': attribute type 6 has an invalid length.
[  394.699794][T19136] netlink: 'syz.1.3608': attribute type 5 has an invalid length.
[  394.705578][T19136] netlink: 'syz.1.3608': attribute type 4 has an invalid length.
[  394.765253][T19140] bond58: entered promiscuous mode
[  394.767168][T19140] 8021q: adding VLAN 0 to HW filter on device bond58
[  395.634856][T19163] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap3
[  395.644184][T19164] syzkaller1: entered promiscuous mode
[  395.646032][T19164] syzkaller1: entered allmulticast mode
[  395.695292][T19163] __nla_validate_parse: 6 callbacks suppressed
[  395.695304][T19163] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3618'.
[  395.773429][T19174] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3621'.
[  395.791554][T19176] bond45: entered promiscuous mode
[  395.793422][T19176] 8021q: adding VLAN 0 to HW filter on device bond45
[  395.800680][T19173] dvmrp12: entered allmulticast mode
[  395.838822][T19181] syzkaller0: entered promiscuous mode
[  395.840413][T19181] syzkaller0: entered allmulticast mode
[  395.846601][T19181] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  395.852483][T19181] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3624'.
[  395.855423][T19181] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3624'.
[  395.859110][T19181] macvlan0: entered allmulticast mode
[  395.860914][T19181] veth1_vlan: entered allmulticast mode
[  396.051649][T19197] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3628'.
[  396.530697][T19171] dvmrp12: left allmulticast mode
[  396.700556][T19210] wg1 speed is unknown, defaulting to 1000
[  396.703315][T19210] lo speed is unknown, defaulting to 1000
[  396.990921][T19232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3636'.
[  396.999742][T19232] vlan5: entered promiscuous mode
[  397.001394][T19232] bridge0: entered promiscuous mode
[  397.041928][T19235] validate_nla: 4 callbacks suppressed
[  397.041944][T19235] netlink: 'syz.0.3637': attribute type 28 has an invalid length.
[  397.046450][T19235] netlink: 'syz.0.3637': attribute type 28 has an invalid length.
[  397.049586][T19235] netlink: 'syz.0.3637': attribute type 28 has an invalid length.
[  397.052387][T19235] netlink: 'syz.0.3637': attribute type 28 has an invalid length.
[  397.055224][T19235] netlink: 'syz.0.3637': attribute type 28 has an invalid length.
[  397.059585][T19235] netlink: 'syz.0.3637': attribute type 28 has an invalid length.
[  397.067748][T19235] netlink: 'syz.0.3637': attribute type 28 has an invalid length.
[  397.070582][T19235] netlink: 'syz.0.3637': attribute type 28 has an invalid length.
[  397.076954][T19235] netlink: 'syz.0.3637': attribute type 28 has an invalid length.
[  397.081212][T19235] netlink: 'syz.0.3637': attribute type 28 has an invalid length.
[  397.095970][T19234] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3637'.
[  397.190377][T19247] veth1_vlan: left allmulticast mode
[  397.193952][T19247] tipc: Resetting bearer <eth:syzkaller0>
[  397.725841][T19257] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3642'.
[  397.863305][T19270] syzkaller0: entered promiscuous mode
[  397.865469][T19270] syzkaller0: entered allmulticast mode
[  398.074623][T19284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3650'.
[  398.081968][T19284] vlan5: entered promiscuous mode
[  398.098680][T19288] sit3: entered promiscuous mode
[  398.170400][T19295] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3654'.
[  398.347355][T19317] bond60: entered promiscuous mode
[  398.350734][T19317] 8021q: adding VLAN 0 to HW filter on device bond60
[  398.365689][T19320] bond46: entered promiscuous mode
[  398.367476][T19320] 8021q: adding VLAN 0 to HW filter on device bond46
[  398.445261][T19330] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  398.449768][T19327] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  399.381453][T19360] openvswitch: netlink: Message has 572 unknown bytes.
[  399.385413][T19360] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  399.416564][T19356] team0 (unregistering): Port device team_slave_0 removed
[  399.420762][T19356] team0 (unregistering): Port device team_slave_1 removed
[  399.424492][T19356] team0 (unregistering): Port device batadv2 removed
[  399.428188][T19356] team0 (unregistering): Port device batadv3 removed
[  399.622538][T19374] wg1 speed is unknown, defaulting to 1000
[  399.626128][T19374] lo speed is unknown, defaulting to 1000
[  399.721033][T19384] veth22: entered allmulticast mode
[  400.652980][T19391] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2
[  400.660833][T19391] batman_adv: batadv0: Adding interface: ip6gretap2
[  400.663397][T19391] batman_adv: batadv0: Interface activated: ip6gretap2
[  400.815168][T19406] tipc: Resetting bearer <eth:syzkaller0>
[  400.817381][T19406] syzkaller0: left promiscuous mode
[  400.819282][T19406] syzkaller0: left allmulticast mode
[  400.823567][T19406] bond45: left promiscuous mode
[  400.827355][T19406] sit3: left promiscuous mode
[  400.832391][T19406] bond46: left promiscuous mode
[  401.577463][T19410] __nla_validate_parse: 4 callbacks suppressed
[  401.577474][T19410] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3685'.
[  401.583057][T19410] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3685'.
[  401.586679][T19410] syzkaller1: left promiscuous mode
[  401.588605][T19410] syzkaller1: left allmulticast mode
[  401.651790][T19412] bond53: option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  401.663423][T19412] bond53 (unregistering): Released all slaves
[  401.696932][T19418] veth0_vlan: left promiscuous mode
[  401.701069][T19418] veth0_vlan: entered promiscuous mode
[  401.705890][T19418] `: Device veth0_vlan failed to register rx_handler
[  401.768300][T19416] wg1 speed is unknown, defaulting to 1000
[  401.770871][T19416] lo speed is unknown, defaulting to 1000
[  401.796377][T19417] wg1 speed is unknown, defaulting to 1000
[  401.822003][T19417] lo speed is unknown, defaulting to 1000
[  401.906101][T19435] bond53: entered promiscuous mode
[  401.908824][T19435] 8021q: adding VLAN 0 to HW filter on device bond53
[  401.912207][T19433] pim6reg0: tun_chr_ioctl cmd 1074025677
[  401.914167][T19433] pim6reg0: linktype set to 773
[  401.927031][T19436] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3691'.
[  401.935148][T19439] pim6reg0: tun_chr_ioctl cmd 1074025673
[  401.938339][T19436] bond53: entered allmulticast mode
[  401.966068][T19435] bond53: (slave bridge0): making interface the new active one
[  401.973331][T19435] bridge0: entered promiscuous mode
[  401.975143][T19435] bridge0: entered allmulticast mode
[  401.979967][T19435] bond53: (slave bridge0): Enslaving as an active interface with an up link
[  401.990306][T19436] bond53: (slave bridge27): Enslaving as a backup interface with an up link
[  402.050170][T19446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3693'.
[  402.203509][T19456] validate_nla: 32 callbacks suppressed
[  402.203522][T19456] netlink: 'syz.1.3696': attribute type 1 has an invalid length.
[  402.234003][T19456] bond47: entered promiscuous mode
[  402.242812][T19456] 8021q: adding VLAN 0 to HW filter on device bond47
[  402.260330][T19456] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3696'.
[  402.912227][T19463] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3698'.
[  402.920021][T19463] netlink: 'syz.0.3698': attribute type 11 has an invalid length.
[  402.983271][T19467] netlink: 'syz.0.3700': attribute type 1 has an invalid length.
[  403.020045][T19467] bond54: entered promiscuous mode
[  403.022203][T19467] 8021q: adding VLAN 0 to HW filter on device bond54
[  403.034356][T19470] netlink: 'syz.2.3701': attribute type 1 has an invalid length.
[  403.040787][T19467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3700'.
[  403.047271][T19470] workqueue: Failed to create a rescuer kthread for wq "bond61": -EINTR
[  403.075026][T19476] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3702'.
[  403.131061][T19482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3703'.
[  403.305549][T19482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3703'.
[  403.800898][T19517] openvswitch: netlink: Flow key attribute not present in set flow.
[  403.956907][T19523] netlink: 'syz.0.3715': attribute type 2 has an invalid length.
[  403.985154][T19523] bond53: (slave bridge0): Releasing backup interface
[  403.987302][T19523] bond53: (slave bridge0): the permanent HWaddr of slave - 5a:b1:0b:9c:4c:37 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  403.994886][T19523] bridge0 (unregistering): left promiscuous mode
[  403.997377][T19523] bridge0 (unregistering): left allmulticast mode
[  404.001694][T19523] bond53: (slave bridge27): making interface the new active one
[  404.004385][T19523] bridge27: entered promiscuous mode
[  404.006248][T19523] bridge27: entered allmulticast mode
[  404.265833][T19532] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  404.452645][T19545] wg1 speed is unknown, defaulting to 1000
[  404.456236][T19545] lo speed is unknown, defaulting to 1000
[  404.782125][T19579] netlink: 'syz.1.3724': attribute type 1 has an invalid length.
[  404.800039][T19579] bond48: entered promiscuous mode
[  404.803560][T19579] 8021q: adding VLAN 0 to HW filter on device bond48
[  404.806975][T19581] netlink: 'syz.2.3725': attribute type 12 has an invalid length.
[  404.961821][T19594] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  405.691961][T19631] vxcan4: entered allmulticast mode
[  405.730641][T19637] wg1 speed is unknown, defaulting to 1000
[  405.752288][T19637] lo speed is unknown, defaulting to 1000
[  405.752332][T19632] wg1 speed is unknown, defaulting to 1000
[  405.766245][T19632] lo speed is unknown, defaulting to 1000
[  405.830502][T19646] batadv_slave_0: Caught tx_queue_len zero misconfig
[  405.919300][T19651] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  406.175101][T19656] erspan0: left allmulticast mode
[  406.178012][T19656] bond51: left promiscuous mode
[  406.179688][T19656] bond52: left promiscuous mode
[  406.181214][T19656] bridge26: left promiscuous mode
[  406.182916][T19656] bond52: left allmulticast mode
[  406.184473][T19656] bridge26: left allmulticast mode
[  406.186502][T19656] bond53: left promiscuous mode
[  406.188593][T19656] bridge27: left promiscuous mode
[  406.190406][T19656] bond53: left allmulticast mode
[  406.191915][T19656] bridge27: left allmulticast mode
[  406.193658][T19656] bond54: left promiscuous mode
[  406.783681][T19661] netlink: 'syz.1.3747': attribute type 12 has an invalid length.
[  407.335160][T19689] __nla_validate_parse: 8 callbacks suppressed
[  407.335318][T19689] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3756'.
[  407.342721][T19689] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3756'.
[  407.346321][T19689] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3756'.
[  407.427371][T19693] macvlan0: entered promiscuous mode
[  407.429693][T19693] macvlan0: left allmulticast mode
[  408.015887][T19699] dvmrp12: entered allmulticast mode
[  408.171972][T19700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3760'.
[  408.768549][T19697] dvmrp12: left allmulticast mode
[  408.961895][T19714] 98F: renamed from lo
[  408.988784][ T5259] udevd[5259]: worker [14482] /devices/virtual/block/nbd1 is taking a long time
[  409.044546][T19716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3766'.
[  409.103005][T19717] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3766'.
[  409.865951][T19732] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3771'.
[  409.980454][T19740] netlink: 'syz.1.3774': attribute type 1 has an invalid length.
[  409.995797][T19740] bond49: entered promiscuous mode
[  409.998293][T19740] 8021q: adding VLAN 0 to HW filter on device bond49
[  410.014813][T19740] syzkaller0: entered promiscuous mode
[  410.016458][T19740] syzkaller0: entered allmulticast mode
[  410.108832][T19752] netlink: 'syz.1.3777': attribute type 1 has an invalid length.
[  410.124249][T19752] bond50: entered promiscuous mode
[  410.126111][T19752] 8021q: adding VLAN 0 to HW filter on device bond50
[  410.530682][T19769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3781'.
[  410.533525][T19769] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3781'.
[  410.804041][T19774] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  410.807546][T19774] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  411.086293][T19781] wg1 speed is unknown, defaulting to 1000
[  411.093860][T19781] 98F speed is unknown, defaulting to 1000
[  411.560105][T19796] wg1 speed is unknown, defaulting to 1000
[  411.562696][T19796] 98F speed is unknown, defaulting to 1000
[  411.906384][T19806] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3789'.
[  411.913390][T19806] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  411.921742][T19806] macvlan0: left promiscuous mode
[  411.923430][T19806] macvlan0: entered allmulticast mode
[  411.925542][T19806] veth1_vlan: entered allmulticast mode
[  411.992345][T19809] netlink: 'syz.2.3790': attribute type 1 has an invalid length.
[  412.059401][T19809] bond61: entered promiscuous mode
[  412.063260][T19809] 8021q: adding VLAN 0 to HW filter on device bond61
[  412.152664][T19820] netlink: 'syz.1.3793': attribute type 6 has an invalid length.
[  412.156989][T19820] netlink: 'syz.1.3793': attribute type 5 has an invalid length.
[  412.175121][T19820] netlink: 'syz.1.3793': attribute type 4 has an invalid length.
[  412.175121][T19821] netlink: 'syz.1.3793': attribute type 4 has an invalid length.
[  412.334716][T19836] gretap0: entered promiscuous mode
[  412.343573][T19836] gretap0: left promiscuous mode
[  412.359809][T19836] 8021q: adding VLAN 0 to HW filter on device bond0
[  412.364730][T19836] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  412.370533][ T6676] 98F speed is unknown, defaulting to 1000
[  412.372736][ T6676] syz2: Port: 1 Link ACTIVE
[  412.627446][T19852] netlink: 'syz.0.3801': attribute type 2 has an invalid length.
[  412.641906][T19852] : entered promiscuous mode
[  412.648214][T19852] netlink: 'syz.0.3801': attribute type 2 has an invalid length.
[  412.651509][T19852] : left promiscuous mode
[  412.776648][T19856] netlink: 'syz.0.3803': attribute type 1 has an invalid length.
[  412.779818][T19856] __nla_validate_parse: 10 callbacks suppressed
[  412.779860][T19856] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3803'.
[  412.897001][T19860] veth1_vlan: left allmulticast mode
[  412.898863][T19860] macvlan0: entered promiscuous mode
[  412.900482][T19860] macvlan0: left allmulticast mode
[  412.921132][T19860] bond62: Unable to set up delay as MII monitoring is disabled
[  412.925656][T19860] bond62 (unregistering): Released all slaves
[  413.126929][T19870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  413.219880][T19874] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3810'.
[  413.223394][T19874] netlink: 606 bytes leftover after parsing attributes in process `syz.2.3810'.
[  413.226944][T19874] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3810'.
[  413.358602][T19880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3812'.
[  413.362741][T19880] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  413.366445][T19880] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  413.411997][T19885] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.3813'.
[  413.488390][T19886] tipc: Resetting bearer <eth:syzkaller0>
[  413.520265][ T6672] wg1 speed is unknown, defaulting to 1000
[  413.701181][T19894] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3815'.
[  413.877256][T19902] wg1 speed is unknown, defaulting to 1000
[  413.881727][T19902] 98F speed is unknown, defaulting to 1000
[  413.943182][T19908] xt_bpf: check failed: parse error
[  414.392138][T19952] bond51: entered promiscuous mode
[  414.397498][T19952] 8021q: adding VLAN 0 to HW filter on device bond51
[  414.405678][T19932] macvlan0: left promiscuous mode
[  414.407334][T19932] tipc: Resetting bearer <eth:syzkaller0>
[  414.411036][T19932] syzkaller0: left promiscuous mode
[  414.412603][T19932] syzkaller0: left allmulticast mode
[  414.415220][T19952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3827'.
[  414.423106][T19932] bond58: left promiscuous mode
[  414.430598][T19932] bond60: left promiscuous mode
[  414.437335][T19932] bond61: left promiscuous mode
[  414.443062][T19931] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  414.451753][T19950] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3825'.
[  415.238833][T19965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3831'.
[  416.154317][T19977] ipt_rpfilter: unknown options
[  416.181027][T19980] A link change request failed with some changes committed already. Interface 98F may have been left with an inconsistent configuration, please check.
[  416.196183][  T782] 98F speed is unknown, defaulting to 1000
[  416.200538][  T782] syz2: Port: 1 Link DOWN
[  416.324628][T19987] validate_nla: 10 callbacks suppressed
[  416.324640][T19987] netlink: 'syz.0.3839': attribute type 1 has an invalid length.
[  416.360518][T19987] 8021q: adding VLAN 0 to HW filter on device bond55
[  416.540489][T19997] wg1 speed is unknown, defaulting to 1000
[  416.544045][T19997] 98F speed is unknown, defaulting to 1000
[  416.851901][T20046] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  416.854118][T20046] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  416.872201][T20046] macvlan0: entered allmulticast mode
[  416.874418][T20046] veth1_vlan: entered allmulticast mode
[  416.922295][T20050] netlink: 'syz.1.3855': attribute type 1 has an invalid length.
[  416.944411][T20055] netlink: 'syz.2.3857': attribute type 1 has an invalid length.
[  416.946622][T20050] bond52: entered promiscuous mode
[  416.949816][T20050] 8021q: adding VLAN 0 to HW filter on device bond52
[  416.980668][T20055] bond62: entered promiscuous mode
[  416.983305][T20055] 8021q: adding VLAN 0 to HW filter on device bond62
[  416.986734][T20050] bond52: entered allmulticast mode
[  417.001280][T20050] bond52: (slave bridge24): making interface the new active one
[  417.004129][T20050] bridge24: entered promiscuous mode
[  417.006230][T20050] bridge24: entered allmulticast mode
[  417.011177][T20050] bond52: (slave bridge24): Enslaving as an active interface with an up link
[  417.019211][T20050] netlink: 'syz.1.3855': attribute type 1 has an invalid length.
[  417.074561][T20062] netlink: 'syz.1.3858': attribute type 4 has an invalid length.
[  417.078925][T20062] netlink: 'syz.1.3858': attribute type 4 has an invalid length.
[  417.092092][T20062] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  417.144353][T20066] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  417.246147][T20073] wg1 speed is unknown, defaulting to 1000
[  417.249965][T20073] 98F speed is unknown, defaulting to 1000
[  417.438435][T20078] bridge25: port 1(veth15) entered blocking state
[  417.441390][T20078] bridge25: port 1(veth15) entered disabled state
[  417.443508][T20078] veth15: entered allmulticast mode
[  417.447093][T20078] veth15: entered promiscuous mode
[  417.452803][T20078] veth0_to_bond: left promiscuous mode
[  417.454819][T20078] bridge12: port 2(veth0_to_bond) entered disabled state
[  417.460153][T20078] bridge25: port 2(veth0_to_bond) entered blocking state
[  417.462888][T20078] bridge25: port 2(veth0_to_bond) entered disabled state
[  417.466594][T20078] veth0_to_bond: entered promiscuous mode
[  417.489267][T20078] bridge25: port 3(veth17) entered blocking state
[  417.491827][T20078] bridge25: port 3(veth17) entered disabled state
[  417.494154][T20078] veth17: entered allmulticast mode
[  417.497950][T20078] veth17: entered promiscuous mode
[  417.577416][T20079] batman_adv: batadv0: Interface activated: dummy0
[  417.580003][T20079] batadv0: mtu less than device minimum
[  417.582366][T20079] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  417.585971][T20079] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  417.589660][T20079] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  417.593323][T20079] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  417.596979][T20079] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  417.600665][T20079] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  417.604249][T20079] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  417.607997][T20079] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  417.611735][T20079] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  417.901554][T20088] netlink: 'syz.2.3864': attribute type 1 has an invalid length.
[  417.904616][T20088] netlink: 'syz.2.3864': attribute type 7 has an invalid length.
[  417.907533][T20088] netlink: 'syz.2.3864': attribute type 8 has an invalid length.
[  417.910809][T20088] __nla_validate_parse: 14 callbacks suppressed
[  417.910825][T20088] netlink: 208 bytes leftover after parsing attributes in process `syz.2.3864'.
[  417.925089][T20088] netlink: 'syz.2.3864': attribute type 1 has an invalid length.
[  418.364013][T20099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3868'.
[  418.408263][T20102] : entered promiscuous mode
[  418.411608][T20102] : left promiscuous mode
[  418.810879][T20111] wg1 speed is unknown, defaulting to 1000
[  418.815807][T20111] 98F speed is unknown, defaulting to 1000
[  419.281967][T20143] wg1 speed is unknown, defaulting to 1000
[  419.285114][T20143] 98F speed is unknown, defaulting to 1000
[  419.318031][T20148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3876'.
[  419.350938][T20148] 8021q: adding VLAN 0 to HW filter on device bond63
[  419.802294][T20190] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3882'.
[  420.019345][T20200] tipc: Disabling bearer <udp:syz0>
[  420.124830][T20204] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  420.406699][T20211] veth1_vlan: left allmulticast mode
[  420.414204][T20211] macvlan0: left allmulticast mode
[  420.418433][T20211] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  420.427911][T20211] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  420.456510][T20214] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3891'.
[  420.647307][T20231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3896'.
[  420.686328][T20231] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3896'.
[  421.047920][   T11] block nbd1: Possible stuck request ffff888109a78000: control (read@0,1024B). Runtime 120 seconds
[  421.051381][   T11] block nbd1: Possible stuck request ffff888109a78200: control (read@1024,1024B). Runtime 120 seconds
[  421.055099][   T11] block nbd1: Possible stuck request ffff888109a78400: control (read@2048,1024B). Runtime 120 seconds
[  421.058406][   T11] block nbd1: Possible stuck request ffff888109a78600: control (read@3072,1024B). Runtime 120 seconds
[  421.107401][T20236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3897'.
[  421.123190][T20236] bond56: option coupled_control: invalid value (115)
[  421.126795][T20236] bond56 (unregistering): Released all slaves
[  421.472922][T20258] syzkaller0: entered promiscuous mode
[  421.474705][T20258] syzkaller0: entered allmulticast mode
[  421.481338][T20258] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  421.485828][T20258] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3902'.
[  421.488874][T20258] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3902'.
[  421.491925][T20258] macvlan0: entered allmulticast mode
[  421.493644][T20258] veth1_vlan: entered allmulticast mode
[  422.269637][T20272] SET target dimension over the limit!
[  422.773954][T20314] wg1 speed is unknown, defaulting to 1000
[  422.777437][T20314] 98F speed is unknown, defaulting to 1000
[  424.798160][   T55] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  424.800284][   T55] Bluetooth: hci2: command 0x0401 tx timeout
[  438.841150][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  438.845998][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  438.850525][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  438.854289][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  438.857560][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  438.884684][T20365] wg1 speed is unknown, defaulting to 1000
[  438.887309][T20365] 98F speed is unknown, defaulting to 1000
[  439.006553][T20365] chnl_net:caif_netlink_parms(): no params data found
[  439.091179][T20365] bridge0: port 1(bridge_slave_0) entered blocking state
[  439.094314][T20365] bridge0: port 1(bridge_slave_0) entered disabled state
[  439.097342][T20365] bridge_slave_0: entered allmulticast mode
[  439.101793][T20365] bridge_slave_0: entered promiscuous mode
[  439.108609][T20365] bridge0: port 2(bridge_slave_1) entered blocking state
[  439.111670][T20365] bridge0: port 2(bridge_slave_1) entered disabled state
[  439.114970][T20365] bridge_slave_1: entered allmulticast mode
[  439.119756][T20365] bridge_slave_1: entered promiscuous mode
[  439.146762][T20365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  439.152094][T20365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  439.171957][T20365] team0: Port device team_slave_0 added
[  439.175561][T20365] team0: Port device team_slave_1 added
[  439.192342][T20365] batman_adv: batadv0: Adding interface: batadv_slave_0
[  439.194539][T20365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  439.203129][T20365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  439.208177][T20365] batman_adv: batadv0: Adding interface: batadv_slave_1
[  439.210498][T20365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  439.220608][T20365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  439.261140][T20365] hsr_slave_0: entered promiscuous mode
[  439.263882][T20365] hsr_slave_1: entered promiscuous mode
[  439.266208][T20365] debugfs: 'hsr0' already exists in 'hsr'
[  439.268251][T20365] Cannot create hsr debugfs directory
[  439.849590][ T5201] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  439.856004][ T5201] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  439.860751][ T5201] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  439.866942][ T5201] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  439.871481][ T5201] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  439.878544][ T5814] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  439.886888][ T5814] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  439.891759][ T5814] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  439.897984][ T5814] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  439.901091][ T5814] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  439.945253][T20377] wg1 speed is unknown, defaulting to 1000
[  439.950087][T20377] 98F speed is unknown, defaulting to 1000
[  439.950279][T20375] wg1 speed is unknown, defaulting to 1000
[  439.956817][T20375] 98F speed is unknown, defaulting to 1000
[  440.111736][T20377] chnl_net:caif_netlink_parms(): no params data found
[  440.143113][T20375] chnl_net:caif_netlink_parms(): no params data found
[  440.205860][T20377] bridge0: port 1(bridge_slave_0) entered blocking state
[  440.208262][T20377] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.210681][T20377] bridge_slave_0: entered allmulticast mode
[  440.213474][T20377] bridge_slave_0: entered promiscuous mode
[  440.230003][T20377] bridge0: port 2(bridge_slave_1) entered blocking state
[  440.232357][T20377] bridge0: port 2(bridge_slave_1) entered disabled state
[  440.234796][T20377] bridge_slave_1: entered allmulticast mode
[  440.238235][T20377] bridge_slave_1: entered promiscuous mode
[  440.282897][T20377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  440.286367][T20375] bridge0: port 1(bridge_slave_0) entered blocking state
[  440.289488][T20375] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.292362][T20375] bridge_slave_0: entered allmulticast mode
[  440.296078][T20375] bridge_slave_0: entered promiscuous mode
[  440.302462][T20377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  440.306011][T20375] bridge0: port 2(bridge_slave_1) entered blocking state
[  440.309009][T20375] bridge0: port 2(bridge_slave_1) entered disabled state
[  440.312041][T20375] bridge_slave_1: entered allmulticast mode
[  440.315806][T20375] bridge_slave_1: entered promiscuous mode
[  440.353038][T20377] team0: Port device team_slave_0 added
[  440.369094][T20377] team0: Port device team_slave_1 added
[  440.373642][T20375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  440.391461][T20375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  440.416002][T20377] batman_adv: batadv0: Adding interface: batadv_slave_0
[  440.418557][T20377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  440.426725][T20377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  440.441210][T20377] batman_adv: batadv0: Adding interface: batadv_slave_1
[  440.443767][T20377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  440.453829][T20377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  440.461015][T20375] team0: Port device team_slave_0 added
[  440.471366][T20375] team0: Port device team_slave_1 added
[  440.506431][T20375] batman_adv: batadv0: Adding interface: batadv_slave_0
[  440.509760][T20375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  440.518089][T20375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  440.528483][T20377] hsr_slave_0: entered promiscuous mode
[  440.531580][T20377] hsr_slave_1: entered promiscuous mode
[  440.534430][T20377] debugfs: 'hsr0' already exists in 'hsr'
[  440.536543][T20377] Cannot create hsr debugfs directory
[  440.539439][T20375] batman_adv: batadv0: Adding interface: batadv_slave_1
[  440.541549][T20375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  440.549486][T20375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  440.625547][T20375] hsr_slave_0: entered promiscuous mode
[  440.629227][T20375] hsr_slave_1: entered promiscuous mode
[  440.632031][T20375] debugfs: 'hsr0' already exists in 'hsr'
[  440.634133][T20375] Cannot create hsr debugfs directory
[  440.877857][ T5814] Bluetooth: hci3: command tx timeout
[  441.919764][ T5820] Bluetooth: hci4: command tx timeout
[  441.922243][ T5814] Bluetooth: hci5: command tx timeout
[  442.957862][ T5814] Bluetooth: hci3: command tx timeout
[  444.007995][ T5814] Bluetooth: hci5: command tx timeout
[  444.010140][ T5814] Bluetooth: hci4: command tx timeout
[  445.038039][ T5820] Bluetooth: hci3: command tx timeout
[  446.077866][ T5820] Bluetooth: hci4: command tx timeout
[  446.079600][ T5820] Bluetooth: hci5: command tx timeout
[  447.118041][ T5814] Bluetooth: hci3: command tx timeout
[  448.157929][ T5814] Bluetooth: hci5: command tx timeout
[  448.160011][ T5814] Bluetooth: hci4: command tx timeout
[  451.118092][   T11] block nbd1: Possible stuck request ffff888109a78000: control (read@0,1024B). Runtime 150 seconds
[  451.122422][   T11] block nbd1: Possible stuck request ffff888109a78200: control (read@1024,1024B). Runtime 150 seconds
[  451.126685][   T11] block nbd1: Possible stuck request ffff888109a78400: control (read@2048,1024B). Runtime 150 seconds
[  451.130371][   T11] block nbd1: Possible stuck request ffff888109a78600: control (read@3072,1024B). Runtime 150 seconds
[  481.198448][   T11] block nbd1: Possible stuck request ffff888109a78000: control (read@0,1024B). Runtime 180 seconds
[  481.202086][   T11] block nbd1: Possible stuck request ffff888109a78200: control (read@1024,1024B). Runtime 180 seconds
[  481.205220][   T11] block nbd1: Possible stuck request ffff888109a78400: control (read@2048,1024B). Runtime 180 seconds
[  481.208749][   T11] block nbd1: Possible stuck request ffff888109a78600: control (read@3072,1024B). Runtime 180 seconds
[  482.927867][ T5259] udevd[5259]: worker [14482] /devices/virtual/block/nbd1 timeout; kill it
[  482.931381][ T5259] udevd[5259]: seq 24337 '/devices/virtual/block/nbd1' killed
[  499.842872][ T5814] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  499.846530][ T5814] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  499.851090][ T5814] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  499.854240][ T5814] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  499.856934][ T5814] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  499.893713][T20396] wg1 speed is unknown, defaulting to 1000
[  499.897301][T20396] 98F speed is unknown, defaulting to 1000
[  500.006434][T20396] chnl_net:caif_netlink_parms(): no params data found
[  500.063128][T20396] bridge0: port 1(bridge_slave_0) entered blocking state
[  500.065423][T20396] bridge0: port 1(bridge_slave_0) entered disabled state
[  500.068556][T20396] bridge_slave_0: entered allmulticast mode
[  500.073647][T20396] bridge_slave_0: entered promiscuous mode
[  500.078633][T20396] bridge0: port 2(bridge_slave_1) entered blocking state
[  500.081076][T20396] bridge0: port 2(bridge_slave_1) entered disabled state
[  500.083929][T20396] bridge_slave_1: entered allmulticast mode
[  500.087151][T20396] bridge_slave_1: entered promiscuous mode
[  500.110636][T20396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  500.116598][T20396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  500.140762][T20396] team0: Port device team_slave_0 added
[  500.146222][T20396] team0: Port device team_slave_1 added
[  500.163917][T20396] batman_adv: batadv0: Adding interface: batadv_slave_0
[  500.165988][T20396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  500.174049][T20396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  500.178861][T20396] batman_adv: batadv0: Adding interface: batadv_slave_1
[  500.180909][T20396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  500.188635][T20396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  500.218671][T20396] hsr_slave_0: entered promiscuous mode
[  500.221064][T20396] hsr_slave_1: entered promiscuous mode
[  500.224285][T20396] debugfs: 'hsr0' already exists in 'hsr'
[  500.225972][T20396] Cannot create hsr debugfs directory
[  500.880295][ T5814] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  500.883389][ T5814] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  500.887178][   T55] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  500.887851][ T5814] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  500.893830][ T5814] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  500.896895][ T5814] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  500.899608][ T5814] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  500.905229][ T5814] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  500.907431][ T5814] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  500.911060][ T5814] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  500.953292][T20406] wg1 speed is unknown, defaulting to 1000
[  500.955979][T20406] 98F speed is unknown, defaulting to 1000
[  500.986435][T20407] wg1 speed is unknown, defaulting to 1000
[  500.989955][T20407] 98F speed is unknown, defaulting to 1000
[  501.120795][T20406] chnl_net:caif_netlink_parms(): no params data found
[  501.163169][T20407] chnl_net:caif_netlink_parms(): no params data found
[  501.230048][T20406] bridge0: port 1(bridge_slave_0) entered blocking state
[  501.232865][T20406] bridge0: port 1(bridge_slave_0) entered disabled state
[  501.235726][T20406] bridge_slave_0: entered allmulticast mode
[  501.240539][T20406] bridge_slave_0: entered promiscuous mode
[  501.252840][T20406] bridge0: port 2(bridge_slave_1) entered blocking state
[  501.255576][T20406] bridge0: port 2(bridge_slave_1) entered disabled state
[  501.258866][T20406] bridge_slave_1: entered allmulticast mode
[  501.261940][T20406] bridge_slave_1: entered promiscuous mode
[  501.302039][T20406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  501.305037][T20407] bridge0: port 1(bridge_slave_0) entered blocking state
[  501.309978][T20407] bridge0: port 1(bridge_slave_0) entered disabled state
[  501.312373][T20407] bridge_slave_0: entered allmulticast mode
[  501.315401][T20407] bridge_slave_0: entered promiscuous mode
[  501.320190][T20406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  501.323466][T20407] bridge0: port 2(bridge_slave_1) entered blocking state
[  501.325884][T20407] bridge0: port 2(bridge_slave_1) entered disabled state
[  501.328611][T20407] bridge_slave_1: entered allmulticast mode
[  501.332166][T20407] bridge_slave_1: entered promiscuous mode
[  501.375408][T20406] team0: Port device team_slave_0 added
[  501.383867][T20407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  501.390029][T20406] team0: Port device team_slave_1 added
[  501.394736][T20407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  501.442372][T20406] batman_adv: batadv0: Adding interface: batadv_slave_0
[  501.444488][T20406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  501.453247][T20406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  501.459662][T20407] team0: Port device team_slave_0 added
[  501.462571][T20406] batman_adv: batadv0: Adding interface: batadv_slave_1
[  501.465142][T20406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  501.475248][T20406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  501.482332][T20407] team0: Port device team_slave_1 added
[  501.518859][T20407] batman_adv: batadv0: Adding interface: batadv_slave_0
[  501.521312][T20407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  501.530441][T20407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  501.545147][T20407] batman_adv: batadv0: Adding interface: batadv_slave_1
[  501.548402][T20407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  501.558835][T20407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  501.585174][T20406] hsr_slave_0: entered promiscuous mode
[  501.588188][T20406] hsr_slave_1: entered promiscuous mode
[  501.591027][T20406] debugfs: 'hsr0' already exists in 'hsr'
[  501.592961][T20406] Cannot create hsr debugfs directory
[  501.644543][T20407] hsr_slave_0: entered promiscuous mode
[  501.647317][T20407] hsr_slave_1: entered promiscuous mode
[  501.650110][T20407] debugfs: 'hsr0' already exists in 'hsr'
[  501.652015][T20407] Cannot create hsr debugfs directory
[  501.917949][ T5820] Bluetooth: hci6: command tx timeout
[  502.957998][ T5820] Bluetooth: hci8: command tx timeout
[  502.961764][ T5820] Bluetooth: hci7: command tx timeout
[  503.997927][   T55] Bluetooth: hci6: command tx timeout
[  505.037942][   T55] Bluetooth: hci7: command tx timeout
[  505.040851][ T5820] Bluetooth: hci8: command tx timeout
[  506.078167][   T55] Bluetooth: hci6: command tx timeout
[  507.117977][T20379] Bluetooth: hci8: command tx timeout
[  507.119841][ T5820] Bluetooth: hci7: command tx timeout
[  508.158106][ T5820] Bluetooth: hci6: command tx timeout
[  508.878241][ T5820] Bluetooth: hci1: command 0x0406 tx timeout
[  509.197975][   T55] Bluetooth: hci7: command tx timeout
[  509.200147][   T55] Bluetooth: hci8: command tx timeout
[  511.278269][   T11] block nbd1: Possible stuck request ffff888109a78000: control (read@0,1024B). Runtime 210 seconds
[  511.281602][   T11] block nbd1: Possible stuck request ffff888109a78200: control (read@1024,1024B). Runtime 210 seconds
[  511.284885][   T11] block nbd1: Possible stuck request ffff888109a78400: control (read@2048,1024B). Runtime 210 seconds
[  511.288691][   T11] block nbd1: Possible stuck request ffff888109a78600: control (read@3072,1024B). Runtime 210 seconds
[  541.359302][   T11] block nbd1: Possible stuck request ffff888109a78000: control (read@0,1024B). Runtime 240 seconds
[  541.363326][   T11] block nbd1: Possible stuck request ffff888109a78200: control (read@1024,1024B). Runtime 240 seconds
[  541.367418][   T11] block nbd1: Possible stuck request ffff888109a78400: control (read@2048,1024B). Runtime 240 seconds
[  541.372167][   T11] block nbd1: Possible stuck request ffff888109a78600: control (read@3072,1024B). Runtime 240 seconds
[  559.858178][   T55] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  559.861799][   T55] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  559.864534][   T55] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  559.867407][   T55] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  559.870353][   T55] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  559.898799][T20424] wg1 speed is unknown, defaulting to 1000
[  559.901274][T20424] 98F speed is unknown, defaulting to 1000
[  559.982741][T20424] chnl_net:caif_netlink_parms(): no params data found
[  560.041171][T20424] bridge0: port 1(bridge_slave_0) entered blocking state
[  560.043424][T20424] bridge0: port 1(bridge_slave_0) entered disabled state
[  560.045739][T20424] bridge_slave_0: entered allmulticast mode
[  560.048925][T20424] bridge_slave_0: entered promiscuous mode
[  560.052742][T20424] bridge0: port 2(bridge_slave_1) entered blocking state
[  560.055017][T20424] bridge0: port 2(bridge_slave_1) entered disabled state
[  560.058128][T20424] bridge_slave_1: entered allmulticast mode
[  560.061623][T20424] bridge_slave_1: entered promiscuous mode
[  560.082738][T20424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  560.088356][T20424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  560.114439][T20424] team0: Port device team_slave_0 added
[  560.118794][T20424] team0: Port device team_slave_1 added
[  560.143274][T20424] batman_adv: batadv0: Adding interface: batadv_slave_0
[  560.145856][T20424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  560.154747][T20424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  560.160649][T20424] batman_adv: batadv0: Adding interface: batadv_slave_1
[  560.162999][T20424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  560.172034][T20424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  560.205481][T20424] hsr_slave_0: entered promiscuous mode
[  560.208789][T20424] hsr_slave_1: entered promiscuous mode
[  560.211520][T20424] debugfs: 'hsr0' already exists in 'hsr'
[  560.213654][T20424] Cannot create hsr debugfs directory
[  561.889324][   T55] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  561.893234][   T55] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  561.895957][   T55] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  561.899258][   T55] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  561.902063][   T55] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  561.917836][ T5820] Bluetooth: hci9: command tx timeout
[  561.931415][T20434] wg1 speed is unknown, defaulting to 1000
[  561.938196][T20434] 98F speed is unknown, defaulting to 1000
[  561.940320][   T55] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  561.943988][   T55] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  561.947090][   T55] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  561.950550][   T55] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  561.953056][   T55] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  562.005512][T20436] wg1 speed is unknown, defaulting to 1000
[  562.021419][T20436] 98F speed is unknown, defaulting to 1000
[  562.112323][T20434] chnl_net:caif_netlink_parms(): no params data found
[  562.221719][T20434] bridge0: port 1(bridge_slave_0) entered blocking state
[  562.224503][T20434] bridge0: port 1(bridge_slave_0) entered disabled state
[  562.227276][T20434] bridge_slave_0: entered allmulticast mode
[  562.231531][T20434] bridge_slave_0: entered promiscuous mode
[  562.235820][T20436] chnl_net:caif_netlink_parms(): no params data found
[  562.245703][T20434] bridge0: port 2(bridge_slave_1) entered blocking state
[  562.248516][T20434] bridge0: port 2(bridge_slave_1) entered disabled state
[  562.251604][T20434] bridge_slave_1: entered allmulticast mode
[  562.255493][T20434] bridge_slave_1: entered promiscuous mode
[  562.299739][T20434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  562.313420][T20434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  562.346043][T20434] team0: Port device team_slave_0 added
[  562.358236][T20434] team0: Port device team_slave_1 added
[  562.360257][T20436] bridge0: port 1(bridge_slave_0) entered blocking state
[  562.363030][T20436] bridge0: port 1(bridge_slave_0) entered disabled state
[  562.366017][T20436] bridge_slave_0: entered allmulticast mode
[  562.369512][T20436] bridge_slave_0: entered promiscuous mode
[  562.389371][T20436] bridge0: port 2(bridge_slave_1) entered blocking state
[  562.391694][T20436] bridge0: port 2(bridge_slave_1) entered disabled state
[  562.394041][T20436] bridge_slave_1: entered allmulticast mode
[  562.396962][T20436] bridge_slave_1: entered promiscuous mode
[  562.403191][T20434] batman_adv: batadv0: Adding interface: batadv_slave_0
[  562.405327][T20434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  562.414412][T20434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  562.429385][T20434] batman_adv: batadv0: Adding interface: batadv_slave_1
[  562.431965][T20434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  562.442301][T20434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  562.470901][T20436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  562.477555][T20436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  562.530021][T20436] team0: Port device team_slave_0 added
[  562.538414][T20434] hsr_slave_0: entered promiscuous mode
[  562.541682][T20434] hsr_slave_1: entered promiscuous mode
[  562.544653][T20434] debugfs: 'hsr0' already exists in 'hsr'
[  562.546861][T20434] Cannot create hsr debugfs directory
[  562.552690][T20436] team0: Port device team_slave_1 added
[  562.585063][T20436] batman_adv: batadv0: Adding interface: batadv_slave_0
[  562.587394][T20436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  562.595558][T20436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  562.608162][T20436] batman_adv: batadv0: Adding interface: batadv_slave_1
[  562.610333][T20436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  562.618229][T20436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  562.699003][T20436] hsr_slave_0: entered promiscuous mode
[  562.702274][T20436] hsr_slave_1: entered promiscuous mode
[  562.705026][T20436] debugfs: 'hsr0' already exists in 'hsr'
[  562.706678][T20436] Cannot create hsr debugfs directory
[  563.918111][T20450] Bluetooth: hci10: command tx timeout
[  563.998239][ T5201] Bluetooth: hci9: command tx timeout
[  564.000467][T20450] Bluetooth: hci11: command tx timeout
[  565.198236][T20450] Bluetooth: hci3: command 0x0406 tx timeout
[  565.200332][T20450] Bluetooth: hci4: command 0x0406 tx timeout
[  565.207092][ T5201] Bluetooth: hci5: command 0x0406 tx timeout
[  565.998003][T20379] Bluetooth: hci10: command tx timeout
[  566.078190][T20379] Bluetooth: hci11: command tx timeout
[  566.078237][   T55] Bluetooth: hci9: command tx timeout
[  568.078061][   T55] Bluetooth: hci10: command tx timeout
[  568.157903][   T55] Bluetooth: hci9: command tx timeout
[  568.158078][T20379] Bluetooth: hci11: command tx timeout
[  569.518339][   T35] INFO: task syz.1.3929:20348 blocked for more than 143 seconds.
[  569.521083][   T35]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  569.528572][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  569.531106][   T35] task:syz.1.3929      state:D stack:26240 pid:20348 tgid:20347 ppid:5810   task_flags:0x400140 flags:0x00080002
[  569.535333][   T35] Call Trace:
[  569.536570][   T35]  <TASK>
[  569.557713][   T35]  __schedule+0x14ef/0x4fb0
[  569.559235][   T35]  ? __pfx___schedule+0x10/0x10
[  569.560819][   T35]  ? schedule+0x90/0x360
[  569.562440][   T35]  schedule+0x164/0x360
[  569.564003][   T35]  schedule_preempt_disabled+0x13/0x30
[  569.565962][   T35]  __mutex_lock+0x7fe/0x1300
[  569.569693][   T35]  ? __mutex_lock+0x5ac/0x1300
[  569.571539][   T35]  ? genl_rcv_msg+0x10b/0x7a0
[  569.573264][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  569.575100][   T35]  ? radix_tree_lookup+0x240/0x290
[  569.577015][   T35]  genl_rcv_msg+0x10b/0x7a0
[  569.579473][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  569.581355][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  569.583133][   T35]  ? __pfx_ref_tracker_free+0x10/0x10
[  569.585679][   T35]  netlink_rcv_skb+0x232/0x4b0
[  569.587267][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  569.589927][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  569.591645][   T35]  ? genl_rcv+0x19/0x40
[  569.592885][   T35]  ? down_read+0x272/0x2e0
[  569.594355][   T35]  ? genl_rcv+0xd/0x40
[  569.595575][   T35]  genl_rcv+0x28/0x40
[  569.596769][   T35]  netlink_unicast+0x80f/0x9b0
[  569.598863][   T35]  ? __pfx_netlink_unicast+0x10/0x10
[  569.600447][   T35]  ? __alloc_skb+0x193/0x390
[  569.601840][   T35]  ? netlink_sendmsg+0x650/0xb40
[  569.603303][   T35]  ? skb_put+0x11b/0x210
[  569.604558][   T35]  netlink_sendmsg+0x813/0xb40
[  569.605966][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  569.607521][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  569.609662][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  569.612041][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  569.613621][   T35]  __sock_sendmsg+0x21c/0x270
[  569.614998][   T35]  ____sys_sendmsg+0x4d7/0x810
[  569.616419][   T35]  ? __might_fault+0xaf/0x130
[  569.618314][   T35]  ? __pfx_____sys_sendmsg+0x10/0x10
[  569.620081][   T35]  ? import_iovec+0x73/0xa0
[  569.621744][   T35]  ___sys_sendmsg+0x2a5/0x360
[  569.623329][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  569.624903][   T35]  ? __pfx____sys_sendmsg+0x10/0x10
[  569.626435][   T35]  ? futex_wait+0x29a/0x380
[  569.628688][   T35]  ? __fget_files+0x2a/0x420
[  569.630068][   T35]  ? __fget_files+0x3a0/0x420
[  569.631463][   T35]  __x64_sys_sendmsg+0x1bd/0x2a0
[  569.632980][   T35]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  569.634868][   T35]  ? rcu_is_watching+0x15/0xb0
[  569.636435][   T35]  do_syscall_64+0xe2/0xf80
[  569.638890][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.641217][   T35]  ? trace_irq_disable+0x37/0x100
[  569.643160][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.644897][   T35] RIP: 0033:0x7f30f239acb9
[  569.646299][   T35] RSP: 002b:00007f30f3286028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  569.649319][   T35] RAX: ffffffffffffffda RBX: 00007f30f2615fa0 RCX: 00007f30f239acb9
[  569.651647][   T35] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007
[  569.654169][   T35] RBP: 00007f30f2408bf7 R08: 0000000000000000 R09: 0000000000000000
[  569.656684][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  569.660405][   T35] R13: 00007f30f2616038 R14: 00007f30f2615fa0 R15: 00007ffd4a56ba18
[  569.663381][   T35]  </TASK>
[  569.664560][   T35] INFO: task syz.1.3929:20352 blocked for more than 143 seconds.
[  569.668381][   T35]       Not tainted syzkaller #0
[  569.670218][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  569.673240][   T35] task:syz.1.3929      state:D stack:25976 pid:20352 tgid:20347 ppid:5810   task_flags:0x480140 flags:0x00080002
[  569.676794][   T35] Call Trace:
[  569.678026][   T35]  <TASK>
[  569.679007][   T35]  __schedule+0x14ef/0x4fb0
[  569.680381][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  569.681852][   T35]  ? __pfx___schedule+0x10/0x10
[  569.683277][   T35]  ? schedule+0x90/0x360
[  569.684506][   T35]  schedule+0x164/0x360
[  569.685734][   T35]  blk_mq_freeze_queue_wait+0x101/0x180
[  569.687355][   T35]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[  569.689300][   T35]  ? queue_limits_commit_update_frozen+0x55/0xd0
[  569.691256][   T35]  ? __pfx_autoremove_wake_function+0x10/0x10
[  569.693077][   T35]  queue_limits_commit_update_frozen+0x55/0xd0
[  569.694968][   T35]  nbd_set_size+0x516/0x6d0
[  569.696314][   T35]  ? __pfx_nbd_set_size+0x10/0x10
[  569.697957][   T35]  ? nla_memcpy+0x5b/0xc0
[  569.699245][   T35]  nbd_genl_size_set+0x32c/0x400
[  569.700692][   T35]  ? __pfx_nbd_genl_size_set+0x10/0x10
[  569.702330][   T35]  ? __pfx_nbd_get_config_unlocked+0x10/0x10
[  569.704157][   T35]  ? bpf_lsm_capable+0x9/0x20
[  569.705673][   T35]  ? security_capable+0x7e/0x2c0
[  569.707171][   T35]  ? radix_tree_lookup+0x240/0x290
[  569.708857][   T35]  nbd_genl_reconfigure+0x428/0x1a70
[  569.710684][   T35]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  569.712360][   T35]  ? rcu_is_watching+0x15/0xb0
[  569.713779][   T35]  ? __nla_parse+0x40/0x60
[  569.715143][   T35]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  569.717367][   T35]  genl_family_rcv_msg_doit+0x22a/0x330
[  569.719396][   T35]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  569.721424][   T35]  genl_rcv_msg+0x61c/0x7a0
[  569.722911][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  569.724372][   T35]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  569.726245][   T35]  netlink_rcv_skb+0x232/0x4b0
[  569.727940][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  569.729744][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  569.731624][   T35]  ? genl_rcv+0x19/0x40
[  569.732930][   T35]  ? down_read+0x272/0x2e0
[  569.734302][   T35]  ? genl_rcv+0xd/0x40
[  569.735537][   T35]  genl_rcv+0x28/0x40
[  569.736719][   T35]  netlink_unicast+0x80f/0x9b0
[  569.738373][   T35]  ? __pfx_netlink_unicast+0x10/0x10
[  569.740033][   T35]  ? __alloc_skb+0x193/0x390
[  569.741507][   T35]  ? netlink_sendmsg+0x650/0xb40
[  569.743032][   T35]  netlink_sendmsg+0x813/0xb40
[  569.744572][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  569.746209][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  569.748257][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  569.749803][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  569.751598][   T35]  __sock_sendmsg+0x21c/0x270
[  569.753049][   T35]  ____sys_sendmsg+0x4d7/0x810
[  569.754798][   T35]  ? __pfx_____sys_sendmsg+0x10/0x10
[  569.757109][   T35]  ? import_iovec+0x73/0xa0
[  569.760513][   T35]  ___sys_sendmsg+0x2a5/0x360
[  569.762238][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  569.763741][   T35]  ? __pfx____sys_sendmsg+0x10/0x10
[  569.765281][   T35]  ? futex_wait+0x29a/0x380
[  569.766621][   T35]  ? __fget_files+0x2a/0x420
[  569.768476][   T35]  ? __fget_files+0x3a0/0x420
[  569.770007][   T35]  __x64_sys_sendmsg+0x1bd/0x2a0
[  569.771475][   T35]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  569.773090][   T35]  ? rcu_is_watching+0x15/0xb0
[  569.774671][   T35]  do_syscall_64+0xe2/0xf80
[  569.776082][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.778135][   T35]  ? trace_irq_disable+0x37/0x100
[  569.779848][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.781696][   T35] RIP: 0033:0x7f30f239acb9
[  569.783102][   T35] RSP: 002b:00007f30f3265028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  569.785680][   T35] RAX: ffffffffffffffda RBX: 00007f30f2616090 RCX: 00007f30f239acb9
[  569.788280][   T35] RDX: 0000000000040800 RSI: 0000200000000780 RDI: 0000000000000008
[  569.790723][   T35] RBP: 00007f30f2408bf7 R08: 0000000000000000 R09: 0000000000000000
[  569.792990][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  569.795718][   T35] R13: 00007f30f2616128 R14: 00007f30f2616090 R15: 00007ffd4a56ba18
[  569.798755][   T35]  </TASK>
[  569.799964][   T35] INFO: task syz.0.3930:20354 blocked for more than 143 seconds.
[  569.802263][   T35]       Not tainted syzkaller #0
[  569.803974][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  569.807142][   T35] task:syz.0.3930      state:D stack:28184 pid:20354 tgid:20353 ppid:5816   task_flags:0x400140 flags:0x00080002
[  569.812285][   T35] Call Trace:
[  569.813560][   T35]  <TASK>
[  569.814627][   T35]  __schedule+0x14ef/0x4fb0
[  569.815979][   T35]  ? __pfx___schedule+0x10/0x10
[  569.817454][   T35]  ? schedule+0x90/0x360
[  569.818998][   T35]  schedule+0x164/0x360
[  569.820373][   T35]  schedule_preempt_disabled+0x13/0x30
[  569.821973][   T35]  __mutex_lock+0x7fe/0x1300
[  569.823336][   T35]  ? __mutex_lock+0x5ac/0x1300
[  569.824718][   T35]  ? genl_rcv_msg+0x10b/0x7a0
[  569.826080][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  569.827552][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  569.829206][   T35]  ? __pfx_stack_trace_save+0x10/0x10
[  569.830944][   T35]  ? radix_tree_lookup+0x240/0x290
[  569.832547][   T35]  genl_rcv_msg+0x10b/0x7a0
[  569.834039][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  569.835645][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  569.837123][   T35]  netlink_rcv_skb+0x232/0x4b0
[  569.838876][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  569.840608][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  569.842142][   T35]  ? genl_rcv+0x19/0x40
[  569.843341][   T35]  ? down_read+0x272/0x2e0
[  569.844649][   T35]  ? genl_rcv+0xd/0x40
[  569.845833][   T35]  genl_rcv+0x28/0x40
[  569.846943][   T35]  netlink_unicast+0x80f/0x9b0
[  569.848582][   T35]  ? __pfx_netlink_unicast+0x10/0x10
[  569.850301][   T35]  ? __alloc_skb+0x193/0x390
[  569.851657][   T35]  ? netlink_sendmsg+0x650/0xb40
[  569.853092][   T35]  ? skb_put+0x11b/0x210
[  569.854330][   T35]  netlink_sendmsg+0x813/0xb40
[  569.855726][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  569.857261][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  569.859458][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  569.861076][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  569.862601][   T35]  __sock_sendmsg+0x21c/0x270
[  569.863963][   T35]  __sys_sendto+0x3c0/0x550
[  569.865296][   T35]  ? __pfx___sys_sendto+0x10/0x10
[  569.866772][   T35]  ? exc_page_fault+0x6a/0xc0
[  569.868332][   T35]  ? do_user_addr_fault+0xc7c/0x1360
[  569.870035][   T35]  __x64_sys_sendto+0xde/0x100
[  569.871421][   T35]  do_syscall_64+0xe2/0xf80
[  569.872733][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.874483][   T35]  ? trace_irq_disable+0x37/0x100
[  569.875952][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.878051][   T35] RIP: 0033:0x7f3b3455b58e
[  569.879533][   T35] RSP: 002b:00007f3b35464e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  569.881939][   T35] RAX: ffffffffffffffda RBX: 00007f3b354666c0 RCX: 00007f3b3455b58e
[  569.884200][   T35] RDX: 0000000000000028 RSI: 00007f3b35465000 RDI: 0000000000000005
[  569.886729][   T35] RBP: 0000000000000000 R08: 00007f3b35464f04 R09: 000000000000000c
[  569.889442][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  569.891738][   T35] R13: 00007f3b35464f58 R14: 00007f3b35465000 R15: 0000000000000000
[  569.894031][   T35]  </TASK>
[  569.894940][   T35] INFO: task syz.2.3931:20361 blocked for more than 143 seconds.
[  569.897422][   T35]       Not tainted syzkaller #0
[  569.899161][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  569.901993][   T35] task:syz.2.3931      state:D stack:27080 pid:20361 tgid:20359 ppid:5815   task_flags:0x400140 flags:0x00080002
[  569.905508][   T35] Call Trace:
[  569.906451][   T35]  <TASK>
[  569.907400][   T35]  __schedule+0x14ef/0x4fb0
[  569.908846][   T35]  ? __pfx___schedule+0x10/0x10
[  569.910271][   T35]  ? schedule+0x90/0x360
[  569.911502][   T35]  schedule+0x164/0x360
[  569.912715][   T35]  schedule_preempt_disabled+0x13/0x30
[  569.914302][   T35]  __mutex_lock+0x7fe/0x1300
[  569.915643][   T35]  ? __mutex_lock+0x5ac/0x1300
[  569.917130][   T35]  ? genl_rcv_msg+0x10b/0x7a0
[  569.919352][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  569.920807][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  569.922222][   T35]  ? __pfx_stack_trace_save+0x10/0x10
[  569.923778][   T35]  ? radix_tree_lookup+0x240/0x290
[  569.925256][   T35]  genl_rcv_msg+0x10b/0x7a0
[  569.926521][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  569.928118][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  569.929568][   T35]  netlink_rcv_skb+0x232/0x4b0
[  569.930943][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  569.932411][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  569.933927][   T35]  ? genl_rcv+0x19/0x40
[  569.935139][   T35]  ? down_read+0x272/0x2e0
[  569.936437][   T35]  ? genl_rcv+0xd/0x40
[  569.937725][   T35]  genl_rcv+0x28/0x40
[  569.938873][   T35]  netlink_unicast+0x80f/0x9b0
[  569.940272][   T35]  ? __pfx_netlink_unicast+0x10/0x10
[  569.941799][   T35]  ? __alloc_skb+0x193/0x390
[  569.943174][   T35]  ? netlink_sendmsg+0x650/0xb40
[  569.944609][   T35]  ? skb_put+0x11b/0x210
[  569.945859][   T35]  netlink_sendmsg+0x813/0xb40
[  569.947259][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  569.948885][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  569.950341][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  569.952126][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  569.954080][   T35]  __sock_sendmsg+0x21c/0x270
[  569.955816][   T35]  __sys_sendto+0x3c0/0x550
[  569.957211][   T35]  ? __pfx___sys_sendto+0x10/0x10
[  569.958896][   T35]  ? exc_page_fault+0x6a/0xc0
[  569.960278][   T35]  ? do_user_addr_fault+0xc7c/0x1360
[  569.961941][   T35]  __x64_sys_sendto+0xde/0x100
[  569.963364][   T35]  do_syscall_64+0xe2/0xf80
[  569.964765][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.966996][   T35]  ? trace_irq_disable+0x37/0x100
[  569.969413][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.971619][   T35] RIP: 0033:0x7ff7c295b58e
[  569.973261][   T35] RSP: 002b:00007ff7c3809e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  569.976103][   T35] RAX: ffffffffffffffda RBX: 00007ff7c380b6c0 RCX: 00007ff7c295b58e
[  569.978676][   T35] RDX: 0000000000000020 RSI: 00007ff7c380a000 RDI: 0000000000000007
[  569.981120][   T35] RBP: 0000000000000000 R08: 00007ff7c3809f04 R09: 000000000000000c
[  569.983385][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  569.985575][   T35] R13: 00007ff7c3809f58 R14: 00007ff7c380a000 R15: 0000000000000000
[  569.988348][   T35]  </TASK>
[  569.989423][   T35] 
[  569.989423][   T35] Showing all locks held in the system:
[  569.991625][   T35] 1 lock held by khungtaskd/35:
[  569.993074][   T35]  #0: ffffffff8e35a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  569.995929][   T35] 2 locks held by getty/5638:
[  569.997287][   T35]  #0: ffff88811506c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  570.001826][   T35]  #1: ffffc9000356b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  570.004890][   T35] 1 lock held by udevd/14482:
[  570.006259][   T35]  #0: ffff8881099a7358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  570.009384][   T35] 2 locks held by syz.1.3929/20348:
[  570.011046][   T35]  #0: ffffffff8f817d90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  570.013409][   T35]  #1: ffffffff8f817ba8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  570.015962][   T35] 6 locks held by syz.1.3929/20352:
[  570.017472][   T35]  #0: ffffffff8f817d90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  570.020008][   T35]  #1: ffffffff8f817ba8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  570.022769][   T35]  #2: ffff8881099f1278 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x38e/0x1a70
[  570.025685][   T35]  #3: ffff88816c18a358 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x2ba/0x6d0
[  570.028626][   T35]  #4: ffff88816c189cf8 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  570.032129][   T35]  #5: ffff88816c189d30 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  570.035628][   T35] 2 locks held by syz.0.3930/20354:
[  570.037242][   T35]  #0: ffffffff8f817d90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  570.039797][   T35]  #1: ffffffff8f817ba8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  570.042548][   T35] 2 locks held by syz.2.3931/20361:
[  570.044054][   T35]  #0: ffffffff8f817d90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  570.046430][   T35]  #1: ffffffff8f817ba8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  570.049250][   T35] 2 locks held by syz-executor/20365:
[  570.050888][   T35]  #0: ffffffff8f817d90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  570.053220][   T35]  #1: ffffffff8f817ba8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  570.055763][   T35] 2 locks held by syz-executor/20375:
[  570.057300][   T35]  #0: ffffffff8f817d90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  570.059806][   T35]  #1: ffffffff8f817ba8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  570.062552][   T35] 2 locks held by syz-executor/20377:
[  570.064046][   T35]  #0: ffffffff8f817d90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  570.066312][   T35]  #1: ffffffff8f817ba8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  570.068964][   T35] 2 locks held by syz-executor/20396:
[  570.070628][   T35]  #0: ffffffff8f817d90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  570.072964][   T35]  #1: ffffffff8f817ba8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  570.075565][   T35] 2 locks held by syz-executor/20406:
[  570.077056][   T35]  #0: ffffffff8f817d90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  570.080729][   T35]  #1: ffffffff8f817ba8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  570.083697][   T35] 2 locks held by syz-executor/20407:
[  570.085324][   T35]  #0: ffffffff8f817d90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  570.088402][   T35]  #1: ffffffff8f817ba8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  570.091332][   T35] 2 locks held by syz-executor/20424:
[  570.093097][   T35]  #0: ffffffff8f817d90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  570.095648][   T35]  #1: ffffffff8f817ba8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  570.098656][   T35] 2 locks held by syz-executor/20434:
[  570.100250][   T35]  #0: ffffffff8f817d90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  570.102566][   T35]  #1: ffffffff8f817ba8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  570.105108][   T35] 2 locks held by syz-executor/20436:
[  570.106643][   T35]  #0: ffffffff8f817d90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  570.109143][   T35]  #1: ffffffff8f817ba8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  570.111922][   T35] 
[  570.112662][   T35] =============================================
[  570.112662][   T35] 
[  570.115036][   T35] NMI backtrace for cpu 0
[  570.115046][   T35] CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  570.115056][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  570.115061][   T35] Call Trace:
[  570.115066][   T35]  <TASK>
[  570.115072][   T35]  dump_stack_lvl+0xe8/0x150
[  570.115087][   T35]  nmi_cpu_backtrace+0x274/0x2d0
[  570.115104][   T35]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  570.115114][   T35]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  570.115124][   T35]  sys_info+0x135/0x170
[  570.115132][   T35]  watchdog+0xf90/0xfe0
[  570.115164][   T35]  ? watchdog+0x209/0xfe0
[  570.115179][   T35]  kthread+0x726/0x8b0
[  570.115193][   T35]  ? __pfx_watchdog+0x10/0x10
[  570.115203][   T35]  ? __pfx_kthread+0x10/0x10
[  570.115214][   T35]  ? _raw_spin_unlock_irq+0x23/0x50
[  570.115225][   T35]  ? __pfx_kthread+0x10/0x10
[  570.115235][   T35]  ret_from_fork+0x51b/0xa40
[  570.115246][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  570.115253][   T35]  ? __switch_to+0xc82/0x1410
[  570.115267][   T35]  ? __pfx_kthread+0x10/0x10
[  570.115277][   T35]  ret_from_fork_asm+0x1a/0x30
[  570.115295][   T35]  </TASK>
[  570.115298][   T35] Sending NMI from CPU 0 to CPUs 1:
[  570.150955][    C1] NMI backtrace for cpu 1
[  570.150970][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  570.150985][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  570.150994][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  570.151019][    C1] Code: 08 5f 02 e9 d3 e5 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 97 10 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  570.151030][    C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000206
[  570.151042][    C1] RAX: 000000000037b033 RBX: ffffffff8198427d RCX: 0000000080000001
[  570.151051][    C1] RDX: 0000000000000001 RSI: ffffffff8dacffe0 RDI: ffffffff8be73900
[  570.151059][    C1] RBP: ffffc90000197f10 R08: ffff88823c6336db R09: 1ffff110478c66db
[  570.151068][    C1] R10: dffffc0000000000 R11: ffffed10478c66dc R12: ffffffff8fceef70
[  570.151077][    C1] R13: 1ffff1102c155000 R14: 0000000000000001 R15: 0000000000000001
[  570.151085][    C1] FS:  0000000000000000(0000) GS:ffff8882a9926000(0000) knlGS:0000000000000000
[  570.151094][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  570.151102][    C1] CR2: 000055d4edb64598 CR3: 0000000116140000 CR4: 00000000000006f0
[  570.151132][    C1] Call Trace:
[  570.151141][    C1]  <TASK>
[  570.151181][    C1]  default_idle+0x9/0x20
[  570.151194][    C1]  default_idle_call+0x72/0xb0
[  570.151208][    C1]  do_idle+0x1bd/0x500
[  570.151221][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[  570.151238][    C1]  ? __pfx_do_idle+0x10/0x10
[  570.151254][    C1]  cpu_startup_entry+0x43/0x60
[  570.151267][    C1]  start_secondary+0x101/0x110
[  570.151279][    C1]  common_startup_64+0x13e/0x147
[  570.151302][    C1]  </TASK>
[  570.162339][T20379] Bluetooth: hci10: command tx timeout
[  570.167999][   T35] Kernel panic - not syncing: hung_task: blocked tasks
[  570.168019][   T35] CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  570.168037][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  570.168046][   T35] Call Trace:
[  570.168054][   T35]  <TASK>
[  570.168063][   T35]  vpanic+0x1e0/0x670
[  570.168089][   T35]  panic+0xc5/0xd0
[  570.168115][   T35]  ? __pfx_panic+0x10/0x10
[  570.168132][   T35]  ? preempt_schedule_thunk+0x16/0x30
[  570.168178][   T35]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  570.168201][   T35]  watchdog+0xfda/0xfe0
[  570.168226][   T35]  ? watchdog+0x209/0xfe0
[  570.168250][   T35]  kthread+0x726/0x8b0
[  570.168272][   T35]  ? __pfx_watchdog+0x10/0x10
[  570.168289][   T35]  ? __pfx_kthread+0x10/0x10
[  570.168309][   T35]  ? _raw_spin_unlock_irq+0x23/0x50
[  570.168328][   T35]  ? __pfx_kthread+0x10/0x10
[  570.168345][   T35]  ret_from_fork+0x51b/0xa40
[  570.168363][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  570.168378][   T35]  ? __switch_to+0xc82/0x1410
[  570.168401][   T35]  ? __pfx_kthread+0x10/0x10
[  570.168419][   T35]  ret_from_fork_asm+0x1a/0x30
[  570.168449][   T35]  </TASK>
[  570.170529][   T35] Kernel Offset: disabled
