last executing test programs:

17.657453304s ago: executing program 1 (id=3303):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @empty}, 0x4, 0x7, 0x4, 0x4}}, 0x26)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0xe, &(0x7f0000000380)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000000400)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xb, 0x7, 0x8}, 0xd, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000540)=[r1, r1], &(0x7f0000000580)=[{0x3, 0x2, 0x8, 0x5}, {0x0, 0x3, 0x0, 0xb}, {0x0, 0x3, 0xd, 0xb}, {0x3, 0x2, 0xa, 0x9}, {0x5, 0x5, 0x4, 0x5}, {0x2, 0x1, 0xf, 0x1}, {0x5, 0x3, 0xc, 0x3}, {0x2, 0x1, 0x7}]}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
socket$phonet_pipe(0x23, 0x5, 0x2)
close(0x3)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f0000000080)=r6)
close(r7)
r8 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8)
shutdown(r2, 0x1)
syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r8)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20c0}, 0x0)
r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r10, &(0x7f0000000340)='freezer.self_freezing\x00', 0x0, 0x0)

17.557683133s ago: executing program 2 (id=3304):
socket(0x3, 0xa, 0x8a0e)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000011000500000000000300000007000000", @ANYRES32=r1], 0x34}}, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) (async)
r3 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'veth0_virt_wifi\x00', <r4=>0x0})
setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000040)={@remote, r4}, 0x14) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000080000000000009500000000000000000000000000000013835661c2b771142af9cb0000000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r5, 0x0, 0xe, 0x0, &(0x7f0000000340)="348b4d157b8ab1d21f8218e3c736", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'wlan0\x00'})
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="580000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="42000400212000003076832b29c0d290f877400012800c0001006d5162766c616e0020000280080003000100000008000100100000000a0004bbc6aaaaaaaaaa00000800200000000000"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001000000100"/20, @ANYRES32=r1, @ANYBLOB="000000000000000014002b800600000086bc8f5385578af9b113b609007c25b9d90c", @ANYRES32=r5, @ANYBLOB="0800030000000000"], 0x34}}, 0x24040080)
r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x9, 0xf9})
write$cgroup_int(r8, &(0x7f0000000200)=0xf, 0x12) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@cgroup, 0x1, 0x1, 0x1, &(0x7f0000000300)=[0x0], 0x1, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], &(0x7f00000007c0)=[0x0], <r9=>0x0}, 0x40) (async)
r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x4000, r0}, 0x18)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@map=r10, r8, 0x2d, 0x18, 0x0, @void, @value=r5, @void, @void, r9}, 0x20) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, &(0x7f00000005c0), 0x802}, 0x38) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x18, &(0x7f0000000600)=ANY=[@ANYBLOB="180000008f000000000000000902048018110000", @ANYRES64=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000086000000bf092000000000003609010000000000950000000000000018010000786c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bd0af4ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x74, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd29, 0xfffffffc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) (async)
ioctl$sock_FIOGETOWN(r11, 0x8903, &(0x7f0000000040))
sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="d40000003e0005642bbd7000fcffffff04000000bd00bf806e463c46e438da852897746a812bfb2cd9802cda8db7f70b88294c17d6db191ff9b00545914ea1cacf916d59c303a1eebb75d147e4fbdb9757498d9c5ce124936b118e794d2cca6dfcfe5bfa6073a5bd1b4520803e3e2f7664da99cae86306005ce60d867dd12b7a58c078bbc373c92649f66ec95770cfe2199814075c5235ab9842e7cf45ad66342b0dc7768fdc74f847fdf4d19e6541c033dbece1c569f7d9cf36ef77f5c615dcfba0f5535cc8640e168b9052a1fdf1986359cd22fe619b70785a000000"], 0xd4}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)

17.397733622s ago: executing program 1 (id=3305):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket(0x1d, 0x2, 0x6)
bind$can_j1939(r1, &(0x7f0000000040)={0x1d, 0x0, 0x801, {0x0, 0x1, 0x2}}, 0x18) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) (rerun: 64)
sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r4, 0x0, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x77}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40091}, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='westwood', 0x8) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000003c0)=r6, 0x4)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendto(r2, &(0x7f0000000200)="5b5a5fee72619d648c85f9b0566c479dab49cf2ca8be3e18f66597b8d94b5204e3da06bef354", 0x26, 0x4040080, 0x0, 0x0) (async)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x20000000000002a1)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendmsg$inet(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000380)="d35b4e4f284a5f3c53fe67075df7b5404cf3ed6c47f7e9a3d54637d2f20a6f5e142dca9df10f90647240d5cab4fc7dd718106d1e307fc07d41b26d14ccd404d847b53b07127faa63bd7d8f13a84ed258fa8b395a507da153084899271b26cfed1a837836564a44bb69e9a478918f9abafe94913f0976cecaf6c5a4935a9de8c089a81354b68c6ff1d9bd", 0x8a}, {&(0x7f0000000480)}, {0x0}], 0x3}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010000000000002c00128009000100626f6e64000000001c000280050001000600000005000c000200000008000b00", @ANYBLOB="1102"], 0x4c}}, 0x24000000)

17.397048904s ago: executing program 2 (id=3306):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES64=0x0, @ANYBLOB="01000000000200080001000500"/23, @ANYRES64=r2], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
socket$inet(0x2, 0x3, 0x9)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002140)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180000000000000054000000540000b72c20428701051a04c7897d0cbdd60002000000040000000000000e0300000001000000010000000600000604000000020000007100000003000000380000000b000000080000000dac87f442000000000000120300000003000000000000080300"/136], &(0x7f0000000000)=""/254, 0x6e, 0xfe, 0x1}, 0x28)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1)
r5 = socket(0x10, 0x803, 0x0)
sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000ee0000a1", 0x12, 0x4000, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1016}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000540)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400})
r6 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff})
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b40)=@newtaction={0x1b0, 0x30, 0x100, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x19c, 0x1, [@m_ctinfo={0x118, 0x19, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x1000}, @TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0x1, 0x20000000, 0x8, 0x9}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xab4a}]}, {0xc2, 0x6, "a47502a77130b5a1a2f51ba02914963f349c7b2302510f84070f5ecca1981502cd4dc6ee78c4449db7cbee875d1cc2055c249ce325670aaaae5041a17328818a3493ce784a7642a9157d72f9b17c27676815b6f6e275f647f99fcf8c6eee67f40eee1eddbc96cba5db6796adade180e826e444806ce9b4fc4a8b68cc44eb0f25990842436ac3df53995801720e730b087c05eacc5a38235715d0555fda41c47c742ad60531294ab1468d734ac524a2eace714d2f4bedc7a0738a396cc68c"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mpls={0x80, 0x2, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xb}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_PROTO={0x6, 0x4, 0x1c}, @TCA_MPLS_LABEL={0x8, 0x5, 0x2783c}, @TCA_MPLS_TTL={0x5, 0x7, 0x11}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x1b0}}, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r9], 0x44}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
socket(0x1a, 0x5, 0x9)
getsockname$packet(r10, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r11 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r12=>0x0})
sendto$packet(r11, &(0x7f0000000200)="05174305", 0x4, 0x8810, &(0x7f0000000080)={0x11, 0x8100, r12, 0x1, 0xfc, 0x6, @remote}, 0x14)

17.337642389s ago: executing program 2 (id=3307):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000cc0)={0x2c, r2, 0x1, 0x70bd24, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x24}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x5080)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f40)=@newlink={0x70, 0x10, 0x1, 0x70bd25, 0x25df5bfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0x48, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x44, 0x2, '\xd5=\xfa\x02\x90h\x88\xb64\x03\xec\xec\xb1I?Y\xf2\x96\x95\x88\xb0\xca\x01\xed\xe4\xadZ\x8b\xef\xcc+\x9a\xa11T\xe7B\xb3\xc2\x9507\x9c\xc3\x05\xe3Z\x11\x9d\xeb\xc1\xf4\xfb\xfbeBi\x91\x99b\x83\xef\x9e\x03'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000)

17.277559547s ago: executing program 2 (id=3308):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x74, r1, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}]}, 0x74}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r2)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r4, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3411c517edc3e1b1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40040}, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x20000800)
sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x7c, r5, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3f, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac}, 0x0, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x7, 0x3c, 0x2}}, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x7c}}, 0x0)
r7 = socket(0x1b, 0x3, 0x1)
write(r7, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24)

17.275881999s ago: executing program 1 (id=3309):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41)
recvmsg(r10, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
sendmsg$inet(r11, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="fc", 0x1}], 0x1}, 0x41)
recvmsg(r10, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2002)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r9], 0x54}}, 0x0)
r12 = socket(0x2c, 0xa035b0eb4f46ccb8, 0x3)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}}, 0x0)

17.134921309s ago: executing program 2 (id=3311):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_REVISION={0x5}]}, 0x1c}}, 0x0)
r0 = socket$kcm(0xa, 0x3, 0x11)
sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001540)=""/4110, 0x100e}], 0x29}, 0x406)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071102800000000001f150000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x58)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)

16.926563341s ago: executing program 0 (id=3314):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000007c0)=@o_path={0x0, r2, 0x4000, r2}, 0x18)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r4}, 0x14)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x7, <r5=>0x0}, 0x8)
r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00'}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6f13, 0x0, 0x0, 0x0, 0x3}, [@map_fd={0x18, 0x7, 0x1, 0x0, 0x1}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x2, 0x2, 0x0, 0x9, 0x4, 0x100, 0xfffffffffffffffc}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000180)='syzkaller\x00', 0x9, 0x50, &(0x7f00000001c0)=""/80, 0x41100, 0x2, '\x00', r4, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r6, 0x1, 0x0, &(0x7f0000000440)=[{0x4, 0x2, 0xc, 0x5}], 0x10, 0x8}, 0x94)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xcdbf0d3388237035, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xfff}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x400}]}}]}, 0x44}}, 0x20004015)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)

16.876770399s ago: executing program 0 (id=3315):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000680), 0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async)
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
getpeername$l2tp6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000740)=0x20) (async, rerun: 32)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) (async, rerun: 32)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtaction={0x44, 0x1c, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x1300}, [{0x30, 0x1, [@m_ct={0x2c, 0xb, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x44}}, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x44}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x24040054) (async)
recvmmsg(r0, &(0x7f0000006740)=[{{&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000500)=""/35, 0x23}, {&(0x7f0000000240)=""/20, 0x14}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/81, 0x51}], 0x4, &(0x7f0000000940)=""/71, 0x47}, 0x8}, {{0x0, 0x0, &(0x7f0000004380)=[{&(0x7f0000002100)=""/4086, 0xff6}, {&(0x7f0000003100)=""/101, 0x65}, {&(0x7f00000009c0)=""/137, 0x89}, {&(0x7f0000003200)=""/172, 0xac}, {&(0x7f00000032c0)=""/4, 0x4}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)}, {&(0x7f0000004340)=""/15, 0xf}], 0x8, &(0x7f0000004400)=""/154, 0x9a}}, {{&(0x7f00000044c0)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000006580)=[{&(0x7f0000004540)=""/27, 0x1b}, {&(0x7f0000004580)=""/154, 0x9a}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000004700)=""/83, 0x53}, {&(0x7f0000004780)=""/154, 0x9a}, {&(0x7f0000004840)=""/164, 0xa4}, {&(0x7f0000004900)=""/59, 0x3b}, {&(0x7f0000004940)=""/92, 0x5c}, {&(0x7f0000005580)=""/4090, 0xffa}], 0x9, &(0x7f0000006640)=""/197, 0xc5}, 0xff}], 0x3, 0x1, &(0x7f0000006800)={0x77359400}) (async)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0)
setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000540)=0x4, 0x4)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724", 0x2}], 0x1) (async, rerun: 64)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x6f}, 0xc) (async, rerun: 64)
recvmmsg(r6, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x1c1, 0x0) (async, rerun: 64)
close(r5)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r8 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r8, 0x8983, &(0x7f0000000800)={0x7, 'macvlan0\x00', {0x2}, 0x7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="18020000ffffffff00000000000000009500000000000080d7334cc6b902baac7bb8925581ba6849bc94e770f3e1f1a57a7c9c330c3aadd14bd2317c8132c58c7549e3adc69ce01fd7090612d31316575bc3b8b303869bd14de7bfe35afad2330a572462de902986f050cf237628931acf4d7599dee4fa181ec895a9e527ffff8bb73a52e11a63017b86940ee1c5611d7eac6d43934aea7bebc576c1d1af80620e3a0bb45b061880c38858991afea61af9bc593902733e746e3d62"], 0x0, 0x5}, 0x94)
ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) (async)
ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180))
r9 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r9, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async)
sendmsg$rds(r9, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0xfffffe24}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) (async)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000580))
ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f00000001c0)={0x3, &(0x7f00000000c0)=[{0x6, 0x5, 0xe, 0x7}, {0x0, 0x81, 0x0, 0xffff}, {0xe, 0xe, 0x5, 0x400}]}) (async)
ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]})

16.874520934s ago: executing program 0 (id=3316):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r3, 0xd66771a5e8224ded, 0x1, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0xc0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x20040024}, 0x4008019)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x24000884}, 0x8000)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$kcm(0x10, 0x2, 0x0)
socket$igmp(0x2, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x3, 0x4)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0)
r8 = socket$kcm(0xa, 0x2, 0x0)
r9 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'ovf\x00', 0x30, 0x660f537e, 0x3}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4f29, 0x3, 'nq\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x3, 0x1, 0x1}}, 0x44)
sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
r10 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)

16.637241066s ago: executing program 0 (id=3317):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x800)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c)
socket$kcm(0x10, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000580)={0x0, 0xc0, "0f5efaacd0d12878f2659e749babba7d41e443975068a8178cd07aa09a9753f5e4a3c56672587b74e32d5b5fbf6ba2722bec7bcf22286464f872f2ee202284493c4021100739ac60f91da2345778cd1bdbe2d988b6e6ae1a67b0ff2197fda56d55b50a198331561220b7805108684e433e54bb839adce44669b37fc583eca8acf610c7cdd57666ac3c01f2a6a62dfb50e8a6785b6a57e3614fd9904e21c0c26a0027bebe458001fb746fa5b07eeff2cf7a914dab742e5b31f8e6a2c4ce7595fd"}, &(0x7f0000000180)=0xc8)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a3000000000140000001100"], 0xd4}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007500)={0x28, 0x3e, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xe, 0x1, 0x0, 0x1, [@generic="6d1431496535e8ffe100"]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc0c0)
socket$rds(0x15, 0x5, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', <r8=>0x0})
setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote, r8}, 0x14)
sendmmsg$inet(r2, &(0x7f0000001d40)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000f40)=ANY=[], 0x120}}], 0x1, 0x4000)
getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000200)=0x4)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000740)={'erspan0\x00', &(0x7f0000000680)={'syztnl2\x00', <r9=>r8, 0x700, 0x8, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x64, 0x0, 0x6, 0x4, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @private=0xa010101}}}})
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delqdisc={0x2c, 0x25, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xfff3, 0xfff2}, {0xfff1, 0x4}, {0x0, 0xb}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4c014}, 0x840)

16.634456581s ago: executing program 0 (id=3318):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0)
sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb8, r5, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x9, 0x5c}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4}, @NL80211_ATTR_PMK={0x14, 0xfe, "30f883f64b258255ee94ea2443814195"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK={0x14, 0xfe, "f89a9bcbeb837a52797d46f8ae38a012"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x1c, 0x34, @random="f39202dd6534b20ba2837f75ff605480a9ebeeef4bb5196c"}, @NL80211_ATTR_PMKID={0x14, 0x55, "1000953cae18017611b39d9762de6a35"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x81}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x9}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', <r9=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r9, 0x25, 0x4, @void}, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x2, 0x70bf28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x84a7, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c800}, 0x40)
write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaac808004500452c00000000002f9078ac1e0001e00000010000655800189001040000000000000086dd090000000000"], 0xfdef)

16.406481527s ago: executing program 1 (id=3319):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b000100627269646765000048000280050019000200000005"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 64)
r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4) (async)
sendmsg$netlink(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000010c0)={0x28, 0x12, 0x1, 0x70bd27, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @nested={0x8, 0x31, 0x0, 0x1, [@nested={0x4, 0x86}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x6}, 0x4000800)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r4 = socket$kcm(0xa, 0x3, 0x87) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'lo\x00'}) (async, rerun: 64)
r5 = socket$packet(0x11, 0x2, 0x300) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r6=>0x0})
bind$packet(r5, &(0x7f0000000300)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) (async, rerun: 32)
syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[], 0x0) (async, rerun: 32)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x3c, r7, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xb}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x5}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x7}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_CHANNELS_HEADER={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) (async)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) (async)
ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000340)={0x0, @llc={0x1a, 0x3, 0x9, 0x1, 0x63, 0x4}, @l2={0x1f, 0xd3d, @any, 0xffff, 0x2}, @hci={0x1f, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='bridge0\x00', 0x6, 0x0, 0x5})

16.296706007s ago: executing program 1 (id=3320):
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x2, 0x0, 0xd, 0x4101}, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000002c0)}], 0x1)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x4, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000794ff0000000000000005000000a0b90595aeb65254277db3cc1dda4571b7efac7f813a709ebc83e004aa5787661e6b4cfe0000a01d0b7d65bf5e76369b01"], 0x0, 0x5, 0x23, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180))
ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100))
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000689524b59e41747b00e97800000000000000000a0000000000000004a68009"], 0x1c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x53, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x24008010}, 0x20004010)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
poll(&(0x7f00000002c0), 0x0, 0x9)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0xfe, 0xfe, 0x3, 0x0, 0x1, 0x20002400}}, 0x1c}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090)
socket$nl_generic(0x10, 0x3, 0x10)

16.295982317s ago: executing program 2 (id=3321):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9)
r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x1, 'fo\x00', 0x24, 0x4c, 0x36}, 0x2c)
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000001c0)=r5, 0x4)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a80), 0xffffffffffffffff)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000000c0)={0x2c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c50a0000000000007910480000000000610418000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x48}}, 0x0)
tee(r1, r8, 0x8f5, 0x0)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x20, r12, 0x1, 0x0, 0x25dfdbfd, {{0x8}, {@void, @val={0xc, 0x99, {0x1, 0x1}}}}}, 0x20}}, 0x0)

15.972370147s ago: executing program 1 (id=3322):
connect$rds(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000140))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0xc201})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0xfffd, 0x2000}, 0x4)
setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x37, 0x0, 0x9}]}, 0x10)
write$tun(r3, &(0x7f0000003240)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x2c, 0xfa1, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x10, 0x7, 0x0, 0x8, {[@md5sig={0x13, 0x12, "570ae7f0b905a456f064db0300ffe61e"}]}}, {"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"}}}}, 0xfaf)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="c80000001000a54627bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c000000000000a000128009000100766c616e000000009000028006000100040000000c0002001c00000010000000280004800c000142addfcb2b2c3477000c00010008000000f30000000bfa0100050000000b000003080003800c00010001800000ffff00000c0001000600000001f0ffff0c00010007000000040000000c00010001000100070000001c0004800c000100ff010000060000000c000100000000000a00000008000500", @ANYRES32], 0xc8}, 0x1, 0x0, 0x0, 0x28001}, 0x8000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x9, 0x3, 0x2f8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x18, 0x6, 0x6, 0x1, 'pptp\x00', 'syz1\x00', {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xff80, 0x10, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001400), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004014)

15.657608378s ago: executing program 0 (id=3323):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt(r2, 0x1, 0x1, &(0x7f00000003c0)=""/220, &(0x7f0000000100)=0xdc)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x7, 0x7800, 0xff, 0x7ff, {{0x5, 0x4, 0x1, 0x0, 0x14, 0x66, 0x0, 0x80, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x25}}}}})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000050c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f00000051c0)={0x0, 0x0, &(0x7f0000005180)={&(0x7f0000005100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000ffdbdf254b0000000f00a8007365636f6e6c6e616d6500000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x40080)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xcc, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x20000000)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newlink={0x44, 0x10, 0x403, 0x58bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x5c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x9}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x6}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x100}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1.028747339s ago: executing program 32 (id=3321):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9)
r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x1, 'fo\x00', 0x24, 0x4c, 0x36}, 0x2c)
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000001c0)=r5, 0x4)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a80), 0xffffffffffffffff)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000000c0)={0x2c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c50a0000000000007910480000000000610418000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x48}}, 0x0)
tee(r1, r8, 0x8f5, 0x0)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x20, r12, 0x1, 0x0, 0x25dfdbfd, {{0x8}, {@void, @val={0xc, 0x99, {0x1, 0x1}}}}}, 0x20}}, 0x0)

21.455419ms ago: executing program 33 (id=3323):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt(r2, 0x1, 0x1, &(0x7f00000003c0)=""/220, &(0x7f0000000100)=0xdc)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x7, 0x7800, 0xff, 0x7ff, {{0x5, 0x4, 0x1, 0x0, 0x14, 0x66, 0x0, 0x80, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x25}}}}})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000050c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f00000051c0)={0x0, 0x0, &(0x7f0000005180)={&(0x7f0000005100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000ffdbdf254b0000000f00a8007365636f6e6c6e616d6500000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x40080)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xcc, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x20000000)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newlink={0x44, 0x10, 0x403, 0x58bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x5c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x9}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x6}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x100}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

0s ago: executing program 34 (id=3322):
connect$rds(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000140))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0xc201})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0xfffd, 0x2000}, 0x4)
setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x37, 0x0, 0x9}]}, 0x10)
write$tun(r3, &(0x7f0000003240)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x2c, 0xfa1, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x10, 0x7, 0x0, 0x8, {[@md5sig={0x13, 0x12, "570ae7f0b905a456f064db0300ffe61e"}]}}, {"ff09eb92334ce7bdbce1cc8ea7c31c4233f717f38859083e7244d871b6582e4b77453efb5c862f933cb39161906e8b6c78ab07fe1b3fe07565e76f3049a8f11350ffa159ce18eb0ce3712cc785657be76b1587f708924c9feb2e292ab97040cca863de23b3b516cc537105bb0404f84119e4260762c50671dc5aab1358ab653fbfb4bbcd3b4664ec16d8f9ec7829cd1af4a5450585bb1de8f968728adf5dec1de9e1e4a8ababf331c67b6c63551249f96344f4f4656e7cd6bf657857a8af5d2df76f377033b968501e40ed92b801d6efaaa61bdc158a6194b1fd1d6380bb7300a70b1d36c1a76ca97d8aec866053ca0d0d4830f966f48a3461bc25fba4dec31acaa7571527df4164e4f6a96c48ac714f8a8e0a4cd14617b52de88f0bee1cffccc96655f4fc658b5a0510e050f6f40aa3d28453590c3af7a4460719f9106f81797c856d60ec8528cc0c9487e69aa50cea9f374fa68593421c48bae1999c875cb205cc55f3c991416ff38e4f093a4c86ad36f19d1b3578242eedcfafd2c931fd2868dc24d9892f790ed560f40a848dd0670f0f611a61640053a2641ddc8ea149145bc5669b176bf12f40d9e0664760a3e476a93a362dd7dfcc3fd9f8be8ee2cd7a0a5fe189031bacbc1ed8e7c15a2bae104b7650c38ed42128a21ad834bac63ed73159e680f90d41475f28567eef33b4c21860ea1cd7a3f56ca286f87608ed49b72d36a1e6b04e4e0ba9ba7f76bece6426a6cad503c8ab33f28772edee91ab52fa29ff4da3893fa0629d1084b2a87f00a468feed92e5fe5aef33ae040aeb89098033fa81bec4535683391297f750f184f06ccb58dfa50ae2d6c159a0208481450bf38bca83f26c50fffe1449895cb8c990aa1cc0dd4cd2d0b4b3cc0006626898fdf274ecfaa1650c61e17f303f41559d75d470da40196aa5dff545903db275a12166b1692f334c70e4c5cf2ca2410989b429e3bc6e2e630adc5d6a039ad7872c4b4754cceeec43a3323d4594fcc28623e65f3067444e098c8817c9eb3f6dc06b6ec407438c09f2c137009c06505d88e0337c765f6c3b16f53bb0d1b235dbdc509ea3fd0996c8cad5bce70eea4d8852e7adfc222b06552d250e70211228251bfb5b95dd3b09bc30fc52337505a6f0689bfca144db622dead3525fbb73056d1b7fa7b08535af3952a8d77a1f34655eb69616c963f4e8b34e88b8405e0e3cd5130c4f98c4e180bfe76ec6cd6ac5e8ccf5d1cf99fdd79bca0a227ee78d2037a55c8593f7ff10bd42d82cd6c4931df7fa6c0c6a8246cef83599095269fb7841aec2cf1afb41d1c7c54136b2737d2c2ae2be604058b657eec27669b99fa669c92a9ebc8e817ed6860070d2fe6bad743ee65d35633de56f026710729102ed175e2ec0af8cc2840af173c71862e90bd370cd3d277a7d2622a5f00946649c1d7894f2a69c3cf8e21276d72c4536149038f9967ec0c748de34376da7971495e0cd783056cdf20cddab2e2201ea43e657e36c54d42c47d1e6a1c9dede599e6c0baac06c2e3fcc5687c5d4706f32337ab639633822dd98089ba20c532fbe4a5e72963d53a86ec34d6a4aa536015a3272c0d4cc0a3a3ab2196ec7a92bf2daf638ba5957941ff0facfe6a161da6a6cbf8e6b40c8b6a601ee91e592f6bb9dc85f84c99e088004ed3f650404934c8b1d436500f3c83333b33be5532076d1a718f80c139db1ac28c953cc23394a5a137567cde82fc681f32e66aa415c2358d02486cb6cb4d6a77e5b27d729e0116773725410332c58b4cc3683fc9dc5235b19a60ea8794986e56e5e8e2ce65655f261ee0c33c8c0b99e7b5bc61fb55040d9e109a3a1182a0f81c2ca081b14cc207b11dad4592add90ff543d2d237421f938af8a010cd197502dbf42f14f1572aabc9f16593a735c07484d61bc43b5f300eb66abe2052cec153f89c1819512316ad728eca65949bf1f903a556ae67871a0d35b0fcb5485e8fae70695cf90547784da27450d6c3e6049bf2f1b923fab49cf4caebccc7a0171aee4364db173c795cc486475427fb92efdbf161ab7a35aecb8e1d5435ea2733cc8dc3f824b00c6d3e05e406de563d1fc6aa77ef76351a3be04557d915df5ed1fd52207872666bbff9ffb84a6e91ae863af42b3e9dd6da62115ab71c6db508875db1a83e631c4cd658a6492cb1a8bd4a42b4546afb74484d519cb5b1a8db29d91ea575a09dc45f63b51b0ace075511556116db62507ed8b163430eea2dcc171890c51afe0ffb22d6595c15112730ce041648d543abf1871bb62b40303b277b2084eaee4895a9e552bcb2d319cbf733d2682940050095fc9499f116e3c828727c2f0755e2c624891a794a1bd9ff52237f13ccf144e67b5311e556333c5b11816fecd78fffb72190480b93e7fe13682b465aad1c2cf564c16d3e8fb07aed4b415f781a52dda6822ed0023b93c07b61e7740470216f29cb9c770ffd33837a6a0bc2990899778c74af304996ec13c1fc935b6d67b23f5190bf8b1bb3cc4e42bb2b9f1e3b330f24fe172396da0c8b52cdb4351a80fcebfcc85e54436327d8ad72d288551540f9a7bda7ecf2f2c41c3e775e26313de86c1b41ea1199321d533abe105ebfd90c9defd30ce9c7ea7a342b310eeca3dd88732dd9d7751c0ae685fbaed556727d2ece266a66ec7adc3a20f377b386ca7c909aba90fef9605ac37d43dd89e4da8455f086c1d2ce9c5b0eb4296ac64b7c244b28b4fd66a8be0442cbeacc7ba871efb11069d7c28dcdaf5798d0025741e461adabb3f270d056b1fe961e6626fc9a533924364687e80aa10e8ae081d743487bcfa97c0e1938dd47fc9075c3b0772284d98e683f0314c4a261845a3e50106e9c0a529b77293c251472a8eb6213ae49b0cc9d569e0a0c4fa1fb10663e4e0b6b0f9cee796aace2a1b42e42758a0180c2ee89119bf9359c6a277a062eda92a932ccf4b72ec1f998224acbe9eb8d594b8861b65ac276f1d401418c7be4d9344b52eb07aa74ba352e347f06e7e923b86cae5c0beb9f7aa0201b6537a82ea8f9281ac6e82a327ea7b879209dd30c1d40c22c402d3e6f09f4b4146b28cac26532eafbb5f6a67f6f734601ab352c804083570087124b23d7d3bff4d31569fcb8c091f157336d11e0e388a91ddf82b05b22dc3cc2ba4355a9453d9329cbca9d52489f15da5849ba32eb11d91184c6a352fe064aae6e85de05288282f911ebf2a932d43413c9bff9cb50f86af7eecca5eb9e3ce7fe9bc1743bcf24d01d02961116a87e4b55ddc1f217fb488c002cd85bb79db625bded4360983abf1e4574a9a46cfe05f0e45da2dd28703599adbae4703aad3ba1cc44813bcdf2432f0e5e9dd67ee8c6b34a9107fb81f21d87dd8fdf270068528685ea3c989beddc08410a59b5ad68d2fd9b37f8b3fddef393433de51b01314e3d6bb08fd7ea5b9abb4d4ccc5a5a43820004ac3870491b8df621be5388e2c3e2c40843d6798c493b308bef505d9f2d2734990a30150b4cefcaeb590118d21f331f201569c778cd5e54e34ec30a73d1fd48cd5d64d444a2a58856a71fa8173713136bdaef1b9cf1776cd7d5be3179ae7a2a95d7138334add686c5b50ca87e41b4c3f5343387cc491e97c280becefd3d72ae959a4fb3e51c15d6dea3210c480342c1748a040879f005f98a8b0d6a32fad631f557694179d117f71ae5fa6d54d4208aca72c5d1e03d34e80b221522c04b1bc7bc1ee008550a1757a1b74a0fea1d22778fd7e7a5f58e41cf72edf60d751bc35223646397457e8f9036838fd3b72e2bc176acc3e1e99a392b1d496cbfbdaa641b2212ef41c1728dd587272849b3a5cbe3b66f7eaf622d2cdf72ada32ccd3e16dddba2c890beaa8dba3773c88415fbcb733084a9bac52b6844f28377ba01fa3a09f74a57d87f31468ee2c64ae05b35fe3d660bcc6ed908b710a1216974db0232d90a124a4e8ee30322a20455feb4d0bef13ce0fafb56f492a99c3fb1c57900330bf75246147b44f23c77554119f1d96a4558d8fff90922af4f9299407344d7292d29ce3446e39bd9277e513e6068394584a08b356e6a0c641108f6e89390290844548a6c8122d8a83cc6c7d7f0c10d330a537d832bc779ea245a37c850b85858885541da0f914e1a41ec5b49ad9b3b41814f66c50bd1f49cd514d027ecd1bd2f002f1989fc621f23d6d5f1b9976ce95c305fa34ebd3404919c3414fd97227a590684ce5af0a18fb4fa6f41d4a3951fb49cc8184b547e9aa2ceb4912975ecf8e956bb29389789b8ceab72e7ae88fb402795ba7712323409fc83cbaf10a523dd4602d9ae7c158a56fee8df04ba4c48cdd63b1ce09bc697ca138f01f261f51bdc05480b7cf5f64836bf8e029d4883d4bc2f53115129cee1d9a9e57b4a5fb4ebef2237a2bdad349baeab05e6b24167ba67ea94f808d9d1386b08b0fd3c92a80ed253db5bb40e6a0c308339c615af56e554ed0d78881228da41706acd8596c52e33abc8a4a3317847dd50b8d77b341063fb29dd02594a540fa737a4dcf9c57ca8717d36e8a8a84eecf9ebb7bb0f4d8cb0f247f982e4fb7a29a7072f08eb1479e278b1084f4faba3c75b6c33438e24e7b454f1e8ee7c64507ef34f37e8655f49cf6871e8012bbf80d2fe2ad9424464d0a408ca50037f1b1221c2d3dbe4dfa75c236f6b59b8a9c8e3a4b1ef73bae3f8d44affc10c72485dee42b73671867221778a6f9ba1ddd5715a6115845af2da8687e0e75f35cca527cb21a07bb2018a574a7e1eb626ad6939990038588cabc63aaafada2c88336f2c764d52cf5c3740371c79ed30f4b7325768c43b9daab5532b4778bdc380bc56bf656eaeea1f7987db28672850e46fce9c9d7dcc7df7b01e9f98ae98890491949c3a9af72cf35227fe88e79d1853ab46903dffd8ceb6060b5a2da5ee061db21e07124b510af4be93a2eda5c9469c73ef661e52d1d3ddf6d0dbd58715730485d26b731da17fb67b1bdedd400cdd472ab88c059e99452b932202fa8500e9b14ec63791857fc33fb97a21469dc318e9799d6b8d3155a9b9ddae7704457f9fbafd0756fcf8464e2398a88b2b4ea3f655cacd390f6df7b195b35b25c6873f0c53ba2939efe513e448ec1c406380ca4e0a6ef53cb183f05bfe99b003429aa5a4709dbf9b6da2fcbc243bcc6b6e8840ed0636af84b6dd3c3b9e50f19c7fda40185dd542f8ff32e7ca9fad274847238e05cf0db24cf7ac1e2cecbcb20bbfe4868b6245899d8e6717a1f9321fd38b87c0c02bb24ed937e9460d03a5a38fa8e0d222105c8527d898f889bbe298b368fff9b951d1b0780352ce8ad10a5dea883292d6cf149618406fc33ca1539da60a1922ee27b7b74aa3507e6a5731bf2c42c879e9efa0750c8bacc63e2225589eab7bf237c259f715248b61278e4ef6f6d238d5bc9bde650795243874b294f228597cf687df0aa8ab1e58548991a1bd903f70408cd4c23f2db7f2ad3f9a0b12a4e52f09270d8f79aa0cde1ffd268d50fcf47c5b2a41898a076e8467cc40de311c26a1f5ff5d1a6693402f927077083490b65e594d5f4e848dc76e03adb2108"}}}}, 0xfaf)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="c80000001000a54627bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c000000000000a000128009000100766c616e000000009000028006000100040000000c0002001c00000010000000280004800c000142addfcb2b2c3477000c00010008000000f30000000bfa0100050000000b000003080003800c00010001800000ffff00000c0001000600000001f0ffff0c00010007000000040000000c00010001000100070000001c0004800c000100ff010000060000000c000100000000000a00000008000500", @ANYRES32], 0xc8}, 0x1, 0x0, 0x0, 0x28001}, 0x8000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x9, 0x3, 0x2f8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x18, 0x6, 0x6, 0x1, 'pptp\x00', 'syz1\x00', {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xff80, 0x10, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001400), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004014)

kernel console output (not intermixed with test programs):

6] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2710'.
[  308.432467][T16155] bond82: entered promiscuous mode
[  308.440360][T16155] 8021q: adding VLAN 0 to HW filter on device bond82
[  308.449841][T16136] veth1_to_team: entered promiscuous mode
[  308.453410][T16136] veth1_to_team: left promiscuous mode
[  308.470695][T16154] 8021q: adding VLAN 0 to HW filter on device bond82
[  308.473855][T16154] bond82: (slave wireguard4): The slave device specified does not support setting the MAC address
[  308.479356][T16154] bond82: (slave wireguard4): Setting fail_over_mac to active for active-backup mode
[  308.492331][T16154] bond82: (slave wireguard4): making interface the new active one
[  308.495870][T16154] wireguard4: entered promiscuous mode
[  308.500143][T16154] bond82: (slave wireguard4): Enslaving as an active interface with an up link
[  308.507553][T16158] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2715'.
[  308.512404][T16154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2715'.
[  308.516564][T16136] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2710'.
[  308.519827][T16154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2715'.
[  308.523276][T16136] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2710'.
[  308.545670][T16136] veth1_to_team: entered promiscuous mode
[  308.553160][T16136] veth1_to_team: left promiscuous mode
[  308.594871][T16136] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2710'.
[  308.601398][T16136] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2710'.
[  308.614647][T16136] veth1_to_team: entered promiscuous mode
[  308.618112][T16136] veth1_to_team: left promiscuous mode
[  308.654011][T16160] 8021q: adding VLAN 0 to HW filter on device bond83
[  308.674885][T16136] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2710'.
[  308.682386][T16136] veth1_to_team: entered promiscuous mode
[  308.685744][T16136] veth1_to_team: left promiscuous mode
[  308.743793][T16136] veth1_to_team: entered promiscuous mode
[  308.749938][T16136] veth1_to_team: left promiscuous mode
[  308.819322][T16165] validate_nla: 6 callbacks suppressed
[  308.819372][T16165] netlink: 'syz.2.2718': attribute type 13 has an invalid length.
[  308.839621][T16169] netlink: 'syz.0.2719': attribute type 1 has an invalid length.
[  309.016030][T16169] bond70: entered promiscuous mode
[  309.018613][T16169] 8021q: adding VLAN 0 to HW filter on device bond70
[  309.039109][T16175] bond70: (slave bridge42): making interface the new active one
[  309.041998][T16175] bridge42: entered promiscuous mode
[  309.048862][T16175] bridge42: left promiscuous mode
[  309.710020][T16198] netlink: 'syz.2.2725': attribute type 13 has an invalid length.
[  309.722180][T16198] netlink: 'syz.2.2725': attribute type 17 has an invalid length.
[  309.745374][T16198] 0{X: left promiscuous mode
[  309.758220][T16198] erspan0: left promiscuous mode
[  309.767794][T16198] ip6_vti0: left promiscuous mode
[  309.781649][T16198] ip6gretap0: left promiscuous mode
[  309.806310][T16198] 8021q: adding VLAN 0 to HW filter on device bond0
[  309.828498][T16198] veth1_to_hsr: left allmulticast mode
[  309.831959][T16198] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  309.836038][T16198] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  309.842567][T16198] net_ratelimit: 14 callbacks suppressed
[  309.842583][T16198] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  309.920636][ T5923]  speed is unknown, defaulting to 1000
[  310.016042][T16206] netlink: 'syz.2.2728': attribute type 1 has an invalid length.
[  310.016548][T16210] netlink: 'syz.1.2729': attribute type 10 has an invalid length.
[  310.027376][T16210] team0: left allmulticast mode
[  310.029446][T16210] bridge2: left allmulticast mode
[  310.031139][T16210] macvlan2: left allmulticast mode
[  310.032928][T16210] bridge8: left allmulticast mode
[  310.035072][T16210] bridge11: left allmulticast mode
[  310.036713][T16210] bridge16: left allmulticast mode
[  310.038269][T16210] bridge17: left allmulticast mode
[  310.039791][T16210] bridge18: left allmulticast mode
[  310.041320][T16210] macvlan5: left allmulticast mode
[  310.043130][T16210] bridge19: left allmulticast mode
[  310.045470][T16210] bridge25: left allmulticast mode
[  310.047123][T16210] bridge28: left allmulticast mode
[  310.048696][T16210] bridge30: left allmulticast mode
[  310.050226][T16210] bridge33: left allmulticast mode
[  310.051982][T16210] team0: left promiscuous mode
[  310.053597][T16210] bridge2: left promiscuous mode
[  310.056271][T16210] macvlan2: left promiscuous mode
[  310.058286][T16210] bridge8: left promiscuous mode
[  310.060333][T16210] bridge11: left promiscuous mode
[  310.061975][T16210] bridge16: left promiscuous mode
[  310.063553][T16210] bridge17: left promiscuous mode
[  310.065692][T16210] bridge18: left promiscuous mode
[  310.068015][T16210] macvlan5: left promiscuous mode
[  310.069683][T16210] bridge19: left promiscuous mode
[  310.071268][T16210] bridge25: left promiscuous mode
[  310.073181][T16210] bridge28: left promiscuous mode
[  310.076105][T16210] bridge30: left promiscuous mode
[  310.077935][T16210] bridge33: left promiscuous mode
[  310.079999][T16210] bridge0: port 1(team0) entered disabled state
[  310.125096][T16206] netlink: 'syz.2.2728': attribute type 3 has an invalid length.
[  310.203610][T16225] 1: renamed from c0 (while UP)
[  310.210870][T16225] 1: entered allmulticast mode
[  310.212518][T16225] hsr_slave_0: entered allmulticast mode
[  310.215077][T16225] A link change request failed with some changes committed already. Interface c1 may have been left with an inconsistent configuration, please check.
[  310.446566][T16242] netlink: 'syz.1.2738': attribute type 1 has an invalid length.
[  310.467739][T16242] 8021q: adding VLAN 0 to HW filter on device bond136
[  310.629075][T16267] syzkaller0: Caught tx_queue_len zero misconfig
[  310.649457][T16268] netlink: 'syz.0.2745': attribute type 2 has an invalid length.
[  310.675532][T16268] 8021q: adding VLAN 0 to HW filter on device bond71
[  310.693407][T16270] bond137: option fail_over_mac: invalid value (127)
[  310.700484][T16270] bond137 (unregistering): Released all slaves
[  310.729656][T16278] netlink: 'syz.0.2748': attribute type 10 has an invalid length.
[  310.749866][T16267] tipc: Resetting bearer <eth:syzkaller0>
[  310.793417][ T5923]  speed is unknown, defaulting to 1000
[  310.949531][T16283] tipc: Resetting bearer <eth:syzkaller0>
[  310.987339][T16283] bond126: left allmulticast mode
[  310.989043][T16283] bond126: left promiscuous mode
[  310.999959][T16283] bond0: left allmulticast mode
[  311.001630][T16283] erspan2: left allmulticast mode
[  311.013120][ T5899] 1 speed is unknown, defaulting to 1000
[  311.013163][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  311.015663][ T5899] syz2: Port: 1 Link DOWN
[  311.021492][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  311.030882][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  311.039339][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  311.044741][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  311.048117][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  311.051556][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  311.056093][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  311.098116][T16302] syzkaller0: left promiscuous mode
[  311.100281][T16302] syzkaller0: left allmulticast mode
[  311.175467][T16307] gre8: entered promiscuous mode
[  311.218247][T16311] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  311.251707][T16317] gretap0: left promiscuous mode
[  311.254607][T16317] gretap0: entered promiscuous mode
[  311.268694][T16317] 8021q: adding VLAN 0 to HW filter on device 
[  311.290117][T16317] veth1_macvtap: left promiscuous mode
[  311.292411][T16317] veth0_macvtap: left promiscuous mode
[  311.294607][T16317] veth0_macvtap: entered promiscuous mode
[  311.426336][T16330] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20002
[  311.575740][T16335] bond137: option arp_all_targets: invalid value (129)
[  311.584693][T16335] bond137 (unregistering): Released all slaves
[  312.293349][T16367] bridge42: entered promiscuous mode
[  312.295514][T16367] bridge42: entered allmulticast mode
[  312.299552][T16367] team0: Port device bridge42 added
[  312.477920][T16384] macvlan15: entered promiscuous mode
[  312.479635][T16384] macvlan15: entered allmulticast mode
[  312.481967][T16384] bond85: entered promiscuous mode
[  312.484042][T16384] 8021q: adding VLAN 0 to HW filter on device macvlan15
[  312.506176][T16384] bond85: left promiscuous mode
[  312.607253][T16388] bond73 (unregistering): Released all slaves
[  312.793543][T16407] syzkaller0: Caught tx_queue_len zero misconfig
[  312.823102][T16407] syzkaller0: entered promiscuous mode
[  312.830668][T16407] syzkaller0: entered allmulticast mode
[  312.907711][T16411] netem: change failed
[  312.985621][T16416] bridge36: entered promiscuous mode
[  312.987393][T16416] bridge36: entered allmulticast mode
[  313.148307][T16416] bridge36: entered promiscuous mode
[  313.153295][T16416] bridge36: entered allmulticast mode
[  313.332405][T16443] bridge36: entered promiscuous mode
[  313.344348][T16443] bridge36: entered allmulticast mode
[  313.538381][T16455] __nla_validate_parse: 134 callbacks suppressed
[  313.538393][T16455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2793'.
[  313.668503][T16468] 1 speed is unknown, defaulting to 1000
[  313.671143][T16468]  speed is unknown, defaulting to 1000
[  313.740190][T16469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2801'.
[  313.766451][T16479] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2803'.
[  313.860020][T16483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2805'.
[  313.923563][T16488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2805'.
[  314.030602][T16492] validate_nla: 8 callbacks suppressed
[  314.030626][T16492] netlink: 'syz.2.2807': attribute type 10 has an invalid length.
[  314.060747][T16492] dvmrp1: tun_chr_ioctl cmd 1074025677
[  314.063474][T16492] dvmrp1: linktype set to 773
[  314.118222][T16499] team0: Device macvlan2 failed to change mtu
[  314.260998][T16502] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2810'.
[  314.273292][T16513] bond86: entered allmulticast mode
[  314.278883][T16502] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2810'.
[  314.391958][T16524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2816'.
[  314.448313][T16528] 1 speed is unknown, defaulting to 1000
[  314.451684][T16528]  speed is unknown, defaulting to 1000
[  314.464088][T16531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2817'.
[  314.588952][T16544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2821'.
[  315.002492][T16567] netlink: 'syz.2.2827': attribute type 61 has an invalid length.
[  315.053276][T16569] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  315.757946][T16606] 1 speed is unknown, defaulting to 1000
[  315.761134][T16608] netlink: 'syz.1.2841': attribute type 21 has an invalid length.
[  315.761395][T16606]  speed is unknown, defaulting to 1000
[  315.767037][T16608] IPv6: NLM_F_CREATE should be specified when creating new route
[  315.771462][T16608] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  315.774439][T16608] IPv6: NLM_F_CREATE should be set when creating new route
[  315.777434][T16608] IPv6: NLM_F_CREATE should be set when creating new route
[  315.780063][T16608] IPv6: NLM_F_CREATE should be set when creating new route
[  315.784070][T16608] netlink: 'syz.1.2841': attribute type 21 has an invalid length.
[  315.787502][T16608] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  315.810095][T16608] 8021q: adding VLAN 0 to HW filter on device team0
[  315.817661][T16608] 8021q: adding VLAN 0 to HW filter on device batadv0
[  315.843390][T16608] 1: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  315.848935][T16608] 1: left allmulticast mode
[  315.850750][T16608] hsr_slave_0: left allmulticast mode
[  315.867749][T16608] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  315.949814][T16614] netlink: 'syz.1.2842': attribute type 1 has an invalid length.
[  315.987876][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  315.990689][ T5923] 1 speed is unknown, defaulting to 1000
[  315.993708][ T5923] syz2: Port: 1 Link ACTIVE
[  315.994746][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  316.028877][T16614] 8021q: adding VLAN 0 to HW filter on device bond139
[  316.035622][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  316.038831][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  316.321701][T16635] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  316.349731][T16639] netlink: 'syz.2.2847': attribute type 10 has an invalid length.
[  316.351056][T16641] tipc: Failed to remove unknown binding: 66,1,1/4211247834:1562838971/1562838973
[  316.362257][T16639] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  316.362317][T16641] tipc: Failed to remove unknown binding: 66,1,1/4211247834:1562838971/1562838973
[  316.376129][T16641] tipc: Failed to remove unknown binding: 66,1,1/4211247834:1562838971/1562838973
[  316.386020][T16641] netlink: 'syz.1.2848': attribute type 1 has an invalid length.
[  316.517655][T16659] bridge0: port 1(erspan0) entered blocking state
[  316.519973][T16659] bridge0: port 1(erspan0) entered disabled state
[  316.522125][T16659] erspan0: entered allmulticast mode
[  316.525846][T16659] erspan0: entered promiscuous mode
[  316.527716][T16659] bridge0: port 1(erspan0) entered blocking state
[  316.529872][T16659] bridge0: port 1(erspan0) entered listening state
[  316.544817][T16660] erspan0: left allmulticast mode
[  316.546580][T16660] erspan0: left promiscuous mode
[  316.551305][T16660] bridge0: port 1(erspan0) entered disabled state
[  316.872583][T16688] netlink: 'syz.1.2858': attribute type 1 has an invalid length.
[  316.880526][   T25] block nbd2: Possible stuck request ffff8881057a8000: control (read@0,1024B). Runtime 60 seconds
[  316.884925][   T25] block nbd2: Possible stuck request ffff8881057a8200: control (read@1024,1024B). Runtime 60 seconds
[  316.889014][   T25] block nbd2: Possible stuck request ffff8881057a8400: control (read@2048,1024B). Runtime 60 seconds
[  316.893359][   T25] block nbd2: Possible stuck request ffff8881057a8600: control (read@3072,1024B). Runtime 60 seconds
[  316.959022][T16688] 8021q: adding VLAN 0 to HW filter on device bond141
[  316.966766][T16688] bond140: (slave bond141): making interface the new active one
[  316.970272][T16688] bond140: (slave bond141): Enslaving as an active interface with an up link
[  317.430434][T16706] netlink: 'syz.1.2861': attribute type 1 has an invalid length.
[  317.460882][T16706] 8021q: adding VLAN 0 to HW filter on device bond142
[  317.714579][T16729] veth42: entered allmulticast mode
[  317.873132][T16738] openvswitch: netlink: Actions may not be safe on all matching packets
[  317.873484][T16740] bridge43: entered promiscuous mode
[  317.877908][T16740] bridge43: entered allmulticast mode
[  317.881613][T16740] team0: Port device bridge43 added
[  318.020261][T16746] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  318.227716][T16761] bridge47: entered promiscuous mode
[  318.229485][T16761] bridge47: entered allmulticast mode
[  318.233311][T16761] team0: Port device bridge47 added
[  318.523022][T16780] vxcan6: entered promiscuous mode
[  318.566929][T16788] sysfs: cannot create duplicate filename '/class/ieee80211/1^!Y
[  318.566929][T16788] 3UH5rBn\'
[  318.571666][T16788] CPU: 0 UID: 0 PID: 16788 Comm: syz.1.2886 Not tainted syzkaller #0 PREEMPT(full) 
[  318.571683][T16788] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  318.571691][T16788] Call Trace:
[  318.571695][T16788]  <TASK>
[  318.571701][T16788]  dump_stack_lvl+0xe8/0x150
[  318.571717][T16788]  sysfs_warn_dup+0x8e/0xa0
[  318.571729][T16788]  sysfs_do_create_link_sd+0xc0/0x110
[  318.571744][T16788]  device_add_class_symlinks+0x1cf/0x240
[  318.571757][T16788]  device_add+0x475/0xbb0
[  318.571768][T16788]  wiphy_register+0x1fb1/0x2fe0
[  318.571787][T16788]  ? __pfx_wiphy_register+0x10/0x10
[  318.571796][T16788]  ? __pfx_netdev_run_todo+0x10/0x10
[  318.571807][T16788]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  318.571822][T16788]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  318.571842][T16788]  ieee80211_register_hw+0x3c53/0x4910
[  318.571860][T16788]  ? ieee80211_register_hw+0x1911/0x4910
[  318.571882][T16788]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  318.571894][T16788]  ? __asan_memset+0x22/0x50
[  318.571905][T16788]  ? __hrtimer_setup+0x1b7/0x260
[  318.571916][T16788]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  318.571929][T16788]  mac80211_hwsim_new_radio+0x3327/0x57e0
[  318.571955][T16788]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  318.571967][T16788]  ? kstrndup+0xbf/0x160
[  318.571980][T16788]  hwsim_new_radio_nl+0xe20/0x26e0
[  318.571993][T16788]  ? unwind_next_frame+0xa6/0x2550
[  318.572011][T16788]  ? is_bpf_text_address+0x26/0x2b0
[  318.572026][T16788]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  318.572037][T16788]  ? __kernel_text_address+0xd/0x30
[  318.572049][T16788]  ? unwind_get_return_address+0x4d/0x90
[  318.572059][T16788]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  318.572071][T16788]  ? arch_stack_walk+0xfb/0x150
[  318.572088][T16788]  ? stack_trace_save+0xa9/0x100
[  318.572099][T16788]  ? __pfx_stack_trace_save+0x10/0x10
[  318.572113][T16788]  ? stack_depot_save_flags+0x33/0x810
[  318.572124][T16788]  ? kasan_save_track+0x3e/0x80
[  318.572135][T16788]  ? kasan_save_alloc_info+0x11/0x50
[  318.572143][T16788]  ? __kasan_slab_free+0x5c/0x80
[  318.572179][T16788]  ? __nla_validate_parse+0x2480/0x2dc0
[  318.572193][T16788]  ? ____sys_sendmsg+0x972/0x9f0
[  318.572207][T16788]  ? ___sys_sendmsg+0x2a5/0x360
[  318.572230][T16788]  ? __pfx___nla_validate_parse+0x10/0x10
[  318.572252][T16788]  ? rcu_is_watching+0x15/0xb0
[  318.572264][T16788]  ? trace_kmalloc+0x2a/0xf0
[  318.572279][T16788]  ? __nla_parse+0x40/0x60
[  318.572293][T16788]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  318.572303][T16788]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  318.572316][T16788]  genl_family_rcv_msg_doit+0x22a/0x330
[  318.572330][T16788]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  318.572345][T16788]  ? bpf_lsm_capable+0x9/0x20
[  318.572353][T16788]  ? security_capable+0x7e/0x2c0
[  318.572367][T16788]  genl_rcv_msg+0x61c/0x7a0
[  318.572380][T16788]  ? __pfx_genl_rcv_msg+0x10/0x10
[  318.572396][T16788]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  318.572407][T16788]  ? __pfx_ref_tracker_free+0x10/0x10
[  318.572427][T16788]  netlink_rcv_skb+0x232/0x4b0
[  318.572441][T16788]  ? __pfx_genl_rcv_msg+0x10/0x10
[  318.572451][T16788]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  318.572470][T16788]  ? down_read+0x270/0x2e0
[  318.572479][T16788]  ? genl_rcv+0xd/0x40
[  318.572488][T16788]  genl_rcv+0x28/0x40
[  318.572496][T16788]  netlink_unicast+0x75c/0x8e0
[  318.572512][T16788]  netlink_sendmsg+0x813/0xb40
[  318.572529][T16788]  ? __pfx_netlink_sendmsg+0x10/0x10
[  318.572542][T16788]  ? aa_sock_msg_perm+0xf1/0x1b0
[  318.572554][T16788]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  318.572575][T16788]  ____sys_sendmsg+0x972/0x9f0
[  318.572624][T16788]  ? __might_fault+0xaf/0x130
[  318.572649][T16788]  ? __pfx_____sys_sendmsg+0x10/0x10
[  318.572676][T16788]  ? import_iovec+0x73/0xa0
[  318.572692][T16788]  ___sys_sendmsg+0x2a5/0x360
[  318.572705][T16788]  ? __lock_acquire+0x6b5/0x2cf0
[  318.572718][T16788]  ? __pfx____sys_sendmsg+0x10/0x10
[  318.572734][T16788]  ? futex_wait+0x2a2/0x390
[  318.572758][T16788]  ? __fget_files+0x2a/0x420
[  318.572768][T16788]  ? __fget_files+0x3a0/0x420
[  318.572783][T16788]  __x64_sys_sendmsg+0x1bd/0x2a0
[  318.572797][T16788]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  318.572813][T16788]  ? rcu_is_watching+0x15/0xb0
[  318.572828][T16788]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.572837][T16788]  do_syscall_64+0x15f/0xf80
[  318.572845][T16788]  ? trace_irq_disable+0x3b/0x140
[  318.572862][T16788]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.572871][T16788] RIP: 0033:0x7fe216d9cdd9
[  318.572881][T16788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  318.572890][T16788] RSP: 002b:00007fe217ca9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  318.572901][T16788] RAX: ffffffffffffffda RBX: 00007fe217015fa0 RCX: 00007fe216d9cdd9
[  318.572909][T16788] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  318.572915][T16788] RBP: 00007fe216e32d69 R08: 0000000000000000 R09: 0000000000000000
[  318.572922][T16788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  318.572928][T16788] R13: 00007fe217016038 R14: 00007fe217015fa0 R15: 00007ffc86b6f768
[  318.572944][T16788]  </TASK>
[  318.776047][T16790] __nla_validate_parse: 82 callbacks suppressed
[  318.776061][T16790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2887'.
[  318.811920][T16792] netlink: 'syz.1.2888': attribute type 1 has an invalid length.
[  318.832006][T16792] bond143: (slave vxcan1): The slave device specified does not support setting the MAC address
[  318.837635][T16792] bond143: (slave vxcan1): Error -95 calling set_mac_address
[  318.847223][T16797] pim6reg: left allmulticast mode
[  318.981538][T16799] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2889'.
[  319.016391][T16803] sctp: [Deprecated]: syz.1.2890 (pid 16803) Use of int in maxseg socket option.
[  319.016391][T16803] Use struct sctp_assoc_value instead
[  319.091204][T16807] bond74: entered allmulticast mode
[  319.094388][T16811] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2893'.
[  319.100402][T16807] macvlan0: entered promiscuous mode
[  319.102273][T16807] macvlan0: entered allmulticast mode
[  319.109631][T16807] bond74: entered promiscuous mode
[  319.119127][T16807] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  319.130700][T16807] bond74: left promiscuous mode
[  319.168803][T16813] netlink: 'syz.1.2894': attribute type 1 has an invalid length.
[  319.218375][T16813] bond144: entered promiscuous mode
[  319.221273][T16813] 8021q: adding VLAN 0 to HW filter on device bond144
[  319.266490][T16824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2896'.
[  319.419658][T16837] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2900'.
[  319.740351][T16851] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2904'.
[  319.750651][T16851] netlink: 280 bytes leftover after parsing attributes in process `syz.2.2904'.
[  319.759931][T16851] netlink: 280 bytes leftover after parsing attributes in process `syz.2.2904'.
[  319.774614][T16851] netlink: 280 bytes leftover after parsing attributes in process `syz.2.2904'.
[  319.778302][T16851] netlink: 280 bytes leftover after parsing attributes in process `syz.2.2904'.
[  319.852171][   T33] audit: type=1804 audit(1778611163.386:16): pid=16858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2907" name="/newroot/1063/memory.events" dev="tmpfs" ino=5416 res=1 errno=0
[  319.867327][   T33] audit: type=1800 audit(1778611163.386:17): pid=16858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2907" name="memory.events" dev="tmpfs" ino=5416 res=0 errno=0
[  319.873731][T16858] bond145: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  319.883952][T16858] bond145 (unregistering): Released all slaves
[  319.887560][T16861] netlink: 'syz.2.2908': attribute type 1 has an invalid length.
[  319.992970][T16868] veth0_virt_wifi: entered allmulticast mode
[  320.072232][T16871] bridge48: entered promiscuous mode
[  320.074799][T16871] bridge48: entered allmulticast mode
[  320.080096][T16871] team0: Port device bridge48 added
[  320.096722][T16871] bridge49: entered promiscuous mode
[  320.098865][T16871] bridge49: entered allmulticast mode
[  320.104997][T16871] team0: Port device bridge49 added
[  320.110230][T16871] bridge0: port 1(team0) entered blocking state
[  320.113026][T16871] bridge0: port 1(team0) entered disabled state
[  320.116814][T16871] team0: entered allmulticast mode
[  320.119668][T16871] bridge2: entered allmulticast mode
[  320.121914][T16871] macvlan2: entered allmulticast mode
[  320.124146][T16871] bridge8: entered allmulticast mode
[  320.126866][T16871] bridge11: entered allmulticast mode
[  320.130097][T16871] bridge16: entered allmulticast mode
[  320.132542][T16871] bridge17: entered allmulticast mode
[  320.135017][T16871] bridge18: entered allmulticast mode
[  320.137268][T16871] macvlan5: entered allmulticast mode
[  320.139540][T16871] bridge19: entered allmulticast mode
[  320.141813][T16871] bridge25: entered allmulticast mode
[  320.144047][T16871] bridge28: entered allmulticast mode
[  320.146700][T16871] bridge30: entered allmulticast mode
[  320.149060][T16871] bridge33: entered allmulticast mode
[  320.162103][T16871] team0: entered promiscuous mode
[  320.164916][T16871] bridge2: entered promiscuous mode
[  320.167276][T16871] macvlan2: entered promiscuous mode
[  320.169771][T16871] bridge8: entered promiscuous mode
[  320.172233][T16871] bridge11: entered promiscuous mode
[  320.177281][T16871] bridge16: entered promiscuous mode
[  320.180681][T16871] bridge17: entered promiscuous mode
[  320.182993][T16871] bridge18: entered promiscuous mode
[  320.185570][T16871] macvlan5: entered promiscuous mode
[  320.187963][T16871] bridge19: entered promiscuous mode
[  320.190301][T16871] bridge25: entered promiscuous mode
[  320.192679][T16871] bridge28: entered promiscuous mode
[  320.199067][T16871] bridge30: entered promiscuous mode
[  320.201969][T16871] bridge33: entered promiscuous mode
[  320.413923][T16896] netlink: 'syz.2.2919': attribute type 1 has an invalid length.
[  320.449018][T16896] bond88: entered promiscuous mode
[  320.451146][T16896] 8021q: adding VLAN 0 to HW filter on device bond88
[  320.461289][T16899] netlink: 'syz.0.2920': attribute type 1 has an invalid length.
[  320.493726][T16899] 8021q: adding VLAN 0 to HW filter on device bond75
[  320.523144][T16909] x_tables: duplicate entry at hook 3
[  320.665817][T16911] tipc: Resetting bearer <eth:syzkaller0>
[  320.667997][T16911] tipc: Resetting bearer <eth:syzkaller0>
[  320.763050][T16921] ipvlan0: entered allmulticast mode
[  320.791804][ T5899] 1 speed is unknown, defaulting to 1000
[  320.800356][ T5913] 1 speed is unknown, defaulting to 1000
[  320.850787][T16925] bridge50: entered promiscuous mode
[  320.853197][T16925] bridge50: entered allmulticast mode
[  320.858805][T16927] netlink: 'syz.0.2927': attribute type 11 has an invalid length.
[  320.863957][T16925] team0: Port device bridge50 added
[  320.894967][T16925] bridge51: entered promiscuous mode
[  320.897022][T16925] bridge51: entered allmulticast mode
[  320.903922][T16925] team0: Port device bridge51 added
[  321.009041][T16935] bond76: option lacp_active: invalid value (8)
[  321.012158][T16935] bond76 (unregistering): Released all slaves
[  321.257331][T16952] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  321.320989][T16952] 1 speed is unknown, defaulting to 1000
[  321.325770][T16952]  speed is unknown, defaulting to 1000
[  321.425718][T16956] syzkaller1: entered promiscuous mode
[  321.427743][T16956] syzkaller1: entered allmulticast mode
[  321.525070][T16965] netlink: 'syz.0.2934': attribute type 1 has an invalid length.
[  321.575948][T16964] bond145: option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  321.581432][T16964] bond145 (unregistering): Released all slaves
[  321.592967][T16965] workqueue: Failed to create a rescuer kthread for wq "bond76": -EINTR
[  321.768299][T16972] openvswitch: netlink: IP tunnel dst address not specified
[  321.782315][T16976] netlink: 'syz.2.2938': attribute type 13 has an invalid length.
[  321.787203][T16976] netlink: 'syz.2.2938': attribute type 17 has an invalid length.
[  321.827079][T16976] 8021q: adding VLAN 0 to HW filter on device bond0
[  321.856693][T16976] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  321.859969][T16976] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  321.896798][T16976] 8021q: adding VLAN 0 to HW filter on device bond1
[  321.906190][T16976] 8021q: adding VLAN 0 to HW filter on device bond2
[  321.910569][T16976] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  321.920038][T16976] bridge4: left promiscuous mode
[  321.932422][T16976] 8021q: adding VLAN 0 to HW filter on device bond3
[  321.940000][T16976] 8021q: adding VLAN 0 to HW filter on device bond4
[  321.950726][T16976] 8021q: adding VLAN 0 to HW filter on device bond5
[  321.958604][T16976] 8021q: adding VLAN 0 to HW filter on device bond6
[  321.965951][T16976] 8021q: adding VLAN 0 to HW filter on device bond7
[  321.971212][T16976] 8021q: adding VLAN 0 to HW filter on device bond8
[  321.975623][T16976] erspan0: entered promiscuous mode
[  321.987140][T16976] 8021q: adding VLAN 0 to HW filter on device bond9
[  321.993441][T16976] 8021q: adding VLAN 0 to HW filter on device bond10
[  322.011505][T16976] 8021q: adding VLAN 0 to HW filter on device bond11
[  322.020965][T16976] 8021q: adding VLAN 0 to HW filter on device bond12
[  322.026381][T16976] 8021q: adding VLAN 0 to HW filter on device bond13
[  322.029803][T16976] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  322.046037][T16976] 8021q: adding VLAN 0 to HW filter on device bond14
[  322.049397][T16976] 8021q: adding VLAN 0 to HW filter on device bond16
[  322.054740][T13706] bond5: (slave bridge6): link status up again after 0 ms
[  322.058070][T16976] 8021q: adding VLAN 0 to HW filter on device bond15
[  322.076466][T16976] 8021q: adding VLAN 0 to HW filter on device bond17
[  322.078026][T13706] bond5: (slave bridge6): link status up again after 0 ms
[  322.083020][T16976] 8021q: adding VLAN 0 to HW filter on device bond18
[  322.086349][T16976] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  322.090068][T16976] 8021q: adding VLAN 0 to HW filter on device bond19
[  322.094861][ T5445] bond5: (slave bridge6): link status up again after 0 ms
[  322.098379][T16976] 8021q: adding VLAN 0 to HW filter on device bond20
[  322.101571][T16976] bond20: entered promiscuous mode
[  322.104071][T16976] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  322.114610][T16976] 8021q: adding VLAN 0 to HW filter on device bond21
[  322.114916][T13706] bond5: (slave bridge6): link status up again after 0 ms
[  322.121692][T16976] 8021q: adding VLAN 0 to HW filter on device bond22
[  322.125867][T16976] bond22: entered promiscuous mode
[  322.127977][T16976] 8021q: adding VLAN 0 to HW filter on device macvlan8
[  322.132184][T16976] 8021q: adding VLAN 0 to HW filter on device bond23
[  322.142944][T16976] 8021q: adding VLAN 0 to HW filter on device bond24
[  322.144754][T13706] bond5: (slave bridge6): link status up again after 0 ms
[  322.164507][T13706] bond5: (slave bridge6): link status up again after 0 ms
[  322.184479][T13706] bond5: (slave bridge6): link status up again after 0 ms
[  322.184985][T16976] 0{X: entered promiscuous mode
[  322.193267][T16976] 8021q: adding VLAN 0 to HW filter on device bond25
[  322.199272][T16976] 8021q: adding VLAN 0 to HW filter on device bond26
[  322.202105][T16976] 8021q: adding VLAN 0 to HW filter on device bond27
[  322.205642][T16976] ip6gretap0: entered promiscuous mode
[  322.209525][T16976] 8021q: adding VLAN 0 to HW filter on device bond28
[  322.214685][ T5668] bond5: (slave bridge6): link status up again after 0 ms
[  322.219332][T16976] 8021q: adding VLAN 0 to HW filter on device bond29
[  322.223181][T16976] veth1_to_batadv: entered promiscuous mode
[  322.226403][T16976] macsec0: left promiscuous mode
[  322.230771][T16976] 8021q: adding VLAN 0 to HW filter on device bond30
[  322.235038][ T5668] bond5: (slave bridge6): link status up again after 0 ms
[  322.238526][T16976] 8021q: adding VLAN 0 to HW filter on device bond31
[  322.253906][ T5913]  speed is unknown, defaulting to 1000
[  322.254034][ T5923] ip6gretap1: entered promiscuous mode
[  322.258671][ T5913] sy2: Port: 1 Link ACTIVE
[  322.260646][ T5923] bridge4: entered promiscuous mode
[  322.283587][  T147] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  322.286088][  T147] bridge0: port 1(veth0_virt_wifi) entered listening state
[  322.319043][T16990] netlink: 'syz.2.2940': attribute type 10 has an invalid length.
[  322.322485][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  322.327729][   T13] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 4352 - 0
[  322.330708][   T13] netdevsim netdevsim2 eth0: set [0, 2] type 1 family 0 port 2816 - 0
[  322.334944][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  322.345432][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  322.348249][   T13] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 4352 - 0
[  322.351946][   T13] netdevsim netdevsim2 eth1: set [0, 2] type 1 family 0 port 2816 - 0
[  322.355596][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  322.358497][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  322.361054][   T13] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 4352 - 0
[  322.364106][   T13] netdevsim netdevsim2 eth2: set [0, 2] type 1 family 0 port 2816 - 0
[  322.367104][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  322.377655][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  322.380139][   T13] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 4352 - 0
[  322.382641][   T13] netdevsim netdevsim2 eth3: set [0, 2] type 1 family 0 port 2816 - 0
[  322.386428][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  322.530782][T16995] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  322.673867][T17017] bond89: entered promiscuous mode
[  322.676650][T17017] 8021q: adding VLAN 0 to HW filter on device bond89
[  322.915214][T17028] team3: entered promiscuous mode
[  322.916989][T17028] team3: entered allmulticast mode
[  322.919343][T17028] 8021q: adding VLAN 0 to HW filter on device team3
[  322.923127][T17026] team4 (uninitialized): Failed to send options change via netlink (err -105)
[  322.936364][T17026] team4: entered promiscuous mode
[  322.938084][T17026] team4: entered allmulticast mode
[  322.940351][T17026] 8021q: adding VLAN 0 to HW filter on device team4
[  323.051111][T17033] netlink: 'syz.2.2948': attribute type 4 has an invalid length.
[  323.081768][T17033] bond90: Unable to set peer notification delay as MII monitoring is disabled
[  323.087693][T17033] bond90 (unregistering): Released all slaves
[  323.574144][T17048] netlink: 'syz.0.2952': attribute type 1 has an invalid length.
[  323.581361][T17048] workqueue: Failed to create a rescuer kthread for wq "bond76": -EINTR
[  323.712297][T17060] team1: entered promiscuous mode
[  323.717999][T17060] team1: entered allmulticast mode
[  323.720046][T17060] 8021q: adding VLAN 0 to HW filter on device team1
[  323.869583][T17071] __nla_validate_parse: 85 callbacks suppressed
[  323.869606][T17071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2958'.
[  323.918337][T17077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2959'.
[  324.126126][T17080] bond76: (slave veth27): Enslaving as an active interface with a down link
[  324.153989][T17080] bond76: (slave veth29): Enslaving as an active interface with a down link
[  324.299913][T17085] bridge44: entered promiscuous mode
[  324.301966][T17085] bridge44: entered allmulticast mode
[  324.307968][T17085] team0: Port device bridge44 added
[  324.342558][T17087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2963'.
[  324.346424][T17087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2963'.
[  324.350001][T17087] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2963'.
[  324.391630][T17089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2964'.
[  324.408264][T17089] validate_nla: 1 callbacks suppressed
[  324.408278][T17089] netlink: 'syz.0.2964': attribute type 1 has an invalid length.
[  324.463203][T17091] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2965'.
[  324.870183][T17107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2967'.
[  325.151342][T17116] xt_hashlimit: size too large, truncated to 1048576
[  325.303086][T17121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2972'.
[  325.351844][T17121] bridge52: port 1(veth43) entered blocking state
[  325.354793][T17121] bridge52: port 1(veth43) entered disabled state
[  325.357083][T17121] veth43: entered allmulticast mode
[  325.359975][T17121] veth43: entered promiscuous mode
[  325.366116][T17121] bridge52: port 2(veth0_to_bond) entered blocking state
[  325.368599][T17121] bridge52: port 2(veth0_to_bond) entered disabled state
[  325.371437][T17121] veth0_to_bond: entered allmulticast mode
[  325.374890][T17121] veth0_to_bond: entered promiscuous mode
[  325.377478][T17121] bridge52: port 2(veth0_to_bond) entered blocking state
[  325.379674][T17121] bridge52: port 2(veth0_to_bond) entered forwarding state
[  326.151096][T17126] netlink: 'syz.1.2974': attribute type 13 has an invalid length.
[  326.301659][T17126] tipc: Resetting bearer <eth:syzkaller0>
[  326.411434][T17135] netlink: 'syz.0.2976': attribute type 21 has an invalid length.
[  326.486540][T17137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2976'.
[  326.492041][T17137] netlink: 'syz.0.2976': attribute type 4 has an invalid length.
[  326.518657][T17135] netlink: 'syz.0.2976': attribute type 6 has an invalid length.
[  326.529130][T17135] netlink: 'syz.0.2976': attribute type 4 has an invalid length.
[  326.689894][T17153] netlink: 'syz.2.2981': attribute type 1 has an invalid length.
[  326.697887][T17153] workqueue: Failed to create a rescuer kthread for wq "bond90": -EINTR
[  326.822709][T17162] veth1_macvtap: entered promiscuous mode
[  326.900340][T17162] 8021q: adding VLAN 0 to HW filter on device bond1
[  326.911226][T17162] 8021q: adding VLAN 0 to HW filter on device bond2
[  326.917342][T17162] 8021q: adding VLAN 0 to HW filter on device bond3
[  326.927616][T17162] 8021q: adding VLAN 0 to HW filter on device bond4
[  326.931289][T17162] 8021q: adding VLAN 0 to HW filter on device bond5
[  326.940077][T17162] 8021q: adding VLAN 0 to HW filter on device bond6
[  326.944141][T17162] 8021q: adding VLAN 0 to HW filter on device bond7
[  326.948627][T17162] 8021q: adding VLAN 0 to HW filter on device bond8
[  326.953478][T17162] 8021q: adding VLAN 0 to HW filter on device bond9
[  326.961904][T17162] 8021q: adding VLAN 0 to HW filter on device bond10
[  326.969007][T17162] 8021q: adding VLAN 0 to HW filter on device bond11
[  326.999706][T17162] 8021q: adding VLAN 0 to HW filter on device bond12
[  327.007022][T17162] 8021q: adding VLAN 0 to HW filter on device bond13
[  327.010792][T17162] 8021q: adding VLAN 0 to HW filter on device bond14
[  327.018055][T17162] 8021q: adding VLAN 0 to HW filter on device ipvlan5
[  327.025884][T17162] 8021q: adding VLAN 0 to HW filter on device bond15
[  327.030860][T17162] 8021q: adding VLAN 0 to HW filter on device bond16
[  327.036048][T17162] 8021q: adding VLAN 0 to HW filter on device bond17
[  327.039620][T17162] 8021q: adding VLAN 0 to HW filter on device bond18
[  327.043451][T17162] 8021q: adding VLAN 0 to HW filter on device bond19
[  327.054683][T17162] 8021q: adding VLAN 0 to HW filter on device bond20
[  327.058533][T17162] 8021q: adding VLAN 0 to HW filter on device bond21
[  327.077617][T17162] 8021q: adding VLAN 0 to HW filter on device bond22
[  327.085541][T17162] 8021q: adding VLAN 0 to HW filter on device bond23
[  327.095314][T17162] 8021q: adding VLAN 0 to HW filter on device bond24
[  327.100461][T17162] 8021q: adding VLAN 0 to HW filter on device bond25
[  327.111873][T17162] 8021q: adding VLAN 0 to HW filter on device bond26
[  327.120051][T17162] 8021q: adding VLAN 0 to HW filter on device bond27
[  327.126670][T17162] 8021q: adding VLAN 0 to HW filter on device bond28
[  327.130301][T17162] 8021q: adding VLAN 0 to HW filter on device bond29
[  327.136588][T17162] 8021q: adding VLAN 0 to HW filter on device bond30
[  327.139637][T17162] 8021q: adding VLAN 0 to HW filter on device bond31
[  327.145286][T17162] 8021q: adding VLAN 0 to HW filter on device bond32
[  327.148443][T17162] 8021q: adding VLAN 0 to HW filter on device bond33
[  327.151405][T17162] 8021q: adding VLAN 0 to HW filter on device bond34
[  327.155334][T17162] 8021q: adding VLAN 0 to HW filter on device bond35
[  327.158548][T17162] 8021q: adding VLAN 0 to HW filter on device bond36
[  327.166642][T17162] 8021q: adding VLAN 0 to HW filter on device bond37
[  327.172800][T17162] 8021q: adding VLAN 0 to HW filter on device bond38
[  327.177866][T17162] 8021q: adding VLAN 0 to HW filter on device bond39
[  327.191493][T17162] 8021q: adding VLAN 0 to HW filter on device bond40
[  327.198576][T17162] 8021q: adding VLAN 0 to HW filter on device bond41
[  327.201654][T17162] 8021q: adding VLAN 0 to HW filter on device team0
[  327.205953][T17162] 8021q: adding VLAN 0 to HW filter on device bond42
[  327.209289][T17162] 8021q: adding VLAN 0 to HW filter on device bond43
[  327.212716][T17162] 8021q: adding VLAN 0 to HW filter on device bond44
[  327.219965][T17162] 8021q: adding VLAN 0 to HW filter on device bond45
[  327.225799][T17162] 8021q: adding VLAN 0 to HW filter on device bond46
[  327.230017][T17162] 8021q: adding VLAN 0 to HW filter on device bond47
[  327.236451][T17162] 8021q: adding VLAN 0 to HW filter on device bond48
[  327.244737][T17162] 8021q: adding VLAN 0 to HW filter on device bond49
[  327.248017][T17162] 8021q: adding VLAN 0 to HW filter on device bond50
[  327.253866][T17162] 8021q: adding VLAN 0 to HW filter on device bond51
[  327.263729][T17162] 8021q: adding VLAN 0 to HW filter on device bond52
[  327.272818][T17162] 8021q: adding VLAN 0 to HW filter on device bond53
[  327.280029][T17162] 8021q: adding VLAN 0 to HW filter on device bond54
[  327.283359][T17162] 8021q: adding VLAN 0 to HW filter on device bond55
[  327.288787][T17162] 8021q: adding VLAN 0 to HW filter on device bond56
[  327.298141][T17162] 8021q: adding VLAN 0 to HW filter on device bond57
[  327.309529][T17162] 8021q: adding VLAN 0 to HW filter on device bond58
[  327.313206][T17162] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  327.317750][T17162] 8021q: adding VLAN 0 to HW filter on device ipvlan1
[  327.318311][ T5059] udevd[5059]: worker [6706] /devices/virtual/block/nbd2 is taking a long time
[  327.321795][T17162] 8021q: adding VLAN 0 to HW filter on device ipvlan6
[  327.340291][T17162] 8021q: adding VLAN 0 to HW filter on device bond59
[  327.343747][T17162] 8021q: adding VLAN 0 to HW filter on device bond60
[  327.348129][T17162] 8021q: adding VLAN 0 to HW filter on device bond61
[  327.353844][T17162] 8021q: adding VLAN 0 to HW filter on device bond62
[  327.358543][T17162] 8021q: adding VLAN 0 to HW filter on device ipvlan8
[  327.368453][T17162] 8021q: adding VLAN 0 to HW filter on device bond63
[  327.377284][T17162] 8021q: adding VLAN 0 to HW filter on device bond64
[  327.382288][T17162] 8021q: adding VLAN 0 to HW filter on device bond65
[  327.389579][T17162] 8021q: adding VLAN 0 to HW filter on device bond66
[  327.394721][T17162] 8021q: adding VLAN 0 to HW filter on device bond67
[  327.398119][T17162] 8021q: adding VLAN 0 to HW filter on device bond68
[  327.402364][T17162] 8021q: adding VLAN 0 to HW filter on device bond69
[  327.407725][T17162] 8021q: adding VLAN 0 to HW filter on device bond70
[  327.413775][T17162] 8021q: adding VLAN 0 to HW filter on device bond72
[  327.420257][T17162] 8021q: adding VLAN 0 to HW filter on device bond73
[  327.427155][T17162] 8021q: adding VLAN 0 to HW filter on device eth0
[  327.431431][T17162] 8021q: adding VLAN 0 to HW filter on device eth1
[  327.435639][T17162] 8021q: adding VLAN 0 to HW filter on device eth2
[  327.439147][T17162] 8021q: adding VLAN 0 to HW filter on device eth3
[  327.444817][T17162] 8021q: adding VLAN 0 to HW filter on device bond74
[  327.449967][T17162] 8021q: adding VLAN 0 to HW filter on device bond76
[  327.457268][ T5669] bridge0: entered promiscuous mode
[  327.504433][ T5445] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  327.507738][ T5445] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 2816 - 0
[  327.510819][ T5445] netdevsim netdevsim0 eth0: set [0, 2] type 1 family 0 port 4352 - 0
[  327.513918][ T5445] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  327.524855][ T5445] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  327.534316][ T5445] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 20004 - 0
[  327.537758][ T5445] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  327.540347][ T5445] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 2816 - 0
[  327.542762][ T5445] netdevsim netdevsim0 eth1: set [0, 2] type 1 family 0 port 4352 - 0
[  327.550272][ T5445] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  327.554459][ T5445] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  327.557910][ T5445] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 20004 - 0
[  327.584121][ T5445] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  327.590046][ T5445] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 2816 - 0
[  327.594592][ T5445] netdevsim netdevsim0 eth2: set [0, 2] type 1 family 0 port 4352 - 0
[  327.600848][ T5445] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  327.606132][ T5445] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  327.609564][ T5445] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 20004 - 0
[  327.621319][ T5445] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  327.630713][ T5445] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 2816 - 0
[  327.638635][ T5445] netdevsim netdevsim0 eth3: set [0, 2] type 1 family 0 port 4352 - 0
[  327.646988][ T5445] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  327.654092][ T5445] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  327.666121][ T5445] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 20004 - 0
[  327.721340][T17168] 0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  327.750948][T17176] batadv2: entered promiscuous mode
[  327.752899][T17176] batadv2: entered allmulticast mode
[  327.761610][T17176] 8021q: adding VLAN 0 to HW filter on device batadv2
[  327.767387][   T12] net_ratelimit: 83 callbacks suppressed
[  327.767413][   T12] bond5: (slave bridge6): failed to get link speed/duplex
[  327.792368][T17173] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  327.825181][ T8571] bond28: (slave bridge14): failed to get link speed/duplex
[  327.857104][T17179] netlink: 'syz.1.2988': attribute type 1 has an invalid length.
[  327.887938][ T5445] bond76: (slave veth27): link status definitely up, 10000 Mbps full duplex
[  327.909232][ T5445] bond76: (slave veth29): link status definitely up, 10000 Mbps full duplex
[  327.916951][ T5445] bond76: (slave veth27): making interface the new active one
[  327.927050][ T5445] bond76: active interface up!
[  327.931356][T17182] netlink: 'syz.0.2990': attribute type 12 has an invalid length.
[  327.961280][T17182] netlink: 'syz.0.2990': attribute type 39 has an invalid length.
[  328.102495][T17184] syzkaller0: Caught tx_queue_len zero misconfig
[  328.164624][ T8571] bond28: (slave bridge14): failed to get link speed/duplex
[  328.185259][ T8571] bond5: (slave bridge6): failed to get link speed/duplex
[  328.335059][T17196] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  328.341542][T17196] netdevsim netdevsim0 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  328.349892][T17196] netdevsim netdevsim0 eth3 (unregistering): unset [0, 2] type 1 family 0 port 4352 - 0
[  328.356157][T17196] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.361296][T17196] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  328.369634][T17196] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0
[  328.394376][   T12] bond5: (slave bridge6): failed to get link speed/duplex
[  328.472790][T17196] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  328.478691][T17196] netdevsim netdevsim0 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  328.482567][T17196] netdevsim netdevsim0 eth2 (unregistering): unset [0, 2] type 1 family 0 port 4352 - 0
[  328.489142][T17196] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.493040][T17196] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  328.497360][T17196] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0
[  328.515341][   T12] bond28: (slave bridge14): failed to get link speed/duplex
[  328.525751][   T13] bond5: (slave bridge6): failed to get link speed/duplex
[  328.597383][T17196] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  328.605105][T17196] netdevsim netdevsim0 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  328.609465][T17196] netdevsim netdevsim0 eth1 (unregistering): unset [0, 2] type 1 family 0 port 4352 - 0
[  328.625105][T17196] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.628887][T17196] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  328.632643][T17196] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0
[  328.669338][   T12] bond5: (slave bridge6): failed to get link speed/duplex
[  328.684718][ T8571] bond28: (slave bridge14): failed to get link speed/duplex
[  328.725846][T17196] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  328.730235][T17196] netdevsim netdevsim0 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  328.733975][T17196] netdevsim netdevsim0 eth0 (unregistering): unset [0, 2] type 1 family 0 port 4352 - 0
[  328.739887][T17196] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.743630][T17196] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  328.749333][T17196] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0
[  329.209740][T13706] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  329.222196][T13706] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 4352 - 0
[  329.225569][T13706] netdevsim netdevsim0 eth0: set [0, 2] type 1 family 0 port 2816 - 0
[  329.228147][T13706] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  329.232304][T13706] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  329.237669][T13706] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  329.267170][ T8571] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  329.271145][ T8571] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 4352 - 0
[  329.277631][ T8571] netdevsim netdevsim0 eth1: set [0, 2] type 1 family 0 port 2816 - 0
[  329.285273][ T8571] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  329.291146][ T8571] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  329.301297][ T8571] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  329.312982][T17227] __nla_validate_parse: 20 callbacks suppressed
[  329.313004][T17227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3002'.
[  329.358679][ T8571] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  329.361213][ T8571] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 4352 - 0
[  329.366677][ T8571] netdevsim netdevsim0 eth2: set [0, 2] type 1 family 0 port 2816 - 0
[  329.375440][ T8571] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  329.377918][ T8571] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  329.380419][ T8571] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  329.398217][ T8571] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  329.401691][ T8571] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 4352 - 0
[  329.407491][ T8571] netdevsim netdevsim0 eth3: set [0, 2] type 1 family 0 port 2816 - 0
[  329.411157][ T8571] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  329.416940][ T8571] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  329.420339][ T8571] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  329.491058][T17238] bond90: option miimon: invalid value (18446744073709551607)
[  329.493995][T17238] bond90: option miimon: allowed values 0 - 2147483647
[  329.499541][T17243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3007'.
[  329.502992][T17238] bond90 (unregistering): Released all slaves
[  329.505970][T17243] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3007'.
[  329.551320][T17241] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  329.556857][T17241] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3006'.
[  329.610399][T17251] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  329.638405][T17256] mac80211_hwsim hwsim59 wlan0: Caught tx_queue_len zero misconfig
[  329.671045][T17256] bond145: option fail_over_mac: invalid value (127)
[  329.680213][T17256] bond145 (unregistering): Released all slaves
[  329.818552][T17267] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3013'.
[  329.832697][T17270] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3013'.
[  330.537853][T17300] syzkaller1: entered promiscuous mode
[  330.544635][T17300] syzkaller1: entered allmulticast mode
[  330.866887][T17321] validate_nla: 1 callbacks suppressed
[  330.866900][T17321] netlink: 'syz.1.3028': attribute type 1 has an invalid length.
[  330.909212][T17321] 8021q: adding VLAN 0 to HW filter on device bond145
[  330.936436][T17326] syzkaller0: Caught tx_queue_len zero misconfig
[  330.992930][T17326] syzkaller0: entered promiscuous mode
[  330.995572][T17326] syzkaller0: entered allmulticast mode
[  331.312240][T17357] 1 speed is unknown, defaulting to 1000
[  331.318554][T17357]  speed is unknown, defaulting to 1000
[  331.402247][T17363] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3036'.
[  331.714917][T17382] netlink: 'syz.0.3041': attribute type 1 has an invalid length.
[  331.718191][T17383] netlink: 210640 bytes leftover after parsing attributes in process `syz.2.3040'.
[  331.738635][T17389] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  331.757260][T17382] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3041'.
[  331.819036][T17397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3045'.
[  331.860506][T17395] netlink: 'syz.2.3044': attribute type 58 has an invalid length.
[  331.939059][T17404] netlink: 'syz.1.3048': attribute type 33 has an invalid length.
[  331.945045][T17404] `: renamed from team0 (while UP)
[  332.089772][T17422] netlink: 'syz.2.3050': attribute type 13 has an invalid length.
[  332.091637][T17421] xt_hashlimit: size too large, truncated to 1048576
[  332.094899][T17422] netlink: 'syz.2.3050': attribute type 17 has an invalid length.
[  332.192310][T17412] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  332.913333][T17412] tipc: Resetting bearer <eth:syzkaller0>
[  333.002409][T17412] ip6gretap1: left promiscuous mode
[  333.085327][T17412] bond20: left promiscuous mode
[  333.116810][T17412] bond22: left promiscuous mode
[  333.216291][ T5899]  speed is unknown, defaulting to 1000
[  333.218742][ T5899] sy2: Port: 1 Link DOWN
[  333.231760][T17419] bond79: entered allmulticast mode
[  333.244334][T17422] 0{X: left promiscuous mode
[  333.255618][T17422] erspan0: left promiscuous mode
[  333.272963][T17422] ip6gretap0: left promiscuous mode
[  333.292373][T17422] 8021q: adding VLAN 0 to HW filter on device bond0
[  333.309972][T17422] veth1_to_batadv: left promiscuous mode
[  333.322664][T17422] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  333.324951][T17422] bridge0: port 1(veth0_virt_wifi) entered listening state
[  333.334046][T17422] 8021q: adding VLAN 0 to HW filter on device bond1
[  333.341048][T17422] 8021q: adding VLAN 0 to HW filter on device bond2
[  333.344057][T17422] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  333.351387][T17422] bridge4: left promiscuous mode
[  333.359961][T17422] 8021q: adding VLAN 0 to HW filter on device bond3
[  333.365361][T17422] 8021q: adding VLAN 0 to HW filter on device bond4
[  333.373800][T17422] 8021q: adding VLAN 0 to HW filter on device bond5
[  333.380219][T17422] 8021q: adding VLAN 0 to HW filter on device bond6
[  333.386399][T17422] 8021q: adding VLAN 0 to HW filter on device bond7
[  333.390242][T17422] 8021q: adding VLAN 0 to HW filter on device bond8
[  333.393413][T17422] erspan0: entered promiscuous mode
[  333.400570][T17422] 8021q: adding VLAN 0 to HW filter on device bond9
[  333.405816][T17422] 8021q: adding VLAN 0 to HW filter on device bond10
[  333.434010][T17422] 8021q: adding VLAN 0 to HW filter on device bond11
[  333.438937][T17422] syzkaller0: left promiscuous mode
[  333.441122][T17422] syzkaller0: left allmulticast mode
[  333.449500][T17422] 8021q: adding VLAN 0 to HW filter on device bond12
[  333.454126][T17422] 8021q: adding VLAN 0 to HW filter on device bond13
[  333.459605][T17422] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  333.474713][ T5445] net_ratelimit: 66 callbacks suppressed
[  333.474737][ T5445] bond5: (slave bridge6): link status up again after 0 ms
[  333.476001][T17422] 8021q: adding VLAN 0 to HW filter on device bond14
[  333.481808][T17422] 8021q: adding VLAN 0 to HW filter on device bond16
[  333.489384][T17422] 8021q: adding VLAN 0 to HW filter on device bond15
[  333.494472][   T12] bond5: (slave bridge6): link status up again after 0 ms
[  333.507963][T17422] 8021q: adding VLAN 0 to HW filter on device bond17
[  333.510790][T17422] 8021q: adding VLAN 0 to HW filter on device bond18
[  333.513798][T17422] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  333.521602][T17422] 8021q: adding VLAN 0 to HW filter on device bond19
[  333.528931][   T12] bond5: (slave bridge6): link status up again after 0 ms
[  333.530238][T17422] 8021q: adding VLAN 0 to HW filter on device bond20
[  333.533920][T17422] bond20: entered promiscuous mode
[  333.536900][T17422] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  333.545516][T13706] bond5: (slave bridge6): link status up again after 0 ms
[  333.550925][T17422] 8021q: adding VLAN 0 to HW filter on device bond21
[  333.553914][T17422] 8021q: adding VLAN 0 to HW filter on device bond22
[  333.556887][T17422] bond22: entered promiscuous mode
[  333.558824][T17422] 8021q: adding VLAN 0 to HW filter on device macvlan8
[  333.562369][T17422] 8021q: adding VLAN 0 to HW filter on device bond23
[  333.572899][T17422] 8021q: adding VLAN 0 to HW filter on device bond24
[  333.576009][ T8571] bond5: (slave bridge6): link status up again after 0 ms
[  333.595713][ T8571] bond5: (slave bridge6): link status up again after 0 ms
[  333.619291][T17422] 0{X: entered promiscuous mode
[  333.625066][T13706] bond5: (slave bridge6): link status up again after 0 ms
[  333.626080][T17422] 8021q: adding VLAN 0 to HW filter on device bond25
[  333.632588][T17422] 8021q: adding VLAN 0 to HW filter on device bond26
[  333.636386][T17422] 8021q: adding VLAN 0 to HW filter on device bond27
[  333.639172][T17422] ip6gretap0: entered promiscuous mode
[  333.646009][   T13] bond5: (slave bridge6): link status up again after 0 ms
[  333.649478][T17422] 8021q: adding VLAN 0 to HW filter on device bond28
[  333.656024][T17422] 8021q: adding VLAN 0 to HW filter on device bond29
[  333.659189][T17422] veth1_to_batadv: entered promiscuous mode
[  333.662979][T17422] 8021q: adding VLAN 0 to HW filter on device bond30
[  333.665559][   T13] bond5: (slave bridge6): link status up again after 0 ms
[  333.669968][T17422] 8021q: adding VLAN 0 to HW filter on device bond31
[  333.676230][T17422] A link change request failed with some changes committed already. Interface vxlan2 may have been left with an inconsistent configuration, please check.
[  333.687623][T17423] macvlan0: entered promiscuous mode
[  333.689393][T17423] macvlan0: entered allmulticast mode
[  333.691923][T17423] bond79: entered promiscuous mode
[  333.696001][T17423] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  333.704001][T17423] bond79: left promiscuous mode
[  333.717862][ T5911] ip6gretap1: entered promiscuous mode
[  333.719754][ T5911] bridge4: entered promiscuous mode
[  333.738456][ T5899]  speed is unknown, defaulting to 1000
[  333.740869][ T5899] sy2: Port: 1 Link ACTIVE
[  334.012076][T17455] netlink: 'syz.1.3057': attribute type 33 has an invalid length.
[  334.081037][T17456] vlan5: entered promiscuous mode
[  334.090984][T17456] vlan5: entered allmulticast mode
[  334.170627][T17457] vxcan7: entered allmulticast mode
[  334.378050][T17470] bond90: entered promiscuous mode
[  334.427282][T17470] __nla_validate_parse: 8 callbacks suppressed
[  334.427294][T17470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3060'.
[  334.431744][T17470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3060'.
[  334.859556][T17485] netlink: 'syz.0.3063': attribute type 1 has an invalid length.
[  334.890242][T17485] bond80: entered promiscuous mode
[  334.894390][T17485] bond80: entered allmulticast mode
[  334.896984][T17485] 8021q: adding VLAN 0 to HW filter on device bond80
[  334.941216][T17485] bridge46: entered promiscuous mode
[  334.943006][T17485] bridge46: entered allmulticast mode
[  334.945299][T17485] bond80: (slave bridge46): Enslaving as a backup interface with an up link
[  334.957678][T17485] bridge47: entered promiscuous mode
[  334.959500][T17485] bridge47: entered allmulticast mode
[  334.961476][T17485] bond80: (slave bridge47): Enslaving as a backup interface with a down link
[  335.028756][T17496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3065'.
[  335.043877][T17496] 8021q: adding VLAN 0 to HW filter on device bond81
[  335.049399][T17499] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3065'.
[  335.058088][T17496] bond81 (unregistering): Released all slaves
[  335.202474][T17502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3066'.
[  335.206798][T17502] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3066'.
[  335.210958][T17502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3066'.
[  335.216488][T17502] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3066'.
[  335.271371][T17505] netlink: 'syz.1.3068': attribute type 1 has an invalid length.
[  335.306377][T17506] bond146: entered allmulticast mode
[  335.392360][T17512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3069'.
[  335.398344][T17513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3069'.
[  335.453700][T17508] tipc: Resetting bearer <eth:syzkaller0>
[  335.953974][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  335.976756][   T12] netdevsim netdevsim0 eth0: unset [0, 1] type 1 family 0 port 4352 - 0
[  335.982143][   T12] netdevsim netdevsim0 eth0: unset [0, 2] type 1 family 0 port 2816 - 0
[  335.993111][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  335.999928][   T12] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  336.005287][   T12] netdevsim netdevsim0 eth0: unset [1, 2] type 2 family 0 port 6081 - 0
[  336.011924][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  336.025431][   T12] netdevsim netdevsim0 eth1: unset [0, 1] type 1 family 0 port 4352 - 0
[  336.033285][   T12] netdevsim netdevsim0 eth1: unset [0, 2] type 1 family 0 port 2816 - 0
[  336.037117][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  336.040401][   T12] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  336.044149][   T12] netdevsim netdevsim0 eth1: unset [1, 2] type 2 family 0 port 6081 - 0
[  336.050997][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  336.055923][   T12] netdevsim netdevsim0 eth2: unset [0, 1] type 1 family 0 port 4352 - 0
[  336.059220][   T12] netdevsim netdevsim0 eth2: unset [0, 2] type 1 family 0 port 2816 - 0
[  336.062713][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  336.066522][   T12] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  336.070152][   T12] netdevsim netdevsim0 eth2: unset [1, 2] type 2 family 0 port 6081 - 0
[  336.073962][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  336.078119][   T12] netdevsim netdevsim0 eth3: unset [0, 1] type 1 family 0 port 4352 - 0
[  336.081532][   T12] netdevsim netdevsim0 eth3: unset [0, 2] type 1 family 0 port 2816 - 0
[  336.085875][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  336.089527][   T12] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  336.093057][   T12] netdevsim netdevsim0 eth3: unset [1, 2] type 2 family 0 port 6081 - 0
[  336.391865][T17531] netlink: 'syz.0.3072': attribute type 1 has an invalid length.
[  336.398294][T17530] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.449890][T17541] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  336.479421][T17530] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.528058][T17530] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.578000][T17530] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.658325][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  336.673744][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  336.683032][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  336.691715][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  336.740599][T17559] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  336.778823][T17561] bond135: (slave lo): Releasing backup interface
[  336.783762][T17561] bond135: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  336.791257][T17561] `: left allmulticast mode
[  336.793481][T17561] bridge2: left allmulticast mode
[  336.797022][T17561] macvlan2: left allmulticast mode
[  336.799288][T17561] bridge8: left allmulticast mode
[  336.801406][T17561] bridge11: left allmulticast mode
[  336.803400][T17561] bridge16: left allmulticast mode
[  336.808924][T17561] bridge17: left allmulticast mode
[  336.811307][T17561] bridge18: left allmulticast mode
[  336.813479][T17561] macvlan5: left allmulticast mode
[  336.815985][T17561] bridge19: left allmulticast mode
[  336.818270][T17561] bridge25: left allmulticast mode
[  336.820536][T17561] bridge28: left allmulticast mode
[  336.822721][T17561] bridge30: left allmulticast mode
[  336.826591][T17561] bridge33: left allmulticast mode
[  336.834015][T17561] `: left promiscuous mode
[  336.836695][T17561] bridge2: left promiscuous mode
[  336.839032][T17561] macvlan2: left promiscuous mode
[  336.841361][T17561] bridge8: left promiscuous mode
[  336.843654][T17561] bridge11: left promiscuous mode
[  336.847002][T17561] bridge16: left promiscuous mode
[  336.849358][T17561] bridge17: left promiscuous mode
[  336.851604][T17561] bridge18: left promiscuous mode
[  336.853842][T17561] macvlan5: left promiscuous mode
[  336.856894][T17561] bridge19: left promiscuous mode
[  336.859154][T17561] bridge25: left promiscuous mode
[  336.861507][T17561] bridge28: left promiscuous mode
[  336.863808][T17561] bridge30: left promiscuous mode
[  336.867302][T17561] bridge33: left promiscuous mode
[  336.871098][T17561] bridge0: port 1(`) entered disabled state
[  336.880476][T17561] veth0_to_bond: left allmulticast mode
[  336.882645][T17561] veth0_to_bond: left promiscuous mode
[  336.885547][T17561] bridge52: port 2(veth0_to_bond) entered disabled state
[  336.942054][T17569] netlink: 'syz.0.3081': attribute type 1 has an invalid length.
[  337.021989][T17577] bond81: (slave veth31): Enslaving as an active interface with a down link
[  337.028300][T17578] xt_hashlimit: invalid rate
[  337.073903][T17569] bond81: (slave veth33): Enslaving as an active interface with a down link
[  337.095781][T17569] 8021q: adding VLAN 0 to HW filter on device bond81
[  337.116519][T17584] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  338.504599][ T5668] net_ratelimit: 82 callbacks suppressed
[  338.504623][ T5668] bond28: (slave bridge14): failed to get link speed/duplex
[  338.534978][ T5668] bond5: (slave bridge6): failed to get link speed/duplex
[  338.614426][ T5668] bond28: (slave bridge14): failed to get link speed/duplex
[  338.644574][ T5668] bond5: (slave bridge6): failed to get link speed/duplex
[  338.724527][   T13] bond28: (slave bridge14): failed to get link speed/duplex
[  338.754535][ T5668] bond5: (slave bridge6): failed to get link speed/duplex
[  338.834591][ T5668] bond28: (slave bridge14): failed to get link speed/duplex
[  338.864611][   T13] bond5: (slave bridge6): failed to get link speed/duplex
[  338.944549][   T13] bond28: (slave bridge14): failed to get link speed/duplex
[  338.974476][ T8571] bond5: (slave bridge6): failed to get link speed/duplex
[  340.014895][T17580] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  340.133160][T17609] bond82 (unregistering): Released all slaves
[  340.263106][T17618] __nla_validate_parse: 5 callbacks suppressed
[  340.263128][T17618] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3093'.
[  340.286502][T17619] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3091'.
[  340.433332][T17627] 1 speed is unknown, defaulting to 1000
[  340.438663][T17627]  speed is unknown, defaulting to 1000
[  340.516916][T17630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3095'.
[  340.529964][T17630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3095'.
[  340.733074][T17634] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3096'.
[  340.793489][T17634] 1 speed is unknown, defaulting to 1000
[  340.799180][T17634]  speed is unknown, defaulting to 1000
[  341.116702][T17651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3099'.
[  341.138190][T17643] netlink: 277 bytes leftover after parsing attributes in process `syz.1.3098'.
[  341.508077][T17669] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3102'.
[  341.543959][T17671] netlink: 'syz.1.3103': attribute type 18 has an invalid length.
[  341.549197][T17671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3103'.
[  341.553032][T17671] netlink: 'syz.1.3103': attribute type 18 has an invalid length.
[  341.556577][T17671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3103'.
[  341.867655][T17692] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap8
[  341.886582][T17692] gretap8: entered promiscuous mode
[  341.888285][T17692] gretap8: entered allmulticast mode
[  341.939144][T17697] ipvlan9: entered allmulticast mode
[  342.096445][T17705] sctp: [Deprecated]: syz.2.3114 (pid 17705) Use of int in max_burst socket option deprecated.
[  342.096445][T17705] Use struct sctp_assoc_value instead
[  342.169671][T17712] netlink: 'syz.0.3116': attribute type 7 has an invalid length.
[  342.231649][T17718] netlink: 'syz.2.3117': attribute type 5 has an invalid length.
[  342.240993][T17718] netlink: 'syz.2.3117': attribute type 5 has an invalid length.
[  342.297476][T17714] 1 speed is unknown, defaulting to 1000
[  342.300230][T17714]  speed is unknown, defaulting to 1000
[  343.076800][T17769] bridge48: entered promiscuous mode
[  343.079444][T17769] bridge48: entered allmulticast mode
[  343.565045][   T13] net_ratelimit: 75 callbacks suppressed
[  343.565068][   T13] bond28: (slave bridge14): failed to get link speed/duplex
[  343.584732][   T13] bond5: (slave bridge6): failed to get link speed/duplex
[  343.684493][ T7233] bond28: (slave bridge14): failed to get link speed/duplex
[  343.695265][ T7233] bond5: (slave bridge6): failed to get link speed/duplex
[  343.794793][ T7233] bond28: (slave bridge14): failed to get link speed/duplex
[  343.805111][ T7233] bond5: (slave bridge6): failed to get link speed/duplex
[  343.904566][ T7233] bond28: (slave bridge14): failed to get link speed/duplex
[  343.915028][ T5668] bond5: (slave bridge6): failed to get link speed/duplex
[  343.992214][T17829] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  344.016078][T17829] syzkaller0: entered promiscuous mode
[  344.018182][T17829] syzkaller0: entered allmulticast mode
[  344.025258][ T5668] bond28: (slave bridge14): failed to get link speed/duplex
[  344.044501][ T5668] bond5: (slave bridge6): failed to get link speed/duplex
[  344.135984][T17838] netlink: 'syz.1.3142': attribute type 1 has an invalid length.
[  344.182850][T17838] bond147: entered promiscuous mode
[  344.187709][T17838] 8021q: adding VLAN 0 to HW filter on device bond147
[  344.190176][T17835] 1 speed is unknown, defaulting to 1000
[  344.196345][T17835]  speed is unknown, defaulting to 1000
[  344.221989][T17844] 8021q: adding VLAN 0 to HW filter on device bond82
[  344.241655][T17842] erspan0: Device is already in use.
[  344.256363][T17844] team0: Device bond82 is up. Set it down before adding it as a team port
[  344.319743][T17847] netlink: 'syz.1.3144': attribute type 11 has an invalid length.
[  344.389102][T17857] netlink: 'syz.2.3148': attribute type 13 has an invalid length.
[  344.524000][T17861] netlink: 'syz.0.3146': attribute type 10 has an invalid length.
[  344.748800][T17857] tipc: Resetting bearer <eth:syzkaller0>
[  344.762074][T17857] ip6gretap1: left promiscuous mode
[  344.828925][T17857] bond20: left promiscuous mode
[  344.860757][T17857] bond22: left promiscuous mode
[  345.000154][T17853] sch_tbf: burst 88 is lower than device veth37 mtu (1514) !
[  345.005361][ T5899]  speed is unknown, defaulting to 1000
[  345.009718][ T7233] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  345.011022][ T5899] sy2: Port: 1 Link DOWN
[  345.019341][ T7233] netdevsim netdevsim2 eth0: unset [0, 1] type 1 family 0 port 4352 - 0
[  345.027404][ T7233] netdevsim netdevsim2 eth0: unset [0, 2] type 1 family 0 port 2816 - 0
[  345.036450][ T7233] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  345.043368][ T7233] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  345.051322][ T7233] netdevsim netdevsim2 eth1: unset [0, 1] type 1 family 0 port 4352 - 0
[  345.056793][ T7233] netdevsim netdevsim2 eth1: unset [0, 2] type 1 family 0 port 2816 - 0
[  345.060182][ T7233] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  345.072204][ T7233] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  345.076360][ T7233] netdevsim netdevsim2 eth2: unset [0, 1] type 1 family 0 port 4352 - 0
[  345.080201][ T7233] netdevsim netdevsim2 eth2: unset [0, 2] type 1 family 0 port 2816 - 0
[  345.083920][ T7233] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  345.088274][ T7233] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  345.091600][ T7233] netdevsim netdevsim2 eth3: unset [0, 1] type 1 family 0 port 4352 - 0
[  345.095696][ T7233] netdevsim netdevsim2 eth3: unset [0, 2] type 1 family 0 port 2816 - 0
[  345.100811][ T7233] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  345.116259][T17863] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  345.190358][T17866] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  345.226160][T17868] netlink: 'syz.2.3151': attribute type 1 has an invalid length.
[  345.296309][T17868] __nla_validate_parse: 19 callbacks suppressed
[  345.296329][T17868] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3151'.
[  345.303619][T17868] 8021q: adding VLAN 0 to HW filter on device bond91
[  345.321093][T17874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3153'.
[  345.372810][T17879] gre9: entered promiscuous mode
[  345.381697][T17881] bond69: (slave gretap5): Releasing active interface
[  345.394018][T17881] team0: Port device bridge42 removed
[  345.404532][T17881] team0: Port device bridge43 removed
[  345.411590][T17881] bond76: (slave veth27): Releasing active interface
[  345.414616][T17881] bond76: (slave veth27): the permanent HWaddr of slave - 22:27:5c:08:67:a0 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  345.421015][T17881] bond76: (slave veth29): making interface the new active one
[  345.427350][T17881] bond76: (slave veth29): Releasing active interface
[  345.431285][T17881] team0: Port device bridge44 removed
[  345.433989][T17881] bond80: (slave bridge46): Removing an active aggregator
[  345.438155][T17881] bond80: (slave bridge46): Releasing backup interface
[  345.440885][T17881] bond80: (slave bridge46): the permanent HWaddr of slave - da:99:70:1f:bb:f7 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  345.450936][T17881] bridge46: left promiscuous mode
[  345.453919][T17881] bridge46: left allmulticast mode
[  345.457855][T17881] bond80: (slave bridge47): Releasing backup interface
[  345.461381][T17881] bridge47: left promiscuous mode
[  345.463385][T17881] bridge47: left allmulticast mode
[  345.468003][T17881] bond81: (slave veth31): Releasing active interface
[  345.469976][T17881] bond81: (slave veth31): the permanent HWaddr of slave - da:c8:a1:40:5b:4d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  345.479058][T17881] bond81: (slave veth33): Releasing active interface
[  345.523787][T17892] bridge49: entered promiscuous mode
[  345.526081][T17892] bridge49: entered allmulticast mode
[  345.531309][T17892] team0: Port device bridge49 added
[  345.552862][T17893] 1 speed is unknown, defaulting to 1000
[  345.556782][T17893]  speed is unknown, defaulting to 1000
[  345.565589][T17895] xt_hashlimit: size too large, truncated to 1048576
[  345.678407][T17901] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3160'.
[  345.782364][T17904] bond83: (slave veth39): Enslaving as an active interface with a down link
[  345.842885][T17908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3161'.
[  345.852168][T17904] bond83: (slave veth41): Enslaving as an active interface with a down link
[  345.891609][T17908] bond83: entered promiscuous mode
[  346.019237][T17910] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3163'.
[  346.438904][T17944] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  346.522782][T17946] bond92: option lacp_rate: invalid value (128)
[  346.527485][T17946] bond92 (unregistering): Released all slaves
[  346.545844][T17952] bridge0: port 1(erspan0) entered blocking state
[  346.554474][T17952] bridge0: port 1(erspan0) entered disabled state
[  346.556876][T17952] erspan0: entered allmulticast mode
[  346.567883][T17952] erspan0: left allmulticast mode
[  346.725916][T17960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3176'.
[  346.742524][   T33] audit: type=1804 audit(1778611190.276:18): pid=17960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3176" name="/newroot/994/cgroup.controllers" dev="tmpfs" ino=5085 res=1 errno=0
[  346.758991][   T33] audit: type=1800 audit(1778611190.276:19): pid=17960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3176" name="cgroup.controllers" dev="tmpfs" ino=5085 res=0 errno=0
[  346.829505][T17967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3179'.
[  346.847682][T17967] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3179'.
[  346.854860][T17967] bridge53: port 1(veth0_to_bond) entered blocking state
[  346.859988][T17967] bridge53: port 1(veth0_to_bond) entered disabled state
[  346.865017][T17967] veth0_to_bond: entered allmulticast mode
[  346.872652][T17967] veth0_to_bond: entered promiscuous mode
[  346.876879][T17967] bridge53: port 1(veth0_to_bond) entered blocking state
[  346.879663][T17967] bridge53: port 1(veth0_to_bond) entered forwarding state
[  346.943014][T17981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3183'.
[  346.949119][T17980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3183'.
[  346.959487][   T25] block nbd2: Possible stuck request ffff8881057a8000: control (read@0,1024B). Runtime 90 seconds
[  346.963866][   T25] block nbd2: Possible stuck request ffff8881057a8200: control (read@1024,1024B). Runtime 90 seconds
[  346.969018][   T25] block nbd2: Possible stuck request ffff8881057a8400: control (read@2048,1024B). Runtime 90 seconds
[  346.973475][   T25] block nbd2: Possible stuck request ffff8881057a8600: control (read@3072,1024B). Runtime 90 seconds
[  347.261742][T17990] ip6gre4: entered promiscuous mode
[  347.263926][T17990] ip6gre4: entered allmulticast mode
[  347.343304][T17996] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  347.350184][T17996] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  347.376661][T18001] xt_hashlimit: size too large, truncated to 1048576
[  347.377217][T18000] validate_nla: 1 callbacks suppressed
[  347.377232][T18000] netlink: 'syz.0.3188': attribute type 1 has an invalid length.
[  347.383551][T18000] netlink: 'syz.0.3188': attribute type 2 has an invalid length.
[  347.526981][T18010] netlink: 'syz.1.3191': attribute type 10 has an invalid length.
[  347.584110][T18011] veth0: entered promiscuous mode
[  347.656877][T18009] veth0: left promiscuous mode
[  347.875919][T18028] ip6tnl8: entered allmulticast mode
[  348.020053][T18033] bond84: (slave vcan1): refused to change device type
[  348.168212][T18043] tipc: Resetting bearer <eth:syzkaller0>
[  348.171137][T18043] syzkaller0: left promiscuous mode
[  348.173272][T18043] syzkaller0: left allmulticast mode
[  348.188924][T18043] ip6erspan0: left allmulticast mode
[  348.191485][T18043] team0: left allmulticast mode
[  348.193382][T18043] bond45: left allmulticast mode
[  348.195699][T18043] bridge32: left allmulticast mode
[  348.197638][T18043] bridge33: left allmulticast mode
[  348.200062][T18043] geneve8: left allmulticast mode
[  348.202003][T18043] ip6erspan2: left allmulticast mode
[  348.203881][T18043] bond55: left allmulticast mode
[  348.205811][T18043] macsec2: left promiscuous mode
[  348.207467][T18043] bond56: left promiscuous mode
[  348.209687][T18043] ip6gre5: left promiscuous mode
[  348.211344][T18043] ip6gre5: left allmulticast mode
[  348.213141][T18043] bond58: left promiscuous mode
[  348.215272][T18043] ipvlan0: left allmulticast mode
[  348.217169][T18043] ipvlan1: left allmulticast mode
[  348.218955][T18043] ipvlan6: left allmulticast mode
[  348.221153][T18043] bond58: left allmulticast mode
[  348.226138][T18043] bond65: left promiscuous mode
[  348.228623][T18043] gretap5: left allmulticast mode
[  348.230459][T18043] bond70: left promiscuous mode
[  348.232695][T18043] bridge42: left promiscuous mode
[  348.240137][T18043] bridge42: left allmulticast mode
[  348.242478][T18043] bridge43: left promiscuous mode
[  348.244412][T18043] bridge43: left allmulticast mode
[  348.246323][T18043] bond74: left allmulticast mode
[  348.248194][T18043] team1: left promiscuous mode
[  348.249839][T18043] team1: left allmulticast mode
[  348.251958][T18043] bridge44: left promiscuous mode
[  348.253707][T18043] bridge44: left allmulticast mode
[  348.256324][T18043] bond79: left allmulticast mode
[  348.258018][T18043] bond80: left promiscuous mode
[  348.259666][T18043] bond80: left allmulticast mode
[  348.265723][T18043] bridge48: left promiscuous mode
[  348.267496][T18043] bridge48: left allmulticast mode
[  348.272240][T18043] bridge49: left promiscuous mode
[  348.274407][T18043] bridge49: left allmulticast mode
[  348.277742][T18043] bond83: left promiscuous mode
[  348.369029][T18051] netlink: 'syz.2.3201': attribute type 1 has an invalid length.
[  348.473826][T18051] workqueue: Failed to create a rescuer kthread for wq "bond92": -EINTR
[  348.511668][T18058] veth1_to_bond: entered allmulticast mode
[  348.540797][T18058] ipip2: entered promiscuous mode
[  348.556734][T18058] veth1_to_bond (unregistering): left allmulticast mode
[  348.908506][T18073] 1 speed is unknown, defaulting to 1000
[  348.912065][T18073]  speed is unknown, defaulting to 1000
[  349.505563][T18109] netlink: 'syz.0.3218': attribute type 10 has an invalid length.
[  349.687886][T18118] vlan5: entered promiscuous mode
[  349.690125][T18118] vlan5: entered allmulticast mode
[  349.775769][T18123] netlink: 'syz.0.3222': attribute type 1 has an invalid length.
[  349.920375][T18127] netlink: 'syz.0.3223': attribute type 8 has an invalid length.
[  349.930518][T18127] veth1_to_team: entered promiscuous mode
[  349.938454][T18127] veth1_to_team: left promiscuous mode
[  349.972449][T18128] netlink: 'syz.0.3223': attribute type 30 has an invalid length.
[  350.296770][T18151] netlink: 'syz.0.3231': attribute type 1 has an invalid length.
[  350.331757][T18151] bond87: entered promiscuous mode
[  350.334342][T18151] 8021q: adding VLAN 0 to HW filter on device bond87
[  350.352363][T18151] __nla_validate_parse: 24 callbacks suppressed
[  350.352379][T18151] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3231'.
[  350.409362][T18161] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3234'.
[  350.413935][T18161] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3234'.
[  350.427028][T18161] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3234'.
[  350.435076][T18161] net_ratelimit: 9 callbacks suppressed
[  350.435096][T18161] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  350.456192][T18161] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3234'.
[  350.459966][T18161] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3234'.
[  350.463535][T18161] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3234'.
[  350.468373][T18164] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  350.518724][T18167] netlink: 'syz.1.3236': attribute type 1 has an invalid length.
[  350.547300][T18167] 8021q: adding VLAN 0 to HW filter on device bond148
[  350.568587][T18167] veth45: entered allmulticast mode
[  350.573678][T18167] bond148: (slave veth45): Enslaving as an active interface with an up link
[  350.671571][T18170] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  350.842795][T18176] bond149 (unregistering): Released all slaves
[  350.953915][T18176] netlink: 210640 bytes leftover after parsing attributes in process `syz.1.3238'.
[  351.201768][T18204] bond88: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  351.207402][T18204] bond88 (unregistering): Released all slaves
[  351.262246][T18211] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3245'.
[  351.317134][T18214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3246'.
[  351.384103][T18218] 1 speed is unknown, defaulting to 1000
[  351.390724][T18218]  speed is unknown, defaulting to 1000
[  351.675527][ T5615] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  351.751908][T18242] bond88: entered promiscuous mode
[  351.761344][T18242] 8021q: adding VLAN 0 to HW filter on device bond88
[  352.579208][T18299] sctp: [Deprecated]: syz.0.3267 (pid 18299) Use of int in max_burst socket option.
[  352.579208][T18299] Use struct sctp_assoc_value instead
[  353.030393][T18327] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  353.111494][T18328] bond89: option updelay: invalid value (18446744073709518847)
[  353.114718][T18328] bond89: option updelay: allowed values 0 - 2147483647
[  353.119136][T18328] bond89 (unregistering): Released all slaves
[  367.040961][T18339] 1 speed is unknown, defaulting to 1000
[  367.044020][T18339]  speed is unknown, defaulting to 1000
[  367.069413][T18343] syzkaller1: entered promiscuous mode
[  367.071591][T18343] syzkaller1: entered allmulticast mode
[  367.101573][T18343] bridge53: port 1(veth0_to_bond) entered disabled state
[  367.117767][T18343] veth0_virt_wifi: left allmulticast mode
[  367.123383][T18343] tipc: Resetting bearer <eth:syzkaller0>
[  367.125974][T18343] syzkaller0: left promiscuous mode
[  367.128453][T18343] syzkaller0: left allmulticast mode
[  367.132052][T18343] mac80211_hwsim hwsim59 wlan0: left promiscuous mode
[  367.134954][T18343] bond121: left promiscuous mode
[  367.136547][T18343] ip6gre7: left promiscuous mode
[  367.138348][T18343] bridge36: left promiscuous mode
[  367.139938][T18343] bridge36: left allmulticast mode
[  367.141648][T18343] bridge37: left promiscuous mode
[  367.143252][T18343] bridge37: left allmulticast mode
[  367.145340][T18343] ipip4: left promiscuous mode
[  367.146989][T18343] gretap6: left promiscuous mode
[  367.148556][T18343] gretap6: left allmulticast mode
[  367.150327][T18343] bond123: left promiscuous mode
[  367.152048][T18343] bridge38: left promiscuous mode
[  367.154035][T18343] bridge38: left allmulticast mode
[  367.159222][T18343] bridge40: left promiscuous mode
[  367.160952][T18343] bridge40: left allmulticast mode
[  367.163121][T18343] macvlan1: left promiscuous mode
[  367.165516][T18343] macvlan1: left allmulticast mode
[  367.168039][T18343] macvlan4: left promiscuous mode
[  367.169987][T18343] macvlan4: left allmulticast mode
[  367.171730][T18343] vlan6: left promiscuous mode
[  367.173176][T18343] geneve1: left promiscuous mode
[  367.175392][T18343] vlan6: left allmulticast mode
[  367.176905][T18343] geneve1: left allmulticast mode
[  367.178814][T18343] bond129: left promiscuous mode
[  367.180996][T18343] bridge43: left promiscuous mode
[  367.182779][T18343] bond129: left allmulticast mode
[  367.184556][T18343] bridge43: left allmulticast mode
[  367.186557][T18343] ip6gre8: left promiscuous mode
[  367.188078][T18343] xfrm3: left allmulticast mode
[  367.189569][T18343] macvtap0: left promiscuous mode
[  367.191536][T18343] bond133: left promiscuous mode
[  367.193340][T18343] vlan8: left allmulticast mode
[  367.195398][T18343] macvtap0: left allmulticast mode
[  367.207607][T18343] bridge47: left promiscuous mode
[  367.209449][T18343] bridge47: left allmulticast mode
[  367.212432][T18343] bond144: left promiscuous mode
[  367.215384][T18343] bridge48: left promiscuous mode
[  367.217041][T18343] bridge48: left allmulticast mode
[  367.219295][T18343] bridge49: left promiscuous mode
[  367.220933][T18343] bridge49: left allmulticast mode
[  367.223342][T18343] bridge50: left promiscuous mode
[  367.225205][T18343] bridge50: left allmulticast mode
[  367.227687][T18343] bridge51: left promiscuous mode
[  367.229337][T18343] bridge51: left allmulticast mode
[  367.231650][T18343] team3: left promiscuous mode
[  367.233213][T18343] team3: left allmulticast mode
[  367.235860][T18343] team4: left promiscuous mode
[  367.237493][T18343] team4: left allmulticast mode
[  367.241292][T18343] batadv2: left promiscuous mode
[  367.242959][T18343] batadv2: left allmulticast mode
[  367.249663][T18343] bond146: left allmulticast mode
[  367.255106][T18343] gretap8: left promiscuous mode
[  367.256699][T18343] gretap8: left allmulticast mode
[  367.260347][T18343] bond147: left promiscuous mode
[  367.266686][T18343] veth45: left allmulticast mode
[  367.272117][T18343] syzkaller1: left promiscuous mode
[  367.273927][T18343] syzkaller1: left allmulticast mode
[  367.302153][T18344] tipc: Resetting bearer <eth:syzkaller0>
[  367.310015][T18352] validate_nla: 1 callbacks suppressed
[  367.310034][T18352] netlink: 'syz.0.3278': attribute type 4 has an invalid length.
[  367.351309][ T5968] 1 speed is unknown, defaulting to 1000
[  367.353167][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  367.355799][ T5968] syz2: Port: 1 Link DOWN
[  367.359326][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  367.362329][T18347] ip6gre0: Caught tx_queue_len zero misconfig
[  367.365633][T18347] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1520) !
[  367.369341][T18346] netlink: 'syz.0.3278': attribute type 4 has an invalid length.
[  367.385303][ T5966]  speed is unknown, defaulting to 1000
[  367.390435][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  367.393538][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  367.533521][T18355] netlink: 'syz.2.3279': attribute type 1 has an invalid length.
[  368.029456][T18368] netlink: 'syz.2.3283': attribute type 1 has an invalid length.
[  368.069896][T18368] bond93: (slave vxcan1): The slave device specified does not support setting the MAC address
[  368.077037][T18368] bond93: (slave vxcan1): Error -95 calling set_mac_address
[  368.111574][T18369] __nla_validate_parse: 42 callbacks suppressed
[  368.111593][T18369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3283'.
[  368.125105][T18369] macvlan5: entered promiscuous mode
[  368.127337][T18369] macvlan5: entered allmulticast mode
[  368.130066][T18369] syzkaller1: tun_chr_ioctl cmd 1074025677
[  368.132717][T18369] syzkaller1: linktype set to 1
[  368.136735][T18371] syzkaller1: tun_chr_ioctl cmd 1074025677
[  368.139558][T18371] syzkaller1: linktype set to 1
[  368.257230][T18373] netlink: 'syz.2.3284': attribute type 10 has an invalid length.
[  368.298995][T18377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3285'.
[  368.440385][T18385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3287'.
[  368.455125][ T7233] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  368.460054][ T7233] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  368.464888][ T7233] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  368.469454][ T7233] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  368.606827][T18394] syzkaller0: entered promiscuous mode
[  368.610214][T18394] syzkaller0: entered allmulticast mode
[  368.619059][T18394] netlink: 'syz.0.3290': attribute type 3 has an invalid length.
[  368.682082][T18399] netlink: 'syz.0.3292': attribute type 1 has an invalid length.
[  368.682427][T18398] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  368.724462][T18399] bond89: (slave vxcan1): The slave device specified does not support setting the MAC address
[  368.732559][T18399] bond89: (slave vxcan1): Setting fail_over_mac to active for active-backup mode
[  368.744540][T18399] bond89: (slave vxcan1): making interface the new active one
[  368.748493][T18399] bond89: (slave vxcan1): Enslaving as an active interface with an up link
[  368.843376][T18404] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  368.970813][T18416] netlink: 'syz.1.3298': attribute type 8 has an invalid length.
[  368.979796][T18416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3298'.
[  369.212332][T18442] raw_sendmsg: syz.1.3302 forgot to set AF_INET. Fix it!
[  369.457528][T18453] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3304'.
[  369.469805][T18453] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3304'.
[  369.521504][T18456] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3306'.
[  369.531074][T18456] netlink: 'syz.2.3306': attribute type 8 has an invalid length.
[  369.599225][T18462] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  369.667092][T18466] netlink: 'syz.1.3309': attribute type 1 has an invalid length.
[  369.789710][T18475] bond149: (slave ip6gretap0): Enslaving as a backup interface with an up link
[  369.839032][T18475] veth47: entered promiscuous mode
[  369.843473][T18475] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3309'.
[  369.862188][T18475] 8021q: adding VLAN 0 to HW filter on device bond149
[  369.865175][ T7233] bond149: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  369.984467][ T7233] bond149: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  370.339178][T18504] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  370.342246][T18504] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  370.660018][T18513] 1 speed is unknown, defaulting to 1000
[  370.665916][T18513]  speed is unknown, defaulting to 1000
[  370.943884][T18523] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3322'.
[  370.948553][T18523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3322'.
[  377.034794][   T25] block nbd2: Possible stuck request ffff8881057a8000: control (read@0,1024B). Runtime 120 seconds
[  377.039036][   T25] block nbd2: Possible stuck request ffff8881057a8200: control (read@1024,1024B). Runtime 120 seconds
[  377.043025][   T25] block nbd2: Possible stuck request ffff8881057a8400: control (read@2048,1024B). Runtime 120 seconds
[  377.048315][   T25] block nbd2: Possible stuck request ffff8881057a8600: control (read@3072,1024B). Runtime 120 seconds
[  386.024936][T18531] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  386.028148][T18531] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  386.031799][T18531] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  386.041443][T18531] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  386.046485][T18531] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  386.206924][T18529] 1 speed is unknown, defaulting to 1000
[  386.209494][T18529]  speed is unknown, defaulting to 1000
[  386.388834][T18529] bridge0: port 1(bridge_slave_0) entered blocking state
[  386.391741][T18529] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.394930][T18529] bridge_slave_0: entered allmulticast mode
[  386.398936][T18529] bridge_slave_0: entered promiscuous mode
[  386.405774][T18529] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.408733][T18529] bridge0: port 2(bridge_slave_1) entered disabled state
[  386.411771][T18529] bridge_slave_1: entered allmulticast mode
[  386.415911][T18529] bridge_slave_1: entered promiscuous mode
[  386.445282][T18529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  386.452081][T18529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  386.481009][T18529] team0: Port device team_slave_0 added
[  386.486067][T18529] team0: Port device team_slave_1 added
[  386.510906][T18529] batman_adv: batadv0: Adding interface: batadv_slave_0
[  386.512988][T18529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  386.521450][T18529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  386.526902][T18529] batman_adv: batadv0: Adding interface: batadv_slave_1
[  386.529152][T18529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  386.537088][T18529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  386.582540][T18529] hsr_slave_0: entered promiscuous mode
[  386.585806][T18529] hsr_slave_1: entered promiscuous mode
[  387.038917][ T5615] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  387.050800][ T5615] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  387.057022][ T5615] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  387.070439][ T5615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  387.075444][ T5615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  387.096204][   T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  387.113765][   T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  387.129446][T18531] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  387.136400][T18531] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  387.138932][T18531] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  387.316605][T18549] 1 speed is unknown, defaulting to 1000
[  387.319210][T18549]  speed is unknown, defaulting to 1000
[  387.365824][T18551] 1 speed is unknown, defaulting to 1000
[  387.370416][T18551]  speed is unknown, defaulting to 1000
[  387.586277][T18549] bridge0: port 1(bridge_slave_0) entered blocking state
[  387.589135][T18549] bridge0: port 1(bridge_slave_0) entered disabled state
[  387.593229][T18549] bridge_slave_0: entered allmulticast mode
[  387.598488][T18549] bridge_slave_0: entered promiscuous mode
[  387.603476][T18549] bridge0: port 2(bridge_slave_1) entered blocking state
[  387.606848][T18549] bridge0: port 2(bridge_slave_1) entered disabled state
[  387.609886][T18549] bridge_slave_1: entered allmulticast mode
[  387.614156][T18549] bridge_slave_1: entered promiscuous mode
[  387.652992][T18549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  387.667619][T18549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  387.711465][T18549] team0: Port device team_slave_0 added
[  387.723086][T18549] team0: Port device team_slave_1 added
[  387.725484][T18551] bridge0: port 1(bridge_slave_0) entered blocking state
[  387.728006][T18551] bridge0: port 1(bridge_slave_0) entered disabled state
[  387.730415][T18551] bridge_slave_0: entered allmulticast mode
[  387.733478][T18551] bridge_slave_0: entered promiscuous mode
[  387.751759][T18551] bridge0: port 2(bridge_slave_1) entered blocking state
[  387.754012][T18551] bridge0: port 2(bridge_slave_1) entered disabled state
[  387.756726][T18551] bridge_slave_1: entered allmulticast mode
[  387.759833][T18551] bridge_slave_1: entered promiscuous mode
[  387.764101][T18549] batman_adv: batadv0: Adding interface: batadv_slave_0
[  387.766383][T18549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  387.773928][T18549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  387.790418][T18549] batman_adv: batadv0: Adding interface: batadv_slave_1
[  387.792541][T18549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  387.800543][T18549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  387.828136][T18551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  387.833718][T18551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  387.873563][T18549] hsr_slave_0: entered promiscuous mode
[  387.876261][T18549] hsr_slave_1: entered promiscuous mode
[  387.878462][T18549] debugfs: 'hsr0' already exists in 'hsr'
[  387.880195][T18549] Cannot create hsr debugfs directory
[  387.884049][T18551] team0: Port device team_slave_0 added
[  387.889831][T18551] team0: Port device team_slave_1 added
[  387.931535][T18551] batman_adv: batadv0: Adding interface: batadv_slave_0
[  387.933939][T18551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  387.941888][T18551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  387.951288][T18551] batman_adv: batadv0: Adding interface: batadv_slave_1
[  387.953944][T18551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  387.962630][T18551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  388.033773][T18551] hsr_slave_0: entered promiscuous mode
[  388.036412][T18551] hsr_slave_1: entered promiscuous mode
[  388.038725][T18551] debugfs: 'hsr0' already exists in 'hsr'
[  388.040427][T18551] Cannot create hsr debugfs directory
[  388.074769][T18531] Bluetooth: hci3: command tx timeout
[  389.114664][T18531] Bluetooth: hci4: command tx timeout
[  389.194509][T18531] Bluetooth: hci5: command tx timeout
[  390.154690][T18531] Bluetooth: hci3: command tx timeout
[  391.194635][T18531] Bluetooth: hci4: command tx timeout
[  391.274495][T18531] Bluetooth: hci5: command tx timeout
[  392.244736][T18531] Bluetooth: hci3: command tx timeout
[  393.274983][T18531] Bluetooth: hci4: command tx timeout
[  393.364531][T18531] Bluetooth: hci5: command tx timeout
[  394.314682][T18531] Bluetooth: hci3: command tx timeout
[  395.354687][T18531] Bluetooth: hci4: command tx timeout
[  395.434533][T18531] Bluetooth: hci5: command tx timeout
[  407.115711][   T25] block nbd2: Possible stuck request ffff8881057a8000: control (read@0,1024B). Runtime 150 seconds
[  407.119822][   T25] block nbd2: Possible stuck request ffff8881057a8200: control (read@1024,1024B). Runtime 150 seconds
[  407.123780][   T25] block nbd2: Possible stuck request ffff8881057a8400: control (read@2048,1024B). Runtime 150 seconds
[  407.128873][   T25] block nbd2: Possible stuck request ffff8881057a8600: control (read@3072,1024B). Runtime 150 seconds
[  437.205546][   T25] block nbd2: Possible stuck request ffff8881057a8000: control (read@0,1024B). Runtime 180 seconds
[  437.209739][   T25] block nbd2: Possible stuck request ffff8881057a8200: control (read@1024,1024B). Runtime 180 seconds
[  437.213993][   T25] block nbd2: Possible stuck request ffff8881057a8400: control (read@2048,1024B). Runtime 180 seconds
[  437.218799][   T25] block nbd2: Possible stuck request ffff8881057a8600: control (read@3072,1024B). Runtime 180 seconds
[  439.318077][ T5059] udevd[5059]: worker [6706] /devices/virtual/block/nbd2 timeout; kill it
[  439.321492][ T5059] udevd[5059]: seq 29733 '/devices/virtual/block/nbd2' killed
[  447.019609][ T5615] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  447.029787][ T5615] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  447.036881][ T5615] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  447.046061][ T5615] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  447.049989][ T5615] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  447.267307][T18586] 1 speed is unknown, defaulting to 1000
[  447.270885][T18586]  speed is unknown, defaulting to 1000
[  447.498334][T18586] bridge0: port 1(bridge_slave_0) entered blocking state
[  447.500723][T18586] bridge0: port 1(bridge_slave_0) entered disabled state
[  447.503202][T18586] bridge_slave_0: entered allmulticast mode
[  447.507361][T18586] bridge_slave_0: entered promiscuous mode
[  447.511975][T18586] bridge0: port 2(bridge_slave_1) entered blocking state
[  447.515061][T18586] bridge0: port 2(bridge_slave_1) entered disabled state
[  447.518042][T18586] bridge_slave_1: entered allmulticast mode
[  447.521068][T18586] bridge_slave_1: entered promiscuous mode
[  447.541169][T18586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  447.547171][T18586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  447.567703][T18586] team0: Port device team_slave_0 added
[  447.571580][T18586] team0: Port device team_slave_1 added
[  447.590562][T18586] batman_adv: batadv0: Adding interface: batadv_slave_0
[  447.592669][T18586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  447.600869][T18586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  447.606792][T18586] batman_adv: batadv0: Adding interface: batadv_slave_1
[  447.609298][T18586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  447.618850][T18586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  447.663836][T18586] hsr_slave_0: entered promiscuous mode
[  447.667724][T18586] hsr_slave_1: entered promiscuous mode
[  447.670581][T18586] debugfs: 'hsr0' already exists in 'hsr'
[  447.672773][T18586] Cannot create hsr debugfs directory
[  448.129376][ T5615] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  448.147217][ T5615] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  448.159246][ T5615] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  448.165110][ T5615] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  448.167940][ T5615] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  448.211315][T18531] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  448.224410][T18531] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  448.233252][T18531] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  448.242166][T18531] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  448.247373][T18531] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  448.508998][T18605] 1 speed is unknown, defaulting to 1000
[  448.511906][T18605]  speed is unknown, defaulting to 1000
[  448.568427][T18607] 1 speed is unknown, defaulting to 1000
[  448.572468][T18607]  speed is unknown, defaulting to 1000
[  448.802433][T18605] bridge0: port 1(bridge_slave_0) entered blocking state
[  448.805716][T18605] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.808861][T18605] bridge_slave_0: entered allmulticast mode
[  448.812656][T18605] bridge_slave_0: entered promiscuous mode
[  448.841941][T18605] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.845270][T18605] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.848365][T18605] bridge_slave_1: entered allmulticast mode
[  448.852235][T18605] bridge_slave_1: entered promiscuous mode
[  448.903325][T18605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  448.922534][T18605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  448.949615][T18607] bridge0: port 1(bridge_slave_0) entered blocking state
[  448.952873][T18607] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.958754][T18607] bridge_slave_0: entered allmulticast mode
[  448.962002][T18607] bridge_slave_0: entered promiscuous mode
[  448.974983][T18607] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.977929][T18607] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.980940][T18607] bridge_slave_1: entered allmulticast mode
[  448.985237][T18607] bridge_slave_1: entered promiscuous mode
[  448.991155][T18605] team0: Port device team_slave_0 added
[  449.005124][T18605] team0: Port device team_slave_1 added
[  449.037744][T18607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  449.051652][T18607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  449.055341][T18605] batman_adv: batadv0: Adding interface: batadv_slave_0
[  449.057928][T18605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  449.067907][T18605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  449.084103][T18605] batman_adv: batadv0: Adding interface: batadv_slave_1
[  449.087221][T18605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  449.097287][T18605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  449.114332][T18531] Bluetooth: hci6: command tx timeout
[  449.122922][T18607] team0: Port device team_slave_0 added
[  449.127764][T18607] team0: Port device team_slave_1 added
[  449.176436][T18605] hsr_slave_0: entered promiscuous mode
[  449.179686][T18605] hsr_slave_1: entered promiscuous mode
[  449.182851][T18605] debugfs: 'hsr0' already exists in 'hsr'
[  449.185405][T18605] Cannot create hsr debugfs directory
[  449.188830][T18607] batman_adv: batadv0: Adding interface: batadv_slave_0
[  449.191465][T18607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  449.201352][T18607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  449.207457][T18607] batman_adv: batadv0: Adding interface: batadv_slave_1
[  449.210083][T18607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  449.219921][T18607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  449.295583][T18607] hsr_slave_0: entered promiscuous mode
[  449.299528][T18607] hsr_slave_1: entered promiscuous mode
[  449.302268][T18607] debugfs: 'hsr0' already exists in 'hsr'
[  449.304540][T18607] Cannot create hsr debugfs directory
[  450.234661][T18531] Bluetooth: hci7: command tx timeout
[  450.394626][T18531] Bluetooth: hci8: command tx timeout
[  451.204708][T18531] Bluetooth: hci6: command tx timeout
[  452.324541][T18531] Bluetooth: hci7: command tx timeout
[  452.474694][T18531] Bluetooth: hci8: command tx timeout
[  453.274456][T18531] Bluetooth: hci6: command tx timeout
[  454.404564][T18531] Bluetooth: hci7: command tx timeout
[  454.554700][T18531] Bluetooth: hci8: command tx timeout
[  455.354545][T18531] Bluetooth: hci6: command tx timeout
[  456.474472][T18531] Bluetooth: hci7: command tx timeout
[  456.634697][T18531] Bluetooth: hci8: command tx timeout
[  467.274691][   T25] block nbd2: Possible stuck request ffff8881057a8000: control (read@0,1024B). Runtime 210 seconds
[  467.278844][   T25] block nbd2: Possible stuck request ffff8881057a8200: control (read@1024,1024B). Runtime 210 seconds
[  467.282781][   T25] block nbd2: Possible stuck request ffff8881057a8400: control (read@2048,1024B). Runtime 210 seconds
[  467.287347][   T25] block nbd2: Possible stuck request ffff8881057a8600: control (read@3072,1024B). Runtime 210 seconds
[  497.364800][   T25] block nbd2: Possible stuck request ffff8881057a8000: control (read@0,1024B). Runtime 240 seconds
[  497.368921][   T25] block nbd2: Possible stuck request ffff8881057a8200: control (read@1024,1024B). Runtime 240 seconds
[  497.372877][   T25] block nbd2: Possible stuck request ffff8881057a8400: control (read@2048,1024B). Runtime 240 seconds
[  497.377422][   T25] block nbd2: Possible stuck request ffff8881057a8600: control (read@3072,1024B). Runtime 240 seconds
[  507.061200][   T53] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  507.066653][   T53] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  507.070302][   T53] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  507.074127][   T53] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  507.089459][   T53] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  507.289276][T18643] 1 speed is unknown, defaulting to 1000
[  507.292658][T18643]  speed is unknown, defaulting to 1000
[  507.494892][T18643] bridge0: port 1(bridge_slave_0) entered blocking state
[  507.497297][T18643] bridge0: port 1(bridge_slave_0) entered disabled state
[  507.499724][T18643] bridge_slave_0: entered allmulticast mode
[  507.502947][T18643] bridge_slave_0: entered promiscuous mode
[  507.507446][T18643] bridge0: port 2(bridge_slave_1) entered blocking state
[  507.510252][T18643] bridge0: port 2(bridge_slave_1) entered disabled state
[  507.513053][T18643] bridge_slave_1: entered allmulticast mode
[  507.516085][T18643] bridge_slave_1: entered promiscuous mode
[  507.535454][T18643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  507.540515][T18643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  507.560324][T18643] team0: Port device team_slave_0 added
[  507.564335][T18643] team0: Port device team_slave_1 added
[  507.581751][T18643] batman_adv: batadv0: Adding interface: batadv_slave_0
[  507.584080][T18643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  507.591417][T18643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  507.597705][T18643] batman_adv: batadv0: Adding interface: batadv_slave_1
[  507.599766][T18643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  507.607401][T18643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  507.636282][T18643] hsr_slave_0: entered promiscuous mode
[  507.638790][T18643] hsr_slave_1: entered promiscuous mode
[  507.641117][T18643] debugfs: 'hsr0' already exists in 'hsr'
[  507.642851][T18643] Cannot create hsr debugfs directory
[  508.080396][ T5615] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  508.086979][ T5615] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  508.090632][ T5615] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  508.093495][ T5615] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  508.098268][ T5615] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  508.258281][T18661] 1 speed is unknown, defaulting to 1000
[  508.260951][T18661]  speed is unknown, defaulting to 1000
[  508.428708][T18661] bridge0: port 1(bridge_slave_0) entered blocking state
[  508.430986][T18661] bridge0: port 1(bridge_slave_0) entered disabled state
[  508.433395][T18661] bridge_slave_0: entered allmulticast mode
[  508.436772][T18661] bridge_slave_0: entered promiscuous mode
[  508.440523][T18661] bridge0: port 2(bridge_slave_1) entered blocking state
[  508.442811][T18661] bridge0: port 2(bridge_slave_1) entered disabled state
[  508.445669][T18661] bridge_slave_1: entered allmulticast mode
[  508.448672][T18661] bridge_slave_1: entered promiscuous mode
[  508.470265][T18661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  508.475526][T18661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  508.496337][T18661] team0: Port device team_slave_0 added
[  508.500933][T18661] team0: Port device team_slave_1 added
[  508.520728][T18661] batman_adv: batadv0: Adding interface: batadv_slave_0
[  508.523075][T18661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  508.531295][T18661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  508.536391][T18661] batman_adv: batadv0: Adding interface: batadv_slave_1
[  508.538519][T18661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  508.546783][T18661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  508.577825][T18661] hsr_slave_0: entered promiscuous mode
[  508.580376][T18661] hsr_slave_1: entered promiscuous mode
[  508.582779][T18661] debugfs: 'hsr0' already exists in 'hsr'
[  508.584926][T18661] Cannot create hsr debugfs directory
[  509.044354][ T5615] Bluetooth: hci3: command 0x0406 tx timeout
[  509.075166][ T5615] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  509.083925][ T5615] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  509.088291][ T5615] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  509.095423][ T5615] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  509.098356][ T5615] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  509.118418][T18531] Bluetooth: hci9: command tx timeout
[  509.286245][T18679] 1 speed is unknown, defaulting to 1000
[  509.288889][T18679]  speed is unknown, defaulting to 1000
[  509.455753][T18679] bridge0: port 1(bridge_slave_0) entered blocking state
[  509.458165][T18679] bridge0: port 1(bridge_slave_0) entered disabled state
[  509.460629][T18679] bridge_slave_0: entered allmulticast mode
[  509.463668][T18679] bridge_slave_0: entered promiscuous mode
[  509.467375][T18679] bridge0: port 2(bridge_slave_1) entered blocking state
[  509.469679][T18679] bridge0: port 2(bridge_slave_1) entered disabled state
[  509.472207][T18679] bridge_slave_1: entered allmulticast mode
[  509.475252][T18679] bridge_slave_1: entered promiscuous mode
[  509.498178][T18679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  509.507361][T18679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  509.534123][T18679] team0: Port device team_slave_0 added
[  509.539690][T18679] team0: Port device team_slave_1 added
[  509.559500][T18679] batman_adv: batadv0: Adding interface: batadv_slave_0
[  509.561837][T18679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  509.570502][T18679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  509.575726][T18679] batman_adv: batadv0: Adding interface: batadv_slave_1
[  509.578259][T18679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  509.587237][T18679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  509.628900][T18679] hsr_slave_0: entered promiscuous mode
[  509.632194][T18679] hsr_slave_1: entered promiscuous mode
[  509.635593][T18679] debugfs: 'hsr0' already exists in 'hsr'
[  509.637953][T18679] Cannot create hsr debugfs directory
[  510.154524][ T5615] Bluetooth: hci10: command tx timeout
[  511.194474][T18531] Bluetooth: hci9: command tx timeout
[  511.196240][ T5615] Bluetooth: hci11: command tx timeout
[  512.234815][T18531] Bluetooth: hci10: command tx timeout
[  513.274469][T18531] Bluetooth: hci11: command tx timeout
[  513.277771][T18554] Bluetooth: hci9: command tx timeout
[  514.154577][T18554] Bluetooth: hci5: command 0x0406 tx timeout
[  514.161495][T18531] Bluetooth: hci4: command 0x0406 tx timeout
[  514.314653][ T5615] Bluetooth: hci10: command tx timeout
[  515.354632][ T5615] Bluetooth: hci11: command tx timeout
[  515.354771][   T53] Bluetooth: hci9: command tx timeout
[  516.394441][   T53] Bluetooth: hci10: command tx timeout
[  517.434557][   T53] Bluetooth: hci11: command tx timeout
[  527.435777][   T25] block nbd2: Possible stuck request ffff8881057a8000: control (read@0,1024B). Runtime 270 seconds
[  527.440066][   T25] block nbd2: Possible stuck request ffff8881057a8200: control (read@1024,1024B). Runtime 270 seconds
[  527.444716][   T25] block nbd2: Possible stuck request ffff8881057a8400: control (read@2048,1024B). Runtime 270 seconds
[  527.448952][   T25] block nbd2: Possible stuck request ffff8881057a8600: control (read@3072,1024B). Runtime 270 seconds
[  529.365082][   T34] INFO: task syz.2.3321:18517 blocked for more than 143 seconds.
[  529.368461][   T34]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  529.370724][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  529.374783][   T34] task:syz.2.3321      state:D stack:26328 pid:18517 tgid:18514 ppid:5614   task_flags:0x480140 flags:0x00080002
[  529.379987][   T34] Call Trace:
[  529.381490][   T34]  <TASK>
[  529.382698][   T34]  __schedule+0x17b4/0x5680
[  529.385081][   T34]  ? __pfx___schedule+0x10/0x10
[  529.387800][   T34]  ? schedule+0x90/0x360
[  529.389681][   T34]  schedule+0x164/0x360
[  529.391384][   T34]  blk_mq_freeze_queue_wait+0x101/0x180
[  529.393879][   T34]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[  529.396941][   T34]  ? queue_limits_commit_update_frozen+0x55/0xd0
[  529.399504][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[  529.401867][   T34]  queue_limits_commit_update_frozen+0x55/0xd0
[  529.404889][   T34]  nbd_set_size+0x454/0x680
[  529.409840][   T34]  ? __pfx_nbd_set_size+0x10/0x10
[  529.414859][   T34]  ? nla_memcpy+0x5b/0xc0
[  529.420027][   T34]  nbd_genl_reconfigure+0x7f5/0x1ea0
[  529.428544][   T34]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  529.434531][   T34]  ? rcu_is_watching+0x15/0xb0
[  529.442568][   T34]  ? trace_kmalloc+0x2a/0xf0
[  529.447344][   T34]  ? __nla_parse+0x40/0x60
[  529.449164][   T34]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  529.451703][   T34]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  529.454006][   T34]  genl_family_rcv_msg_doit+0x22a/0x330
[  529.456786][   T34]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  529.459486][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  529.461443][   T34]  genl_rcv_msg+0x61c/0x7a0
[  529.463106][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  529.466049][   T34]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  529.468366][   T34]  netlink_rcv_skb+0x232/0x4b0
[  529.470164][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  529.472080][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  529.474121][   T34]  ? down_read+0x270/0x2e0
[  529.476976][   T34]  ? genl_rcv+0xd/0x40
[  529.478647][   T34]  genl_rcv+0x28/0x40
[  529.480124][   T34]  netlink_unicast+0x75c/0x8e0
[  529.482036][   T34]  netlink_sendmsg+0x813/0xb40
[  529.483931][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  529.486854][   T34]  ? aa_sock_msg_perm+0xf1/0x1b0
[  529.489237][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  529.491476][   T34]  ____sys_sendmsg+0x972/0x9f0
[  529.493326][   T34]  ? __might_fault+0xaf/0x130
[  529.495701][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  529.497759][   T34]  ? import_iovec+0x73/0xa0
[  529.499511][   T34]  ___sys_sendmsg+0x2a5/0x360
[  529.501295][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  529.503148][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  529.505829][   T34]  ? futex_wait+0x2a2/0x390
[  529.508034][   T34]  ? __fget_files+0x2a/0x420
[  529.509925][   T34]  ? __fget_files+0x3a0/0x420
[  529.511734][   T34]  __x64_sys_sendmsg+0x1bd/0x2a0
[  529.513670][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  529.516687][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  529.519121][   T34]  do_syscall_64+0x15f/0xf80
[  529.520902][   T34]  ? trace_irq_disable+0x3b/0x140
[  529.522838][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  529.525835][   T34] RIP: 0033:0x7f81e299cdd9
[  529.527653][   T34] RSP: 002b:00007f81e3916028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  529.530688][   T34] RAX: ffffffffffffffda RBX: 00007f81e2c16090 RCX: 00007f81e299cdd9
[  529.533518][   T34] RDX: 0000000004000040 RSI: 0000200000000c40 RDI: 000000000000000b
[  529.536972][   T34] RBP: 00007f81e2a32d69 R08: 0000000000000000 R09: 0000000000000000
[  529.540502][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  529.543624][   T34] R13: 00007f81e2c16128 R14: 00007f81e2c16090 R15: 00007fffb5aff0a8
[  529.547074][   T34]  </TASK>
[  529.548468][   T34] INFO: task syz.2.3321:18520 blocked for more than 143 seconds.
[  529.551241][   T34]       Not tainted syzkaller #0
[  529.553149][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  529.557186][   T34] task:syz.2.3321      state:D stack:28192 pid:18520 tgid:18514 ppid:5614   task_flags:0x400040 flags:0x00080002
[  529.561776][   T34] Call Trace:
[  529.563073][   T34]  <TASK>
[  529.564591][   T34]  __schedule+0x17b4/0x5680
[  529.566507][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  529.568436][   T34]  ? __pfx___schedule+0x10/0x10
[  529.570289][   T34]  ? schedule+0x90/0x360
[  529.571930][   T34]  schedule+0x164/0x360
[  529.573558][   T34]  schedule_preempt_disabled+0x13/0x30
[  529.576314][   T34]  __mutex_lock+0x7f7/0x1550
[  529.578203][   T34]  ? kernel_text_address+0xa5/0xe0
[  529.580175][   T34]  ? __mutex_lock+0x608/0x1550
[  529.582007][   T34]  ? genl_rcv_msg+0x10b/0x7a0
[  529.583852][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  529.586622][   T34]  ? stack_trace_save+0xa9/0x100
[  529.588968][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  529.590854][   T34]  ? radix_tree_lookup+0x240/0x290
[  529.592847][   T34]  genl_rcv_msg+0x10b/0x7a0
[  529.595128][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  529.597166][   T34]  netlink_rcv_skb+0x232/0x4b0
[  529.599166][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  529.601147][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  529.603205][   T34]  ? down_read+0x270/0x2e0
[  529.605450][   T34]  ? genl_rcv+0xd/0x40
[  529.607108][   T34]  genl_rcv+0x28/0x40
[  529.608683][   T34]  netlink_unicast+0x75c/0x8e0
[  529.610532][   T34]  netlink_sendmsg+0x813/0xb40
[  529.612360][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  529.614494][   T34]  ? aa_sock_msg_perm+0xf1/0x1b0
[  529.616481][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  529.618543][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  529.620579][   T34]  __sys_sendto+0x672/0x710
[  529.622313][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  529.624360][   T34]  ? fd_install+0x94/0x3d0
[  529.626068][   T34]  ? fd_install+0x306/0x3d0
[  529.627789][   T34]  __x64_sys_sendto+0xde/0x100
[  529.629563][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  529.631819][   T34]  do_syscall_64+0x15f/0xf80
[  529.633578][   T34]  ? trace_irq_disable+0x3b/0x140
[  529.635927][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  529.638421][   T34] RIP: 0033:0x7f81e295d60e
[  529.640089][   T34] RSP: 002b:00007f81e38d2e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  529.643164][   T34] RAX: ffffffffffffffda RBX: 00007f81e38d46c0 RCX: 00007f81e295d60e
[  529.646334][   T34] RDX: 0000000000000020 RSI: 00007f81e38d3000 RDI: 0000000000000010
[  529.649356][   T34] RBP: 0000000000000000 R08: 00007f81e38d2f04 R09: 000000000000000c
[  529.652352][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010
[  529.655387][   T34] R13: 00007f81e38d2f58 R14: 00007f81e38d3000 R15: 0000000000000000
[  529.658409][   T34]  </TASK>
[  529.659555][   T34] INFO: task syz.1.3322:18523 blocked for more than 143 seconds.
[  529.662453][   T34]       Not tainted syzkaller #0
[  529.664629][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  529.668004][   T34] task:syz.1.3322      state:D stack:24920 pid:18523 tgid:18522 ppid:5611   task_flags:0x400140 flags:0x00080002
[  529.672501][   T34] Call Trace:
[  529.673808][   T34]  <TASK>
[  529.675231][   T34]  __schedule+0x17b4/0x5680
[  529.677118][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  529.679079][   T34]  ? __pfx___schedule+0x10/0x10
[  529.680924][   T34]  ? schedule+0x90/0x360
[  529.682557][   T34]  schedule+0x164/0x360
[  529.684116][   T34]  schedule_preempt_disabled+0x13/0x30
[  529.686486][   T34]  __mutex_lock+0x7f7/0x1550
[  529.688335][   T34]  ? kernel_text_address+0xa5/0xe0
[  529.690312][   T34]  ? __mutex_lock+0x608/0x1550
[  529.692149][   T34]  ? genl_rcv_msg+0x10b/0x7a0
[  529.693983][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  529.696696][   T34]  ? stack_trace_save+0xa9/0x100
[  529.698638][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  529.700529][   T34]  ? radix_tree_lookup+0x240/0x290
[  529.702523][   T34]  genl_rcv_msg+0x10b/0x7a0
[  529.704396][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  529.706296][   T34]  netlink_rcv_skb+0x232/0x4b0
[  529.708073][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  529.709980][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  529.711960][   T34]  ? down_read+0x270/0x2e0
[  529.713677][   T34]  ? genl_rcv+0xd/0x40
[  529.715365][   T34]  genl_rcv+0x28/0x40
[  529.717426][   T34]  netlink_unicast+0x75c/0x8e0
[  529.719300][   T34]  netlink_sendmsg+0x813/0xb40
[  529.721160][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  529.723222][   T34]  ? aa_sock_msg_perm+0xf1/0x1b0
[  529.725564][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  529.727700][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  529.729738][   T34]  __sys_sendto+0x672/0x710
[  529.731427][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  529.733320][   T34]  ? exc_page_fault+0x6a/0xc0
[  529.735154][   T34]  ? do_user_addr_fault+0xc6f/0x1340
[  529.737135][   T34]  __x64_sys_sendto+0xde/0x100
[  529.738977][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  529.741349][   T34]  do_syscall_64+0x15f/0xf80
[  529.743114][   T34]  ? trace_irq_disable+0x3b/0x140
[  529.745349][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  529.747679][   T34] RIP: 0033:0x7fe216d5d60e
[  529.749357][   T34] RSP: 002b:00007fe217ca7e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  529.752462][   T34] RAX: ffffffffffffffda RBX: 00007fe217ca96c0 RCX: 00007fe216d5d60e
[  529.755812][   T34] RDX: 0000000000000020 RSI: 00007fe217ca8000 RDI: 000000000000000a
[  529.758823][   T34] RBP: 0000000000000000 R08: 00007fe217ca7f04 R09: 000000000000000c
[  529.761664][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a
[  529.764853][   T34] R13: 00007fe217ca7f58 R14: 00007fe217ca8000 R15: 0000000000000000
[  529.767972][   T34]  </TASK>
[  529.769178][   T34] INFO: task syz.0.3323:18526 blocked for more than 143 seconds.
[  529.771996][   T34]       Not tainted syzkaller #0
[  529.773797][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  529.779802][   T34] task:syz.0.3323      state:D stack:28760 pid:18526 tgid:18525 ppid:5623   task_flags:0x400140 flags:0x00080002
[  529.784491][   T34] Call Trace:
[  529.785739][   T34]  <TASK>
[  529.786898][   T34]  __schedule+0x17b4/0x5680
[  529.788639][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  529.790551][   T34]  ? __pfx___schedule+0x10/0x10
[  529.792436][   T34]  ? schedule+0x90/0x360
[  529.794058][   T34]  schedule+0x164/0x360
[  529.795896][   T34]  schedule_preempt_disabled+0x13/0x30
[  529.798089][   T34]  __mutex_lock+0x7f7/0x1550
[  529.799905][   T34]  ? kernel_text_address+0xa5/0xe0
[  529.801872][   T34]  ? __mutex_lock+0x608/0x1550
[  529.803712][   T34]  ? genl_rcv_msg+0x10b/0x7a0
[  529.805961][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  529.808366][   T34]  ? stack_trace_save+0xa9/0x100
[  529.810311][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  529.812121][   T34]  ? radix_tree_lookup+0x240/0x290
[  529.814079][   T34]  genl_rcv_msg+0x10b/0x7a0
[  529.815976][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  529.817978][   T34]  netlink_rcv_skb+0x232/0x4b0
[  529.819871][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  529.821809][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  529.823756][   T34]  ? down_read+0x270/0x2e0
[  529.827963][   T34]  ? genl_rcv+0xd/0x40
[  529.829524][   T34]  genl_rcv+0x28/0x40
[  529.831049][   T34]  netlink_unicast+0x75c/0x8e0
[  529.832934][   T34]  netlink_sendmsg+0x813/0xb40
[  529.835107][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  529.837164][   T34]  ? aa_sock_msg_perm+0xf1/0x1b0
[  529.839081][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  529.841115][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  529.843161][   T34]  __sys_sendto+0x672/0x710
[  529.845264][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  529.847352][   T34]  ? exc_page_fault+0x6a/0xc0
[  529.849164][   T34]  ? do_user_addr_fault+0xc6f/0x1340
[  529.851183][   T34]  __x64_sys_sendto+0xde/0x100
[  529.853042][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  529.855623][   T34]  do_syscall_64+0x15f/0xf80
[  529.857513][   T34]  ? trace_irq_disable+0x3b/0x140
[  529.859490][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  529.861747][   T34] RIP: 0033:0x7f78fa15d60e
[  529.863470][   T34] RSP: 002b:00007f78fb0f6e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  529.866740][   T34] RAX: ffffffffffffffda RBX: 00007f78fb0f86c0 RCX: 00007f78fa15d60e
[  529.869742][   T34] RDX: 0000000000000020 RSI: 00007f78fb0f7000 RDI: 0000000000000007
[  529.872741][   T34] RBP: 0000000000000000 R08: 00007f78fb0f6f04 R09: 000000000000000c
[  529.875763][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  529.878792][   T34] R13: 00007f78fb0f6f58 R14: 00007f78fb0f7000 R15: 0000000000000000
[  529.882582][   T34]  </TASK>
[  529.884599][   T34] 
[  529.884599][   T34] Showing all locks held in the system:
[  529.889148][   T34] 1 lock held by khungtaskd/34:
[  529.891707][   T34]  #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  529.896923][   T34] 2 locks held by getty/5436:
[  529.899435][   T34]  #0: ffff8881096810a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  529.905184][   T34]  #1: ffffc900034732e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0
[  529.909174][   T34] 1 lock held by udevd/6706:
[  529.910955][   T34]  #0: ffff88816c38c350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  529.915262][   T34] 6 locks held by syz.2.3321/18517:
[  529.917366][   T34]  #0: ffffffff8fe3fac8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  529.920488][   T34]  #1: ffffffff8fe3f900 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  529.923836][   T34]  #2: ffff88816c275a60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0
[  529.928223][   T34]  #3: ffff88816c3ab528 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680
[  529.931751][   T34]  #4: ffff88816c3aaef0 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  529.936216][   T34]  #5: ffff88816c3aaf28 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  529.940905][   T34] 2 locks held by syz.2.3321/18520:
[  529.945948][   T34]  #0: ffffffff8fe3fac8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  529.949008][   T34]  #1: ffffffff8fe3f900 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  529.952532][   T34] 2 locks held by syz.1.3322/18523:
[  529.954673][   T34]  #0: ffffffff8fe3fac8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  529.957811][   T34]  #1: ffffffff8fe3f900 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  529.961274][   T34] 2 locks held by syz.0.3323/18526:
[  529.963213][   T34]  #0: ffffffff8fe3fac8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  529.966669][   T34]  #1: ffffffff8fe3f900 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  529.970161][   T34] 2 locks held by syz-executor/18529:
[  529.972150][   T34]  #0: ffffffff8fe3fac8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  529.975465][   T34]  #1: ffffffff8fe3f900 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  529.978834][   T34] 2 locks held by syz-executor/18549:
[  529.980902][   T34]  #0: ffffffff8fe3fac8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  529.983889][   T34]  #1: ffffffff8fe3f900 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  529.987477][   T34] 2 locks held by syz-executor/18551:
[  529.989445][   T34]  #0: ffffffff8fe3fac8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  529.992694][   T34]  #1: ffffffff8fe3f900 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  529.996529][   T34] 2 locks held by syz-executor/18586:
[  529.999041][   T34]  #0: ffffffff8fe3fac8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  530.002103][   T34]  #1: ffffffff8fe3f900 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  530.005619][   T34] 2 locks held by syz-executor/18605:
[  530.007746][   T34]  #0: ffffffff8fe3fac8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  530.010759][   T34]  #1: ffffffff8fe3f900 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  530.014084][   T34] 2 locks held by syz-executor/18607:
[  530.016271][   T34]  #0: ffffffff8fe3fac8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  530.019507][   T34]  #1: ffffffff8fe3f900 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  530.023048][   T34] 2 locks held by syz-executor/18643:
[  530.025864][   T34]  #0: ffffffff8fe3fac8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  530.029141][   T34]  #1: ffffffff8fe3f900 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  530.032573][   T34] 2 locks held by syz-executor/18661:
[  530.034756][   T34]  #0: ffffffff8fe3fac8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  530.037864][   T34]  #1: ffffffff8fe3f900 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  530.041359][   T34] 2 locks held by syz-executor/18679:
[  530.043282][   T34]  #0: ffffffff8fe3fac8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  530.046561][   T34]  #1: ffffffff8fe3f900 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  530.050058][   T34] 
[  530.051005][   T34] =============================================
[  530.051005][   T34] 
[  530.054096][   T34] NMI backtrace for cpu 1
[  530.054112][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  530.054129][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  530.054145][   T34] Call Trace:
[  530.054154][   T34]  <TASK>
[  530.054181][   T34]  dump_stack_lvl+0xe8/0x150
[  530.054205][   T34]  nmi_cpu_backtrace+0x274/0x2d0
[  530.054253][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  530.054272][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  530.054293][   T34]  sys_info+0x135/0x170
[  530.054310][   T34]  watchdog+0xfd3/0x1030
[  530.054337][   T34]  ? watchdog+0x1c9/0x1030
[  530.054362][   T34]  kthread+0x388/0x470
[  530.054382][   T34]  ? __pfx_watchdog+0x10/0x10
[  530.054401][   T34]  ? __pfx_kthread+0x10/0x10
[  530.054421][   T34]  ret_from_fork+0x514/0xb70
[  530.054440][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  530.054455][   T34]  ? __switch_to+0xc79/0x1410
[  530.054479][   T34]  ? __pfx_kthread+0x10/0x10
[  530.054498][   T34]  ret_from_fork_asm+0x1a/0x30
[  530.054529][   T34]  </TASK>
[  530.094949][   T34] Sending NMI from CPU 1 to CPUs 0:
[  530.097112][    C0] NMI backtrace for cpu 0
[  530.097131][    C0] CPU: 0 UID: 0 PID: 5048 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) 
[  530.097150][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  530.097160][    C0] RIP: 0010:sched_balance_rq+0x30a4/0x5a60
[  530.097185][    C0] Code: 48 89 14 24 e9 18 fa ff ff 4c 8b 64 24 20 e9 0e fa ff ff 8b 44 24 30 44 39 f8 41 0f 46 c7 89 44 24 30 48 8b 04 24 48 0f 42 c2 <48> 89 04 24 4c 8b 64 24 20 e9 e9 f9 ff ff 49 89 fc e9 e1 f9 ff ff
[  530.097198][    C0] RSP: 0018:ffffc900032df2c0 EFLAGS: 00000087
[  530.097245][    C0] RAX: ffff88823c63ae40 RBX: ffff88823c63afb8 RCX: 0000000000000400
[  530.097258][    C0] RDX: 0000000000000000 RSI: 0000000000000301 RDI: 0000000000000001
[  530.097267][    C0] RBP: ffffc900032df700 R08: 0000000000000000 R09: 0000000000000000
[  530.097277][    C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000403
[  530.097285][    C0] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000
[  530.097295][    C0] FS:  00007f07813f0380(0000) GS:ffff88818dc87000(0000) knlGS:0000000000000000
[  530.097308][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  530.097317][    C0] CR2: 00007ffe6ef72f68 CR3: 00000001759d8000 CR4: 00000000000006f0
[  530.097350][    C0] Call Trace:
[  530.097358][    C0]  <TASK>
[  530.097379][    C0]  ? __pfx_sched_balance_rq+0x10/0x10
[  530.097426][    C0]  pick_next_task_fair+0xb3f/0x1ab0
[  530.097463][    C0]  __pick_next_task+0xe6/0x480
[  530.097487][    C0]  __schedule+0x974/0x5680
[  530.097515][    C0]  ? _prb_read_valid+0xa18/0xab0
[  530.097539][    C0]  ? __pfx___schedule+0x10/0x10
[  530.097563][    C0]  ? schedule+0x90/0x360
[  530.097582][    C0]  schedule+0x164/0x360
[  530.097602][    C0]  syslog_print+0x23a/0x610
[  530.097621][    C0]  ? __pfx_syslog_print+0x10/0x10
[  530.097645][    C0]  ? __pfx_autoremove_wake_function+0x10/0x10
[  530.097668][    C0]  ? bpf_lsm_capable+0x9/0x20
[  530.097681][    C0]  ? security_capable+0x7e/0x2c0
[  530.097702][    C0]  do_syslog+0x583/0x7d0
[  530.097717][    C0]  ? __pfx_do_syslog+0x10/0x10
[  530.097738][    C0]  ? rcu_is_watching+0x15/0xb0
[  530.097758][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.097774][    C0]  __x64_sys_syslog+0x7c/0x90
[  530.097791][    C0]  do_syscall_64+0x15f/0xf80
[  530.097808][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.097821][    C0] RIP: 0033:0x7f0781551fa7
[  530.097836][    C0] Code: 73 01 c3 48 8b 0d 81 ce 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 67 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 51 ce 0c 00 f7 d8 64 89 01 48
[  530.097848][    C0] RSP: 002b:00007ffd69d41e68 EFLAGS: 00000206 ORIG_RAX: 0000000000000067
[  530.097865][    C0] RAX: ffffffffffffffda RBX: 00007f07816f04a0 RCX: 00007f0781551fa7
[  530.097875][    C0] RDX: 00000000000003ff RSI: 00007f07816f04a0 RDI: 0000000000000002
[  530.097885][    C0] RBP: 0000000000000000 R08: 0000000000000007 R09: e7a566e42813069e
[  530.097894][    C0] R10: 0000000000004000 R11: 0000000000000206 R12: 00007f07816f04a0
[  530.097904][    C0] R13: 00007f07816e0212 R14: 00007f07816f0611 R15: 00007f07816f0611
[  530.097922][    C0]  </TASK>
[  530.210833][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  530.213350][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  530.216612][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  530.220548][   T34] Call Trace:
[  530.221805][   T34]  <TASK>
[  530.222890][   T34]  vpanic+0x56c/0xa60
[  530.224414][   T34]  ? __pfx___schedule+0x10/0x10
[  530.226146][   T34]  ? __pfx_vpanic+0x10/0x10
[  530.227831][   T34]  ? nmi_trigger_cpumask_backtrace+0x1f4/0x300
[  530.230237][   T34]  panic+0xc5/0xd0
[  530.231695][   T34]  ? __pfx_panic+0x10/0x10
[  530.233386][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  530.235307][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  530.237971][   T34]  watchdog+0x102c/0x1030
[  530.239578][   T34]  ? watchdog+0x1c9/0x1030
[  530.241277][   T34]  kthread+0x388/0x470
[  530.242706][   T34]  ? __pfx_watchdog+0x10/0x10
[  530.244186][   T34]  ? __pfx_kthread+0x10/0x10
[  530.245633][   T34]  ret_from_fork+0x514/0xb70
[  530.247060][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  530.248683][   T34]  ? __switch_to+0xc79/0x1410
[  530.250172][   T34]  ? __pfx_kthread+0x10/0x10
[  530.251559][   T34]  ret_from_fork_asm+0x1a/0x30
[  530.253062][   T34]  </TASK>
[  530.254693][   T34] Kernel Offset: disabled
[  530.255995][   T34] Rebooting in 86400 seconds..
