last executing test programs:

16.783889596s ago: executing program 2 (id=558):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000000c0), 0x1000000000000154}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000010800034000000014080002400000000208000440000000150900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000003340), 0x10)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0xfffffba1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x50)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0xb)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6tnl0\x00', <r6=>0x0, 0x8454994988fad43c, 0x4, 0x8, 0x3686, 0x78, @mcast2, @ipv4={'\x00', '\xff\xff', @local}, 0x10, 0x7800, 0x0, 0x19}})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r5, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x801)
close(r4)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r7, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r9 = syz_open_procfs$namespace(0x0, 0x0)
preadv(r9, 0x0, 0x0, 0x4f, 0x4200000)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r10 = accept(r7, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0)
shutdown(r8, 0x1)
sendmsg$FOU_CMD_GET(r8, 0x0, 0x0)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r3, &(0x7f0000000280)="3f625b0f7aab00b579cbda2fcaa9675eea96db7b588dbc65d2a5f5f2888ab9b3fdeeb714395ca93da9469ecc7073ff13160881c2d8ec437b5b80c5cd2cebc4bfc515cbb55120d8f7582d44d099a6c10030711917c759cf7c8880c724d20c68a7a511278cb2fb7bc03eb68d79715f4976cbcc30ccb834e8970c566cf92947e9c4270634cfda1013b155db2493b7f137d2d580df129104f404ca3d806054c5be1a55315f5edee44b3d6e0523569f6065084e46a9beb58b3b96aebe28764b71c8d78516cb0e9125d3f8ca2bbb669f87a4b43b6623c03b71e178b65b1e87dd", &(0x7f0000000080)}, 0x20)

16.299704075s ago: executing program 1 (id=560):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r0)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000978b404f1d6fd84ce62571a9c142dedafb5b94ee01ec5e9bf7ff046f528a9eae0ac59a0133d71cd2e08749dbdff3ea1a7e2b210b219348747dbb84f1808ccd598ab6fe0e8b90ff746f795fa1aec614a80d277500"/101, @ANYRES16=r1, @ANYBLOB="29082dbd7040fedbdf251e0000000a0004007770616e330000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40240c4)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
recvmmsg(r2, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/143, 0x8f}], 0x1}}], 0x2, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async)
syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r0) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) (async)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000978b404f1d6fd84ce62571a9c142dedafb5b94ee01ec5e9bf7ff046f528a9eae0ac59a0133d71cd2e08749dbdff3ea1a7e2b210b219348747dbb84f1808ccd598ab6fe0e8b90ff746f795fa1aec614a80d277500"/101, @ANYRES16=r1, @ANYBLOB="29082dbd7040fedbdf251e0000000a0004007770616e330000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40240c4) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
recvmmsg(r2, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/143, 0x8f}], 0x1}}], 0x2, 0x0, 0x0) (async)

16.209821923s ago: executing program 1 (id=561):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4)

16.209242433s ago: executing program 1 (id=562):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071106c00000000001d300200000000004704000001ed030407000000c00000001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb4676"], 0x0}, 0x94)
socketpair(0x1, 0x1, 0xa25, &(0x7f0000000400)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000001c0)="c84b1ecc52", &(0x7f0000000100)=@tcp6=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x1, 0x0, &(0x7f00000002c0))

16.139207173s ago: executing program 1 (id=563):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0xf, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1c000000, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xba}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c)
unshare(0x8040480)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @sack_perm, @timestamp, @sack_perm, @window={0x3, 0x0, 0x1f}, @window={0x3, 0x0, 0xfffc}, @window={0x3, 0xe, 0x1120}, @timestamp], 0x8)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendmsg(r3, 0x0, 0x880)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
listen(r2, 0x6)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
accept(r0, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0)
recvfrom(r4, 0x0, 0x0, 0x3e8, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), &(0x7f0000000700)=r8}, 0x20)
sendmsg$inet(r7, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)

16.059325799s ago: executing program 0 (id=564):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c000280060012"], 0x24}}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f00000000c0)=0x3a7b, 0x4)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c000280060012"], 0x24}}, 0x0) (async)
setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f00000000c0)=0x3a7b, 0x4) (async)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async)

15.998504175s ago: executing program 0 (id=565):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)
r0 = socket$netlink(0x10, 0x3, 0x4)
unshare(0x2040400)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @rand_addr=0x1}, 0x2, 0x4}}, 0x26)
ioctl$PPPIOCGL2TPSTATS(r4, 0x40047459, 0x0)
connect$pppl2tp(r1, 0x0, 0x0)
connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @local}, 0x3ff, 0x0, 0x2}}, 0x2e)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc)
r5 = socket$netlink(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000100)={0x4c, r6, 0x615, 0x0, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x4c}, 0x5}, 0x0)

15.998133002s ago: executing program 0 (id=566):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0xfffffffb)
syz_emit_ethernet(0x8e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60000000005806fffe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="64c20000907800001e0401a100fe0bf989519f7eff2e987913127224407c80fe8a3616b4bf3400006cc81e1489010000000000000003000000000000000e1e0c8507000000000000ffff00000026f946432009d20529bd8960947bfd425ca7bf8853e1404ca3a0ac354ee8ab4afd6aba243c55bbde20e3652031b86a1447e047c720e814f034730eab409b0e2d794f30d07c3f"], 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f00000001c0)={&(0x7f0000000180)="ac1c2ffd7c6ab7c3a3676d1c6b5a2e52113cc99cf147d51c928d6756bbc767a5d9c7609558cd6cef2af41c922061eeb876a9826a6e66", 0x36}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

15.938442893s ago: executing program 0 (id=567):
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) (async)
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x8, 0x4, 0x4009, 0xa, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value=0x3f000000}, 0x48)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4) (async)
sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (async)
close(r4)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000100080c10000000000000000000", 0x58}], 0x1) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000002400ffffffff0000800000001100000004002f80"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000040)) (async)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) (async)
r8 = accept4(r7, 0x0, 0x0, 0x800)
syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r8) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r5)
sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r10, 0x8, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008111}, 0x0) (async)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="796100000000000000007e00000033000300", @ANYRES32=0x0, @ANYBLOB="a739dfe54ad99ffa18c27526b51001fb4f778791377c"], 0x1c}}, 0x4000054)

15.937976161s ago: executing program 2 (id=568):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8=r1], 0x48)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6)
sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000040000e41300050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x20008084}, 0x4040000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bf8200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_FIB_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x4048010)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r10, &(0x7f00000000c0)='K', 0x1, 0x44008011, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r10, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0xfffffffffffffca6)
sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000000306010300000000000000000500000505000100070000000900020073797a320000000005000100070000004ae6d279fdc9d193f2779bf883ba89ca1bf0dbd8ff3f6a8b215bc88f96a1672fe283ef4cc2ffbfbdce679b84d0ab406ba6ac986bd07848672fd3ecd57c3d848505c8e26854b9fadbd2"], 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x10)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500110004000000"], 0x30}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fcdbdf251900000008000300", @ANYRES32=r13, @ANYBLOB="0500a20002000e0000000000000000c1b1ac43d793e10cce"], 0x34}, 0x1, 0x0, 0x0, 0x4081}, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @empty, 0x1}, 0x1c)
listen(r1, 0x1)

15.937691664s ago: executing program 0 (id=569):
socket$igmp(0x2, 0x3, 0x2) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async)
r0 = socket$inet6(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac8d8000000000000020e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d10bfe150a7487535f7866907dc6751dfb261a0e3ccae669e173a649c1cfd6587d452d46b7c57d77578f4c35235138d5521f9453559c3421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983c044c03bf3ff03fe3e26e7a23129d6606fd28a7f9105f82317874b33d96b39fa4e045469989d552af6200000003a00000000000000abecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f1623ed38ae89d24e14b40234756ddcebfba2f87925bfacba83109753f543ad027edd68149ee99eebc6f7d6dd4aed4afe1f44ccb19e810879b70a70900000000000000000000d7900a820b6327944e9a217b9800e02a92895614cd50cbf83a1ed25268816b004519c9c5cff097d8000000000009d27d753a30a147b24a48435bd8a568669596e9e08679b3ce48e90defb6670c3d6209000000c773713a66b223fa8b148871c8d31d24000025449f106b99893ed20fa7a050fbbef90327e827e513e9606800000000e89f9c85c822a961546ed5363c"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) (async)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) (async)
setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x80)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000000206010200"/19], 0x4c}}, 0x0) (async)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000003000000000000000006000000003061610f00"], &(0x7f00000001c0)=""/199, 0x1e, 0xc7, 0x1, 0x3, 0x10000}, 0x28)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)})
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async)
write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r5, 0x6, 0xd, &(0x7f0000000000), 0x4) (async)
setsockopt$sock_attach_bpf(r5, 0x1, 0x24, &(0x7f0000000000), 0x4) (async)
write(r3, &(0x7f0000000340)="ad4add7b05aa7618a9a6ca4ca0e606e6d7f26dd535c8e8d3e2c679285c6483da3d265ba2865c3891685846261c2611bd61f009cb159aafcd1f7b7d70cc8300dc6c4bfd3dff0a642b6d5bba1bd995597ac53cbbc238c1fc535c59c259b7e95745959beaa36b15d34ffe2eceb58857924b0d811d0d799b265f6f6ede5317a8d3cbdd771078913476167c094bc2e0c0f6fc35186e165a1e3dea326deffd", 0x9c) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000200)=@req3={0xb699, 0x2, 0x1000, 0x3a, 0x178, 0xf84, 0x3}, 0x1c) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}, 0x10}, 0x94)
r7 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
close(r7)

15.838185463s ago: executing program 2 (id=570):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unshare(0x62040200) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0) (async)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x7d) (async, rerun: 64)
listen(r0, 0x16) (async, rerun: 64)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async, rerun: 32)
r3 = accept(r1, 0x0, 0x0) (rerun: 32)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async)
pipe(&(0x7f0000000100)) (async)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x14}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

15.834809127s ago: executing program 0 (id=571):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)={0x44, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x44}}, 0x20000000)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL={0x8, 0x7, @broadcast}]}}}]}, 0x40}}, 0x0)
pipe(&(0x7f0000000100)={<r6=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
tee(r7, r8, 0x3, 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r9=>0xffffffffffffffff})
r10 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x1c, 0x52, 0x1, 0x70bd05, 0x4, {0x2}, [@typed={0x8, 0x2, 0x0, 0x0, @uid}]}, 0x1c}}, 0x800)
r11 = accept4(r0, &(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000200)=0x80, 0xc0000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={<r12=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd0, r3, 0x421, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x64, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, ')'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, ']*\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24008000}, 0x40804)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)

15.769968134s ago: executing program 2 (id=572):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0xa02, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x48044)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@empty, @in=@broadcast}}, {{@in=@dev}, 0x0, @in=@private}}, &(0x7f0000000300)=0xff17)
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000001240)="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", 0x480}], 0x2}, 0x0)
recvmmsg$unix(r2, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0xffffffffffffffe1, 0x2, 0x1, 0x0, @remote}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)

15.769206436s ago: executing program 2 (id=573):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
socket(0x0, 0x6, 0x10)

15.670099116s ago: executing program 2 (id=574):
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094)

15.29024143s ago: executing program 1 (id=575):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0)
socket(0x40000000015, 0x5, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
r3 = socket$inet6(0xa, 0x2, 0x4)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x22, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getnexthop={0x1c, 0x6a, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000)
getsockname$packet(r4, &(0x7f00000005c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006800090332a55a2bd5998e0c00000000000008000100000000000400040008000100010000000000e2274a4baf8e8b293b8877cc5f938a4960c01e8a80314b8c25f02a3012afdb97cdaa3ef4ed8ea9c071c87e33c05c8d16e262c8190aa44e67a8bb166b6999f2aa175e6fbdbdb062382583802a5153c8dcf9fbf63eafcc1b89e1f2d36095a831e6410fe6f55e42325071ccd6d30bbe4f9b4d2705530572818c759b1f96cfbf29096c86a109cd3ea8c702eb4f299a7694a2066746f5f5278fe01c828c4948d1801a81f6002ef9bc3ac36d06e35e1c03bf391d5edaa62d7a0c173c28438cf9e516be"], 0x24}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32=r5, @ANYBLOB="890c04000000000020001280080001006774700014000280050005"], 0x40}}, 0x0)
sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
r9 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
r10 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r10, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1)
sendmsg$802154_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)="711f664eb50cd5279c17da7706", 0xd}, 0x1, 0x0, 0x0, 0x20040040}, 0x4044014)
recvmmsg(r0, &(0x7f0000002e40)=[{{0x0, 0xffffffffffffff22, 0x0, 0x0, 0x0, 0x3b}}], 0x40000000000019e, 0x142, 0x0)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000001fc0)=@filter={'filter\x00', 0x42, 0x4, 0x520, 0xffffffff, 0x0, 0x0, 0xb0, 0xffffffff, 0xffffffff, 0x488, 0x488, 0x488, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @dev, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6b07000000000000005b4809088400ed0000006c0000040500"}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x29}, @multicast2, 0x0, 0x0, 'bond_slave_1\x00', 'batadv_slave_1\x00', {0x836b636e4bafbd70}, {}, 0x62, 0x2, 0x6}, 0x287, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0xd, [{0x5, 0x7, 0x40, 0x1000}, {0x2, 0x6, 0x10, 0x1}, {0x9, 0x3, 0x81, 0x3}, {0x8, 0x41, 0x4, 0x1}, {0x6, 0x6, 0xe, 0x1}, {0x8001, 0x10, 0x1, 0x4}, {0xa2, 0x0, 0x7f, 0xa}, {0x7fff, 0x5, 0x5, 0x3}, {0x3ff, 0xe8, 0x2, 0x80}, {0x5, 0x9, 0x7}, {0x4, 0x40, 0x4}, {0xfffb, 0x1, 0xf3, 0x6}, {0x3, 0x8, 0x6, 0x2}, {0x3, 0x8, 0x3, 0x10000}, {0x31, 0x80, 0xd, 0x800}, {0xc, 0xff, 0x1c, 0x4}, {0x6, 0x0, 0xc, 0xf}, {0x7, 0xb5, 0x6, 0x80576}, {0x3, 0xc, 0x6, 0x9}, {0x2, 0x8, 0xf8, 0xfffffff2}, {0x7ff, 0xca, 0xc, 0x4e14}, {0x76, 0x7, 0xcb, 0x7}, {0x8, 0x1, 0x1c, 0xfff}, {0x1, 0x2, 0x2}, {0x0, 0x3, 0x80, 0x9}, {0x400, 0x0, 0x4, 0x8}, {0x1, 0x1, 0x1, 0xa}, {0xc7b8, 0x57, 0xfc, 0x6}, {0x7, 0x7, 0x3, 0x8}, {0x10, 0x7, 0xd, 0xfffffffe}, {0x8, 0xfc, 0x2, 0x6}, {0x3, 0x9, 0x6, 0x9}, {0x2, 0x8, 0x8}, {0x2f1c, 0xfd, 0x8}, {0x400, 0x0, 0x4, 0x7}, {0x7d, 0x8, 0x4, 0x1}, {0x4, 0x1a, 0x80, 0x7}, {0x1, 0x4, 0x8, 0xfffff000}, {0x1ff, 0x2, 0x9, 0xc}, {0xc30f, 0x1, 0x3, 0x3}, {0x4, 0x1, 0xbf}, {0x7, 0xc, 0x5, 0x3}, {0x2, 0x1, 0x5, 0x1}, {0xdf, 0x3, 0x4, 0xfa98}, {0x800, 0x3, 0x5, 0x6}, {0x200, 0x9, 0x81, 0x1}, {0x7, 0x0, 0x6d}, {0x3, 0x4, 0xea, 0xa0c4}, {0x40, 0x38, 0x3, 0x91e2}, {0x9, 0x91, 0xfd, 0xfffff001}, {0x2, 0x6, 0x10, 0xfffffff9}, {0x5, 0x1, 0x4, 0xd8b}, {0x6, 0x2, 0x9, 0x3}, {0x1, 0xe0, 0x5, 0x6}, {0x2, 0x8, 0x1, 0x6}, {0x5, 0xfb, 0x0, 0x9}, {0x100, 0xf8, 0xf5, 0xfd}, {0xff, 0xf1, 0x0, 0x1ff}, {0x5, 0x1, 0x9c, 0x8}, {0x1000, 0xe, 0x2, 0x3}, {0xa, 0x1, 0x2, 0x9}, {0x5e1, 0x8e, 0x7, 0x5}, {0x6, 0x8, 0xe, 0x6}, {0x9, 0x67, 0xfd, 0x8}], {0x2}}}, @common=@unspec=@statistic={{0x38}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x6, 0x34, "9c4b4435910fbfcf24e0fae0e0bfd3b900"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x580)
r12 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_int(r12, 0x1, 0x3, &(0x7f0000000000)=0x165, 0x4)
r13 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r13, 0x84, 0x8, &(0x7f0000000040), &(0x7f00000000c0)=0x4)

15.099917954s ago: executing program 1 (id=576):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018001b6c2e04000000000000000000000a0000000061005f616158300000"], 0x0, 0x22}, 0x28) (async, rerun: 32)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x38, 0x701, 0xfffffffc, 0x0, {0x6}}, 0x14}}, 0x0) (async)
socketpair(0x1, 0x1, 0x0, 0x0) (async)
r1 = socket$inet6(0xa, 0x3, 0x2c)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) (async)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x5, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x8}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x17, &(0x7f00000007c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x200b0, 0x0, 0x0, 0x0, 0x40008}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x9d}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x6}, @tail_call, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {0x3, 0x3, 0x6}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222}, 0x94)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x558, 0x320, 0xffffff80, 0x178, 0x0, 0x178, 0x488, 0x22b, 0x258, 0x488, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x320, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff3, 0xe}, {}, {0xa, 0x8}}}, 0x24}, 0x1, 0x400000000000000, 0x0, 0x4040011}, 0x0) (async, rerun: 32)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$nl_generic(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001780)=ANY=[], 0x20}}, 0x40050)
recvmmsg(r4, &(0x7f0000009a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001c00)=""/189, 0xbd}, {&(0x7f0000001cc0)=""/101, 0x65}, {&(0x7f0000004a80)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/188, 0xbc}, {&(0x7f0000001e00)=""/74, 0x4a}], 0x5}, 0x8}], 0x3, 0x42, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000100)={0x4, 0x400002, 0x2, 0x6, 0x2, 0x0, [{0x6, 0x7, 0x7603, '\x00', 0x1000}, {0x50, 0x79, 0x10}]}) (async)
ioctl$FITHAW(0xffffffffffffffff, 0xc0045878)
socket$l2tp6(0xa, 0x2, 0x73) (async)
r5 = socket$caif_seqpacket(0x25, 0x5, 0x5)
ppoll(&(0x7f0000000240)=[{r5, 0x4000}], 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0, 0x0) (async)
r6 = socket(0x27, 0xa, 0x0)
sendmmsg$alg(r6, &(0x7f0000000780)=[{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000c00)="ff010c3994e11ecc681d36271a3391b791c82161fbef779d83d1eab76d9238f0c06fcd7f0f131d1c25a0d2194a60912d62971900"/67, 0x43}, {&(0x7f00000006c0)="bdfff2a3acba4d10502f6d42", 0xc}, {&(0x7f0000000880)="b663948a5c608865c51871db5a4185385619b4ee91951b5b1ffafcf1b664f4bdfd1fc374a67e4f3f2e206d0c37b493df063533649184fdf8cb454e2a2b", 0x3d}, {&(0x7f0000000940)="bcf2a54007b224f797cff587256801a5d1e548fb668f59a9915629bff93501cc1bc3de075fb98182c83c231b15acaf865bceda2e970a1ce1541b256046e24c21c421646635f35aec5e93d78de8dccd7811f6e3c20f85833cae8b996a4ac3256cfadb536ecf24726f9ae3dc48283279a8466cac885b1dd56447de4d3a2989cc60082c875065cad9e2ad165be5", 0x8c}, {&(0x7f0000000b80)="43880bbbde34ab8e71f8eef8ffdad71f8c972d837c99c999e7700bd2e87d7d69115e363d4817c90c0dea9ae155e08602f92d973c72aa3c096a391e8f87b42a2966", 0x41}, {&(0x7f0000000a40)="07c0ab70a524f8b6483b434667f520f9dc62f9c099ec5739610ff6e1c76158d79c51e79256ea8835ea31e2d6f6aae9448e958be842a6a5cfa61c45c4128188ff871a19b2472685fab9628bb4b7b9be0c9fa3b1c928f3ab99ae8124934dc8f30f4e2d2d9e4a3683c45ae21e90073252edf6764ccf0ce626d44df7fe9afbb1b16e17d5d37a58608e68d7638d1517aceb8251eea32ca6b3118d58e0b9aa21c03e03f4211050f8c8ed282ac944cb2f3ff491fad86549304e3e3182888de1", 0xbc}], 0x6, &(0x7f0000000740)=[@assoc={0x18, 0x117, 0x4, 0x7ff}], 0x18, 0x4}], 0x1, 0x8000804)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000001a000100000000000000000002001e140000c800000c0000"], 0x1c}}, 0x0) (async, rerun: 32)
r8 = socket(0x1e, 0x1, 0x0) (rerun: 32)
connect$tipc(r8, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x18}}, 0x10)
shutdown(r8, 0x2) (async)
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)

63.829819ms ago: executing program 32 (id=571):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)={0x44, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x44}}, 0x20000000)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL={0x8, 0x7, @broadcast}]}}}]}, 0x40}}, 0x0)
pipe(&(0x7f0000000100)={<r6=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
tee(r7, r8, 0x3, 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r9=>0xffffffffffffffff})
r10 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x1c, 0x52, 0x1, 0x70bd05, 0x4, {0x2}, [@typed={0x8, 0x2, 0x0, 0x0, @uid}]}, 0x1c}}, 0x800)
r11 = accept4(r0, &(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000200)=0x80, 0xc0000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={<r12=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd0, r3, 0x421, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x64, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, ')'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, ']*\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24008000}, 0x40804)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)

40.301646ms ago: executing program 33 (id=576):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018001b6c2e04000000000000000000000a0000000061005f616158300000"], 0x0, 0x22}, 0x28) (async, rerun: 32)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x38, 0x701, 0xfffffffc, 0x0, {0x6}}, 0x14}}, 0x0) (async)
socketpair(0x1, 0x1, 0x0, 0x0) (async)
r1 = socket$inet6(0xa, 0x3, 0x2c)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) (async)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x5, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x8}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x17, &(0x7f00000007c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x200b0, 0x0, 0x0, 0x0, 0x40008}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x9d}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x6}, @tail_call, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {0x3, 0x3, 0x6}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222}, 0x94)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x558, 0x320, 0xffffff80, 0x178, 0x0, 0x178, 0x488, 0x22b, 0x258, 0x488, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x320, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff3, 0xe}, {}, {0xa, 0x8}}}, 0x24}, 0x1, 0x400000000000000, 0x0, 0x4040011}, 0x0) (async, rerun: 32)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$nl_generic(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001780)=ANY=[], 0x20}}, 0x40050)
recvmmsg(r4, &(0x7f0000009a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001c00)=""/189, 0xbd}, {&(0x7f0000001cc0)=""/101, 0x65}, {&(0x7f0000004a80)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/188, 0xbc}, {&(0x7f0000001e00)=""/74, 0x4a}], 0x5}, 0x8}], 0x3, 0x42, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000100)={0x4, 0x400002, 0x2, 0x6, 0x2, 0x0, [{0x6, 0x7, 0x7603, '\x00', 0x1000}, {0x50, 0x79, 0x10}]}) (async)
ioctl$FITHAW(0xffffffffffffffff, 0xc0045878)
socket$l2tp6(0xa, 0x2, 0x73) (async)
r5 = socket$caif_seqpacket(0x25, 0x5, 0x5)
ppoll(&(0x7f0000000240)=[{r5, 0x4000}], 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0, 0x0) (async)
r6 = socket(0x27, 0xa, 0x0)
sendmmsg$alg(r6, &(0x7f0000000780)=[{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000c00)="ff010c3994e11ecc681d36271a3391b791c82161fbef779d83d1eab76d9238f0c06fcd7f0f131d1c25a0d2194a60912d62971900"/67, 0x43}, {&(0x7f00000006c0)="bdfff2a3acba4d10502f6d42", 0xc}, {&(0x7f0000000880)="b663948a5c608865c51871db5a4185385619b4ee91951b5b1ffafcf1b664f4bdfd1fc374a67e4f3f2e206d0c37b493df063533649184fdf8cb454e2a2b", 0x3d}, {&(0x7f0000000940)="bcf2a54007b224f797cff587256801a5d1e548fb668f59a9915629bff93501cc1bc3de075fb98182c83c231b15acaf865bceda2e970a1ce1541b256046e24c21c421646635f35aec5e93d78de8dccd7811f6e3c20f85833cae8b996a4ac3256cfadb536ecf24726f9ae3dc48283279a8466cac885b1dd56447de4d3a2989cc60082c875065cad9e2ad165be5", 0x8c}, {&(0x7f0000000b80)="43880bbbde34ab8e71f8eef8ffdad71f8c972d837c99c999e7700bd2e87d7d69115e363d4817c90c0dea9ae155e08602f92d973c72aa3c096a391e8f87b42a2966", 0x41}, {&(0x7f0000000a40)="07c0ab70a524f8b6483b434667f520f9dc62f9c099ec5739610ff6e1c76158d79c51e79256ea8835ea31e2d6f6aae9448e958be842a6a5cfa61c45c4128188ff871a19b2472685fab9628bb4b7b9be0c9fa3b1c928f3ab99ae8124934dc8f30f4e2d2d9e4a3683c45ae21e90073252edf6764ccf0ce626d44df7fe9afbb1b16e17d5d37a58608e68d7638d1517aceb8251eea32ca6b3118d58e0b9aa21c03e03f4211050f8c8ed282ac944cb2f3ff491fad86549304e3e3182888de1", 0xbc}], 0x6, &(0x7f0000000740)=[@assoc={0x18, 0x117, 0x4, 0x7ff}], 0x18, 0x4}], 0x1, 0x8000804)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000001a000100000000000000000002001e140000c800000c0000"], 0x1c}}, 0x0) (async, rerun: 32)
r8 = socket(0x1e, 0x1, 0x0) (rerun: 32)
connect$tipc(r8, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x18}}, 0x10)
shutdown(r8, 0x2) (async)
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)

0s ago: executing program 34 (id=574):
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:43698' (ED25519) to the list of known hosts.
syzkaller login: [   48.466523][ T5792] cgroup: Unknown subsys name 'net'
[   48.548910][ T5792] cgroup: Unknown subsys name 'cpuset'
[   48.553737][ T5792] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.918909][ T5792] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.909332][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.913607][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.917268][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.921183][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.924688][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.016134][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.019758][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.023082][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.027393][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.030986][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.091766][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.095616][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.099143][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.103139][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.107691][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.201599][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   54.316172][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.319468][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.322243][ T5830] bridge_slave_0: entered allmulticast mode
[   54.326238][ T5830] bridge_slave_0: entered promiscuous mode
[   54.332246][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.335732][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.338879][ T5830] bridge_slave_1: entered allmulticast mode
[   54.342648][ T5830] bridge_slave_1: entered promiscuous mode
[   54.393380][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.402116][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.473139][ T5830] team0: Port device team_slave_0 added
[   54.495569][ T5830] team0: Port device team_slave_1 added
[   54.517273][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.519566][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.528962][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.533324][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   54.540817][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.543087][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.553364][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.568155][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   54.624135][ T5830] hsr_slave_0: entered promiscuous mode
[   54.626651][ T5830] hsr_slave_1: entered promiscuous mode
[   54.699427][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.701826][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.704229][ T5839] bridge_slave_0: entered allmulticast mode
[   54.709236][ T5839] bridge_slave_0: entered promiscuous mode
[   54.718093][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.720525][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.722821][ T5836] bridge_slave_0: entered allmulticast mode
[   54.726371][ T5836] bridge_slave_0: entered promiscuous mode
[   54.729731][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.732026][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.734517][ T5839] bridge_slave_1: entered allmulticast mode
[   54.738235][ T5839] bridge_slave_1: entered promiscuous mode
[   54.761462][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.764025][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.767018][ T5836] bridge_slave_1: entered allmulticast mode
[   54.769838][ T5836] bridge_slave_1: entered promiscuous mode
[   54.782540][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.812052][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.817966][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.845554][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.875968][ T5839] team0: Port device team_slave_0 added
[   54.898408][ T5839] team0: Port device team_slave_1 added
[   54.909204][ T5836] team0: Port device team_slave_0 added
[   54.932118][ T5836] team0: Port device team_slave_1 added
[   54.966873][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.969280][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.979344][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.984002][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.987519][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.997673][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.002635][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.005889][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.016203][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.022018][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.024502][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.034555][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.130976][ T5836] hsr_slave_0: entered promiscuous mode
[   55.134141][ T5836] hsr_slave_1: entered promiscuous mode
[   55.142555][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.146034][ T5836] Cannot create hsr debugfs directory
[   55.152345][ T5839] hsr_slave_0: entered promiscuous mode
[   55.157168][ T5839] hsr_slave_1: entered promiscuous mode
[   55.159633][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.162109][ T5839] Cannot create hsr debugfs directory
[   55.193000][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.210145][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.238176][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.260423][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.412359][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.420040][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.426521][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.441003][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.480973][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.490612][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.496605][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.501359][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.510043][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.524453][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   55.546619][ T3071] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.549189][ T3071] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.554875][ T3071] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.557992][ T3071] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.614656][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.678139][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.718839][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   55.736442][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.742161][ T1183] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.744820][ T1183] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.761525][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   55.767978][ T1183] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.770583][ T1183] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.781046][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.784073][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.799967][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.802622][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.831799][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.881736][ T5830] veth0_vlan: entered promiscuous mode
[   55.911682][ T5830] veth1_vlan: entered promiscuous mode
[   55.941187][ T5830] veth0_macvtap: entered promiscuous mode
[   55.956276][ T5830] veth1_macvtap: entered promiscuous mode
[   55.973206][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.982125][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.996972][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.006743][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.009890][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.013099][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.016693][   T55] Bluetooth: hci0: command tx timeout
[   56.019581][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.060262][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.065510][ T5839] veth0_vlan: entered promiscuous mode
[   56.077937][ T5839] veth1_vlan: entered promiscuous mode
[   56.096093][   T55] Bluetooth: hci1: command tx timeout
[   56.119470][ T5839] veth0_macvtap: entered promiscuous mode
[   56.134170][ T5836] veth0_vlan: entered promiscuous mode
[   56.141752][ T5839] veth1_macvtap: entered promiscuous mode
[   56.154141][ T5836] veth1_vlan: entered promiscuous mode
[   56.155359][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.161473][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.185207][   T55] Bluetooth: hci2: command tx timeout
[   56.187172][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.197360][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.200325][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.206207][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.207783][ T5839] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.212386][ T5839] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.218681][ T5839] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.221869][ T5839] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.257725][ T5836] veth0_macvtap: entered promiscuous mode
[   56.263166][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.271831][ T5836] veth1_macvtap: entered promiscuous mode
[   56.306923][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.316626][ T1183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.318771][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.319154][ T1183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.323790][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.330378][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.336567][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.339479][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.381390][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.384198][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.457677][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.460621][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.500253][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.506171][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.548090][ T5898] bond1: entered promiscuous mode
[   56.549841][ T5898] bond1: entered allmulticast mode
[   56.552139][ T5898] 8021q: adding VLAN 0 to HW filter on device bond1
[   56.559401][ T5901] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   56.756640][ T5910] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.760574][ T5910] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.810024][ T5910] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   56.817333][ T5910] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   56.859343][ T5910] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   56.862152][ T5910] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   56.866330][ T5910] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   56.869962][ T5910] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.588076][ T5925] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.619985][ T5927] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9'.
[   57.967856][ T5947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'.
[   58.098093][   T55] Bluetooth: hci0: command tx timeout
[   58.175406][   T55] Bluetooth: hci1: command tx timeout
[   58.263778][   T55] Bluetooth: hci2: command tx timeout
[   58.534035][ T5976] warning: `syz.0.19' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   58.619188][ T5985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21'.
[   58.622319][ T5985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21'.
[   58.658248][ T5985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21'.
[   58.974366][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'.
[   58.980570][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'.
[   59.460343][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'.
[   59.463444][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'.
[   59.468294][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'.
[   59.750482][ T6015] Bluetooth: MGMT ver 1.23
[   60.090852][ T6049] netlink: 'syz.1.38': attribute type 1 has an invalid length.
[   60.175763][   T55] Bluetooth: hci0: command tx timeout
[   60.255245][   T55] Bluetooth: hci1: command tx timeout
[   60.336302][   T55] Bluetooth: hci2: command tx timeout
[   60.352699][ T6063] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.470809][ T6079] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   62.205786][ T6144] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   62.255964][   T55] Bluetooth: hci0: command tx timeout
[   62.272005][ T6145] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.274675][ T6145] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.290808][ T5866] IPVS: starting estimator thread 0...
[   62.335259][   T55] Bluetooth: hci1: command tx timeout
[   62.375874][ T6153] IPVS: using max 46 ests per chain, 110400 per kthread
[   62.406594][ T6145] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.413071][ T6145] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.415935][   T55] Bluetooth: hci2: command tx timeout
[   62.466448][ T6145] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.469371][ T6145] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.472502][ T6145] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.477401][ T6145] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.508834][ T6156] syz_tun: entered allmulticast mode
[   62.512009][ T6156] IPVS: set_ctl: invalid protocol: 8 100.1.1.2:20001
[   62.519581][ T6155] syz_tun: left allmulticast mode
[   62.954140][ T6169] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   63.076601][ T6173] __nla_validate_parse: 19 callbacks suppressed
[   63.076619][ T6173] netlink: 40 bytes leftover after parsing attributes in process `syz.0.73'.
[   63.111562][ T6173] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   63.119813][ T6173] netlink: 'syz.0.73': attribute type 3 has an invalid length.
[   63.198461][ T6178] syz_tun: entered allmulticast mode
[   63.222717][ T6178] syz_tun: left allmulticast mode
[   63.947460][ T6193] !: renamed from dummy0 (while UP)
[   64.161930][ T6204] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   64.172862][ T6204] Zero length message leads to an empty skb
[   64.248248][ T6211] x_tables: duplicate underflow at hook 1
[   64.284758][ T6212] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.288336][ T6212] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.357336][ T6212] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.364896][ T6212] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.438029][ T6212] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.441591][ T6212] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.444872][ T6212] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.448598][ T6212] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.494510][ T6222] bridge: RTM_NEWNEIGH with invalid ether address
[   64.498295][ T6217] netlink: 36 bytes leftover after parsing attributes in process `syz.0.85'.
[   64.501878][ T6217] netlink: 16 bytes leftover after parsing attributes in process `syz.0.85'.
[   64.520011][ T6217] netlink: 36 bytes leftover after parsing attributes in process `syz.0.85'.
[   64.524017][ T6217] netlink: 36 bytes leftover after parsing attributes in process `syz.0.85'.
[   66.131641][ T6286] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   66.833484][ T6297] netlink: 7 bytes leftover after parsing attributes in process `syz.1.105'.
[   66.842348][ T6297] netlink: 7 bytes leftover after parsing attributes in process `syz.1.105'.
[   66.884318][ T6299] netlink: 56 bytes leftover after parsing attributes in process `syz.2.106'.
[   66.935875][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.105'.
[   67.036748][ T6303] netlink: 'syz.0.107': attribute type 21 has an invalid length.
[   67.039461][ T6303] netlink: 36 bytes leftover after parsing attributes in process `syz.0.107'.
[   67.700048][   T51] cfg80211: failed to load regulatory.db
[   67.921705][ T6327] can: request_module (can-proto-3) failed.
[   68.047569][ T6339] can: request_module (can-proto-0) failed.
[   68.094298][ T6346] __nla_validate_parse: 1 callbacks suppressed
[   68.094338][ T6346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.117'.
[   68.973111][ T6373] netlink: 36 bytes leftover after parsing attributes in process `syz.1.123'.
[   68.977295][ T6373] netlink: 16 bytes leftover after parsing attributes in process `syz.1.123'.
[   68.981006][ T6373] netlink: 36 bytes leftover after parsing attributes in process `syz.1.123'.
[   68.984675][ T6373] netlink: 36 bytes leftover after parsing attributes in process `syz.1.123'.
[   69.286450][ T6391] netlink: 44 bytes leftover after parsing attributes in process `syz.2.127'.
[   69.949721][ T6408] tipc: Started in network mode
[   69.951920][ T6408] tipc: Node identity ac1414aa, cluster identity 4711
[   69.957592][ T6408] tipc: Enabled bearer <udp:syz2>, priority 10
[   70.915546][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.918383][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.075940][ T5866] tipc: Node number set to 2886997162
[   71.358684][ T6463] ip_vti0: mtu less than device minimum
[   71.508885][ T6474] netlink: 'syz.2.154': attribute type 4 has an invalid length.
[   71.533828][ T6467] netlink: 36 bytes leftover after parsing attributes in process `syz.1.152'.
[   71.537012][ T6467] netlink: 16 bytes leftover after parsing attributes in process `syz.1.152'.
[   71.540057][ T6467] netlink: 36 bytes leftover after parsing attributes in process `syz.1.152'.
[   71.543081][ T6467] netlink: 36 bytes leftover after parsing attributes in process `syz.1.152'.
[   72.191242][ T6483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   72.422479][ T6495] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   72.569678][ T6497] syz.2.160 uses obsolete (PF_INET,SOCK_PACKET)
[   73.095311][ T6526] netlink: 'syz.0.169': attribute type 1 has an invalid length.
[   73.430637][ T6536] __nla_validate_parse: 3 callbacks suppressed
[   73.430654][ T6536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.171'.
[   73.437378][ T6536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.171'.
[   73.442449][ T6536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.171'.
[   74.203833][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.176'.
[   74.207762][ T6552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.176'.
[   74.512213][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'.
[   74.516109][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'.
[   74.521484][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'.
[   74.924786][ T6572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.180'.
[   74.928712][ T6572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.180'.
[   75.544582][ T6601] tipc: Started in network mode
[   75.547715][ T6601] tipc: Node identity eab278a77e8f, cluster identity 4711
[   75.551248][ T6601] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.555225][ T6601] syzkaller0: entered promiscuous mode
[   75.557589][ T6601] syzkaller0: entered allmulticast mode
[   75.570379][ T6601] tipc: Resetting bearer <eth:syzkaller0>
[   76.358600][ T6600] tipc: Resetting bearer <eth:syzkaller0>
[   76.364474][ T6600] tipc: Disabling bearer <eth:syzkaller0>
[   77.214665][ T6641] netlink: 'syz.0.197': attribute type 303 has an invalid length.
[   77.222706][ T6641] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   77.226891][ T6641] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   78.974816][ T6681] __nla_validate_parse: 3 callbacks suppressed
[   78.974833][ T6681] netlink: 104 bytes leftover after parsing attributes in process `syz.0.210'.
[   79.280496][ T6689] netlink: 24 bytes leftover after parsing attributes in process `syz.2.212'.
[   79.323832][ T6691] netlink: 40 bytes leftover after parsing attributes in process `syz.2.213'.
[   79.420492][ T6700] netlink: 28 bytes leftover after parsing attributes in process `syz.2.216'.
[   79.959732][ T6711] netlink: 48 bytes leftover after parsing attributes in process `syz.1.219'.
[   80.721185][ T6744] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[   81.726796][ T6752] netlink: 'syz.1.228': attribute type 5 has an invalid length.
[   81.730183][ T6752] netlink: 48 bytes leftover after parsing attributes in process `syz.1.228'.
[   82.236173][ T6772] netlink: 36 bytes leftover after parsing attributes in process `syz.0.234'.
[   82.239873][ T6772] netlink: 16 bytes leftover after parsing attributes in process `syz.0.234'.
[   82.243593][ T6772] netlink: 36 bytes leftover after parsing attributes in process `syz.0.234'.
[   82.248406][ T6772] netlink: 36 bytes leftover after parsing attributes in process `syz.0.234'.
[   83.431105][ T6803] wireguard0: entered promiscuous mode
[   83.433515][ T6803] wireguard0: entered allmulticast mode
[   84.342777][ T6819] __nla_validate_parse: 7 callbacks suppressed
[   84.342787][ T6819] netlink: 56 bytes leftover after parsing attributes in process `syz.1.246'.
[   86.982441][ T6863] netlink: 'syz.2.256': attribute type 1 has an invalid length.
[   86.987182][ T6863] netlink: 224 bytes leftover after parsing attributes in process `syz.2.256'.
[   88.202752][ T6897] netlink: 32 bytes leftover after parsing attributes in process `syz.0.267'.
[   88.313161][ T6908] netlink: 'syz.0.269': attribute type 1 has an invalid length.
[   88.317870][ T6908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.269'.
[   88.331051][ T6908] netlink: 16 bytes leftover after parsing attributes in process `syz.0.269'.
[   88.333948][ T6908] netlink: 16 bytes leftover after parsing attributes in process `syz.0.269'.
[   88.591406][ T6915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.272'.
[   88.907567][ T6927] Unsupported ieee802154 address type: 0
[   89.153098][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.277'.
[   89.156897][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.277'.
[   89.162458][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.277'.
[   89.851771][ T6943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   90.634282][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.281'.
[   90.647535][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.281'.
[   91.861209][ T6990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.292'.
[   91.864357][ T6990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.292'.
[   91.869964][ T6990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.292'.
[   92.722071][ T7011] sctp: [Deprecated]: syz.1.298 (pid 7011) Use of int in max_burst socket option.
[   92.722071][ T7011] Use struct sctp_assoc_value instead
[   93.073664][ T7029] dvmrp8: entered allmulticast mode
[   93.081326][ T7029] netlink: 'syz.1.302': attribute type 1 has an invalid length.
[   93.130053][ T7032] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   93.142845][ T7032] netlink: 'syz.1.303': attribute type 3 has an invalid length.
[   94.517288][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.313'.
[   94.630678][   T51] IPVS: starting estimator thread 0...
[   94.715135][ T7063] IPVS: using max 49 ests per chain, 117600 per kthread
[   95.345765][ T7069] sctp: [Deprecated]: syz.2.315 (pid 7069) Use of int in max_burst socket option.
[   95.345765][ T7069] Use struct sctp_assoc_value instead
[   95.353674][ T7069] netlink: 60 bytes leftover after parsing attributes in process `syz.2.315'.
[   95.455665][ T5727] IPVS: stop unused estimator thread 0...
[   95.470877][ T7079] netlink: 36 bytes leftover after parsing attributes in process `syz.0.318'.
[   95.782253][ T7094] netlink: 'syz.0.321': attribute type 21 has an invalid length.
[   95.785152][ T7094] netlink: 156 bytes leftover after parsing attributes in process `syz.0.321'.
[   96.470671][ T7105] xfrm1: entered promiscuous mode
[   96.474218][ T7105] xfrm1: entered allmulticast mode
[   96.488667][ T7105] xt_hashlimit: size too large, truncated to 1048576
[   97.079624][ T7120] ip6gre1: entered allmulticast mode
[   97.238421][ T7126] netlink: 56 bytes leftover after parsing attributes in process `syz.0.331'.
[   97.443303][ T7131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.332'.
[   97.444145][ T7127] netlink: 280 bytes leftover after parsing attributes in process `syz.1.330'.
[   97.453431][ T7135] netlink: 'syz.0.333': attribute type 1 has an invalid length.
[   97.462729][ T7131] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   97.467505][ T7131] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   98.679874][ T7166] netlink: 36 bytes leftover after parsing attributes in process `syz.1.341'.
[   99.337731][ T7170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.342'.
[   99.341427][ T7170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.342'.
[   99.351081][ T7170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.342'.
[  100.370816][   T51] IPVS: starting estimator thread 0...
[  100.455131][ T7272] IPVS: using max 78 ests per chain, 187200 per kthread
[  101.273046][ T7290] !: renamed from dummy0
[  101.581295][ T7307] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  101.779326][ T5852] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xea
[  102.394470][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'.
[  102.397601][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'.
[  102.404561][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'.
[  102.564711][ T7349] netlink: 96 bytes leftover after parsing attributes in process `syz.0.369'.
[  102.569974][ T7349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.369'.
[  102.573495][ T7349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.369'.
[  103.386179][ T7381] netlink: 36 bytes leftover after parsing attributes in process `syz.1.377'.
[  103.389221][ T7381] netlink: 16 bytes leftover after parsing attributes in process `syz.1.377'.
[  103.392170][ T7381] netlink: 36 bytes leftover after parsing attributes in process `syz.1.377'.
[  103.396025][ T7379] netlink: 'syz.0.376': attribute type 303 has an invalid length.
[  103.396142][ T7381] netlink: 36 bytes leftover after parsing attributes in process `syz.1.377'.
[  103.519662][ T7389] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  103.641326][ T7395] team0: Port device team_slave_0 removed
[  104.257542][ T7402] netlink: 'syz.2.385': attribute type 1 has an invalid length.
[  104.298190][ T7402] bond2: (slave gretap1): making interface the new active one
[  104.302189][ T7402] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  104.309971][ T7402] 8021q: adding VLAN 0 to HW filter on device bond2
[  104.460831][ T7410] wireguard1: entered promiscuous mode
[  107.473718][ T7491] __nla_validate_parse: 46 callbacks suppressed
[  107.473728][ T7491] netlink: 28 bytes leftover after parsing attributes in process `syz.0.409'.
[  107.589528][ T7507] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  107.630237][ T7511] syzkaller1: entered promiscuous mode
[  107.632325][ T7511] syzkaller1: entered allmulticast mode
[  108.022367][ T7536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.422'.
[  108.838904][ T7567] netlink: 48 bytes leftover after parsing attributes in process `syz.0.429'.
[  108.848017][ T7566] x_tables: duplicate underflow at hook 4
[  108.856473][ T7566] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  108.859374][ T7566] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  108.862206][ T7566] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  108.865210][ T7566] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  109.146509][ T7576] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  109.874002][ T7606] syzkaller0: create flow: hash 4235656569 index 1
[  109.965359][ T7605] syzkaller0: delete flow: hash 4235656569 index 1
[  110.187726][ T7619] netlink: 36 bytes leftover after parsing attributes in process `syz.0.441'.
[  110.191204][ T7619] netlink: 16 bytes leftover after parsing attributes in process `syz.0.441'.
[  110.194484][ T7619] netlink: 36 bytes leftover after parsing attributes in process `syz.0.441'.
[  110.199681][ T7619] netlink: 36 bytes leftover after parsing attributes in process `syz.0.441'.
[  110.766692][ T7605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.941318][ T7625] netlink: 36 bytes leftover after parsing attributes in process `syz.0.444'.
[  110.945671][ T7625] netlink: 16 bytes leftover after parsing attributes in process `syz.0.444'.
[  110.949404][ T7625] netlink: 36 bytes leftover after parsing attributes in process `syz.0.444'.
[  111.193993][ T7640] syz.0.448: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  111.199910][ T7640] CPU: 0 UID: 0 PID: 7640 Comm: syz.0.448 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  111.199937][ T7640] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  111.199944][ T7640] Call Trace:
[  111.199948][ T7640]  <TASK>
[  111.199952][ T7640]  dump_stack_lvl+0x189/0x250
[  111.199969][ T7640]  ? __pfx_dump_stack_lvl+0x10/0x10
[  111.199979][ T7640]  ? __pfx__printk+0x10/0x10
[  111.199990][ T7640]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  111.200002][ T7640]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  111.200013][ T7640]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  111.200024][ T7640]  warn_alloc+0x214/0x310
[  111.200036][ T7640]  ? stack_depot_save_flags+0x429/0x900
[  111.200049][ T7640]  ? __pfx_warn_alloc+0x10/0x10
[  111.200059][ T7640]  ? kasan_save_track+0x4f/0x80
[  111.200068][ T7640]  ? xskq_create+0x56/0x170
[  111.200079][ T7640]  ? xsk_init_queue+0xb0/0x110
[  111.200088][ T7640]  ? xsk_setsockopt+0x43f/0x710
[  111.200097][ T7640]  ? do_sock_setsockopt+0x25a/0x3e0
[  111.200107][ T7640]  ? __x64_sys_setsockopt+0x18b/0x220
[  111.200115][ T7640]  ? do_syscall_64+0xfa/0x3b0
[  111.200122][ T7640]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.200132][ T7640]  __vmalloc_node_range_noprof+0x125/0x12f0
[  111.200153][ T7640]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  111.200164][ T7640]  ? xskq_create+0x56/0x170
[  111.200175][ T7640]  ? __kasan_kmalloc+0x93/0xb0
[  111.200185][ T7640]  vmalloc_user_noprof+0xad/0xf0
[  111.200195][ T7640]  ? xskq_create+0xbf/0x170
[  111.200207][ T7640]  xskq_create+0xbf/0x170
[  111.200219][ T7640]  xsk_init_queue+0xb0/0x110
[  111.200230][ T7640]  xsk_setsockopt+0x43f/0x710
[  111.200241][ T7640]  ? __pfx_xsk_setsockopt+0x10/0x10
[  111.200250][ T7640]  ? __lock_acquire+0xab9/0xd20
[  111.200261][ T7640]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  111.200273][ T7640]  ? __pfx_xsk_setsockopt+0x10/0x10
[  111.200283][ T7640]  do_sock_setsockopt+0x25a/0x3e0
[  111.200293][ T7640]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  111.200303][ T7640]  ? __fget_files+0x2a/0x420
[  111.200317][ T7640]  __x64_sys_setsockopt+0x18b/0x220
[  111.200328][ T7640]  do_syscall_64+0xfa/0x3b0
[  111.200334][ T7640]  ? lockdep_hardirqs_on+0x9c/0x150
[  111.200345][ T7640]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.200352][ T7640]  ? exc_page_fault+0x9f/0xf0
[  111.200363][ T7640]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.200370][ T7640] RIP: 0033:0x7fc4b098e929
[  111.200377][ T7640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  111.200384][ T7640] RSP: 002b:00007fc4b18a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  111.200393][ T7640] RAX: ffffffffffffffda RBX: 00007fc4b0bb5fa0 RCX: 00007fc4b098e929
[  111.200398][ T7640] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[  111.200402][ T7640] RBP: 00007fc4b0a10b39 R08: 0000000000000004 R09: 0000000000000000
[  111.200406][ T7640] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  111.200411][ T7640] R13: 0000000000000000 R14: 00007fc4b0bb5fa0 R15: 00007fff793785d8
[  111.200422][ T7640]  </TASK>
[  111.200557][ T7640] Mem-Info:
[  111.323563][ T7640] active_anon:5659 inactive_anon:0 isolated_anon:0
[  111.323563][ T7640]  active_file:1286 inactive_file:38224 isolated_file:0
[  111.323563][ T7640]  unevictable:1768 dirty:138 writeback:0
[  111.323563][ T7640]  slab_reclaimable:9471 slab_unreclaimable:52582
[  111.323563][ T7640]  mapped:18377 shmem:2441 pagetables:974
[  111.323563][ T7640]  sec_pagetables:0 bounce:0
[  111.323563][ T7640]  kernel_misc_reclaimable:0
[  111.323563][ T7640]  free:303865 free_pcp:19085 free_cma:0
[  111.344223][ T7640] Node 0 active_anon:12988kB inactive_anon:0kB active_file:3696kB inactive_file:145680kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33844kB dirty:388kB writeback:0kB shmem:5108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6656kB pagetables:2216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  111.357071][ T7640] Node 1 active_anon:9648kB inactive_anon:0kB active_file:1448kB inactive_file:7216kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:39664kB dirty:164kB writeback:0kB shmem:4656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5072kB pagetables:1748kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  111.369897][ T7640] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  111.383093][ T7640] lowmem_reserve[]: 0 812 812 812 812
[  111.392979][ T7640] Node 0 DMA32 free:273392kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12956kB inactive_anon:0kB active_file:3696kB inactive_file:145680kB unevictable:3536kB writepending:388kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:36460kB local_pcp:17368kB free_cma:0kB
[  111.404742][ T7640] lowmem_reserve[]: 0 0 0 0 0
[  111.406940][ T7640] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  111.418338][ T7640] lowmem_reserve[]: 0 0 854 854 854
[  111.420337][ T7640] Node 1 Normal free:467620kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9632kB inactive_anon:0kB active_file:1448kB inactive_file:7216kB unevictable:3536kB writepending:164kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:39964kB local_pcp:22424kB free_cma:0kB
[  111.432478][ T7640] lowmem_reserve[]: 0 0 0 0 0
[  111.434491][ T7640] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  111.440466][ T7640] Node 0 DMA32: 2444*4kB (UM) 810*8kB (UME) 349*16kB (UME) 91*32kB (ME) 145*64kB (UME) 64*128kB (UME) 39*256kB (UME) 24*512kB (UME) 10*1024kB (UME) 1*2048kB (M) 48*4096kB (M) = 273392kB
[  111.449463][ T7640] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  111.463992][ T7640] Node 1 Normal: 927*4kB (UM) 365*8kB (UME) 306*16kB (UM) 363*32kB (UME) 212*64kB (UM) 64*128kB (UM) 27*256kB (UME) 10*512kB (UM) 11*1024kB (UM) 9*2048kB (UME) 93*4096kB (UM) = 467556kB
[  111.470255][ T7640] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  111.473599][ T7640] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  111.485148][ T7640] 41953 total pagecache pages
[  111.487218][ T7640] 0 pages in swap cache
[  111.489051][ T7640] Free swap  = 124996kB
[  111.490824][ T7640] Total swap = 124996kB
[  111.492617][ T7640] 786301 pages RAM
[  111.494180][ T7640] 0 pages HighMem/MovableOnly
[  111.506407][ T7640] 241085 pages reserved
[  111.508042][ T7640] 0 pages cma reserved
[  111.638110][ T7661] syzkaller0: entered promiscuous mode
[  111.641485][ T7661] syzkaller0: entered allmulticast mode
[  111.646947][ T7660] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.659199][ T7660] tipc: Resetting bearer <eth:syzkaller0>
[  111.670328][ T7660] tipc: Disabling bearer <eth:syzkaller0>
[  111.856273][ T7677] netlink: 'syz.1.457': attribute type 1 has an invalid length.
[  111.872773][ T7672] sctp: [Deprecated]: syz.2.456 (pid 7672) Use of int in maxseg socket option.
[  111.872773][ T7672] Use struct sctp_assoc_value instead
[  111.883417][ T7677] 8021q: adding VLAN 0 to HW filter on device bond2
[  112.018948][ T7641] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  112.213479][ T7712] IPVS: length: 47 != 8
[  112.311614][ T7715] hsr_slave_0: left promiscuous mode
[  112.314671][ T7715] hsr_slave_1: left promiscuous mode
[  112.459059][ T7719] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  112.501555][ T7721] __nla_validate_parse: 12 callbacks suppressed
[  112.501565][ T7721] netlink: 28 bytes leftover after parsing attributes in process `syz.1.472'.
[  113.405181][ T7750] syz_tun: entered allmulticast mode
[  113.408100][ T7750] IPVS: set_ctl: invalid protocol: 8 100.1.1.2:20001
[  113.872499][ T7758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'.
[  113.875800][ T7758] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  113.879159][ T7758] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  114.175723][ T7748] syz_tun: left allmulticast mode
[  114.221353][ T7763] netlink: 56 bytes leftover after parsing attributes in process `syz.0.484'.
[  114.700754][ T7769] netlink: 56 bytes leftover after parsing attributes in process `syz.1.486'.
[  114.794477][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.487'.
[  114.798552][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.487'.
[  114.803137][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.487'.
[  114.806790][ T7775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.487'.
[  116.014228][ T7808] netlink: 36 bytes leftover after parsing attributes in process `syz.2.497'.
[  116.025940][ T7808] netlink: 16 bytes leftover after parsing attributes in process `syz.2.497'.
[  116.572569][ T7828] netlink: 'syz.1.503': attribute type 3 has an invalid length.
[  117.541911][ T7863] __nla_validate_parse: 9 callbacks suppressed
[  117.541921][ T7863] netlink: 212364 bytes leftover after parsing attributes in process `syz.1.512'.
[  117.547991][ T7863] openvswitch: netlink: Message has 5 unknown bytes.
[  117.713911][ T7867] netlink: 16 bytes leftover after parsing attributes in process `syz.1.514'.
[  117.717373][ T7867] netlink: 16 bytes leftover after parsing attributes in process `syz.1.514'.
[  117.950924][ T7876] netlink: 104 bytes leftover after parsing attributes in process `syz.2.517'.
[  117.957472][ T7876] bridge_slave_0: invalid flags given to default FDB implementation
[  118.330872][ T7894] netlink: 56 bytes leftover after parsing attributes in process `syz.0.523'.
[  118.334644][ T7893] netlink: 56 bytes leftover after parsing attributes in process `syz.0.523'.
[  118.732323][ T7902] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  118.771886][ T7906] openvswitch: netlink: Message has 4 unknown bytes.
[  118.774766][ T7906] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.052743][ T7913] x_tables: duplicate underflow at hook 4
[  119.318271][ T7925] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  119.322067][ T7925] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  119.326022][ T7925] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  119.329883][ T7925] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  120.043672][ T7939] netlink: 'syz.1.535': attribute type 29 has an invalid length.
[  120.047727][ T7939] netlink: 'syz.1.535': attribute type 29 has an invalid length.
[  121.183332][ T7978] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  121.262272][ T7986] netlink: 316 bytes leftover after parsing attributes in process `syz.2.548'.
[  121.273342][ T7986] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  121.523803][ T8002] xt_HMARK: spi-set and port-set can't be combined
[  121.693936][ T8009] IPVS: length: 117 != 8
[  122.261196][ T8018] netlink: 28 bytes leftover after parsing attributes in process `syz.1.557'.
[  122.264423][ T8018] netlink: 28 bytes leftover after parsing attributes in process `syz.1.557'.
[  122.273215][ T8018] ip6gretap0: entered promiscuous mode
[  122.276649][ T8018] erspan0: entered promiscuous mode
[  122.279326][ T8018] hsr0: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network
[  122.283133][ T8018] hsr0: Slave B (erspan0) is not up; please bring it up to get a fully working HSR network
[  123.229733][ T8047] netlink: 36 bytes leftover after parsing attributes in process `syz.1.563'.
[  123.234020][ T8047] netlink: 16 bytes leftover after parsing attributes in process `syz.1.563'.
[  123.239137][ T8047] netlink: 36 bytes leftover after parsing attributes in process `syz.1.563'.
[  123.242116][ T8047] netlink: 36 bytes leftover after parsing attributes in process `syz.1.563'.
[  123.387006][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.568'.
[  123.403643][ T8061] netlink: 16 bytes leftover after parsing attributes in process `syz.2.568'.
[  123.555723][ T8075] nbd0: detected capacity change from 0 to 127
[  124.029618][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.575'.
[  124.033858][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'.
[  124.057550][ T8090] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  124.070180][ T8090] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  124.134385][ T8090] xt_bpf: check failed: parse error
[  124.192344][ T8098] xt_CT: You must specify a L4 protocol and not use inversions on it
[  124.318045][ T8078] block nbd0: Receive control failed (result -104)
[  132.338147][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  139.457030][ T5221] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  139.461125][ T5221] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  139.466710][ T5221] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  139.471017][ T5221] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  139.486139][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  139.489770][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  139.493035][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  139.496738][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  139.499875][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  139.503250][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  139.562719][   T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  139.567006][   T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  139.578561][   T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  139.586492][   T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  139.590259][   T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  139.709085][ T8105] chnl_net:caif_netlink_parms(): no params data found
[  139.828109][ T8103] chnl_net:caif_netlink_parms(): no params data found
[  139.851319][ T8105] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.854417][ T8105] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.859844][ T8105] bridge_slave_0: entered allmulticast mode
[  139.863849][ T8105] bridge_slave_0: entered promiscuous mode
[  139.912674][ T8105] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.916969][ T8105] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.920015][ T8105] bridge_slave_1: entered allmulticast mode
[  139.923951][ T8105] bridge_slave_1: entered promiscuous mode
[  140.002124][ T8105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  140.012993][ T8105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  140.018422][ T8109] chnl_net:caif_netlink_parms(): no params data found
[  140.105875][ T8105] team0: Port device team_slave_0 added
[  140.108914][ T8103] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.112581][ T8103] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.116310][ T8103] bridge_slave_0: entered allmulticast mode
[  140.120186][ T8103] bridge_slave_0: entered promiscuous mode
[  140.141456][ T8105] team0: Port device team_slave_1 added
[  140.145114][ T8103] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.148163][ T8103] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.151153][ T8103] bridge_slave_1: entered allmulticast mode
[  140.158439][ T8103] bridge_slave_1: entered promiscuous mode
[  140.240134][ T8105] batman_adv: batadv0: Adding interface: batadv_slave_0
[  140.243161][ T8105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.255830][ T8105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  140.263260][ T8103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  140.267844][ T8109] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.270209][ T8109] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.272781][ T8109] bridge_slave_0: entered allmulticast mode
[  140.277643][ T8109] bridge_slave_0: entered promiscuous mode
[  140.282147][ T8109] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.285415][ T8109] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.288438][ T8109] bridge_slave_1: entered allmulticast mode
[  140.292337][ T8109] bridge_slave_1: entered promiscuous mode
[  140.296461][ T8105] batman_adv: batadv0: Adding interface: batadv_slave_1
[  140.299173][ T8105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.308948][ T8105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  140.317973][ T8103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  140.398461][ T8103] team0: Port device team_slave_0 added
[  140.402758][ T8109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  140.418838][ T8105] hsr_slave_0: entered promiscuous mode
[  140.421349][ T8105] hsr_slave_1: entered promiscuous mode
[  140.423490][ T8105] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  140.426690][ T8105] Cannot create hsr debugfs directory
[  140.430259][ T8103] team0: Port device team_slave_1 added
[  140.434341][ T8109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  140.476712][ T8103] batman_adv: batadv0: Adding interface: batadv_slave_0
[  140.479055][ T8103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.487697][ T8103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  140.519508][ T8103] batman_adv: batadv0: Adding interface: batadv_slave_1
[  140.521823][ T8103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.531632][ T8103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  140.538522][ T8109] team0: Port device team_slave_0 added
[  140.553629][ T8109] team0: Port device team_slave_1 added
[  140.592666][ T8109] batman_adv: batadv0: Adding interface: batadv_slave_0
[  140.596163][ T8109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.606959][ T8109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  140.632044][ T8109] batman_adv: batadv0: Adding interface: batadv_slave_1
[  140.635294][ T8109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.646051][ T8109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  140.692536][ T8103] hsr_slave_0: entered promiscuous mode
[  140.695792][ T8103] hsr_slave_1: entered promiscuous mode
[  140.697912][ T8103] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  140.700680][ T8103] Cannot create hsr debugfs directory
[  140.771148][ T8109] hsr_slave_0: entered promiscuous mode
[  140.774522][ T8109] hsr_slave_1: entered promiscuous mode
[  140.779111][ T8109] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  140.782322][ T8109] Cannot create hsr debugfs directory
[  141.535444][ T8108] Bluetooth: hci4: command tx timeout
[  141.538448][   T55] Bluetooth: hci3: command tx timeout
[  141.615304][ T8108] Bluetooth: hci5: command tx timeout
[  143.615599][ T8108] Bluetooth: hci4: command tx timeout
[  143.617422][ T8108] Bluetooth: hci3: command tx timeout
[  143.696188][   T55] Bluetooth: hci5: command tx timeout
[  145.695261][   T55] Bluetooth: hci3: command tx timeout
[  145.697684][   T55] Bluetooth: hci4: command tx timeout
[  145.775209][ T8108] Bluetooth: hci5: command tx timeout
[  147.775500][ T8108] Bluetooth: hci4: command tx timeout
[  147.777887][ T8108] Bluetooth: hci3: command tx timeout
[  147.855414][   T55] Bluetooth: hci5: command tx timeout
[  154.099528][   T25] block nbd0: Possible stuck request ffff888022d30000: control (read@0,1024B). Runtime 30 seconds
[  154.103781][   T25] block nbd0: Possible stuck request ffff888022d30200: control (read@1024,1024B). Runtime 30 seconds
[  154.108124][   T25] block nbd0: Possible stuck request ffff888022d30400: control (read@2048,1024B). Runtime 30 seconds
[  154.112078][   T25] block nbd0: Possible stuck request ffff888022d30600: control (read@3072,1024B). Runtime 30 seconds
[  180.497420][ T5831] Bluetooth: hci1: command 0x0406 tx timeout
[  180.499777][ T5221] Bluetooth: hci2: command 0x0406 tx timeout
[  184.176317][   T25] block nbd0: Possible stuck request ffff888022d30000: control (read@0,1024B). Runtime 60 seconds
[  184.180511][   T25] block nbd0: Possible stuck request ffff888022d30200: control (read@1024,1024B). Runtime 60 seconds
[  184.184794][   T25] block nbd0: Possible stuck request ffff888022d30400: control (read@2048,1024B). Runtime 60 seconds
[  184.190156][   T25] block nbd0: Possible stuck request ffff888022d30600: control (read@3072,1024B). Runtime 60 seconds
[  186.515256][ T5281] udevd[5281]: worker [7949] /devices/virtual/block/nbd0 is taking a long time
[  193.777248][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  200.294505][   T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  200.305220][   T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  200.308426][   T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  200.311489][   T55] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  200.314396][   T55] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  200.344387][ T8108] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  200.356101][ T8108] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  200.359803][ T8108] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  200.363774][ T8108] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  200.367583][ T8108] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  200.410618][ T8108] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  200.414823][ T8108] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  200.420656][ T8108] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  200.428958][ T8108] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  200.435609][ T8108] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  200.600861][ T8132] chnl_net:caif_netlink_parms(): no params data found
[  200.712698][ T8132] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.717161][ T8132] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.719769][ T8132] bridge_slave_0: entered allmulticast mode
[  200.723000][ T8132] bridge_slave_0: entered promiscuous mode
[  200.727839][ T8134] chnl_net:caif_netlink_parms(): no params data found
[  200.734797][ T8132] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.738641][ T8132] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.741563][ T8132] bridge_slave_1: entered allmulticast mode
[  200.745684][ T8132] bridge_slave_1: entered promiscuous mode
[  200.824828][ T8132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  200.830051][ T8132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  200.867044][ T8136] chnl_net:caif_netlink_parms(): no params data found
[  200.880865][ T8132] team0: Port device team_slave_0 added
[  200.913871][ T8132] team0: Port device team_slave_1 added
[  200.931930][ T8134] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.936471][ T8134] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.939728][ T8134] bridge_slave_0: entered allmulticast mode
[  200.943638][ T8134] bridge_slave_0: entered promiscuous mode
[  200.961974][ T8132] batman_adv: batadv0: Adding interface: batadv_slave_0
[  200.964892][ T8132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.975456][ T8132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  200.993592][ T8134] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.997089][ T8134] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.000149][ T8134] bridge_slave_1: entered allmulticast mode
[  201.003946][ T8134] bridge_slave_1: entered promiscuous mode
[  201.008256][ T8132] batman_adv: batadv0: Adding interface: batadv_slave_1
[  201.010670][ T8132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.019455][ T8132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  201.104066][ T8136] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.106732][ T8136] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.109131][ T8136] bridge_slave_0: entered allmulticast mode
[  201.111852][ T8136] bridge_slave_0: entered promiscuous mode
[  201.117497][ T8134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  201.121301][ T8136] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.123724][ T8136] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.126403][ T8136] bridge_slave_1: entered allmulticast mode
[  201.129197][ T8136] bridge_slave_1: entered promiscuous mode
[  201.156409][ T8132] hsr_slave_0: entered promiscuous mode
[  201.159792][ T8132] hsr_slave_1: entered promiscuous mode
[  201.162783][ T8132] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  201.166153][ T8132] Cannot create hsr debugfs directory
[  201.170287][ T8134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  201.200199][ T8136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  201.223986][ T8134] team0: Port device team_slave_0 added
[  201.227502][ T8136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  201.254151][ T8134] team0: Port device team_slave_1 added
[  201.296832][ T8136] team0: Port device team_slave_0 added
[  201.300783][ T8134] batman_adv: batadv0: Adding interface: batadv_slave_0
[  201.303236][ T8134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.312287][ T8134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  201.317162][ T8134] batman_adv: batadv0: Adding interface: batadv_slave_1
[  201.319542][ T8134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.328290][ T8134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  201.338848][ T8136] team0: Port device team_slave_1 added
[  201.377166][ T8136] batman_adv: batadv0: Adding interface: batadv_slave_0
[  201.379533][ T8136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.388773][ T8136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  201.401262][ T8136] batman_adv: batadv0: Adding interface: batadv_slave_1
[  201.403629][ T8136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.412475][ T8136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  201.456282][ T8134] hsr_slave_0: entered promiscuous mode
[  201.458705][ T8134] hsr_slave_1: entered promiscuous mode
[  201.460841][ T8134] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  201.463373][ T8134] Cannot create hsr debugfs directory
[  201.495333][ T8136] hsr_slave_0: entered promiscuous mode
[  201.497777][ T8136] hsr_slave_1: entered promiscuous mode
[  201.499821][ T8136] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  201.502203][ T8136] Cannot create hsr debugfs directory
[  202.335371][ T8108] Bluetooth: hci6: command tx timeout
[  202.415217][ T8108] Bluetooth: hci7: command tx timeout
[  202.495203][ T8108] Bluetooth: hci8: command tx timeout
[  204.415227][ T8108] Bluetooth: hci6: command tx timeout
[  204.495277][ T8108] Bluetooth: hci7: command tx timeout
[  204.575422][ T8108] Bluetooth: hci8: command tx timeout
[  206.495138][ T8108] Bluetooth: hci6: command tx timeout
[  206.575329][ T8108] Bluetooth: hci7: command tx timeout
[  206.655179][ T8108] Bluetooth: hci8: command tx timeout
[  208.575573][ T8108] Bluetooth: hci6: command tx timeout
[  208.655232][ T8108] Bluetooth: hci7: command tx timeout
[  208.737367][ T8108] Bluetooth: hci8: command tx timeout
[  214.255467][   T25] block nbd0: Possible stuck request ffff888022d30000: control (read@0,1024B). Runtime 90 seconds
[  214.259591][   T25] block nbd0: Possible stuck request ffff888022d30200: control (read@1024,1024B). Runtime 90 seconds
[  214.263824][   T25] block nbd0: Possible stuck request ffff888022d30400: control (read@2048,1024B). Runtime 90 seconds
[  214.268150][   T25] block nbd0: Possible stuck request ffff888022d30600: control (read@3072,1024B). Runtime 90 seconds
[  244.336647][   T25] block nbd0: Possible stuck request ffff888022d30000: control (read@0,1024B). Runtime 120 seconds
[  244.340870][   T25] block nbd0: Possible stuck request ffff888022d30200: control (read@1024,1024B). Runtime 120 seconds
[  244.345336][   T25] block nbd0: Possible stuck request ffff888022d30400: control (read@2048,1024B). Runtime 120 seconds
[  244.349692][   T25] block nbd0: Possible stuck request ffff888022d30600: control (read@3072,1024B). Runtime 120 seconds
[  255.229566][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  260.310905][   T55] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  260.315237][   T55] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  260.318778][   T55] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  260.323911][   T55] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  260.327797][   T55] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  260.442406][ T8107] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  260.446880][ T8107] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  260.452877][ T8169] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  260.458452][ T8169] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  260.463312][ T8173] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  260.467835][ T8173] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  260.471118][ T8169] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  260.475535][ T8169] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  260.479787][ T8173] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  260.484416][ T8173] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  260.499804][ T8164] chnl_net:caif_netlink_parms(): no params data found
[  260.632754][ T8164] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.641181][ T8164] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.644356][ T8164] bridge_slave_0: entered allmulticast mode
[  260.648995][ T8164] bridge_slave_0: entered promiscuous mode
[  260.673368][ T8164] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.677209][ T8164] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.680383][ T8164] bridge_slave_1: entered allmulticast mode
[  260.684428][ T8164] bridge_slave_1: entered promiscuous mode
[  260.754540][ T8164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  260.776038][ T8164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  260.824149][ T8164] team0: Port device team_slave_0 added
[  260.833515][ T8164] team0: Port device team_slave_1 added
[  260.896967][ T8164] batman_adv: batadv0: Adding interface: batadv_slave_0
[  260.899990][ T8164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  260.910882][ T8164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  260.937035][ T8164] batman_adv: batadv0: Adding interface: batadv_slave_1
[  260.940051][ T8164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  260.951063][ T8164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  261.041196][ T8164] hsr_slave_0: entered promiscuous mode
[  261.044024][ T8164] hsr_slave_1: entered promiscuous mode
[  261.050058][ T8164] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  261.053008][ T8164] Cannot create hsr debugfs directory
[  261.078032][ T8170] chnl_net:caif_netlink_parms(): no params data found
[  261.159936][ T8167] chnl_net:caif_netlink_parms(): no params data found
[  261.259646][ T8170] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.262931][ T8170] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.266776][ T8170] bridge_slave_0: entered allmulticast mode
[  261.270739][ T8170] bridge_slave_0: entered promiscuous mode
[  261.297120][ T8170] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.300262][ T8170] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.303296][ T8170] bridge_slave_1: entered allmulticast mode
[  261.312124][ T8170] bridge_slave_1: entered promiscuous mode
[  261.333247][ T8167] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.335883][ T8167] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.338582][ T8167] bridge_slave_0: entered allmulticast mode
[  261.342465][ T8167] bridge_slave_0: entered promiscuous mode
[  261.374022][ T8167] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.378159][ T8167] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.381266][ T8167] bridge_slave_1: entered allmulticast mode
[  261.386094][ T8167] bridge_slave_1: entered promiscuous mode
[  261.417176][ T8170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  261.446733][ T8167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  261.452274][ T8170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  261.467363][ T8167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  261.508418][ T8170] team0: Port device team_slave_0 added
[  261.528042][ T8170] team0: Port device team_slave_1 added
[  261.533265][ T8167] team0: Port device team_slave_0 added
[  261.555753][ T8167] team0: Port device team_slave_1 added
[  261.607182][ T8167] batman_adv: batadv0: Adding interface: batadv_slave_0
[  261.609706][ T8167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  261.619375][ T8167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  261.624081][ T8170] batman_adv: batadv0: Adding interface: batadv_slave_0
[  261.635583][ T8170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  261.652667][ T8170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  261.659231][ T8170] batman_adv: batadv0: Adding interface: batadv_slave_1
[  261.662196][ T8170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  261.675486][ T8170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  261.683433][ T8167] batman_adv: batadv0: Adding interface: batadv_slave_1
[  261.688501][ T8167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  261.698158][ T8167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  261.767055][ T8167] hsr_slave_0: entered promiscuous mode
[  261.770136][ T8167] hsr_slave_1: entered promiscuous mode
[  261.772563][ T8167] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  261.776290][ T8167] Cannot create hsr debugfs directory
[  261.782501][ T8170] hsr_slave_0: entered promiscuous mode
[  261.786126][ T8170] hsr_slave_1: entered promiscuous mode
[  261.788483][ T8170] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  261.791653][ T8170] Cannot create hsr debugfs directory
[  262.335318][ T8173] Bluetooth: hci9: command tx timeout
[  262.415487][ T8173] Bluetooth: hci4: command 0x0406 tx timeout
[  262.418261][ T8107] Bluetooth: hci3: command 0x0406 tx timeout
[  262.420886][ T8107] Bluetooth: hci5: command 0x0406 tx timeout
[  262.495180][   T55] Bluetooth: hci10: command tx timeout
[  262.575267][   T55] Bluetooth: hci11: command tx timeout
[  264.415237][   T55] Bluetooth: hci9: command tx timeout
[  264.575369][   T55] Bluetooth: hci10: command tx timeout
[  264.655432][   T55] Bluetooth: hci11: command tx timeout
[  266.495678][   T55] Bluetooth: hci9: command tx timeout
[  266.655340][   T55] Bluetooth: hci10: command tx timeout
[  266.735386][   T55] Bluetooth: hci11: command tx timeout
[  268.575954][   T55] Bluetooth: hci9: command tx timeout
[  268.735642][   T55] Bluetooth: hci10: command tx timeout
[  268.815309][   T55] Bluetooth: hci11: command tx timeout
[  273.785455][   T34] INFO: task syz.0.571:8075 blocked for more than 143 seconds.
[  273.788236][   T34]       Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  273.792554][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  273.801024][   T34] task:syz.0.571       state:D stack:24056 pid:8075  tgid:8074  ppid:5836   task_flags:0x480140 flags:0x00004004
[  273.805867][   T34] Call Trace:
[  273.807079][   T34]  <TASK>
[  273.808141][   T34]  __schedule+0x16f5/0x4d00
[  273.809867][   T34]  ? __lock_acquire+0xab9/0xd20
[  273.811863][   T34]  ? schedule+0x165/0x360
[  273.813362][   T34]  ? __lock_acquire+0xab9/0xd20
[  273.815566][   T34]  ? __pfx___schedule+0x10/0x10
[  273.817239][   T34]  ? schedule+0x91/0x360
[  273.818649][   T34]  schedule+0x165/0x360
[  273.820096][   T34]  blk_mq_freeze_queue_wait+0xf4/0x170
[  273.821937][   T34]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[  273.827350][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[  273.829553][   T34]  ? percpu_ref_kill_and_confirm+0xa3/0x130
[  273.831980][   T34]  queue_limits_commit_update_frozen+0x5e/0x360
[  273.834253][   T34]  ? nbd_set_size+0x2bb/0x6c0
[  273.853670][   T34]  nbd_set_size+0x494/0x6c0
[  273.858408][   T34]  ? __pfx_nbd_set_size+0x10/0x10
[  273.860151][   T34]  ? __mutex_trylock_common+0x153/0x260
[  273.861969][   T34]  ? __mutex_lock+0x330/0xe80
[  273.863544][   T34]  ? nla_memcpy+0x5b/0xc0
[  273.865090][   T34]  nbd_genl_size_set+0x2eb/0x3c0
[  273.866978][   T34]  ? __pfx_nbd_genl_size_set+0x10/0x10
[  273.869205][   T34]  ? __pfx_nbd_get_config_unlocked+0x10/0x10
[  273.871436][   T34]  ? bpf_lsm_capable+0x9/0x20
[  273.873033][   T34]  ? security_capable+0x7e/0x2e0
[  273.875079][   T34]  ? radix_tree_lookup+0x240/0x290
[  273.876761][   T34]  nbd_genl_reconfigure+0x409/0x1870
[  273.878498][   T34]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  273.880633][   T34]  ? __nla_parse+0x40/0x60
[  273.882552][   T34]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  273.884714][   T34]  genl_family_rcv_msg_doit+0x215/0x300
[  273.886635][   T34]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  273.888661][   T34]  genl_rcv_msg+0x60e/0x790
[  273.890194][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  273.891861][   T34]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  273.893742][   T34]  netlink_rcv_skb+0x208/0x470
[  273.895424][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  273.897117][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  273.898864][   T34]  ? down_read+0x1ad/0x2e0
[  273.900373][   T34]  genl_rcv+0x28/0x40
[  273.901699][   T34]  netlink_unicast+0x75c/0x8e0
[  273.903278][   T34]  netlink_sendmsg+0x805/0xb30
[  273.904835][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  273.906707][   T34]  ? __lock_acquire+0xab9/0xd20
[  273.908332][   T34]  ? aa_sock_msg_perm+0x94/0x160
[  273.910034][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  273.911784][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  273.913480][   T34]  __sock_sendmsg+0x21c/0x270
[  273.915120][   T34]  ____sys_sendmsg+0x505/0x830
[  273.916729][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  273.918472][   T34]  ? import_iovec+0x74/0xa0
[  273.920034][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  273.921605][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  273.923374][   T34]  ? __fget_files+0x2a/0x420
[  273.925627][   T34]  ? __fget_files+0x3a0/0x420
[  273.927660][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  273.929383][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  273.931471][   T34]  ? rcu_is_watching+0x15/0xb0
[  273.933075][   T34]  ? do_syscall_64+0xbe/0x3b0
[  273.934681][   T34]  do_syscall_64+0xfa/0x3b0
[  273.936314][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  273.938016][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.940091][   T34]  ? exc_page_fault+0x9f/0xf0
[  273.941598][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.943534][   T34] RIP: 0033:0x7fc4b098e929
[  273.945140][   T34] RSP: 002b:00007fc4b18a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  273.947897][   T34] RAX: ffffffffffffffda RBX: 00007fc4b0bb5fa0 RCX: 00007fc4b098e929
[  273.950463][   T34] RDX: 0000000000040804 RSI: 0000200000000400 RDI: 0000000000000005
[  273.953004][   T34] RBP: 00007fc4b0a10b39 R08: 0000000000000000 R09: 0000000000000000
[  273.955701][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  273.958326][   T34] R13: 0000000000000000 R14: 00007fc4b0bb5fa0 R15: 00007fff793785d8
[  273.961020][   T34]  </TASK>
[  273.962089][   T34] INFO: task syz.2.574:8084 blocked for more than 143 seconds.
[  273.964568][   T34]       Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0
[  273.967401][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  273.970328][   T34] task:syz.2.574       state:D stack:28232 pid:8084  tgid:8083  ppid:5839   task_flags:0x400040 flags:0x00004004
[  273.974191][   T34] Call Trace:
[  273.975420][   T34]  <TASK>
[  273.976427][   T34]  __schedule+0x16f5/0x4d00
[  273.977969][   T34]  ? __lock_acquire+0xab9/0xd20
[  273.979675][   T34]  ? __lock_acquire+0xab9/0xd20
[  273.981286][   T34]  ? schedule+0x165/0x360
[  273.982732][   T34]  ? __pfx___schedule+0x10/0x10
[  273.984358][   T34]  ? schedule+0x91/0x360
[  273.985871][   T34]  schedule+0x165/0x360
[  273.987275][   T34]  schedule_preempt_disabled+0x13/0x30
[  273.989114][   T34]  __mutex_lock+0x724/0xe80
[  273.990704][   T34]  ? unwind_get_return_address+0x4d/0x90
[  273.992644][   T34]  ? __mutex_lock+0x51b/0xe80
[  273.994240][   T34]  ? genl_rcv_msg+0x10d/0x790
[  273.995902][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  273.997559][   T34]  ? stack_trace_save+0x9c/0xe0
[  273.999137][   T34]  ? radix_tree_lookup+0x240/0x290
[  274.000857][   T34]  genl_rcv_msg+0x10d/0x790
[  274.002375][   T34]  ? __lock_acquire+0xab9/0xd20
[  274.003965][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  274.005738][   T34]  netlink_rcv_skb+0x208/0x470
[  274.007279][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  274.009057][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  274.010818][   T34]  ? down_read+0x1ad/0x2e0
[  274.012285][   T34]  genl_rcv+0x28/0x40
[  274.013628][   T34]  netlink_unicast+0x75c/0x8e0
[  274.015418][   T34]  netlink_sendmsg+0x805/0xb30
[  274.017076][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  274.018871][   T34]  ? aa_sock_msg_perm+0x94/0x160
[  274.020542][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  274.022294][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  274.024066][   T34]  __sock_sendmsg+0x21c/0x270
[  274.025760][   T34]  __sys_sendto+0x3bd/0x520
[  274.027301][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  274.028992][   T34]  ? count_memcg_event_mm+0x21/0x260
[  274.030760][   T34]  ? exc_page_fault+0x76/0xf0
[  274.032331][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  274.034102][   T34]  __x64_sys_sendto+0xde/0x100
[  274.035787][   T34]  do_syscall_64+0xfa/0x3b0
[  274.037299][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  274.039085][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.041269][   T34]  ? exc_page_fault+0x9f/0xf0
[  274.042858][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.044792][   T34] RIP: 0033:0x7f6cfa1907bc
[  274.046329][   T34] RSP: 002b:00007f6cfb099ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  274.049107][   T34] RAX: ffffffffffffffda RBX: 00007f6cfb099fc0 RCX: 00007f6cfa1907bc
[  274.051715][   T34] RDX: 0000000000000024 RSI: 00007f6cfb09a010 RDI: 0000000000000004
[  274.054475][   T34] RBP: 0000000000000000 R08: 00007f6cfb099f14 R09: 000000000000000c
[  274.057271][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004
[  274.060034][   T34] R13: 00007f6cfb099f68 R14: 00007f6cfb09a010 R15: 0000000000000000
[  274.062750][   T34]  </TASK>
[  274.063837][   T34] INFO: task syz.2.574:8087 blocked for more than 143 seconds.
[  274.066526][   T34]       Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0
[  274.069261][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  274.072071][   T34] task:syz.2.574       state:D stack:28312 pid:8087  tgid:8083  ppid:5839   task_flags:0x400040 flags:0x00004004
[  274.076139][   T34] Call Trace:
[  274.077267][   T34]  <TASK>
[  274.078264][   T34]  __schedule+0x16f5/0x4d00
[  274.079757][   T34]  ? __lock_acquire+0xab9/0xd20
[  274.081327][   T34]  ? __lock_acquire+0xab9/0xd20
[  274.082936][   T34]  ? schedule+0x165/0x360
[  274.084357][   T34]  ? __pfx___schedule+0x10/0x10
[  274.086102][   T34]  ? schedule+0x91/0x360
[  274.087576][   T34]  schedule+0x165/0x360
[  274.089070][   T34]  schedule_preempt_disabled+0x13/0x30
[  274.091161][   T34]  __mutex_lock+0x724/0xe80
[  274.092707][   T34]  ? unwind_get_return_address+0x4d/0x90
[  274.094476][   T34]  ? __mutex_lock+0x51b/0xe80
[  274.096157][   T34]  ? genl_rcv_msg+0x10d/0x790
[  274.097753][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  274.099452][   T34]  ? stack_trace_save+0x9c/0xe0
[  274.101093][   T34]  ? radix_tree_lookup+0x240/0x290
[  274.102794][   T34]  genl_rcv_msg+0x10d/0x790
[  274.104311][   T34]  ? __lock_acquire+0xab9/0xd20
[  274.106055][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  274.107762][   T34]  netlink_rcv_skb+0x208/0x470
[  274.109358][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  274.110997][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  274.112742][   T34]  ? down_read+0x1ad/0x2e0
[  274.114162][   T34]  genl_rcv+0x28/0x40
[  274.115555][   T34]  netlink_unicast+0x75c/0x8e0
[  274.117096][   T34]  netlink_sendmsg+0x805/0xb30
[  274.118621][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  274.120359][   T34]  ? aa_sock_msg_perm+0x94/0x160
[  274.121963][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  274.123681][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  274.125529][   T34]  __sock_sendmsg+0x21c/0x270
[  274.127100][   T34]  __sys_sendto+0x3bd/0x520
[  274.128749][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  274.130575][   T34]  ? fd_install+0x97/0x540
[  274.132135][   T34]  ? fd_install+0x30d/0x540
[  274.133717][   T34]  __x64_sys_sendto+0xde/0x100
[  274.135487][   T34]  do_syscall_64+0xfa/0x3b0
[  274.137317][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  274.139333][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.141604][   T34]  ? exc_page_fault+0x9f/0xf0
[  274.143118][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.145085][   T34] RIP: 0033:0x7f6cfa1907bc
[  274.146595][   T34] RSP: 002b:00007f6cfb057ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  274.149274][   T34] RAX: ffffffffffffffda RBX: 00007f6cfb057fc0 RCX: 00007f6cfa1907bc
[  274.151921][   T34] RDX: 0000000000000024 RSI: 00007f6cfb058010 RDI: 0000000000000008
[  274.154530][   T34] RBP: 0000000000000000 R08: 00007f6cfb057f14 R09: 000000000000000c
[  274.157243][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008
[  274.160026][   T34] R13: 00007f6cfb057f68 R14: 00007f6cfb058010 R15: 0000000000000000
[  274.162584][   T34]  </TASK>
[  274.163655][   T34] INFO: task syz.1.576:8096 blocked for more than 143 seconds.
[  274.166115][   T34]       Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0
[  274.168707][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  274.171442][   T34] task:syz.1.576       state:D stack:28072 pid:8096  tgid:8095  ppid:5830   task_flags:0x400140 flags:0x00004004
[  274.175261][   T34] Call Trace:
[  274.176373][   T34]  <TASK>
[  274.177311][   T34]  __schedule+0x16f5/0x4d00
[  274.178843][   T34]  ? __lock_acquire+0xab9/0xd20
[  274.180526][   T34]  ? __lock_acquire+0xab9/0xd20
[  274.182101][   T34]  ? schedule+0x165/0x360
[  274.183471][   T34]  ? __pfx___schedule+0x10/0x10
[  274.185122][   T34]  ? schedule+0x91/0x360
[  274.186461][   T34]  schedule+0x165/0x360
[  274.187823][   T34]  schedule_preempt_disabled+0x13/0x30
[  274.189603][   T34]  __mutex_lock+0x724/0xe80
[  274.191190][   T34]  ? unwind_get_return_address+0x4d/0x90
[  274.193159][   T34]  ? __mutex_lock+0x51b/0xe80
[  274.194706][   T34]  ? genl_rcv_msg+0x10d/0x790
[  274.196320][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  274.197959][   T34]  ? stack_trace_save+0x9c/0xe0
[  274.199501][   T34]  ? radix_tree_lookup+0x240/0x290
[  274.201188][   T34]  genl_rcv_msg+0x10d/0x790
[  274.202667][   T34]  ? __lock_acquire+0xab9/0xd20
[  274.204252][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  274.205989][   T34]  netlink_rcv_skb+0x208/0x470
[  274.207564][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  274.209216][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  274.210890][   T34]  ? down_read+0x1ad/0x2e0
[  274.212354][   T34]  genl_rcv+0x28/0x40
[  274.213656][   T34]  netlink_unicast+0x75c/0x8e0
[  274.215256][   T34]  netlink_sendmsg+0x805/0xb30
[  274.216771][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  274.218437][   T34]  ? aa_sock_msg_perm+0x94/0x160
[  274.220022][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  274.221702][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  274.223355][   T34]  __sock_sendmsg+0x21c/0x270
[  274.224839][   T34]  ____sys_sendmsg+0x505/0x830
[  274.226430][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  274.228164][   T34]  ? import_iovec+0x74/0xa0
[  274.229635][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  274.231145][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  274.232839][   T34]  ? __fget_files+0x2a/0x420
[  274.234333][   T34]  ? __fget_files+0x3a0/0x420
[  274.236002][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  274.237594][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  274.239308][   T34]  ? rcu_is_watching+0x15/0xb0
[  274.240846][   T34]  ? do_syscall_64+0xbe/0x3b0
[  274.242327][   T34]  do_syscall_64+0xfa/0x3b0
[  274.243803][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  274.245538][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.247454][   T34]  ? exc_page_fault+0x9f/0xf0
[  274.249004][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.250864][   T34] RIP: 0033:0x7f41e8b8e929
[  274.252279][   T34] RSP: 002b:00007f41e9914038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  274.255113][   T34] RAX: ffffffffffffffda RBX: 00007f41e8db5fa0 RCX: 00007f41e8b8e929
[  274.257595][   T34] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  274.260082][   T34] RBP: 00007f41e8c10b39 R08: 0000000000000000 R09: 0000000000000000
[  274.262553][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  274.265093][   T34] R13: 0000000000000000 R14: 00007f41e8db5fa0 R15: 00007ffcf0467a28
[  274.267575][   T34]  </TASK>
[  274.268620][   T34] 
[  274.268620][   T34] Showing all locks held in the system:
[  274.271048][   T34] 1 lock held by khungtaskd/34:
[  274.272605][   T34]  #0: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  274.277268][   T34] 2 locks held by getty/5661:
[  274.278754][   T34]  #0: ffff8880240220a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  274.281782][   T34]  #1: ffffc9000292b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  274.284983][   T34] 1 lock held by udevd/7949:
[  274.286441][   T34]  #0: ffff888022ca8358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  274.289731][   T34] 6 locks held by syz.0.571/8075:
[  274.291313][   T34]  #0: ffffffff8f583b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  274.293959][   T34]  #1: ffffffff8f583988 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  274.296903][   T34]  #2: ffff888022beca30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x36f/0x1870
[  274.300378][   T34]  #3: ffff888022a35f08 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x2a2/0x6c0
[  274.303462][   T34]  #4: ffff888022a358b0 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5e/0x360
[  274.307581][   T34]  #5: ffff888022a358e8 (&q->q_usage_counter(queue)){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5e/0x360
[  274.311870][   T34] 2 locks held by syz.2.574/8084:
[  274.313710][   T34]  #0: ffffffff8f583b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  274.317003][   T34]  #1: ffffffff8f583988 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  274.320189][   T34] 2 locks held by syz.2.574/8087:
[  274.322190][   T34]  #0: ffffffff8f583b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  274.325239][   T34]  #1: ffffffff8f583988 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  274.328112][   T34] 2 locks held by syz.1.576/8096:
[  274.329727][   T34]  #0: ffffffff8f583b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  274.332343][   T34]  #1: ffffffff8f583988 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  274.335372][   T34] 2 locks held by syz-executor/8103:
[  274.337059][   T34]  #0: ffffffff8f583b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  274.339664][   T34]  #1: ffffffff8f583988 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  274.342457][   T34] 2 locks held by syz-executor/8105:
[  274.344162][   T34]  #0: ffffffff8f583b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  274.346859][   T34]  #1: ffffffff8f583988 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  274.349674][   T34] 2 locks held by syz-executor/8109:
[  274.351376][   T34]  #0: ffffffff8f583b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  274.353932][   T34]  #1: ffffffff8f583988 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  274.360413][   T34] 2 locks held by syz-executor/8132:
[  274.362624][   T34]  #0: ffffffff8f583b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  274.366435][   T34]  #1: ffffffff8f583988 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  274.369365][   T34] 2 locks held by syz-executor/8134:
[  274.371073][   T34]  #0: ffffffff8f583b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  274.373576][   T34]  #1: ffffffff8f583988 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  274.378436][   T34] 2 locks held by syz-executor/8136:
[  274.380145][   T34]  #0: ffffffff8f583b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  274.382746][   T34]  #1: ffffffff8f583988 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  274.385671][   T34] 2 locks held by syz-executor/8164:
[  274.387370][   T34]  #0: ffffffff8f583b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  274.389958][   T34]  #1: ffffffff8f583988 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  274.392836][   T34] 2 locks held by syz-executor/8167:
[  274.394499][   T34]  #0: ffffffff8f583b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  274.397281][   T34]  #1: ffffffff8f583988 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  274.400165][   T34] 2 locks held by syz-executor/8170:
[  274.401860][   T34]  #0: ffffffff8f583b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  274.404444][   T34]  #1: ffffffff8f583988 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  274.407401][   T34] 
[  274.408211][   T34] =============================================
[  274.408211][   T34] 
[  274.410831][   T34] NMI backtrace for cpu 0
[  274.410838][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  274.410847][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  274.410851][   T34] Call Trace:
[  274.410855][   T34]  <TASK>
[  274.410858][   T34]  dump_stack_lvl+0x189/0x250
[  274.410869][   T34]  ? __wake_up_klogd+0xd9/0x110
[  274.410880][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  274.410888][   T34]  ? __pfx__printk+0x10/0x10
[  274.410902][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  274.410914][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  274.410922][   T34]  ? _printk+0xcf/0x120
[  274.410932][   T34]  ? __pfx__printk+0x10/0x10
[  274.410941][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  274.410949][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  274.410960][   T34]  watchdog+0xfee/0x1030
[  274.410967][   T34]  ? watchdog+0x1de/0x1030
[  274.410976][   T34]  kthread+0x711/0x8a0
[  274.410987][   T34]  ? __pfx_watchdog+0x10/0x10
[  274.410993][   T34]  ? __pfx_kthread+0x10/0x10
[  274.411004][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  274.411014][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  274.411023][   T34]  ? __pfx_kthread+0x10/0x10
[  274.411033][   T34]  ret_from_fork+0x3fc/0x770
[  274.411042][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  274.411051][   T34]  ? __switch_to_asm+0x39/0x70
[  274.411059][   T34]  ? __switch_to_asm+0x33/0x70
[  274.411068][   T34]  ? __pfx_kthread+0x10/0x10
[  274.411077][   T34]  ret_from_fork_asm+0x1a/0x30
[  274.411091][   T34]  </TASK>
[  274.411094][   T34] Sending NMI from CPU 0 to CPUs 1:
[  274.462231][    C1] NMI backtrace for cpu 1
[  274.462243][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  274.462252][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  274.462256][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  274.462270][    C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 93 fd 18 00 f3 0f 1e fa fb f4 <e9> c8 dd 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  274.462275][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000286
[  274.462282][    C1] RAX: fc9777bcf0d48900 RBX: ffffffff81976c78 RCX: fc9777bcf0d48900
[  274.462287][    C1] RDX: 0000000000000001 RSI: ffffffff8d998b82 RDI: ffffffff8be29dc0
[  274.462291][    C1] RBP: ffffc90000177f20 R08: ffff888136632f5b R09: 1ffff11026cc65eb
[  274.462295][    C1] R10: dffffc0000000000 R11: ffffed1026cc65ec R12: ffffffff8fa1f3f0
[  274.462300][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1102001e000
[  274.462304][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  274.462309][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  274.462313][    C1] CR2: 0000557821add400 CR3: 000000000df38000 CR4: 00000000000006f0
[  274.462341][    C1] Call Trace:
[  274.462346][    C1]  <TASK>
[  274.462349][    C1]  default_idle+0x13/0x20
[  274.462357][    C1]  default_idle_call+0x74/0xb0
[  274.462364][    C1]  do_idle+0x1e8/0x510
[  274.462374][    C1]  ? __pfx_do_idle+0x10/0x10
[  274.462384][    C1]  cpu_startup_entry+0x44/0x60
[  274.462391][    C1]  start_secondary+0x101/0x110
[  274.462397][    C1]  common_startup_64+0x13e/0x147
[  274.462409][    C1]  </TASK>
[  274.463226][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  274.516692][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  274.520546][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  274.523643][   T34] Call Trace:
[  274.524698][   T34]  <TASK>
[  274.525640][   T34]  dump_stack_lvl+0x99/0x250
[  274.527094][   T34]  ? __asan_memcpy+0x40/0x70
[  274.528551][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  274.530152][   T34]  ? __pfx__printk+0x10/0x10
[  274.531602][   T34]  panic+0x2db/0x790
[  274.532825][   T34]  ? __pfx_panic+0x10/0x10
[  274.534206][   T34]  ? nmi_backtrace_stall_check+0x433/0x440
[  274.536027][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  274.537700][   T34]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  274.539615][   T34]  watchdog+0x102d/0x1030
[  274.541109][   T34]  ? watchdog+0x1de/0x1030
[  274.542596][   T34]  kthread+0x711/0x8a0
[  274.543925][   T34]  ? __pfx_watchdog+0x10/0x10
[  274.545417][   T34]  ? __pfx_kthread+0x10/0x10
[  274.547050][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  274.548758][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  274.550429][   T34]  ? __pfx_kthread+0x10/0x10
[  274.551940][   T34]  ret_from_fork+0x3fc/0x770
[  274.553436][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  274.555122][   T34]  ? __switch_to_asm+0x39/0x70
[  274.556699][   T34]  ? __switch_to_asm+0x33/0x70
[  274.558258][   T34]  ? __pfx_kthread+0x10/0x10
[  274.559789][   T34]  ret_from_fork_asm+0x1a/0x30
[  274.561326][   T34]  </TASK>
[  274.563051][   T34] Kernel Offset: disabled
[  274.564443][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:23:50  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000007a RBX=000000000000007a RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6d0
R8 =ffff8880216d8237 R9 =1ffff110042db046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98b7 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff50449837a CR3=000000010f3a4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007ff506785d00
XMM02=058abff800000065 effa080000000000 XMM03=0000000806060101 da5ffffffffe0800
XMM04=0000000000000000 0000000000000016 XMM05=0000000000000000 000000000001df8a
XMM06=0301080001800404 0c73840000000067 XMM07=6374706d00000000 ffffffffffed0801
XMM08=8003200800061000 2010000600000066 XMM09=5f5f2e6769726f5f 74696e695f636e5f
XMM10=3130613966666666 666666660a79656b XMM11=636e5f7664617461 6220622030633463
XMM12=66666666660a7965 6b5f5f2e74656e5f XMM13=766f206220303866 6331306139666666
XMM14=79656b5f5f2e7465 6e5f74696e695f73 XMM15=3130613966666666 666666660a31342e
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffff88813663b1c0 RCX=ffff88801b3db980 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90003077700 RSP=ffffc900030775a0
R8 =ffffffff8fa1f3f7 R9 =1ffffffff1f43e7e R10=dffffc0000000000 R11=fffffbfff1f43e7f
R12=1ffff11009608385 R13=dffffc0000000000 R14=0000000000000000 R15=ffff88804b041c28
RIP=ffffffff81b4c1fe RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff5072e7d60 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007ff5067856a3 00007ff5067856a3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 000000000001df8a
XMM06=0301080001800404 0c73840000000067 XMM07=6374706d00000000 ffffffffffed0801
XMM08=8003200800061000 2010000600000066 XMM09=5f5f2e6769726f5f 74696e695f636e5f
XMM10=3130613966666666 666666660a79656b XMM11=636e5f7664617461 6220622030633463
XMM12=66666666660a7965 6b5f5f2e74656e5f XMM13=766f206220303866 6331306139666666
XMM14=79656b5f5f2e7465 6e5f74696e695f73 XMM15=3130613966666666 666666660a31342e
