last executing test programs:

16.479386425s ago: executing program 1 (id=2430):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1a00000003000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="107444a6d54fed2792fec5c1cc75cb8e5437862bdfe87379e2f181b59dfbe568990b750ec1f21c7f2175683f94f0e7e986a6d8b210438e224a635308e5c880879e92d3ea2c0ae65302017d579b61a7a45a37a84dbe59ed5141d3fc8cfdc4fac7d4ab068eda8102641ff64f9e4da35234deb227613b6c70ee6c92743691799f88e44918c7783324200cbb19e1f3085c7e6a47e633d9ad9688e9c3aac0", @ANYRES64=0x0], 0x20)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0xcb7, @any, 0x0, 0x2}, 0xe)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
connect$bt_rfcomm(r2, &(0x7f000000d400)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xad}, 0xfffffffffffffe3f)
socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', <r4=>0x0})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r8=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c4029328d1ae8dcf427ea3bdd2c6d6db291235a438486448a475784f30e314d9c1d9a9b2673a54efa758b7e9e245af7f2d112685a8a47305343ccf557c8d8019ba8190357d400f5e7eaa3484d2c5df15fbe", @ANYRES16=r6, @ANYBLOB="4d7e00000000000000002a00000008000200", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x4, 0x700000000000000}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0xba01}, 0x810)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000000c0)={0x1, 0xc, 0x89, &(0x7f0000000380)=""/137})
r9 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r9, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24)
sendmmsg(r9, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0)
sendmmsg(r9, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001000000ec00000000000000d5cecc3958e33b778d0407ccfdc628be37dcb40a633fdc30e73d9789917949572cce605812cd2e4025b09db2e37c0cf2d00d2972f783e4265a37f27a8a75afb6e30a3c28c5ef68a6a76e93aa6d7d51e9f32d6946d4"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0)
close(r9)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000060000000000000000000000180900002020702500000000002020207b1af8ff00000000bda004000000000027000000f8ffffffb702000008000000b7030000000004002500f8ff0600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x28}, 0x94)
socket$inet(0x2, 0x2, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000100)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
socket$inet6(0xa, 0x5, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x4)
writev(r10, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1)

16.4749736s ago: executing program 0 (id=2431):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r3, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x0, @link='syz0\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x4080c)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x311}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044)

16.40140217s ago: executing program 1 (id=2433):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f0000000780)=[@in6={0xa, 0x4e21, 0xf430, @ipv4={'\x00', '\xff\xff', @remote}, 0x3a}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x18, &(0x7f0000000080)={r1}, 0x8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, {0x3, 0xe}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x50)
socket$l2tp6(0xa, 0x2, 0x73)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x5, 0x3, "c4"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0xb4}}, 0x0)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_to_batadv\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYRESOCT=0x0, @ANYRES32], 0xb4}}, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073119c00000000008510000002000000850000000200000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)

16.279646208s ago: executing program 0 (id=2434):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x64a62000)
r0 = socket(0x11, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x1, 0x6, @multicast}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000001fc0)={0x10, 0x27, 0x3e3ef502011b72f7, 0x70bd2c, 0x25dfdbfe}, 0x10}, {0x0}], 0x2, 0x0, 0x0, 0x20000001}, 0x20040051)
syz_emit_ethernet(0x5e, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @broadcast, @val={@val={0x88a8, 0x0, 0x1}, {0x8100, 0x4, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4081, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x100, 0x0, 0xbb, {[@mptcp=@mp_fclose={0x1e, 0xc, 0x7f8, 0x0, 0x9}]}}}}}}}}, 0x0)

16.278659063s ago: executing program 1 (id=2435):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400000000001b2347ea000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c0002"], 0x5c}}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
close(r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7, 0x9, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x10000}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

16.218923779s ago: executing program 1 (id=2436):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r2, 0x1, 0x70bd29, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x2}]}, 0x24}}, 0x0)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x14, r3, 0x301, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x800)
recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000000)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000100)={'veth0_to_bridge\x00', {0x2, 0x4e22, @private=0xa010101}})
r7 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r7, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000150003"], 0xf0}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r9], 0x4c}}, 0x0)

16.218011712s ago: executing program 0 (id=2437):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], 0x0, 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r0, 0x0, 0x1000000}, 0x38)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xe498}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffc}], [{}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x80009, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="048000000000000008001b00f97539866190e184dc8016000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20008000)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="da17"], 0x198}}, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r6, &(0x7f0000002a00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="30000000000000008400000001000000000000af7a00020000000000000000000400"/44, @ANYRES32=0x0, @ANYBLOB="18000000000000008400000005"], 0x48}], 0x1, 0x40)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x73)
r8 = accept4(r7, 0x0, 0x0, 0x80000)
write(r8, &(0x7f0000000040)="cb", 0xfffffdef)
setsockopt$sock_int(r8, 0x1, 0x49, &(0x7f00000009c0)=0xfefffffb, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
socket(0x10, 0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'bond0\x00'})

16.108561581s ago: executing program 0 (id=2440):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080065584803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r2=>r0})
syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'pim6reg0\x00', 0x200})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000400016803c0001800c000500f9ffffff"], 0x68}, 0x1, 0x0, 0x0, 0x44004}, 0x0)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r2)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000e00)={0x34, r6, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xfffffffd}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xb}]}]}, 0x34}}, 0x4000000)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYRES8=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r4, 0x300, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

16.107342355s ago: executing program 2 (id=2441):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async)
syz_emit_ethernet(0x86, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x18, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@lsrr={0x83, 0x23, 0x24, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x39}, @rand_addr=0x64010101, @broadcast, @local, @remote]}, @generic={0x86, 0x5, "f5ef52"}, @cipso={0x86, 0x22, 0x0, [{0x2, 0x11, "47cb4ea5f8a755d234675363f661b7"}, {0x6, 0xb, "85614ecb15806b5b73"}]}]}}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x3, 0x3}}}}}}, 0x0) (async)
syz_emit_ethernet(0x86, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x0, "eea2ce15f073cfc7b867a8f1eae374992b05d96de4fee8723648ec884824c0fa", "dad132180b5c87e3c4ce5aace7bd878f", {"bfb382e7c4f35588608b6b77d4179781", "5c1eec4feb340aa2a2dfcc3569d1153d"}}}}}}}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', <r3=>0x0})
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0xc, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840)

16.030473889s ago: executing program 0 (id=2442):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10440}}}}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0)
r7 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01"], 0x3c}}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3f9}, [], {0x14, 0x3ec}}, 0x28}}, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x68, 0x10, 0xffffff1f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @local}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c014}, 0x4000080)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r11}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0)

15.980213706s ago: executing program 2 (id=2443):
unshare(0x2a020400)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffffd}, 0x94)
r1 = socket$inet6(0xa, 0x3, 0x38)
setsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4)
connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e27, 0x41200003, @remote, 0xb}, 0x1c)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0xa, 0x7f, 0x8, 0x7, 0x3, 0xb, 0x2, 0x2, 0x8, 0x52, 0x6c, 0xc, 0x10, 0x6}, 0xe)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00'}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x3}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x44}}, 0x8000)
socket$rds(0x15, 0x5, 0x0)

15.910340244s ago: executing program 2 (id=2444):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@delpolicy={0x68, 0x14, 0x1, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0x0, 0x7}}, [@sec_ctx={0xc, 0x8, {0x8}}, @mark={0xc}]}, 0x68}}, 0x4004040)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@delpolicy={0x68, 0x14, 0x1, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0x0, 0x7}}, [@sec_ctx={0xc, 0x8, {0x8}}, @mark={0xc}]}, 0x68}}, 0x4004040) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) (async)

15.851289133s ago: executing program 2 (id=2445):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r2, 0x114, 0x3, 0x0, &(0x7f00000000c0)) (async)
r3 = socket$inet(0x2, 0x3, 0x2)
bind(r3, &(0x7f0000000140)=@caif=@rfm={0x25, 0x200, "9055ceccc0e630c20758790decaa8bcc"}, 0x80) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100), &(0x7f00000001c0)=0x4) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) (async)
r4 = socket(0x10, 0x803, 0x0) (async)
r5 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x7}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x9, 0x2, 0x5}, {0x4, 0x0, 0x1}}}]}]}]}}]}, 0x64}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x4c, 0x2d, 0x100, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x4, 0xffe2}, {0xfff3, 0xc}, {0xe, 0x12}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x2}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xfff1, 0xffe0}}]}}, @TCA_CHAIN={0x8, 0xb, 0x800}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040844) (async)
syz_genetlink_get_family_id$fou(&(0x7f0000000080), r1)

15.848768448s ago: executing program 2 (id=2446):
r0 = socket$inet(0xa, 0x801, 0x84)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000540)=@req={0x28, &(0x7f0000000480)={'veth0_to_bridge\x00', @ifru_addrs=@can}})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x1004, 0x9}, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r5, &(0x7f0000000900)}, 0x20)
close(0x3)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
r7 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_group_source_req(r8, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast2, 0xc}}, {{0xa, 0x0, 0x800, @empty, 0x3}}}, 0x108)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r10, 0x84, 0x74, 0x0, &(0x7f0000000180)=0x18)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket(0x1, 0x803, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x44, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r13}]}, 0x44}}, 0x0)
r14 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r14, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
getsockname$packet(r14, &(0x7f0000000180)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r15], 0x5c}}, 0x40)

15.845462128s ago: executing program 0 (id=2447):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 64)
sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async, rerun: 64)
sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="96ad807c", 0x4}], 0x1}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000002a40), 0xffffffffffffffff) (rerun: 32)
sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000002bc0)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002ac0)={0xb0, r6, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '{)}'}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20004004) (async, rerun: 64)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB="08001f0005000000050011000100"], 0x70}}, 0x0) (rerun: 64)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0)

15.679732716s ago: executing program 2 (id=2448):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x38, r1, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x859e7fecd5473045}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x40810)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = getpid()
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="780000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad88000000003c0012800b00010067656e65766500002c00028005000a000000000005000a000100000005000a000000000008000b400000000008000100010000000a000200000000000000000008001300", @ANYRES32=r4, @ANYBLOB="08000400e1"], 0x78}}, 0x0)

15.24177822s ago: executing program 1 (id=2449):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/454], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) (async)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x82, &(0x7f00000001c0), 0x8)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f0000002880)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x7}, 0x0) (async)
syz_emit_ethernet(0xfffffc69, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa2402544aadcccaba772be1cd1e6d43aa0308060000003c0000000003019078ac1e0001ac1e010144140a01ac1414f1cd8f7e620bb29b68cf5e1bf8bc5d0000000000e0000002000000000d00907800"/103], 0x0) (async)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x24, &(0x7f0000005480)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000000206010300000000000000000000000005000100070000000900020073797a31"], 0x34}, 0x1, 0x0, 0x0, 0x4000091}, 0x24004940) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001880)=@bpf_tracing={0x1a, 0x3, &(0x7f0000001800)=ANY=[@ANYBLOB="180000001000000000000000060000008de2217fe4ad4e091fda17eae289977b9c9a67ef30d9d7938d851f723fe3c553b64fea6bd6dc84cdd435d11a6700"/71], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x38, &(0x7f0000000040)=""/56, 0x41000, 0x1, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x4, 0x6, 0xfffffc01, 0x7}, 0x10, 0x19b68, r1, 0x0, &(0x7f00000017c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002d00), 0x10, 0x7}, 0x94) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r6, &(0x7f0000000240)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1e) (async)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="312000000000000014c1d0df60000100", @ANYRES32=r4, @ANYBLOB="080003000300000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x7, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="37d92ffcb92554620ac47b7e09918d211b54c0db44330d2d0dc500c456e457182fe5f1e564ff9e775b3a12daa61fe365b7068433a33012cbaf5e0de58c54f63fccf28bbce8bd51b9535164ffede7446f301d9900be35198d291bb1c076a50e0580cd3929e774a65e1bb316a2b98eae0676324c887a2f5b94dd5222271a60a312a7c6a581adae683a0c62eebb2505919f36bf6556482fc94f9048f03f7ffffba33740861a543c131a2c54c01f261434d0e6858869cbb748cdcf6ce05eefd6cb5972eee4980debc506638e6303ef1a32cc281b74be25c800dd6ae66790e87280b4391923"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async)
r7 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) (async)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000300)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39, 0x1, [0x1]}}) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket$kcm(0xf, 0x0, 0x2) (async)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0x9, 0x4, 0x7, 0x4ae, 0x1, 0xf, 0x4, 0x6, 0xff, 0x7f, 0x7fffffffffffffff, 0xffffffffffff8001, 0x5}})
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x20000000, 0x0, 0x800, 0x1, 0x1, 0x2, 0x1}}) (async, rerun: 32)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000061000000180012800e00010069703667726574617000000000000000060001"], 0x44}}, 0x0)

15.239303659s ago: executing program 1 (id=2450):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x900, &(0x7f0000002f40)={&(0x7f00000003c0)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x800}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0)
listen(r0, 0x2)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x400b0}, 0x4080)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x32, &(0x7f00000000c0)={@multicast, @random="7e85562d389c", @val={@val={0x88a8, 0x4, 0x0, 0x1}, {0x8100, 0x0, 0x1, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @dev={0xac, 0x14, 0x14, 0x2c}}, @info_reply={0xd, 0x0, 0x0, 0xfffe}}}}}, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
r6 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6)
getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r7, 0x50483}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1f}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000)
sendmmsg$inet(r5, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8fbad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0x48}}, 0x8000)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000", @ANYRES16=r10, @ANYBLOB="13080000000000000000110000003c00098008000100000000fa070001"], 0x84}}, 0x0)
ioctl$sock_ifreq(r4, 0x8995, &(0x7f0000000100)={'wlan0\x00', @ifru_settings={0x100, 0x8000, @fr_pvc_info=&(0x7f0000000000)={0x9, 'batadv_slave_1\x00'}}})

50.376125ms ago: executing program 32 (id=2447):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 64)
sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async, rerun: 64)
sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="96ad807c", 0x4}], 0x1}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000002a40), 0xffffffffffffffff) (rerun: 32)
sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000002bc0)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002ac0)={0xb0, r6, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '{)}'}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20004004) (async, rerun: 64)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB="08001f0005000000050011000100"], 0x70}}, 0x0) (rerun: 64)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0)

119.899µs ago: executing program 33 (id=2450):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x900, &(0x7f0000002f40)={&(0x7f00000003c0)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x800}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0)
listen(r0, 0x2)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x400b0}, 0x4080)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x32, &(0x7f00000000c0)={@multicast, @random="7e85562d389c", @val={@val={0x88a8, 0x4, 0x0, 0x1}, {0x8100, 0x0, 0x1, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @dev={0xac, 0x14, 0x14, 0x2c}}, @info_reply={0xd, 0x0, 0x0, 0xfffe}}}}}, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
r6 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6)
getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r7, 0x50483}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1f}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000)
sendmmsg$inet(r5, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8fbad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0x48}}, 0x8000)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000", @ANYRES16=r10, @ANYBLOB="13080000000000000000110000003c00098008000100000000fa070001"], 0x84}}, 0x0)
ioctl$sock_ifreq(r4, 0x8995, &(0x7f0000000100)={'wlan0\x00', @ifru_settings={0x100, 0x8000, @fr_pvc_info=&(0x7f0000000000)={0x9, 'batadv_slave_1\x00'}}})

0s ago: executing program 34 (id=2448):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x38, r1, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x859e7fecd5473045}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x40810)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = getpid()
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="780000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad88000000003c0012800b00010067656e65766500002c00028005000a000000000005000a000100000005000a000000000008000b400000000008000100010000000a000200000000000000000008001300", @ANYRES32=r4, @ANYBLOB="08000400e1"], 0x78}}, 0x0)

kernel console output (not intermixed with test programs):

4] RAX: ffffffffffffffda RBX: 00007fda589b6180 RCX: 00007fda5878ebe9
[  182.652431][T11854] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  182.652436][T11854] RBP: 00007fda58811e19 R08: 0000000000000000 R09: 0000000000000000
[  182.652441][T11854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  182.652445][T11854] R13: 00007fda589b6218 R14: 00007fda589b6180 R15: 00007ffe19f740e8
[  182.652459][T11854]  </TASK>
[  182.863465][T11857] netlink: 'syz.0.1507': attribute type 8 has an invalid length.
[  182.918687][T11862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1508'.
[  182.931731][T11862] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  182.981252][T11859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1509'.
[  183.061742][T11866] netlink: 'syz.2.1510': attribute type 13 has an invalid length.
[  183.115722][T11866] tipc: Resetting bearer <eth:team0>
[  183.138792][T11866] tipc: Resetting bearer <eth:syzkaller0>
[  183.245934][T11759] lo speed is unknown, defaulting to 1000
[  183.246086][ T5909] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  183.248216][T11759] syz0: Port: 1 Link DOWN
[  183.252821][ T5909] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  183.261334][T11759] lo speed is unknown, defaulting to 1000
[  183.261363][ T5909] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  183.272821][ T5909] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  183.419489][T11883] lo speed is unknown, defaulting to 1000
[  183.603084][T11883] lo speed is unknown, defaulting to 1000
[  184.181273][T11911] ip6gre3: entered allmulticast mode
[  184.478747][T11922] netlink: 'syz.2.1524': attribute type 39 has an invalid length.
[  184.530079][T11928] openvswitch: netlink: nsh attr 2560 is out of range max 3
[  184.533135][T11928] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  184.539912][T11928] netlink: 'syz.0.1525': attribute type 1 has an invalid length.
[  184.874098][T11950] netlink: 'syz.0.1530': attribute type 16 has an invalid length.
[  184.877802][T11950] netlink: 'syz.0.1530': attribute type 17 has an invalid length.
[  184.922987][T11950] 8021q: adding VLAN 0 to HW filter on device team0
[  184.935483][T11950] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  184.948650][   T24] lo speed is unknown, defaulting to 1000
[  184.950866][   T24] syz1: Port: 1 Link ACTIVE
[  185.567933][T11968] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  185.571039][T11968] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  185.573432][T11968] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  185.647208][ T5312] lo speed is unknown, defaulting to 1000
[  185.649567][ T5312] syz1: Port: 1 Link DOWN
[  185.967711][T11974] tun1: tun_chr_ioctl cmd 1074025675
[  185.969526][T11974] tun1: persist enabled
[  185.971244][T11974] tun1: tun_chr_ioctl cmd 1074025675
[  185.973210][T11974] tun1: persist disabled
[  185.981372][T11974] vlan2: entered allmulticast mode
[  186.244290][T11984] veth13: entered promiscuous mode
[  186.248258][T11984] netlink: 'syz.2.1540': attribute type 11 has an invalid length.
[  186.299251][T11981] netlink: 'syz.2.1540': attribute type 11 has an invalid length.
[  186.366363][   T61] block nbd0: Possible stuck request ffff888022090000: control (read@0,1024B). Runtime 90 seconds
[  186.369866][   T61] block nbd0: Possible stuck request ffff888022090200: control (read@1024,1024B). Runtime 90 seconds
[  186.373394][   T61] block nbd0: Possible stuck request ffff888022090400: control (read@2048,1024B). Runtime 90 seconds
[  186.377687][   T61] block nbd0: Possible stuck request ffff888022090600: control (read@3072,1024B). Runtime 90 seconds
[  186.758536][T12011] veth17: entered allmulticast mode
[  186.855271][T12021] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  186.959504][T12027] lo speed is unknown, defaulting to 1000
[  187.147341][T12027] lo speed is unknown, defaulting to 1000
[  187.269164][T12031] delete_channel: no stack
[  187.311997][T12048] vlan1: entered allmulticast mode
[  187.533334][T12062] validate_nla: 2 callbacks suppressed
[  187.533350][T12062] netlink: 'syz.0.1559': attribute type 4 has an invalid length.
[  187.565241][T12070] netlink: 'syz.1.1562': attribute type 1 has an invalid length.
[  187.614359][T12070] 8021q: adding VLAN 0 to HW filter on device bond30
[  187.619048][T12070] bond29: (slave bond30): making interface the new active one
[  187.622386][T12070] bond29: (slave bond30): Enslaving as an active interface with an up link
[  187.626832][T12073] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  187.654645][T12073] bond24: entered promiscuous mode
[  187.657697][T12073] bond24: entered allmulticast mode
[  187.660229][T12073] 8021q: adding VLAN 0 to HW filter on device bond24
[  187.663896][T12077] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  187.673528][T12070] __nla_validate_parse: 24 callbacks suppressed
[  187.673542][T12070] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1562'.
[  187.686822][T12070] 8021q: adding VLAN 0 to HW filter on device bond29
[  187.733775][T12081] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1566'.
[  187.810067][T12082] lo speed is unknown, defaulting to 1000
[  187.823924][T12091] sch_fq: defrate 0 ignored.
[  187.951328][T12091] bond31: entered promiscuous mode
[  187.953466][T12091] bond31: entered allmulticast mode
[  187.957198][T12101] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1565'.
[  187.965428][T12091] 8021q: adding VLAN 0 to HW filter on device bond31
[  187.968387][T12101] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1565'.
[  188.052196][T12104] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  188.159028][T12101] lo speed is unknown, defaulting to 1000
[  188.159059][T12082] lo speed is unknown, defaulting to 1000
[  188.270048][T12112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1571'.
[  188.410833][T12107] netlink: 'syz.2.1569': attribute type 13 has an invalid length.
[  188.411936][T12105] lo speed is unknown, defaulting to 1000
[  188.417901][T12107] netlink: 'syz.2.1569': attribute type 17 has an invalid length.
[  188.418193][T12101] lo speed is unknown, defaulting to 1000
[  188.478145][T12107] erspan0: left allmulticast mode
[  188.500115][T12117] netlink: 'syz.1.1573': attribute type 1 has an invalid length.
[  188.525826][T12107] tipc: Resetting bearer <eth:team0>
[  188.536394][T12107] tipc: Resetting bearer <eth:team0>
[  188.542034][T12107] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  188.559858][T12105] lo speed is unknown, defaulting to 1000
[  188.559898][   T24] lo speed is unknown, defaulting to 1000
[  188.564477][   T24] syz0: Port: 1 Link ACTIVE
[  188.581962][T12118] bond32 (unregistering): Released all slaves
[  188.605702][   T24] lo speed is unknown, defaulting to 1000
[  189.193255][T12127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1575'.
[  189.359405][T12135] netlink: 'syz.1.1578': attribute type 1 has an invalid length.
[  189.366900][T12133] netlink: 'syz.0.1577': attribute type 1 has an invalid length.
[  189.449030][T12135] bond32: entered promiscuous mode
[  189.451129][T12135] bond32: entered allmulticast mode
[  189.453549][T12135] 8021q: adding VLAN 0 to HW filter on device bond32
[  189.457784][T12140] bond25: entered promiscuous mode
[  189.459733][T12140] bond25: entered allmulticast mode
[  189.462988][T12140] 8021q: adding VLAN 0 to HW filter on device bond25
[  189.470567][T12133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1577'.
[  189.503169][T12135] 8021q: adding VLAN 0 to HW filter on device bond33
[  189.508011][T12135] bond33: entered promiscuous mode
[  189.510155][T12135] bond33: entered allmulticast mode
[  189.512471][T12135] bond32: (slave bond33): Enslaving as a backup interface with a down link
[  189.549538][T12137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1579'.
[  189.640740][T12149] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  189.670796][T12149] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1580'.
[  189.686819][T12149] netlink: 'syz.1.1580': attribute type 10 has an invalid length.
[  189.689464][T12149] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  189.718292][T12151] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1581'.
[  189.761620][T12158] syzkaller0: mtu greater than device maximum
[  189.807892][T12160] netlink: 'syz.2.1584': attribute type 12 has an invalid length.
[  189.856244][T12162] bond16: (slave veth11): Releasing backup interface
[  189.860957][T12162] bond17: (slave batadv2): Releasing active interface
[  189.869459][T12162] bond19: (slave bond20): Releasing backup interface
[  189.871943][T12162] bond19: (slave bond20): the permanent HWaddr of slave - 22:54:a2:07:f5:7a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  189.879906][T12162] bond19: (slave gretap2): making interface the new active one
[  189.884273][T12162] bond19: (slave gretap2): Releasing backup interface
[  189.898388][T12162] team0: Mode changed to "broadcast"
[  189.902236][T12163] tipc: Enabled bearer <eth:team0>, priority 0
[  189.907195][T12162] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  190.081325][T12179] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  190.238062][T12187] netlink: 'syz.2.1592': attribute type 39 has an invalid length.
[  190.335758][T12195] gretap0: refused to change device tx_queue_len
[  190.338124][T12195] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  190.347041][T12195] gretap0: refused to change device tx_queue_len
[  190.349946][T12195] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  190.367233][T12195] gretap0: refused to change device tx_queue_len
[  190.372419][T12195] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  190.392496][T12195] gretap0: refused to change device tx_queue_len
[  190.400328][T12195] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  190.420108][T12195] gretap0: refused to change device tx_queue_len
[  190.426264][T12195] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  190.447064][T12195] gretap0: refused to change device tx_queue_len
[  190.452391][T12195] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  190.470717][T12195] gretap0: refused to change device tx_queue_len
[  190.474489][T12195] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  190.518948][T12195] gretap0: refused to change device tx_queue_len
[  190.527031][T12195] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  190.550449][T12195] gretap0: refused to change device tx_queue_len
[  190.560563][T12195] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  190.618334][T12195] gretap0: refused to change device tx_queue_len
[  190.631034][T12195] gretap0: refused to change device tx_queue_len
[  190.668544][T12195] gretap0: refused to change device tx_queue_len
[  190.676465][T12195] gretap0: refused to change device tx_queue_len
[  190.696810][T12195] gretap0: refused to change device tx_queue_len
[  190.700699][T12195] gretap0: refused to change device tx_queue_len
[  190.711296][T12195] gretap0: refused to change device tx_queue_len
[  190.760790][T12195] gretap0: refused to change device tx_queue_len
[  190.789947][T12195] gretap0: refused to change device tx_queue_len
[  190.795680][T12195] gretap0: refused to change device tx_queue_len
[  190.813741][T12195] gretap0: refused to change device tx_queue_len
[  190.830452][T12195] gretap0: refused to change device tx_queue_len
[  190.844850][T12195] gretap0: refused to change device tx_queue_len
[  190.859503][T12195] gretap0: refused to change device tx_queue_len
[  190.890772][T12195] gretap0: refused to change device tx_queue_len
[  190.896949][T12195] gretap0: refused to change device tx_queue_len
[  190.903240][T12195] gretap0: refused to change device tx_queue_len
[  190.910186][T12195] gretap0: refused to change device tx_queue_len
[  190.917208][T12195] gretap0: refused to change device tx_queue_len
[  190.961739][T12195] gretap0: refused to change device tx_queue_len
[  190.981541][T12195] gretap0: refused to change device tx_queue_len
[  190.990840][T12195] gretap0: refused to change device tx_queue_len
[  191.001069][T12195] gretap0: refused to change device tx_queue_len
[  191.010692][T12195] gretap0: refused to change device tx_queue_len
[  191.022892][T12195] gretap0: refused to change device tx_queue_len
[  191.037164][T12195] gretap0: refused to change device tx_queue_len
[  191.044061][T12195] gretap0: refused to change device tx_queue_len
[  191.050726][T12195] gretap0: refused to change device tx_queue_len
[  191.057135][T12195] gretap0: refused to change device tx_queue_len
[  191.062350][T12195] gretap0: refused to change device tx_queue_len
[  191.070146][T12195] gretap0: refused to change device tx_queue_len
[  191.075818][T12195] gretap0: refused to change device tx_queue_len
[  191.085694][T12195] gretap0: refused to change device tx_queue_len
[  191.092738][T12195] gretap0: refused to change device tx_queue_len
[  191.719133][T12275] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  192.070090][T12299] lo speed is unknown, defaulting to 1000
[  192.084278][T12304] team0: Device gtp1 is up. Set it down before adding it as a team port
[  192.348028][T12299] lo speed is unknown, defaulting to 1000
[  192.676190][T12335] validate_nla: 90 callbacks suppressed
[  192.676203][T12335] netlink: 'syz.2.1625': attribute type 13 has an invalid length.
[  192.680936][T12335] netlink: 'syz.2.1625': attribute type 17 has an invalid length.
[  192.804550][T12335] tipc: Resetting bearer <eth:team0>
[  192.833282][T12343] __nla_validate_parse: 56 callbacks suppressed
[  192.833295][T12343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1627'.
[  192.846056][T12343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1627'.
[  192.944607][T12352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1629'.
[  192.960076][T12354] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1631'.
[  192.992482][T12356] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  193.005652][T12356] netlink: 'syz.2.1632': attribute type 4 has an invalid length.
[  193.012009][   T24] lo speed is unknown, defaulting to 1000
[  193.013864][   T24] syz0: Port: 1 Link DOWN
[  193.020645][   T24] lo speed is unknown, defaulting to 1000
[  193.069328][T12364] vlan2: entered promiscuous mode
[  193.070974][T12364] bond0: entered promiscuous mode
[  193.072878][T12364] vlan2: entered allmulticast mode
[  193.075061][T12364] bond0: entered allmulticast mode
[  193.220078][T12374] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1638'.
[  193.223592][T12374] 1: renamed from 70
[  193.227329][T12374] 1: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  193.232613][T12374] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1638'.
[  193.236822][T12374] 0: renamed from 71 (while UP)
[  193.241297][T12374] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1638'.
[  193.244914][T12374] 1: renamed from 70 (while UP)
[  193.249117][T12374] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1638'.
[  193.252678][T12374] 0: renamed from 71 (while UP)
[  193.258108][T12374] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1638'.
[  193.261681][T12374] 1: renamed from 70 (while UP)
[  193.266228][T12374] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1638'.
[  193.269915][T12374] 0: renamed from 71 (while UP)
[  193.274558][T12374] 1: renamed from 70 (while UP)
[  193.279640][T12374] 0: renamed from 71 (while UP)
[  193.284335][T12374] 1: renamed from 70 (while UP)
[  193.288163][T12374] 0: renamed from 71 (while UP)
[  193.291487][T12374] 1: renamed from 70 (while UP)
[  193.299146][T12374] 0: renamed from 71 (while UP)
[  193.303847][T12374] 1: renamed from 70 (while UP)
[  193.309134][T12374] 0: renamed from 71 (while UP)
[  193.313507][T12374] 1: renamed from 70 (while UP)
[  193.318689][T12374] 0: renamed from 71 (while UP)
[  193.323056][T12374] 1: renamed from 70 (while UP)
[  193.327790][T12374] 0: renamed from 71 (while UP)
[  193.332170][T12374] 1: renamed from 70 (while UP)
[  193.337452][T12374] 0: renamed from 71 (while UP)
[  193.341118][T12374] 1: renamed from 70 (while UP)
[  193.344343][T12374] 0: renamed from 71 (while UP)
[  193.348669][T12374] 1: renamed from 70 (while UP)
[  193.353278][T12374] 0: renamed from 71 (while UP)
[  193.358323][T12374] 1: renamed from 70 (while UP)
[  193.362890][T12374] 0: renamed from 71 (while UP)
[  193.370216][T12374] 1: renamed from 70 (while UP)
[  193.374448][T12374] 0: renamed from 71 (while UP)
[  193.378848][T12374] 1: renamed from 70 (while UP)
[  193.383004][T12374] 0: renamed from 71 (while UP)
[  193.387582][T12374] 1: renamed from 70 (while UP)
[  193.392711][T12374] 0: renamed from 71 (while UP)
[  193.397380][T12374] 1: renamed from 70 (while UP)
[  194.079478][T12403] tipc: Resetting bearer <eth:syzkaller0>
[  194.161796][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.166059][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.259626][T12415] netlink: 'syz.0.1648': attribute type 1 has an invalid length.
[  194.283156][T12415] 8021q: adding VLAN 0 to HW filter on device bond26
[  194.422141][T12430] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  194.425237][T12430] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  194.428069][T12430] tipc: Resetting bearer <eth:syzkaller0>
[  194.438424][T12430] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  194.441167][T12430] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  194.443847][T12430] tipc: Resetting bearer <eth:syzkaller0>
[  194.536314][T12438] pim6reg1: entered promiscuous mode
[  194.538693][T12438] pim6reg1: entered allmulticast mode
[  194.550290][T12439] 0{X: left promiscuous mode
[  194.557390][T12439] veth0_to_team: left promiscuous mode
[  194.560641][T12439] veth0_to_team: left allmulticast mode
[  194.572948][T12439] tipc: Resetting bearer <eth:syzkaller0>
[  194.586380][T12439] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  194.589096][T12439] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  194.604288][T12439] bond23: left promiscuous mode
[  194.607019][T12439] veth17: left allmulticast mode
[  194.609243][T12439] veth19: left promiscuous mode
[  194.613761][T12439] veth25: left promiscuous mode
[  194.636126][T12439] bond31: left promiscuous mode
[  194.637985][T12439] bond31: left allmulticast mode
[  194.647533][T12439] bond32: left promiscuous mode
[  194.649636][T12439] bond33: left promiscuous mode
[  194.651512][T12439] bond32: left allmulticast mode
[  194.653710][T12439] bond33: left allmulticast mode
[  194.709878][T12437] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-xor(2)
[  194.781874][T12451] netlink: 'syz.0.1656': attribute type 13 has an invalid length.
[  195.009836][T12475] lo speed is unknown, defaulting to 1000
[  195.012346][T12475] netlink: 'syz.0.1663': attribute type 10 has an invalid length.
[  195.109953][T12487] pim6reg1: entered promiscuous mode
[  195.111842][T12487] pim6reg1: entered allmulticast mode
[  195.148762][T12490] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  195.422108][T12528] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  195.432062][T12528] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  195.438924][T12528] workqueue: Failed to create a rescuer kthread for wq "bond34": -EINTR
[  195.516966][T12543] syzkaller0: left promiscuous mode
[  195.525609][T12543] syzkaller0: left allmulticast mode
[  195.537987][T12539] bridge0: port 1(erspan0) entered blocking state
[  195.540974][T12539] bridge0: port 1(erspan0) entered disabled state
[  195.674604][T12551] netlink: 'syz.1.1681': attribute type 4 has an invalid length.
[  195.683726][T12551] netlink: 'syz.1.1681': attribute type 4 has an invalid length.
[  195.925416][T12562] team0: Mode changed to "activebackup"
[  196.336608][T12587] netlink: 'syz.1.1690': attribute type 1 has an invalid length.
[  196.356243][T12584] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  196.469562][T12592] netlink: 'syz.0.1693': attribute type 1 has an invalid length.
[  196.498480][T12592] 8021q: adding VLAN 0 to HW filter on device bond27
[  196.538185][T12592] 8021q: adding VLAN 0 to HW filter on device bond27
[  196.540674][T12592] bond27: (slave vxcan1): The slave device specified does not support setting the MAC address
[  196.546793][T12592] bond27: (slave vxcan1): Error -95 calling set_mac_address
[  196.582251][T12595] 8021q: adding VLAN 0 to HW filter on device bond34
[  196.591352][ T3600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.594266][ T3600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.623097][T12595] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  196.625720][T12595] IPv6: NLM_F_CREATE should be set when creating new route
[  196.848745][T12609] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  196.931596][T12614] 8021q: adding VLAN 0 to HW filter on device team0
[  196.943979][T12614] net_ratelimit: 72 callbacks suppressed
[  196.943987][T12614] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  196.953500][  T793] lo speed is unknown, defaulting to 1000
[  196.955632][  T793] syz1: Port: 1 Link ACTIVE
[  197.151247][T12626] bridge0: Device is already in use.
[  197.408695][T12652] bond35: (slave bridge16): making interface the new active one
[  197.411683][T12652] bond35: (slave bridge16): Enslaving as an active interface with an up link
[  197.430779][T12650] geneve4: entered promiscuous mode
[  197.432788][T12650] geneve4: entered allmulticast mode
[  197.436243][ T5909] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 57686 - 0
[  197.439245][ T5909] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 57127 - 0
[  197.442527][ T9350] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 57686 - 0
[  197.447609][ T9350] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 57127 - 0
[  197.451652][ T9350] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 57686 - 0
[  197.455206][ T9350] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 57127 - 0
[  197.460619][ T9350] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 57686 - 0
[  197.463137][ T9350] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 57127 - 0
[  197.931891][T12688] 8021q: adding VLAN 0 to HW filter on device bond36
[  198.049904][T12688] bond36 (unregistering): Released all slaves
[  198.147707][T12692] __nla_validate_parse: 69 callbacks suppressed
[  198.147723][T12692] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1723'.
[  198.209381][T12700] validate_nla: 8 callbacks suppressed
[  198.209402][T12700] netlink: 'syz.1.1725': attribute type 1 has an invalid length.
[  198.241810][T12700] 8021q: adding VLAN 0 to HW filter on device bond35
[  198.252451][T12702] lo speed is unknown, defaulting to 1000
[  198.363451][T12710] bond0: entered promiscuous mode
[  198.374894][T12710] bond0: entered allmulticast mode
[  198.376850][T12710] 8021q: adding VLAN 0 to HW filter on device bond0
[  198.385861][T12702] lo speed is unknown, defaulting to 1000
[  198.395638][T12710] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1728'.
[  198.458715][T12716] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1730'.
[  198.469130][T12717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1729'.
[  198.508041][T12719] netlink: 'syz.1.1731': attribute type 1 has an invalid length.
[  198.570248][T12719] 8021q: adding VLAN 0 to HW filter on device bond36
[  198.604304][T12720] bond36: (slave ip6gretap4): making interface the new active one
[  198.609622][T12720] bond36: (slave ip6gretap4): Enslaving as an active interface with an up link
[  198.652836][T12719] veth29: entered promiscuous mode
[  198.662325][T12719] bond36: (slave veth29): Enslaving as an active interface with a down link
[  198.666634][T12720] erspan0: entered allmulticast mode
[  198.803873][T12739] tipc: Resetting bearer <eth:syzkaller0>
[  198.833213][T12746] netlink: 'syz.1.1737': attribute type 10 has an invalid length.
[  198.921586][T12752] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1741'.
[  198.948475][T12752] macvlan1: entered promiscuous mode
[  198.951579][T12752] ipvlan0: entered promiscuous mode
[  198.963217][T12752] ipvlan0: left promiscuous mode
[  198.967810][T12752] macvlan1: left promiscuous mode
[  198.984066][T12758] bridge22: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  199.036655][T12764] netlink: 'syz.1.1744': attribute type 4 has an invalid length.
[  199.041511][T12764] netlink: 'syz.1.1744': attribute type 4 has an invalid length.
[  199.069119][T12758] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1743'.
[  199.189244][T12778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1748'.
[  199.207309][T12777] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  199.209919][T12777] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  199.216214][T12777] netlink: 'syz.0.1747': attribute type 10 has an invalid length.
[  199.222889][T12780] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1749'.
[  199.280118][T12786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1752'.
[  199.296180][T12786] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  199.391196][T12795] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1755'.
[  199.529370][T12816] netlink: 'syz.2.1758': attribute type 10 has an invalid length.
[  199.532033][T12816] tipc: Resetting bearer <eth:team0>
[  199.575963][T12820] tipc: Resetting bearer <eth:syzkaller0>
[  199.613212][T12824] netlink: 'syz.2.1761': attribute type 21 has an invalid length.
[  199.630104][T12824] veth15: entered promiscuous mode
[  199.657969][T12826] veth1_to_bond: entered allmulticast mode
[  199.669331][T12824] erspan0: entered allmulticast mode
[  199.769260][T12827] veth1_to_bond (unregistering): left allmulticast mode
[  199.960764][T12840] netlink: 'syz.2.1765': attribute type 10 has an invalid length.
[  199.972662][T12840] team0: Port device dummy0 added
[  200.129016][T12850] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  200.144339][T12851] team0: Port device dummy0 removed
[  200.153068][T12851] bond32: (slave bridge10): Removing an active aggregator
[  200.158105][T12851] bond32: (slave bridge10): Releasing backup interface
[  200.161722][T12851] bridge10: left promiscuous mode
[  200.163983][T12851] bridge10: left allmulticast mode
[  200.173543][T12851] bond33: (slave veth9): Releasing active interface
[  200.182584][T12851] bond35: (slave bridge16): Releasing active interface
[  200.204845][T12854] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  200.357388][T12860] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  200.415923][T12862] lo speed is unknown, defaulting to 1000
[  200.613319][T12865] lo speed is unknown, defaulting to 1000
[  200.616819][T12862] lo speed is unknown, defaulting to 1000
[  200.866484][T12878] vlan3: entered promiscuous mode
[  200.888276][T12876] lo speed is unknown, defaulting to 1000
[  200.934172][T12881] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  200.939526][T12881] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  200.943465][T12881] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  200.947377][T12881] tipc: Resetting bearer <eth:syzkaller0>
[  200.954527][T12881] tipc: Resetting bearer <eth:syzkaller0>
[  201.037000][T12876] lo speed is unknown, defaulting to 1000
[  201.040736][T12865] lo speed is unknown, defaulting to 1000
[  201.041003][T12884] lo speed is unknown, defaulting to 1000
[  201.341014][T12884] lo speed is unknown, defaulting to 1000
[  201.470918][   T24] IPVS: starting estimator thread 0...
[  201.557660][T12897] IPVS: using max 61 ests per chain, 146400 per kthread
[  201.988056][   T12] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 20000 - 0
[  201.999525][   T12] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 20000 - 0
[  202.047089][   T12] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 20000 - 0
[  202.053750][   T12] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 20000 - 0
[  202.631790][T12935] netlink: 'syz.1.1789': attribute type 1 has an invalid length.
[  202.837939][T12951] tipc: Resetting bearer <eth:team0>
[  202.863510][T12951] mac80211_hwsim hwsim12 wlan0: left allmulticast mode
[  202.887064][T12951] veth11: left promiscuous mode
[  202.890187][T12951] bond17: left promiscuous mode
[  202.894278][T12951] batadv2: left promiscuous mode
[  202.901459][T12951] batadv2: left allmulticast mode
[  202.907674][T12951] bond22: left promiscuous mode
[  202.913132][T12951] tipc: Resetting bearer <eth:syzkaller0>
[  202.918940][T12951] ip6gre3: left allmulticast mode
[  202.920885][T12951] veth17: left allmulticast mode
[  202.922668][T12951] bond24: left promiscuous mode
[  202.924273][T12951] bond24: left allmulticast mode
[  202.926163][T12951] bond25: left promiscuous mode
[  202.927820][T12951] bond25: left allmulticast mode
[  202.931613][T12951] geneve4: left promiscuous mode
[  202.933458][T12951] geneve4: left allmulticast mode
[  202.940659][    T9] lo speed is unknown, defaulting to 1000
[  202.940710][ T9350] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 57686 - 0
[  202.943059][    T9] syz1: Port: 1 Link DOWN
[  202.946038][ T9350] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 57127 - 0
[  202.950303][ T9350] netdevsim netdevsim0 eth0: unset [1, 2] type 2 family 0 port 20000 - 0
[  202.953072][ T9350] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 57686 - 0
[  202.974447][ T9350] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 57127 - 0
[  202.977399][ T9350] netdevsim netdevsim0 eth1: unset [1, 2] type 2 family 0 port 20000 - 0
[  202.980181][ T9350] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 57686 - 0
[  202.983693][ T9350] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 57127 - 0
[  202.990624][ T9350] netdevsim netdevsim0 eth2: unset [1, 2] type 2 family 0 port 20000 - 0
[  202.993632][ T9350] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 57686 - 0
[  203.000060][ T9350] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 57127 - 0
[  203.003312][ T9350] netdevsim netdevsim0 eth3: unset [1, 2] type 2 family 0 port 20000 - 0
[  203.074320][T12957] syzkaller1: entered promiscuous mode
[  203.084683][T12957] syzkaller1: entered allmulticast mode
[  203.506543][T12959] __nla_validate_parse: 15 callbacks suppressed
[  203.506558][T12959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1798'.
[  203.543238][T12960] netlink: 'syz.2.1798': attribute type 1 has an invalid length.
[  203.556968][T12960] workqueue: Failed to create a rescuer kthread for wq "bond36": -EINTR
[  203.607824][T12969] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1800'.
[  203.698498][T12979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1801'.
[  203.990128][T12987] erspan0: left allmulticast mode
[  204.007374][T12987] veth1_to_bond: left allmulticast mode
[  204.010251][T12987] batadv_slave_0: left promiscuous mode
[  204.012922][T12987] 1: left allmulticast mode
[  204.014909][T12987] hsr_slave_0: left allmulticast mode
[  204.018774][T12987] ip6gre1: left allmulticast mode
[  204.021118][T12987] tipc: Resetting bearer <eth:syzkaller0>
[  204.029515][T12987] bond9: left allmulticast mode
[  204.031768][T12987] bond10: left allmulticast mode
[  204.035253][T12987] vxcan3: left allmulticast mode
[  204.037332][T12987] vlan4: left promiscuous mode
[  204.038931][T12987] bond20: left promiscuous mode
[  204.040600][T12987] vlan4: left allmulticast mode
[  204.042322][T12987] bond20: left allmulticast mode
[  204.044340][T12987] macvtap0: left promiscuous mode
[  204.048264][T12987] macvtap0: left allmulticast mode
[  204.050885][T12987] macsec0: left allmulticast mode
[  204.053121][T12987] sit2: left promiscuous mode
[  204.055455][T12987] gretap3: left promiscuous mode
[  204.057034][T12987] gretap3: left allmulticast mode
[  204.059173][T12987] bond27: left promiscuous mode
[  204.061496][T12987] bond30: left promiscuous mode
[  204.063704][T12987] bond31: left promiscuous mode
[  204.068001][T12987] bond31: left allmulticast mode
[  204.070079][T12987] bond32: left promiscuous mode
[  204.071835][T12987] bond32: left allmulticast mode
[  204.074358][T12987] veth9: left promiscuous mode
[  204.080681][T12987] veth13: left promiscuous mode
[  204.090887][T12987] vlan2: left promiscuous mode
[  204.092553][T12987] bond0: left promiscuous mode
[  204.094233][T12987] vlan2: left allmulticast mode
[  204.096366][T12987] bond0: left allmulticast mode
[  204.442848][T12991] netlink: 'syz.0.1805': attribute type 12 has an invalid length.
[  204.538773][T12997] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1806'.
[  204.647639][T13009] pim6reg1: entered promiscuous mode
[  204.649385][T13009] pim6reg1: entered allmulticast mode
[  204.736623][T13011] netlink: 'syz.0.1811': attribute type 33 has an invalid length.
[  204.739625][T13011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1811'.
[  204.751423][T13011] bridge23: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  204.802716][T13015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1812'.
[  204.890148][T13021] netlink: 'syz.1.1814': attribute type 1 has an invalid length.
[  204.898558][T13019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1811'.
[  204.913078][T13019] netlink: 428 bytes leftover after parsing attributes in process `syz.0.1811'.
[  204.918600][T13019] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1811'.
[  205.097627][T13034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1818'.
[  205.129452][T13031] netlink: 'syz.0.1817': attribute type 5 has an invalid length.
[  205.138821][T13031] geneve6: entered promiscuous mode
[  205.140517][T13031] geneve6: entered allmulticast mode
[  205.143709][ T5875] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  205.147389][ T5875] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  205.150107][ T5875] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  205.152994][ T5875] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  205.372397][T13049] netlink: 'syz.1.1821': attribute type 1 has an invalid length.
[  205.500736][T13064] ip6gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue
[  205.570549][T13072] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  205.612061][T13077] netlink: 'syz.1.1830': attribute type 58 has an invalid length.
[  205.673126][T13080] netlink: 'syz.0.1831': attribute type 16 has an invalid length.
[  205.679595][T13080] netlink: 'syz.0.1831': attribute type 17 has an invalid length.
[  205.717066][T13080] 8021q: adding VLAN 0 to HW filter on device team0
[  205.723269][T13080] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  205.730833][    T9] lo speed is unknown, defaulting to 1000
[  205.733111][    T9] syz1: Port: 1 Link ACTIVE
[  205.735288][T13073] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  205.738410][T13073] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  205.777082][T13084] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  205.829739][T13093] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  205.832997][T13093] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  205.835549][T13093] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  205.909037][T13095] 8021q: adding VLAN 0 to HW filter on device bond28
[  205.912109][T13095] bond0: (slave bond28): Enslaving as an active interface with a down link
[  205.951518][T13100] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  205.989804][T13103] netlink: 'syz.0.1838': attribute type 1 has an invalid length.
[  206.027339][T13103] 8021q: adding VLAN 0 to HW filter on device bond30
[  206.031098][T13103] bond29: (slave bond30): making interface the new active one
[  206.034383][T13103] bond29: (slave bond30): Enslaving as an active interface with an up link
[  206.043368][T13103] bond29: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  206.048101][T13103] bond29: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  206.348374][T13118] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  206.351306][T13118] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  206.354466][T13118] tipc: Resetting bearer <eth:syzkaller0>
[  206.391672][T13120] team0: Port device 0! added
[  206.663929][T13134] tipc: Resetting bearer <eth:team0>
[  206.669912][T13134] tipc: Resetting bearer <eth:syzkaller0>
[  206.697545][T11759] lo speed is unknown, defaulting to 1000
[  206.699879][ T5875] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  206.702981][T11759] syz1: Port: 1 Link DOWN
[  206.708714][T13141] pim6reg1: entered promiscuous mode
[  206.710611][T13141] pim6reg1: entered allmulticast mode
[  206.713505][ T5875] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  206.717475][ T5875] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  206.720740][ T5875] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  207.127127][T13175] delete_channel: no stack
[  207.169287][T13185] lo speed is unknown, defaulting to 1000
[  207.212423][T13190] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  207.247304][T13188] netem: change failed
[  207.259913][T13188] vlan0: entered allmulticast mode
[  207.262139][T13188] bridge0: entered allmulticast mode
[  207.264613][T13188] bridge20: port 1(vlan0) entered blocking state
[  207.270429][T13188] bridge20: port 1(vlan0) entered disabled state
[  207.273845][T13188] vlan0: entered promiscuous mode
[  207.275829][T13188] bridge0: entered promiscuous mode
[  207.316671][T13185] lo speed is unknown, defaulting to 1000
[  207.497523][T13202] pim6reg1: entered promiscuous mode
[  207.499221][T13202] pim6reg1: entered allmulticast mode
[  207.512175][T13203] pim6reg: entered allmulticast mode
[  207.551608][T13203] pim6reg: left allmulticast mode
[  208.318881][T13245] team0: Device gtp2 is of different type
[  208.438801][T13258] bridge21: entered promiscuous mode
[  208.441561][T13258] bridge21: entered allmulticast mode
[  208.586287][T13264] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  208.637724][T13279] __nla_validate_parse: 29 callbacks suppressed
[  208.637735][T13279] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1882'.
[  208.713915][T13286] sit4: entered promiscuous mode
[  208.729649][T13288] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1885'.
[  208.760044][T13297] sit0: entered promiscuous mode
[  208.761925][T13297] validate_nla: 7 callbacks suppressed
[  208.761938][T13297] netlink: 'syz.2.1886': attribute type 1 has an invalid length.
[  208.768571][T13297] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1886'.
[  208.840740][T13302] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  208.850347][T13304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1889'.
[  208.852057][T13302] vlan0: left promiscuous mode
[  208.853933][T13304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1889'.
[  208.860869][T13302] bridge0: left promiscuous mode
[  208.863122][T13302] bridge20: port 1(vlan0) entered disabled state
[  208.876060][T13304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1889'.
[  208.876100][T13299] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1887'.
[  208.879607][T13304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1889'.
[  208.908072][T13306] netlink: 'syz.2.1888': attribute type 10 has an invalid length.
[  208.911996][T13306] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  208.924351][T13299] lo speed is unknown, defaulting to 1000
[  208.958765][T13305] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1887'.
[  209.108575][T13299] lo speed is unknown, defaulting to 1000
[  209.183414][T13325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1894'.
[  209.260063][T13328] netlink: 'syz.2.1895': attribute type 2 has an invalid length.
[  209.458245][T13336] bridge30: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  209.593688][T13344] netlink: 'syz.2.1901': attribute type 12 has an invalid length.
[  209.639173][T13346] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  209.672209][T13348] netlink: 'syz.0.1903': attribute type 9 has an invalid length.
[  209.723203][T13352] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  209.754687][T13352] lo speed is unknown, defaulting to 1000
[  209.901123][T13352] lo speed is unknown, defaulting to 1000
[  210.092920][T13365] netlink: 'syz.0.1907': attribute type 1 has an invalid length.
[  210.441431][T13378] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  210.448290][T13379] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  210.452443][T13378] syzkaller0: entered promiscuous mode
[  210.456497][T13378] syzkaller0: entered allmulticast mode
[  210.472040][T13378] tipc: Resetting bearer <eth:syzkaller0>
[  210.573140][T13388] netlink: 'syz.2.1913': attribute type 10 has an invalid length.
[  210.690097][T13397] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  210.695897][T13395] netlink: 'syz.0.1916': attribute type 2 has an invalid length.
[  210.754315][T13405] netlink: 'syz.2.1918': attribute type 10 has an invalid length.
[  210.761071][T13407] netlink: 'syz.0.1919': attribute type 12 has an invalid length.
[  210.810050][T13410] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  210.854307][T13414] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  210.951391][T13421] tipc: Resetting bearer <eth:syzkaller0>
[  210.953949][T13421] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  210.956562][T13421] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  210.962044][T13421] geneve6: left promiscuous mode
[  210.963732][T13421] geneve6: left allmulticast mode
[  211.060873][T13438] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  211.064416][T13427] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  211.619355][T13476] bond33: entered promiscuous mode
[  211.621322][T13476] bond33: entered allmulticast mode
[  211.623303][T13476] 8021q: adding VLAN 0 to HW filter on device bond33
[  211.641839][T13476] 8021q: adding VLAN 0 to HW filter on device bond34
[  211.646334][T13476] bond34: entered promiscuous mode
[  211.648394][T13476] bond34: entered allmulticast mode
[  211.650732][T13476] bond33: (slave bond34): Enslaving as a backup interface with a down link
[  212.241149][T13489] lo speed is unknown, defaulting to 1000
[  212.309165][T13491] geneve4: entered allmulticast mode
[  212.311693][ T5676] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  212.314436][ T5676] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  212.319864][ T5676] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  212.322481][ T5676] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  212.367349][T13489] lo speed is unknown, defaulting to 1000
[  212.428815][T13497] workqueue: Failed to create a rescuer kthread for wq "bond35": -EINTR
[  212.532511][T13509] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  212.543010][T13509] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  212.546805][T13509] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  212.924519][T13529] veth33: entered promiscuous mode
[  212.977742][T13531] 8021q: adding VLAN 0 to HW filter on device bond35
[  212.988373][T13531] 8021q: adding VLAN 0 to HW filter on device bond35
[  212.990760][T13531] bond35: (slave vcan0): The slave device specified does not support setting the MAC address
[  212.995156][T13531] bond35: (slave vcan0): Error -95 calling set_mac_address
[  213.046716][T13531] gretap3: entered promiscuous mode
[  213.052262][T13531] bond35: (slave gretap3): making interface the new active one
[  213.069841][T13531] bond35: (slave gretap3): Enslaving as an active interface with an up link
[  213.132060][T13531] macvlan0: entered promiscuous mode
[  213.134167][T13531] macvlan0: entered allmulticast mode
[  213.142293][T13531] bond35: entered promiscuous mode
[  213.162330][T13531] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  213.179207][T13531] bond35: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap3
[  213.185738][T13531] bond35: left promiscuous mode
[  213.377764][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  213.381237][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  213.387613][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  213.390650][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  213.615300][T13566] tipc: Resetting bearer <eth:syzkaller0>
[  213.618153][T13566] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  213.620841][T13566] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  213.629063][T13566] bond33: left promiscuous mode
[  213.630966][T13566] bond34: left promiscuous mode
[  213.632978][T13566] bond33: left allmulticast mode
[  213.635171][T13566] bond34: left allmulticast mode
[  213.642683][T13566] gretap3: left promiscuous mode
[  213.683567][T13575] syzkaller1: entered promiscuous mode
[  213.685872][T13575] syzkaller1: entered allmulticast mode
[  213.727084][T13579] dvmrp0: left allmulticast mode
[  213.847189][T13582] __nla_validate_parse: 32 callbacks suppressed
[  213.847204][T13582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1966'.
[  213.889321][T13584] validate_nla: 4 callbacks suppressed
[  213.889333][T13584] netlink: 'syz.0.1968': attribute type 23 has an invalid length.
[  213.904347][T13584] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  213.913535][T13584] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  213.916160][T13584] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  213.925685][T13588] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1969'.
[  213.991085][T13595] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  213.994545][T13595] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  213.999289][T13595] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  214.002038][T13595] tipc: Resetting bearer <eth:syzkaller0>
[  214.005946][T13598] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  214.009113][T13597] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  214.022696][T13597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1970'.
[  214.070313][T13605] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1974'.
[  214.103378][T13603] dvmrp8: entered allmulticast mode
[  214.109365][T13609] syzkaller0: left promiscuous mode
[  214.111550][T13609] syzkaller0: left allmulticast mode
[  214.143581][T13613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1976'.
[  214.186382][T13615] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1977'.
[  214.288744][T13618] sctp: [Deprecated]: syz.2.1978 (pid 13618) Use of int in maxseg socket option.
[  214.288744][T13618] Use struct sctp_assoc_value instead
[  214.360045][T13626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1980'.
[  214.364163][T13626] chnl_net:caif_netlink_parms(): no params data found
[  214.392619][T13628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1981'.
[  214.396958][T13628] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1981'.
[  214.400725][T13628] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1981'.
[  214.421351][T13628] netlink: 'syz.0.1981': attribute type 1 has an invalid length.
[  214.480126][T13628] 8021q: adding VLAN 0 to HW filter on device bond36
[  214.577339][T13640] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  214.583868][T13640] tipc: Failed to remove unknown binding: 66,1,1/1790640376:473686915/473686917
[  214.593695][T13640] tipc: Failed to remove unknown binding: 66,1,1/1790640376:473686915/473686917
[  214.598426][T13640] tipc: Failed to remove unknown binding: 66,1,1/1790640376:473686915/473686917
[  214.690929][T13645] nbd: must specify at least one socket
[  214.893699][T13602] dvmrp8: left allmulticast mode
[  214.993412][T13654] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  215.053050][T13654] workqueue: Failed to create a rescuer kthread for wq "bond38": -EINTR
[  215.107020][T13660] netlink: 'syz.1.1991': attribute type 1 has an invalid length.
[  215.139283][T13660] bond38 (unregistering): Released all slaves
[  215.163246][T13663] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  215.337518][T13669] 8021q: adding VLAN 0 to HW filter on device bond37
[  215.343210][T13669] bond0: (slave bond37): Enslaving as an active interface with a down link
[  215.380393][T13672] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  215.544044][T13676] can: request_module (can-proto-4) failed.
[  215.600361][T13681] lo speed is unknown, defaulting to 1000
[  215.686589][T13684] tipc: Resetting bearer <eth:syzkaller0>
[  215.691953][T13684] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  215.695707][T13684] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  215.823839][T13681] lo speed is unknown, defaulting to 1000
[  215.918119][T13695] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  215.922097][T13695] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  215.925859][T13695] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  215.969055][T13682] netlink: 'syz.1.1997': attribute type 13 has an invalid length.
[  215.972185][T13682] netlink: 'syz.1.1997': attribute type 17 has an invalid length.
[  215.993470][T13682] erspan0: left allmulticast mode
[  216.043436][T13682] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  216.053003][T13692] syzkaller0: entered promiscuous mode
[  216.061166][T13692] syzkaller0: entered allmulticast mode
[  216.438515][   T61] block nbd0: Possible stuck request ffff888022090000: control (read@0,1024B). Runtime 120 seconds
[  216.442713][   T61] block nbd0: Possible stuck request ffff888022090200: control (read@1024,1024B). Runtime 120 seconds
[  216.447849][   T61] block nbd0: Possible stuck request ffff888022090400: control (read@2048,1024B). Runtime 120 seconds
[  216.452169][   T61] block nbd0: Possible stuck request ffff888022090600: control (read@3072,1024B). Runtime 120 seconds
[  216.472049][T13733] netlink: 'syz.1.2009': attribute type 1 has an invalid length.
[  216.672093][T13754] macvtap1: entered allmulticast mode
[  216.673891][T13754] mac80211_hwsim hwsim45 wlan0: entered allmulticast mode
[  216.682606][T13754] batman_adv: batadv0: Adding interface: macvtap1
[  216.684658][T13754] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem.
[  216.701135][T13754] batman_adv: batadv0: Interface activated: macvtap1
[  216.789706][T13765] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  216.864571][T13773] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  216.866925][T13773] IPv6: NLM_F_CREATE should be set when creating new route
[  217.149303][T13798] bridge25: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  217.188331][T13799] bridge26: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  217.312128][T13798] batadv_slave_0: entered promiscuous mode
[  217.374402][T13814] netlink: 'syz.0.2024': attribute type 1 has an invalid length.
[  217.399849][T13816] _Z`Ԁ@S: entered promiscuous mode
[  217.502048][T13822] vlan3: entered allmulticast mode
[  217.504178][T13822] bond37: entered allmulticast mode
[  217.542544][T13829] IPVS: length: 209 != 24
[  217.659893][T13836] netlink: 'syz.0.2033': attribute type 1 has an invalid length.
[  217.763723][T13845] openvswitch: netlink: Flow actions attr not present in new flow.
[  217.863348][T13856] batman_adv: batadv0: Interface deactivated: macvtap1
[  217.867767][T13856] batman_adv: batadv0: Removing interface: macvtap1
[  217.874682][T13856] netlink: 'syz.2.2039': attribute type 10 has an invalid length.
[  217.889786][T13856] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  217.997606][T13865] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  218.121812][T13876] 0{X: entered promiscuous mode
[  218.172664][T13881] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  218.314679][T13897] netlink: 'syz.1.2054': attribute type 11 has an invalid length.
[  218.472035][T13905] 8021q: adding VLAN 0 to HW filter on device team0
[  218.477904][T13905] tipc: Resetting bearer <eth:team0>
[  218.480280][T13905] tipc: Resetting bearer <eth:team0>
[  218.484268][T13905] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  218.491474][  T793] lo speed is unknown, defaulting to 1000
[  218.493362][  T793] syz1: Port: 1 Link ACTIVE
[  218.499234][T13914] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  218.551183][T13914] netlink: 'syz.2.2058': attribute type 10 has an invalid length.
[  218.561891][T13914] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  218.611827][T13924] netlink: 'syz.2.2061': attribute type 11 has an invalid length.
[  218.881233][T13948] __nla_validate_parse: 56 callbacks suppressed
[  218.881246][T13948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2069'.
[  218.971520][T13943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2068'.
[  219.062212][T13958] lo speed is unknown, defaulting to 1000
[  219.089611][T13943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2068'.
[  219.092398][T13943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2068'.
[  219.209516][T13958] lo speed is unknown, defaulting to 1000
[  219.833611][T13985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  219.971415][T13995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2077'.
[  219.980312][T13995] geneve6: entered promiscuous mode
[  219.982105][T13995] geneve6: entered allmulticast mode
[  219.986369][ T9350] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 48301 - 0
[  219.989166][ T9350] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 49125 - 0
[  219.992244][ T9350] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 48301 - 0
[  219.995384][ T9350] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 49125 - 0
[  219.999336][ T9350] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 48301 - 0
[  220.005277][ T9350] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 49125 - 0
[  220.007894][ T9350] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 48301 - 0
[  220.019192][ T9350] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 49125 - 0
[  220.022540][T14002] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2078'.
[  220.042383][T13997] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2078'.
[  220.122990][T14007] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2080'.
[  220.136718][T14007] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2080'.
[  220.211655][T14016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2080'.
[  220.217659][T14016] validate_nla: 4 callbacks suppressed
[  220.217674][T14016] netlink: 'syz.1.2080': attribute type 39 has an invalid length.
[  220.252673][T14018] netlink: 'syz.0.2083': attribute type 10 has an invalid length.
[  220.262546][T14018] team0: Port device hsr_slave_0 added
[  220.382106][T14033] lo speed is unknown, defaulting to 1000
[  220.513775][T14033] lo speed is unknown, defaulting to 1000
[  220.908303][T14063] netlink: 'syz.0.2093': attribute type 21 has an invalid length.
[  220.912833][T14063] netlink: 'syz.0.2093': attribute type 15 has an invalid length.
[  220.933763][T14063] netlink: 'syz.0.2093': attribute type 15 has an invalid length.
[  221.041973][T14071] bridge34: entered promiscuous mode
[  221.044054][T14071] bridge34: entered allmulticast mode
[  221.050298][T14071] team0: Port device bridge34 added
[  221.110888][T14077] netlink: 'syz.1.2098': attribute type 1 has an invalid length.
[  221.149967][T14084] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  221.158228][T14083] delete_channel: no stack
[  221.197289][T14078] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  221.200328][T14085] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  221.290983][T14091] bridge25: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  221.449405][T14104] netlink: 'syz.1.2104': attribute type 18 has an invalid length.
[  221.453057][T14104] netlink: 'syz.1.2104': attribute type 18 has an invalid length.
[  221.465911][T14113] netlink: 'syz.1.2104': attribute type 18 has an invalid length.
[  221.482508][T14113] netlink: 'syz.1.2104': attribute type 18 has an invalid length.
[  221.594597][T14115] 8021q: adding VLAN 0 to HW filter on device bond38
[  221.720331][T14136] wg1: entered promiscuous mode
[  221.843251][T14151] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  221.990934][T14165] 8021q: adding VLAN 0 to HW filter on device bond42
[  222.029248][T14170] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.184684][T14170] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.230126][T14170] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.289530][T14170] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.355780][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  222.366481][ T9350] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  222.380364][ T9350] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  222.401095][T14194] gretap0: entered promiscuous mode
[  222.405316][ T5676] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  222.408659][T14194] 0{X: renamed from gretap0
[  222.413632][T14194] 0{X: left promiscuous mode
[  222.416929][T14194] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  222.563640][T14200] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  223.072552][T14235] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  223.154131][T14240] bridge0: port 1(batadv0) entered blocking state
[  223.161840][T14240] bridge0: port 1(batadv0) entered disabled state
[  223.164427][T14240] batadv0: entered allmulticast mode
[  223.169667][T14240] batadv0: entered promiscuous mode
[  223.215796][T14247] team0: Port device 0! removed
[  223.219659][T14247] team0: Port device hsr_slave_0 removed
[  223.222754][T14247] bond0: (slave bond28): Releasing backup interface
[  223.225518][T14247] bond0: (slave bond28): the permanent HWaddr of slave - 32:f8:07:ad:3f:71 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  223.231817][T14247] bond29: (slave bond30): Releasing backup interface
[  223.237505][T14247] bond33: (slave bond34): Releasing backup interface
[  223.241599][T14247] bond35: (slave gretap3): Releasing active interface
[  223.247556][T14247] bond0: (slave bond37): Releasing backup interface
[  223.253393][T14247] team0: Port device bridge34 removed
[  223.261005][ T3600] tipc: Resetting bearer <eth:team0>
[  223.361032][T14254] openvswitch: netlink: Flow actions attr not present in new flow.
[  223.400214][T14256] openvswitch: netlink: Flow actions attr not present in new flow.
[  223.465545][T14265] IPVS: set_ctl: invalid protocol: 44 172.20.20.22:20002
[  223.654939][ T5676] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  223.658560][ T5676] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  223.857775][T14280] 8021q: adding VLAN 0 to HW filter on device bond38
[  224.002850][T14292] __nla_validate_parse: 58 callbacks suppressed
[  224.002862][T14292] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2157'.
[  224.093082][T14295] veth33: entered promiscuous mode
[  224.279147][T14302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2160'.
[  224.408738][T14311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2164'.
[  224.485335][T14311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2164'.
[  224.691176][T14324] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2168'.
[  224.723120][T14326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2169'.
[  224.820176][T14334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2170'.
[  224.823032][T14334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2170'.
[  224.971651][T14347] pim6reg1: entered promiscuous mode
[  224.973430][T14347] pim6reg1: entered allmulticast mode
[  225.018846][T14355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  225.031247][T14354] : entered promiscuous mode
[  225.034494][T14354] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  225.081658][T14347] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2173'.
[  225.085750][T14347] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  225.088861][T14347] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  225.110192][T14347] 8021q: adding VLAN 0 to HW filter on device bond39
[  225.114085][T14347] team0: Port device bond39 added
[  225.124376][ T9759] tipc: Resetting bearer <eth:team0>
[  225.190128][T14367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2179'.
[  225.250901][T14368] pim6reg: entered allmulticast mode
[  225.253836][T14368] pim6reg: left allmulticast mode
[  225.553510][T14371] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  225.667224][T14373] validate_nla: 10 callbacks suppressed
[  225.667236][T14373] netlink: 'syz.2.2181': attribute type 21 has an invalid length.
[  225.712628][T14377] netlink: 'syz.2.2182': attribute type 1 has an invalid length.
[  225.735995][T14377] 8021q: adding VLAN 0 to HW filter on device bond40
[  225.792125][T14377] bond40: (slave gretap4): making interface the new active one
[  225.796749][T14377] bond40: (slave gretap4): Enslaving as an active interface with an up link
[  225.832965][T14383] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.881580][T14383] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.030024][T14383] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.135194][T14383] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.190080][T14399] syzkaller1: entered promiscuous mode
[  226.192736][T14399] syzkaller1: entered allmulticast mode
[  226.229986][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  226.250514][ T5676] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  226.265593][ T5676] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  226.275621][ T5676] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  226.281697][T14402] lo speed is unknown, defaulting to 1000
[  226.396964][T14405] delete_channel: no stack
[  226.427624][T14402] lo speed is unknown, defaulting to 1000
[  226.574520][T14418] lo speed is unknown, defaulting to 1000
[  226.758692][T14418] lo speed is unknown, defaulting to 1000
[  226.784923][T14411] lo speed is unknown, defaulting to 1000
[  227.161436][T14411] lo speed is unknown, defaulting to 1000
[  227.236422][T14439] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  227.239956][T14439] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 48301 - 0
[  227.243891][T14439] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 49125 - 0
[  227.321053][T14439] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  227.328814][T14439] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 48301 - 0
[  227.332968][T14439] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 49125 - 0
[  227.350972][T14444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  227.401144][T14439] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  227.404211][T14439] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 48301 - 0
[  227.408031][T14439] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 49125 - 0
[  227.424431][T14446] netlink: 'syz.0.2195': attribute type 1 has an invalid length.
[  227.474652][T14446] 8021q: adding VLAN 0 to HW filter on device bond40
[  227.488667][T14439] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  227.491654][T14439] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 48301 - 0
[  227.494792][T14439] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 49125 - 0
[  227.539727][T14452] bond40: (slave gretap0): making interface the new active one
[  227.542964][T14452] bond40: (slave gretap0): Enslaving as an active interface with an up link
[  227.599108][ T5676] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  227.601920][ T5676] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 49125 - 0
[  227.604542][ T5676] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 48301 - 0
[  227.629167][ T5676] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  227.635531][ T5676] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 49125 - 0
[  227.638335][ T5676] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 48301 - 0
[  227.669055][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  227.675211][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 49125 - 0
[  227.682448][   T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 48301 - 0
[  227.687610][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  227.704970][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 49125 - 0
[  227.707640][   T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 48301 - 0
[  227.839554][T14484] netlink: 'syz.0.2204': attribute type 6 has an invalid length.
[  228.001652][T14489] syzkaller0: Caught tx_queue_len zero misconfig
[  228.011379][T14495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  228.053676][T14497] netlink: 'syz.1.2209': attribute type 21 has an invalid length.
[  228.057435][T14497] 0{X: Device is already in use.
[  228.072512][T14499] netlink: 'syz.2.2210': attribute type 1 has an invalid length.
[  228.103847][T14499] 8021q: adding VLAN 0 to HW filter on device bond41
[  228.128341][T14499] veth15: entered promiscuous mode
[  228.134597][T14499] bond41: (slave veth15): Enslaving as an active interface with a down link
[  228.148588][T14499] erspan0: entered allmulticast mode
[  228.202302][T14512] bond43: entered promiscuous mode
[  228.391486][T14522] 8021q: adding VLAN 0 to HW filter on device bond44
[  228.394017][T14522] bridge0: port 2(bond44) entered blocking state
[  228.396396][T14522] bridge0: port 2(bond44) entered disabled state
[  228.398538][T14522] bond44: entered allmulticast mode
[  228.401597][T14522] bond44: entered promiscuous mode
[  228.460261][T14527] netlink: 'syz.1.2219': attribute type 4 has an invalid length.
[  228.470624][T14527] netlink: 'syz.1.2219': attribute type 4 has an invalid length.
[  228.514642][T14529] netlink: 'syz.1.2220': attribute type 1 has an invalid length.
[  228.533755][T14529] bond45: entered promiscuous mode
[  228.537411][T14529] 8021q: adding VLAN 0 to HW filter on device bond45
[  228.544164][T14529] batadv1: entered promiscuous mode
[  228.547262][T14529] batadv1: entered allmulticast mode
[  228.550887][T14529] 8021q: adding VLAN 0 to HW filter on device batadv1
[  228.554623][T14529] bond45: (slave batadv1): making interface the new active one
[  228.558451][T14529] bond45: (slave batadv1): Enslaving as an active interface with an up link
[  228.567576][T14530] batadv2: entered promiscuous mode
[  228.569341][T14530] batadv2: entered allmulticast mode
[  228.572001][T14530] 8021q: adding VLAN 0 to HW filter on device batadv2
[  228.575972][T14530] bond45: (slave batadv2): Enslaving as an active interface with an up link
[  228.720552][T14537] netlink: 'syz.1.2222': attribute type 1 has an invalid length.
[  228.750710][T14537] 8021q: adding VLAN 0 to HW filter on device bond46
[  228.801458][T14540] pim6reg1: entered promiscuous mode
[  228.803331][T14540] pim6reg1: entered allmulticast mode
[  229.491833][T14550] __nla_validate_parse: 29 callbacks suppressed
[  229.491844][T14550] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2226'.
[  229.637163][T14554] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  229.640903][T14554] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  229.644386][T14554] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  229.645480][T14557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2229'.
[  229.650283][T14557] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  229.653065][T14557] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  229.808992][T14563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2230'.
[  229.813988][T14563] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2230'.
[  229.822693][T14563] bond0: entered promiscuous mode
[  229.827178][T14563] batadv0: entered promiscuous mode
[  229.829753][T14563] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  229.832807][T14563] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  229.839887][T14563] hsr0: entered allmulticast mode
[  229.844290][T14563] bond0: entered allmulticast mode
[  229.846377][T14563] batadv0: entered allmulticast mode
[  229.849789][T14563] 8021q: adding VLAN 0 to HW filter on device hsr0
[  229.853419][T14563] bond0: left promiscuous mode
[  229.855812][T14563] batadv0: left promiscuous mode
[  230.060723][T14588] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  230.090247][T14587] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  230.096985][T14589] 8021q: VLANs not supported on gre0
[  230.113463][T14592] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2237'.
[  230.131443][T14592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2237'.
[  230.156171][T14581] bond41: entered promiscuous mode
[  230.344580][T14608] vlan1: entered promiscuous mode
[  230.348258][T14608] bridge0: entered promiscuous mode
[  230.361475][T14599] tipc: Resetting bearer <eth:syzkaller0>
[  230.372808][T14599] tipc: Resetting bearer <eth:syzkaller0>
[  230.668726][T14615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2243'.
[  230.726446][T14617] lo speed is unknown, defaulting to 1000
[  230.810206][T14619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2244'.
[  231.272638][T14617] lo speed is unknown, defaulting to 1000
[  231.358166][T14638] pim6reg1: entered promiscuous mode
[  231.360212][T14638] pim6reg1: entered allmulticast mode
[  231.370797][T14644] validate_nla: 2 callbacks suppressed
[  231.370811][T14644] netlink: 'syz.0.2250': attribute type 10 has an invalid length.
[  231.400816][T14644] tipc: Resetting bearer <eth:team0>
[  231.474163][T14653] netlink: 'syz.1.2253': attribute type 1 has an invalid length.
[  231.478498][T14653] workqueue: Failed to create a rescuer kthread for wq "bond47": -EINTR
[  231.507318][T14650] erspan0: left allmulticast mode
[  231.518115][T14650] sit0: left promiscuous mode
[  231.521208][T14650] batadv_slave_0: left promiscuous mode
[  231.526297][T14650] tipc: Resetting bearer <eth:syzkaller0>
[  231.530177][T14650] syzkaller0: left promiscuous mode
[  231.532452][T14650] syzkaller0: left allmulticast mode
[  231.549303][T14661] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2254'.
[  231.554929][T14650] vlan0: left allmulticast mode
[  231.556505][T14650] bridge0: left allmulticast mode
[  231.558903][T14650] bridge21: left promiscuous mode
[  231.560535][T14650] bridge21: left allmulticast mode
[  231.569077][T14650] geneve4: left allmulticast mode
[  231.575269][T14650] mac80211_hwsim hwsim45 wlan0: left allmulticast mode
[  231.577512][T14650] macvtap1: left allmulticast mode
[  231.598598][T14650] veth15: left promiscuous mode
[  231.655568][ T5676] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  231.663654][ T5676] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  231.678426][ T5676] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  231.684227][T14650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2251'.
[  231.685795][ T5676] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  231.780450][T14667] bond47: (slave vxcan3): The slave device specified does not support setting the MAC address
[  231.787930][T14667] bond47: (slave vxcan3): Error -95 calling set_mac_address
[  231.808618][T14668] bond47: (slave vxcan3): The slave device specified does not support setting the MAC address
[  231.813851][T14668] bond47: (slave vxcan3): Error -95 calling set_mac_address
[  231.899624][T14675] netlink: 'syz.2.2257': attribute type 12 has an invalid length.
[  231.959745][T14679] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  231.963099][T14679] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  231.980555][T14681] netlink: 'syz.1.2260': attribute type 32 has an invalid length.
[  232.163878][T14702] netlink: 'syz.0.2265': attribute type 10 has an invalid length.
[  232.169429][T14702] team0: Cannot enslave team device to itself
[  232.177361][T14705] bond0: (slave veth0_to_hsr): Device is not bonding slave
[  232.180156][T14705] bond0: option active_slave: invalid value (veth0_to_hsr)
[  232.247567][T14717] netlink: 'syz.1.2269': attribute type 12 has an invalid length.
[  232.289520][T14708] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode
[  232.297621][T14719] syzkaller1: entered promiscuous mode
[  232.299429][T14719] syzkaller1: entered allmulticast mode
[  232.338731][T14721] IPv6: sit5: Disabled Multicast RS
[  232.342160][T14721] sit5: entered allmulticast mode
[  232.482167][T14726] dvmrp0: entered allmulticast mode
[  232.653604][T14741] netlink: 'syz.1.2278': attribute type 1 has an invalid length.
[  232.669350][T14741] 8021q: adding VLAN 0 to HW filter on device bond48
[  232.693675][T14741] veth37: entered promiscuous mode
[  232.698795][T14741] bond48: (slave veth37): Enslaving as an active interface with a down link
[  232.707639][T14741] erspan0: entered allmulticast mode
[  232.749818][T14748] openvswitch: netlink: Flow key attr not present in new flow.
[  232.788831][T14745] lo speed is unknown, defaulting to 1000
[  232.938524][T14745] lo speed is unknown, defaulting to 1000
[  233.033266][T14764] geneve7: entered promiscuous mode
[  233.303708][T14776] lo speed is unknown, defaulting to 1000
[  233.525877][T14791] netlink: 'syz.1.2293': attribute type 12 has an invalid length.
[  233.597061][T14786] lo speed is unknown, defaulting to 1000
[  233.615544][T14776] lo speed is unknown, defaulting to 1000
[  233.762827][T14806] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  233.817865][T14806] bond28: (slave veth25): Releasing backup interface
[  233.825042][T14806] bond29: (slave bond30): Releasing backup interface
[  233.830807][T14806] bond32: (slave bond33): Releasing backup interface
[  233.836735][T14806] bond36: (slave ip6gretap4): Releasing active interface
[  233.839203][T14806] bond36: (slave ip6gretap4): the permanent HWaddr of slave - 06:e7:ff:06:a1:67 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  233.851103][T14806] bond36: (slave veth29): Releasing active interface
[  233.860431][T14806] batadv0: left allmulticast mode
[  233.862104][T14806] batadv0: left promiscuous mode
[  233.863850][T14806] bridge0: port 1(batadv0) entered disabled state
[  233.868162][T14806] bond44: left allmulticast mode
[  233.869918][T14806] bond44: left promiscuous mode
[  233.871578][T14806] bridge0: port 2(bond44) entered disabled state
[  233.877854][T14806] bond45: (slave batadv1): Releasing active interface
[  233.880177][T14806] bond45: (slave batadv1): the permanent HWaddr of slave - 3a:18:b1:c6:da:5c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  233.886742][T14806] bond45: (slave batadv2): making interface the new active one
[  233.892110][T14806] bond45: (slave batadv2): Releasing active interface
[  233.898380][T14806] bond48: (slave veth37): Releasing active interface
[  233.931741][T14786] lo speed is unknown, defaulting to 1000
[  233.935007][T14806] netlink: 'syz.1.2295': attribute type 10 has an invalid length.
[  233.943310][T14806] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  233.990350][T14811] 8021q: adding VLAN 0 to HW filter on device bond42
[  234.017698][T14811] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  234.022909][T14811] bond42: (slave macvlan0): Enslaving as a backup interface with a down link
[  234.033988][T14811] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  234.058647][  T793] lo speed is unknown, defaulting to 1000
[  234.060688][  T793] syz1: Port: 1 Link DOWN
[  234.219392][T14823] 8021q: adding VLAN 0 to HW filter on device bond42
[  234.228907][T14823] team0: Port device bond42 added
[  234.246217][T14824] 8021q: adding VLAN 0 to HW filter on device bond43
[  234.249479][T14824] team0: Port device bond43 added
[  234.375179][ T3224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.377931][ T3224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.520503][T14841] __nla_validate_parse: 28 callbacks suppressed
[  234.520515][T14841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2303'.
[  234.525941][T14841] netlink: 'syz.0.2303': attribute type 2 has an invalid length.
[  234.528475][T14841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2303'.
[  236.799498][ T5295] udevd[5295]: worker [5947] /devices/virtual/block/nbd0 is taking a long time
[  237.262611][T14844] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744072277895850)
[  237.276314][T14848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2306'.
[  237.277437][T14844] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  237.279744][T14848] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2306'.
[  237.387741][T14852] wg1: left promiscuous mode
[  237.392803][T14852] mac80211_hwsim hwsim12 wlan0: left allmulticast mode
[  237.401187][T14854] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2308'.
[  237.404879][T14852] tipc: Resetting bearer <eth:syzkaller0>
[  237.411856][T14852] bridge34: left promiscuous mode
[  237.413498][T14852] bridge34: left allmulticast mode
[  237.425172][T14852] bond41: left promiscuous mode
[  237.535847][T14860] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  237.543347][T14860] tipc: Failed to remove unknown binding: 66,1,1/3161759914:886313545/886313547
[  237.552515][T14860] tipc: Failed to remove unknown binding: 66,1,1/3161759914:886313545/886313547
[  237.558829][T14860] tipc: Failed to remove unknown binding: 66,1,1/3161759914:886313545/886313547
[  237.562684][T14860] netlink: 788 bytes leftover after parsing attributes in process `syz.0.2310'.
[  237.766796][T14879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2313'.
[  237.929524][T14881] pim6reg1: entered promiscuous mode
[  237.931379][T14881] pim6reg1: entered allmulticast mode
[  237.935733][T14881] validate_nla: 1 callbacks suppressed
[  237.935743][T14881] netlink: 'syz.2.2314': attribute type 1 has an invalid length.
[  237.957322][T14881] 8021q: adding VLAN 0 to HW filter on device bond44
[  238.107692][T14886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2316'.
[  238.110537][T14886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2316'.
[  238.198886][T14894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2320'.
[  238.205694][T14894] netlink: 'syz.1.2320': attribute type 1 has an invalid length.
[  238.245463][T14904] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (144)
[  238.343995][T14912] can: request_module (can-proto-4) failed.
[  238.369703][T14915] : renamed from bond_slave_0
[  238.593486][T14934] batadv4: entered promiscuous mode
[  238.689147][T14941] pim6reg: entered allmulticast mode
[  238.691977][T14941] pim6reg: left allmulticast mode
[  238.797625][T14949] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  238.800946][T14948] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  238.804260][T14948] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  238.806853][T14948] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  238.823281][T14953] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  238.827322][T14954] syzkaller0: entered promiscuous mode
[  238.829434][T14954] syzkaller0: entered allmulticast mode
[  238.956832][ T9745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  238.960369][ T9745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  239.119750][T14965] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  239.217491][T14973] lo speed is unknown, defaulting to 1000
[  239.340187][T14973] lo speed is unknown, defaulting to 1000
[  239.858662][T15000] netlink: 'syz.1.2346': attribute type 21 has an invalid length.
[  239.899676][T15007] __nla_validate_parse: 6 callbacks suppressed
[  239.899688][T15007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2349'.
[  239.910346][T15007] netlink: 'syz.0.2349': attribute type 39 has an invalid length.
[  239.963751][T15018] netlink: 'syz.0.2351': attribute type 1 has an invalid length.
[  240.004494][T15018] veth23: entered promiscuous mode
[  240.090575][T15035] vti1: entered promiscuous mode
[  240.142549][T15042] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2357'.
[  240.148315][T15043] openvswitch: : Dropping previously announced user features
[  240.207155][T15050] netlink: 212288 bytes leftover after parsing attributes in process `syz.2.2360'.
[  240.232940][T15046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2358'.
[  240.246970][T15046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2358'.
[  240.272844][T15050] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2360'.
[  240.299940][T15056] netlink: 'syz.1.2361': attribute type 1 has an invalid length.
[  240.348380][T15056] 8021q: adding VLAN 0 to HW filter on device bond49
[  240.376997][T15056] 8021q: adding VLAN 0 to HW filter on device bond49
[  240.379614][T15056] bond49: (slave vxcan3): The slave device specified does not support setting the MAC address
[  240.383739][T15056] bond49: (slave vxcan3): Error -95 calling set_mac_address
[  240.422069][T15064] veth39: entered promiscuous mode
[  240.430865][T15064] bond49: (slave veth39): Enslaving as an active interface with a down link
[  240.450031][ T3600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.455735][ T3600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.562761][T15070] netlink: 'syz.2.2363': attribute type 4 has an invalid length.
[  240.569064][  T793] lo speed is unknown, defaulting to 1000
[  240.571437][  T793] syz0: Port: 1 Link ACTIVE
[  240.573336][  T793] lo speed is unknown, defaulting to 1000
[  240.581876][  T793] lo speed is unknown, defaulting to 1000
[  240.583943][  T793] syz0: Port: 1 Link DOWN
[  240.633944][T15073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2363'.
[  240.728125][T15081] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2366'.
[  240.733954][T15081] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2366'.
[  240.919333][T15088] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2369'.
[  241.138419][T15101] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode
[  241.144046][T15101] macsec0: entered promiscuous mode
[  241.147061][T15101] macsec0: entered allmulticast mode
[  241.149346][T15101] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode
[  241.367215][T15113] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  241.880797][   T33] audit: type=1107 audit(1755843561.152:3): pid=15126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='P(L7'
[  241.921914][T15130] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20001
[  241.969358][T15134] syzkaller1: entered promiscuous mode
[  241.971439][T15134] syzkaller1: entered allmulticast mode
[  242.084110][T15137] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  242.249144][T15142] netlink: 'syz.2.2388': attribute type 13 has an invalid length.
[  242.302482][T15140] netlink: 'syz.1.2387': attribute type 13 has an invalid length.
[  242.310344][T15140] netlink: 'syz.1.2387': attribute type 17 has an invalid length.
[  242.314099][T15140] erspan0: left allmulticast mode
[  242.318936][T15140] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  242.840551][T15167] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  242.887770][T15169] : entered promiscuous mode
[  242.927605][T15171] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  242.962892][T15179] validate_nla: 1 callbacks suppressed
[  242.962911][T15179] netlink: 'syz.1.2398': attribute type 1 has an invalid length.
[  242.993988][T15179] bond50: entered promiscuous mode
[  242.996885][T15179] 8021q: adding VLAN 0 to HW filter on device bond50
[  243.063764][T15181] 8021q: adding VLAN 0 to HW filter on device bond50
[  243.067616][T15181] bond50: (slave wireguard1): The slave device specified does not support setting the MAC address
[  243.071204][T15181] bond50: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  243.077460][T15181] bond50: (slave wireguard1): making interface the new active one
[  243.080011][T15181] wireguard1: entered promiscuous mode
[  243.083127][T15181] bond50: (slave wireguard1): Enslaving as an active interface with an up link
[  243.088758][T15181] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  243.091177][T15181] IPv6: NLM_F_CREATE should be set when creating new route
[  243.093533][T15181] IPv6: NLM_F_CREATE should be set when creating new route
[  243.096359][T15181] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  243.103081][T15181] bond50: (slave wireguard2): The slave device specified does not support setting the MAC address
[  243.111706][T15181] bond50: (slave wireguard2): Enslaving as a backup interface with an up link
[  243.439022][T15191] netlink: 'syz.2.2401': attribute type 10 has an invalid length.
[  243.496631][T15202] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  243.503996][T15202] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  243.595856][T15212] veth22: entered allmulticast mode
[  243.910716][T15231] ipvlan0: entered promiscuous mode
[  243.914329][T15231] bridge0: port 1(ipvlan0) entered blocking state
[  243.918175][T15231] bridge0: port 1(ipvlan0) entered disabled state
[  243.920958][T15231] ipvlan0: entered allmulticast mode
[  243.925199][T15231] ipvlan0: left allmulticast mode
[  243.953511][T15228] lo speed is unknown, defaulting to 1000
[  244.035603][T15235] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  244.108893][T15232] lo speed is unknown, defaulting to 1000
[  244.112076][T15228] lo speed is unknown, defaulting to 1000
[  244.190614][T15240] netlink: 'syz.0.2414': attribute type 16 has an invalid length.
[  244.196289][T15240] netlink: 'syz.0.2414': attribute type 17 has an invalid length.
[  244.217698][T15240] tipc: Resetting bearer <eth:syzkaller0>
[  244.226632][T15240] mac80211_hwsim hwsim12 wlan0: left allmulticast mode
[  244.238848][T15240] IPv6: NLM_F_REPLACE set, but no existing node found!
[  244.261390][T15243] macvtap2: entered promiscuous mode
[  244.269334][T15243] erspan0: entered promiscuous mode
[  244.273677][T15243] macvtap2: entered allmulticast mode
[  244.285013][T15243] erspan0: entered allmulticast mode
[  244.324274][T15232] lo speed is unknown, defaulting to 1000
[  244.375979][T15243] macvtap2: left promiscuous mode
[  244.377662][T15243] erspan0: left promiscuous mode
[  244.379349][T15243] macvtap2: left allmulticast mode
[  244.381053][T15243] erspan0: left allmulticast mode
[  244.462243][T15254] erspan0: entered promiscuous mode
[  244.474051][T15254] tipc: Resetting bearer <eth:team0>
[  244.476285][T15254] tipc: Resetting bearer <eth:team0>
[  244.479839][T15254] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  244.488312][T11759] lo speed is unknown, defaulting to 1000
[  244.490150][T11759] syz0: Port: 1 Link ACTIVE
[  244.491586][T11759] lo speed is unknown, defaulting to 1000
[  244.580345][T15257] erspan0: entered promiscuous mode
[  244.582603][T15257] macvtap1: entered promiscuous mode
[  244.594937][T15257] macvtap1: entered allmulticast mode
[  244.596725][T15257] erspan0: entered allmulticast mode
[  244.640835][T15257] macvtap1: left promiscuous mode
[  244.646782][T15257] macvtap1: left allmulticast mode
[  244.650093][T15257] erspan0: left allmulticast mode
[  244.831557][T15265] lo speed is unknown, defaulting to 1000
[  244.910349][T15264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  244.979933][T15264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  245.077894][T15267] bond0: left allmulticast mode
[  245.086405][T15265] lo speed is unknown, defaulting to 1000
[  245.088919][T15267] netlink: 'syz.1.2421': attribute type 10 has an invalid length.
[  245.296979][T15272] __nla_validate_parse: 16 callbacks suppressed
[  245.296993][T15272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2422'.
[  245.807162][T15280] team0: entered allmulticast mode
[  245.809288][T15280] bond39: entered allmulticast mode
[  245.975945][T15284] netlink: 'syz.0.2425': attribute type 13 has an invalid length.
[  246.126794][T15289] batadv3: entered promiscuous mode
[  246.163534][T15293] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  246.348983][T15300] ip6tnl6: entered promiscuous mode
[  246.350674][T15300] ip6tnl6: entered allmulticast mode
[  246.354333][T15300] team0: Device ip6tnl6 is of different type
[  246.511017][T15315] netlink: 786 bytes leftover after parsing attributes in process `syz.1.2435'.
[  246.516584][T15315] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  246.522973][   T61] block nbd0: Possible stuck request ffff888022090000: control (read@0,1024B). Runtime 150 seconds
[  246.528648][T15302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2432'.
[  246.533203][   T61] block nbd0: Possible stuck request ffff888022090200: control (read@1024,1024B). Runtime 150 seconds
[  246.537000][   T61] block nbd0: Possible stuck request ffff888022090400: control (read@2048,1024B). Runtime 150 seconds
[  246.540297][   T61] block nbd0: Possible stuck request ffff888022090600: control (read@3072,1024B). Runtime 150 seconds
[  246.596190][T15324] digital: digital_start_poll: Unknown protocol
[  246.692572][T15333] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2436'.
[  246.698268][T15334] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2440'.
[  246.702841][T15334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  246.744654][T15341] netlink: 'syz.0.2442': attribute type 1 has an invalid length.
[  246.753021][T15336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2441'.
[  246.789230][T15341] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2442'.
[  246.797076][T15341] netlink: 'syz.0.2442': attribute type 1 has an invalid length.
[  246.815733][T15341] 8021q: adding VLAN 0 to HW filter on device bond44
[  246.834806][T15341] bond44: (slave veth23): Enslaving as an active interface with a down link
[  246.843243][T15341] 8021q: adding VLAN 0 to HW filter on device batadv4
[  246.848652][T15341] bond44: (slave batadv4): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  246.871202][T15346] tipc: Resetting bearer <eth:team0>
[  246.879447][T15346] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  246.889065][T15348] tipc: Resetting bearer <eth:team0>
[  246.891239][T15348] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  246.924455][T15350] syzkaller0: Caught tx_queue_len zero misconfig
[  246.960014][T15355] netlink: 'syz.2.2446': attribute type 1 has an invalid length.
[  247.004439][T15355] 8021q: adding VLAN 0 to HW filter on device bond45
[  247.031137][T15355] vlan1: entered promiscuous mode
[  247.033037][T15359] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2447'.
[  247.033238][T15355] bond45: entered promiscuous mode
[  247.039731][T15355] vlan1: entered allmulticast mode
[  247.041888][T15355] bond45: entered allmulticast mode
[  247.052124][T15359] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2447'.
[  247.083790][T15360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2447'.
[  247.166245][T15362] geneve5: entered promiscuous mode
[  247.168731][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  247.172179][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  247.176549][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  247.179971][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  247.540761][T15366] netlink: 'syz.1.2449': attribute type 2 has an invalid length.
[  263.094472][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  263.094493][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  263.099092][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  263.104124][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  263.105751][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  263.110537][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  263.110699][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  263.113581][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  263.120544][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  263.136572][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  263.142010][T15379] lo speed is unknown, defaulting to 1000
[  263.172154][ T5852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  263.176429][ T5852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  263.180336][ T5852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  263.184394][ T5852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  263.188387][ T5852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  263.337116][T15378] lo speed is unknown, defaulting to 1000
[  263.345853][T15379] lo speed is unknown, defaulting to 1000
[  263.502052][T15378] lo speed is unknown, defaulting to 1000
[  263.513897][T15382] lo speed is unknown, defaulting to 1000
[  263.572814][T15379] chnl_net:caif_netlink_parms(): no params data found
[  263.693792][T15379] bridge0: port 1(bridge_slave_0) entered blocking state
[  263.696670][T15379] bridge0: port 1(bridge_slave_0) entered disabled state
[  263.699002][T15379] bridge_slave_0: entered allmulticast mode
[  263.701886][T15379] bridge_slave_0: entered promiscuous mode
[  263.705655][T15379] bridge0: port 2(bridge_slave_1) entered blocking state
[  263.707866][T15379] bridge0: port 2(bridge_slave_1) entered disabled state
[  263.710200][T15379] bridge_slave_1: entered allmulticast mode
[  263.713097][T15379] bridge_slave_1: entered promiscuous mode
[  263.740584][T15378] chnl_net:caif_netlink_parms(): no params data found
[  263.765925][T15379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  263.769500][T15382] lo speed is unknown, defaulting to 1000
[  263.778066][T15379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  263.871574][T15379] team0: Port device team_slave_0 added
[  263.878715][T15379] team0: Port device team_slave_1 added
[  263.948467][T15379] batman_adv: batadv0: Adding interface: batadv_slave_0
[  263.951292][T15379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  263.962638][T15379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  263.969275][T15379] batman_adv: batadv0: Adding interface: batadv_slave_1
[  263.972056][T15379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  263.982623][T15379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  264.001886][T15378] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.005487][T15378] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.008514][T15378] bridge_slave_0: entered allmulticast mode
[  264.012584][T15378] bridge_slave_0: entered promiscuous mode
[  264.021447][T15378] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.025431][T15378] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.028468][T15378] bridge_slave_1: entered allmulticast mode
[  264.032378][T15378] bridge_slave_1: entered promiscuous mode
[  264.097881][T15378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  264.122948][T15379] hsr_slave_0: entered promiscuous mode
[  264.126416][T15379] hsr_slave_1: entered promiscuous mode
[  264.142191][T15378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  264.190351][T15378] team0: Port device team_slave_0 added
[  264.195560][T15378] team0: Port device team_slave_1 added
[  264.268698][T15378] batman_adv: batadv0: Adding interface: batadv_slave_0
[  264.270965][T15378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  264.279931][T15378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  264.296020][T15378] batman_adv: batadv0: Adding interface: batadv_slave_1
[  264.298351][T15378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  264.306816][T15378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  264.348332][T15382] chnl_net:caif_netlink_parms(): no params data found
[  264.406969][T15378] hsr_slave_0: entered promiscuous mode
[  264.409691][T15378] hsr_slave_1: entered promiscuous mode
[  264.412945][T15378] debugfs: 'hsr0' already exists in 'hsr'
[  264.415879][T15378] Cannot create hsr debugfs directory
[  264.566619][T15382] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.568863][T15382] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.571123][T15382] bridge_slave_0: entered allmulticast mode
[  264.573848][T15382] bridge_slave_0: entered promiscuous mode
[  264.577638][T15382] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.580074][T15382] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.582711][T15382] bridge_slave_1: entered allmulticast mode
[  264.585621][T15382] bridge_slave_1: entered promiscuous mode
[  264.661374][T15382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  264.667622][T15382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  264.716791][T15382] team0: Port device team_slave_0 added
[  264.726116][T15382] team0: Port device team_slave_1 added
[  264.762416][T15382] batman_adv: batadv0: Adding interface: batadv_slave_0
[  264.764812][T15382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  264.773748][T15382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  264.780944][T15382] batman_adv: batadv0: Adding interface: batadv_slave_1
[  264.783260][T15382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  264.793831][T15382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  264.830622][T15382] hsr_slave_0: entered promiscuous mode
[  264.833306][T15382] hsr_slave_1: entered promiscuous mode
[  264.835846][T15382] debugfs: 'hsr0' already exists in 'hsr'
[  264.837753][T15382] Cannot create hsr debugfs directory
[  265.155278][ T5852] Bluetooth: hci3: command tx timeout
[  265.155573][ T5853] Bluetooth: hci4: command tx timeout
[  265.235325][ T5853] Bluetooth: hci5: command tx timeout
[  267.234940][ T5853] Bluetooth: hci4: command tx timeout
[  267.244922][ T5853] Bluetooth: hci3: command tx timeout
[  267.314920][ T5853] Bluetooth: hci5: command tx timeout
[  269.315140][ T5853] Bluetooth: hci3: command tx timeout
[  269.317385][ T5853] Bluetooth: hci4: command tx timeout
[  269.404916][ T5852] Bluetooth: hci5: command tx timeout
[  271.395034][ T5852] Bluetooth: hci4: command tx timeout
[  271.396009][ T5853] Bluetooth: hci3: command tx timeout
[  271.475106][ T5853] Bluetooth: hci5: command tx timeout
[  276.596374][   T61] block nbd0: Possible stuck request ffff888022090000: control (read@0,1024B). Runtime 180 seconds
[  276.600146][   T61] block nbd0: Possible stuck request ffff888022090200: control (read@1024,1024B). Runtime 180 seconds
[  276.604207][   T61] block nbd0: Possible stuck request ffff888022090400: control (read@2048,1024B). Runtime 180 seconds
[  276.608282][   T61] block nbd0: Possible stuck request ffff888022090600: control (read@3072,1024B). Runtime 180 seconds
[  276.975308][ T5295] udevd[5295]: worker [5947] /devices/virtual/block/nbd0 timeout; kill it
[  276.978321][ T5295] udevd[5295]: seq 12750 '/devices/virtual/block/nbd0' killed
[  306.678872][   T61] block nbd0: Possible stuck request ffff888022090000: control (read@0,1024B). Runtime 210 seconds
[  306.682832][   T61] block nbd0: Possible stuck request ffff888022090200: control (read@1024,1024B). Runtime 210 seconds
[  306.687147][   T61] block nbd0: Possible stuck request ffff888022090400: control (read@2048,1024B). Runtime 210 seconds
[  306.690837][   T61] block nbd0: Possible stuck request ffff888022090600: control (read@3072,1024B). Runtime 210 seconds
[  324.119658][ T5852] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  324.125469][ T5852] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  324.129379][ T5852] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  324.132254][ T5852] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  324.135831][ T5852] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  324.207079][ T5853] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  324.211776][ T5853] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  324.215719][T15405] lo speed is unknown, defaulting to 1000
[  324.218737][ T5853] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  324.222042][ T5853] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  324.226611][ T5853] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  324.245184][ T5853] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  324.248906][ T5853] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  324.252487][ T5853] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  324.255587][ T5853] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  324.258195][ T5853] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  324.419009][T15407] lo speed is unknown, defaulting to 1000
[  324.426183][T15405] lo speed is unknown, defaulting to 1000
[  324.626797][T15405] chnl_net:caif_netlink_parms(): no params data found
[  324.636437][T15407] lo speed is unknown, defaulting to 1000
[  324.645793][T15409] lo speed is unknown, defaulting to 1000
[  324.815255][T15409] lo speed is unknown, defaulting to 1000
[  324.842963][T15405] bridge0: port 1(bridge_slave_0) entered blocking state
[  324.846722][T15405] bridge0: port 1(bridge_slave_0) entered disabled state
[  324.849706][T15405] bridge_slave_0: entered allmulticast mode
[  324.853685][T15405] bridge_slave_0: entered promiscuous mode
[  324.866756][T15405] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.869627][T15405] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.872622][T15405] bridge_slave_1: entered allmulticast mode
[  324.877710][T15405] bridge_slave_1: entered promiscuous mode
[  324.951362][T15405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  324.960397][T15405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  325.030497][T15405] team0: Port device team_slave_0 added
[  325.041894][T15405] team0: Port device team_slave_1 added
[  325.110164][T15405] batman_adv: batadv0: Adding interface: batadv_slave_0
[  325.112709][T15405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.121993][T15405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  325.149960][T15407] chnl_net:caif_netlink_parms(): no params data found
[  325.163285][T15405] batman_adv: batadv0: Adding interface: batadv_slave_1
[  325.166582][T15405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.174514][T15405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  325.277420][T15409] chnl_net:caif_netlink_parms(): no params data found
[  325.329855][T15405] hsr_slave_0: entered promiscuous mode
[  325.333232][T15405] hsr_slave_1: entered promiscuous mode
[  325.336582][T15405] debugfs: 'hsr0' already exists in 'hsr'
[  325.339055][T15405] Cannot create hsr debugfs directory
[  325.350310][T15407] bridge0: port 1(bridge_slave_0) entered blocking state
[  325.355854][T15407] bridge0: port 1(bridge_slave_0) entered disabled state
[  325.358878][T15407] bridge_slave_0: entered allmulticast mode
[  325.362929][T15407] bridge_slave_0: entered promiscuous mode
[  325.387429][T15407] bridge0: port 2(bridge_slave_1) entered blocking state
[  325.389913][T15407] bridge0: port 2(bridge_slave_1) entered disabled state
[  325.392320][T15407] bridge_slave_1: entered allmulticast mode
[  325.395622][T15407] bridge_slave_1: entered promiscuous mode
[  325.466261][T15407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  325.498649][T15409] bridge0: port 1(bridge_slave_0) entered blocking state
[  325.501613][T15409] bridge0: port 1(bridge_slave_0) entered disabled state
[  325.504496][T15409] bridge_slave_0: entered allmulticast mode
[  325.508086][T15409] bridge_slave_0: entered promiscuous mode
[  325.512637][T15407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  325.530907][T15409] bridge0: port 2(bridge_slave_1) entered blocking state
[  325.533519][T15409] bridge0: port 2(bridge_slave_1) entered disabled state
[  325.536718][T15409] bridge_slave_1: entered allmulticast mode
[  325.539532][T15409] bridge_slave_1: entered promiscuous mode
[  325.581246][T15409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  325.585790][T15407] team0: Port device team_slave_0 added
[  325.595089][T15407] team0: Port device team_slave_1 added
[  325.598594][T15409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  325.639245][T15409] team0: Port device team_slave_0 added
[  325.643455][T15409] team0: Port device team_slave_1 added
[  325.659865][T15407] batman_adv: batadv0: Adding interface: batadv_slave_0
[  325.662190][T15407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.670716][T15407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  325.732365][T15407] batman_adv: batadv0: Adding interface: batadv_slave_1
[  325.734907][T15407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.743311][T15407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  325.769535][T15409] batman_adv: batadv0: Adding interface: batadv_slave_0
[  325.772357][T15409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.783500][T15409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  325.817954][T15409] batman_adv: batadv0: Adding interface: batadv_slave_1
[  325.820794][T15409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.831989][T15409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  325.880013][T15407] hsr_slave_0: entered promiscuous mode
[  325.882680][T15407] hsr_slave_1: entered promiscuous mode
[  325.885715][T15407] debugfs: 'hsr0' already exists in 'hsr'
[  325.887580][T15407] Cannot create hsr debugfs directory
[  325.956519][T15409] hsr_slave_0: entered promiscuous mode
[  325.959413][T15409] hsr_slave_1: entered promiscuous mode
[  325.962173][T15409] debugfs: 'hsr0' already exists in 'hsr'
[  325.964335][T15409] Cannot create hsr debugfs directory
[  326.205377][ T5853] Bluetooth: hci6: command tx timeout
[  326.275084][ T5852] Bluetooth: hci7: command tx timeout
[  326.278039][ T5853] Bluetooth: hci8: command tx timeout
[  328.275331][ T5853] Bluetooth: hci6: command tx timeout
[  328.355152][ T5853] Bluetooth: hci8: command tx timeout
[  328.357374][ T5853] Bluetooth: hci7: command tx timeout
[  330.355036][ T5852] Bluetooth: hci6: command tx timeout
[  330.435389][ T5852] Bluetooth: hci7: command tx timeout
[  330.435681][ T5853] Bluetooth: hci8: command tx timeout
[  332.435375][ T5852] Bluetooth: hci6: command tx timeout
[  332.515094][ T5852] Bluetooth: hci8: command tx timeout
[  332.515635][ T5853] Bluetooth: hci7: command tx timeout
[  336.765528][   T61] block nbd0: Possible stuck request ffff888022090000: control (read@0,1024B). Runtime 240 seconds
[  336.769429][   T61] block nbd0: Possible stuck request ffff888022090200: control (read@1024,1024B). Runtime 240 seconds
[  336.772889][   T61] block nbd0: Possible stuck request ffff888022090400: control (read@2048,1024B). Runtime 240 seconds
[  336.776576][   T61] block nbd0: Possible stuck request ffff888022090600: control (read@3072,1024B). Runtime 240 seconds
[  366.845313][   T61] block nbd0: Possible stuck request ffff888022090000: control (read@0,1024B). Runtime 270 seconds
[  366.849499][   T61] block nbd0: Possible stuck request ffff888022090200: control (read@1024,1024B). Runtime 270 seconds
[  366.853637][   T61] block nbd0: Possible stuck request ffff888022090400: control (read@2048,1024B). Runtime 270 seconds
[  366.858381][   T61] block nbd0: Possible stuck request ffff888022090600: control (read@3072,1024B). Runtime 270 seconds
[  384.996033][T15435] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  385.000090][T15435] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  385.003944][T15435] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  385.030208][T15438] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  385.033438][T15438] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  385.036644][T15438] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  385.039847][T15438] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  385.043548][   T55] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  385.051176][   T55] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  385.057244][   T55] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  385.082680][   T55] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  385.087437][   T55] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  385.091304][   T55] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  385.099687][T15433] lo speed is unknown, defaulting to 1000
[  385.107447][   T55] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  385.110184][   T55] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  385.208712][T15433] lo speed is unknown, defaulting to 1000
[  385.209010][T15436] lo speed is unknown, defaulting to 1000
[  385.336678][T15433] chnl_net:caif_netlink_parms(): no params data found
[  385.358679][T15436] lo speed is unknown, defaulting to 1000
[  385.376090][T15440] lo speed is unknown, defaulting to 1000
[  385.469317][T15433] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.471609][T15433] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.474093][T15433] bridge_slave_0: entered allmulticast mode
[  385.481939][T15433] bridge_slave_0: entered promiscuous mode
[  385.489387][T15433] bridge0: port 2(bridge_slave_1) entered blocking state
[  385.491718][T15433] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.494470][T15433] bridge_slave_1: entered allmulticast mode
[  385.502606][T15433] bridge_slave_1: entered promiscuous mode
[  385.539712][T15433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  385.542596][T15440] lo speed is unknown, defaulting to 1000
[  385.550029][T15433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  385.565124][   T55] Bluetooth: hci4: command 0x0406 tx timeout
[  385.565526][T15435] Bluetooth: hci3: command 0x0406 tx timeout
[  385.567529][   T55] Bluetooth: hci5: command 0x0406 tx timeout
[  385.622606][T15433] team0: Port device team_slave_0 added
[  385.640375][T15433] team0: Port device team_slave_1 added
[  385.705853][T15433] batman_adv: batadv0: Adding interface: batadv_slave_0
[  385.708308][T15433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  385.718880][T15433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  385.730357][T15433] batman_adv: batadv0: Adding interface: batadv_slave_1
[  385.733156][T15433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  385.743756][T15433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  385.840912][T15433] hsr_slave_0: entered promiscuous mode
[  385.844240][T15433] hsr_slave_1: entered promiscuous mode
[  385.848525][T15433] debugfs: 'hsr0' already exists in 'hsr'
[  385.850812][T15433] Cannot create hsr debugfs directory
[  385.937921][T15436] chnl_net:caif_netlink_parms(): no params data found
[  386.014397][T15440] chnl_net:caif_netlink_parms(): no params data found
[  386.149687][T15436] bridge0: port 1(bridge_slave_0) entered blocking state
[  386.151983][T15436] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.154278][T15436] bridge_slave_0: entered allmulticast mode
[  386.160895][T15436] bridge_slave_0: entered promiscuous mode
[  386.168138][T15436] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.170868][T15436] bridge0: port 2(bridge_slave_1) entered disabled state
[  386.173741][T15436] bridge_slave_1: entered allmulticast mode
[  386.180862][T15436] bridge_slave_1: entered promiscuous mode
[  386.231863][T15436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  386.247251][T15436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  386.280218][T15440] bridge0: port 1(bridge_slave_0) entered blocking state
[  386.285977][T15440] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.288312][T15440] bridge_slave_0: entered allmulticast mode
[  386.292258][T15440] bridge_slave_0: entered promiscuous mode
[  386.310861][T15436] team0: Port device team_slave_0 added
[  386.313384][T15440] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.316893][T15440] bridge0: port 2(bridge_slave_1) entered disabled state
[  386.319364][T15440] bridge_slave_1: entered allmulticast mode
[  386.322424][T15440] bridge_slave_1: entered promiscuous mode
[  386.352177][T15436] team0: Port device team_slave_1 added
[  386.428251][T15436] batman_adv: batadv0: Adding interface: batadv_slave_0
[  386.430715][T15436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  386.440251][T15436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  386.447685][T15440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  386.451766][T15436] batman_adv: batadv0: Adding interface: batadv_slave_1
[  386.453984][T15436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  386.462333][T15436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  386.472682][T15440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  386.536285][T15440] team0: Port device team_slave_0 added
[  386.543356][T15436] hsr_slave_0: entered promiscuous mode
[  386.552041][T15436] hsr_slave_1: entered promiscuous mode
[  386.556191][T15436] debugfs: 'hsr0' already exists in 'hsr'
[  386.558513][T15436] Cannot create hsr debugfs directory
[  386.562719][T15440] team0: Port device team_slave_1 added
[  386.620949][T15440] batman_adv: batadv0: Adding interface: batadv_slave_0
[  386.623845][T15440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  386.634265][T15440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  386.653294][T15440] batman_adv: batadv0: Adding interface: batadv_slave_1
[  386.657246][T15440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  386.671525][T15440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  386.758151][T15440] hsr_slave_0: entered promiscuous mode
[  386.760927][T15440] hsr_slave_1: entered promiscuous mode
[  386.763104][T15440] debugfs: 'hsr0' already exists in 'hsr'
[  386.771862][T15440] Cannot create hsr debugfs directory
[  387.075304][ T5849] Bluetooth: hci10: command tx timeout
[  387.078395][ T5849] Bluetooth: hci9: command tx timeout
[  387.159565][ T5853] Bluetooth: hci11: command tx timeout
[  389.165238][ T5853] Bluetooth: hci9: command tx timeout
[  389.165534][ T5849] Bluetooth: hci10: command tx timeout
[  389.235476][ T5849] Bluetooth: hci11: command tx timeout
[  391.235511][ T5849] Bluetooth: hci10: command tx timeout
[  391.237721][ T5849] Bluetooth: hci9: command tx timeout
[  391.315290][ T5853] Bluetooth: hci11: command tx timeout
[  393.315148][ T5853] Bluetooth: hci9: command tx timeout
[  393.315414][ T5849] Bluetooth: hci10: command tx timeout
[  393.395737][ T5849] Bluetooth: hci11: command tx timeout
[  396.923121][   T61] block nbd0: Possible stuck request ffff888022090000: control (read@0,1024B). Runtime 300 seconds
[  396.926848][   T61] block nbd0: Possible stuck request ffff888022090200: control (read@1024,1024B). Runtime 300 seconds
[  396.930235][   T61] block nbd0: Possible stuck request ffff888022090400: control (read@2048,1024B). Runtime 300 seconds
[  396.933575][   T61] block nbd0: Possible stuck request ffff888022090600: control (read@3072,1024B). Runtime 300 seconds
[  404.605705][   T34] INFO: task syz.0.2447:15358 blocked for more than 143 seconds.
[  404.608823][   T34]       Not tainted syzkaller #0
[  404.610952][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  404.615782][   T34] task:syz.0.2447      state:D stack:26024 pid:15358 tgid:15357 ppid:5850   task_flags:0x480140 flags:0x00004004
[  404.620564][   T34] Call Trace:
[  404.621954][   T34]  <TASK>
[  404.623204][   T34]  __schedule+0x1798/0x4cc0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  404.625724][   T34]  ? __lock_acquire+0xab9/0xd20
[  404.627809][   T34]  ? __lock_acquire+0xab9/0xd20
[  404.629769][   T34]  ? __pfx___schedule+0x10/0x10
[  404.631762][   T34]  ? schedule+0x91/0x360
[  404.633568][   T34]  schedule+0x165/0x360
[  404.635778][   T34]  blk_mq_freeze_queue_wait+0xf4/0x170
[  404.637902][   T34]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[  404.640356][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[  404.642850][   T34]  ? percpu_ref_kill_and_confirm+0xa3/0x130
[  404.646184][   T34]  queue_limits_commit_update_frozen+0x5d/0x3e0
[  404.648868][   T34]  nbd_set_size+0x47e/0x6a0
[  404.650779][   T34]  ? __pfx_nbd_set_size+0x10/0x10
[  404.652868][   T34]  ? nla_memcpy+0x5b/0xc0
[  404.654646][   T34]  nbd_genl_size_set+0x2eb/0x3c0
[  404.657223][   T34]  ? __pfx_nbd_genl_size_set+0x10/0x10
[  404.659493][   T34]  ? __pfx_nbd_get_config_unlocked+0x10/0x10
[  404.661866][   T34]  ? bpf_lsm_capable+0x9/0x20
[  404.663640][   T34]  ? security_capable+0x7e/0x2e0
[  404.666114][   T34]  ? radix_tree_lookup+0x240/0x290
[  404.668309][   T34]  nbd_genl_reconfigure+0x409/0x1870
[  404.670515][   T34]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  404.672868][   T34]  ? __nla_parse+0x40/0x60
[  404.674673][   T34]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  404.677972][   T34]  genl_family_rcv_msg_doit+0x215/0x300
[  404.680231][   T34]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  404.682788][   T34]  ? rcu_preempt_deferred_qs_irqrestore+0x89c/0xce0
[  404.686036][   T34]  genl_rcv_msg+0x60e/0x790
[  404.687994][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  404.690044][   T34]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  404.692381][   T34]  netlink_rcv_skb+0x208/0x470
[  404.694492][   T34]  ? __lock_acquire+0xab9/0xd20
[  404.697350][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  404.699890][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  404.702080][   T34]  ? down_read+0x1ad/0x2e0
[  404.703890][   T34]  genl_rcv+0x28/0x40
[  404.706072][   T34]  netlink_unicast+0x82f/0x9e0
[  404.708135][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  404.710303][   T34]  ? netlink_sendmsg+0x642/0xb30
[  404.712414][   T34]  netlink_sendmsg+0x805/0xb30
[  404.714447][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  404.717229][   T34]  ? __lock_acquire+0xab9/0xd20
[  404.719298][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  404.721412][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  404.723531][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  404.726145][   T34]  __sock_sendmsg+0x21c/0x270
[  404.728038][   T34]  ____sys_sendmsg+0x505/0x830
[  404.730000][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  404.732128][   T34]  ? import_iovec+0x74/0xa0
[  404.734019][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  404.745577][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  404.747783][   T34]  ? __fget_files+0x2a/0x420
[  404.749648][   T34]  ? __fget_files+0x3a0/0x420
[  404.751503][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  404.753557][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  404.764691][   T34]  ? rcu_is_watching+0x15/0xb0
[  404.767285][   T34]  ? do_syscall_64+0xbe/0x3b0
[  404.769273][   T34]  do_syscall_64+0xfa/0x3b0
[  404.771154][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  404.773298][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.776405][   T34]  ? exc_page_fault+0x9f/0xf0
[  404.778312][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.780704][   T34] RIP: 0033:0x7fda5878ebe9
[  404.782455][   T34] RSP: 002b:00007fda596ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  404.785826][   T34] RAX: ffffffffffffffda RBX: 00007fda589b5fa0 RCX: 00007fda5878ebe9
[  404.789028][   T34] RDX: 0000000020004004 RSI: 0000200000002bc0 RDI: 0000000000000008
[  404.792262][   T34] RBP: 00007fda58811e19 R08: 0000000000000000 R09: 0000000000000000
[  404.795962][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  404.799140][   T34] R13: 00007fda589b6038 R14: 00007fda589b5fa0 R15: 00007ffe19f740e8
[  404.802573][   T34]  </TASK>
[  404.803887][   T34] INFO: task syz.2.2448:15363 blocked for more than 143 seconds.
[  404.807830][   T34]       Not tainted syzkaller #0
[  404.809880][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  404.823132][   T34] task:syz.2.2448      state:D stack:28360 pid:15363 tgid:15361 ppid:5855   task_flags:0x400040 flags:0x00004004
[  404.831720][   T34] Call Trace:
[  404.833074][   T34]  <TASK>
[  404.834223][   T34]  __schedule+0x1798/0x4cc0
[  404.836641][   T34]  ? __lock_acquire+0xab9/0xd20
[  404.838329][   T34]  ? __lock_acquire+0xab9/0xd20
[  404.839956][   T34]  ? __pfx___schedule+0x10/0x10
[  404.841627][   T34]  ? schedule+0x91/0x360
[  404.843095][   T34]  schedule+0x165/0x360
[  404.844489][   T34]  schedule_preempt_disabled+0x13/0x30
[  404.846808][   T34]  __mutex_lock+0x7e6/0x1360
[  404.848513][   T34]  ? __mutex_lock+0x5b6/0x1360
[  404.850348][   T34]  ? genl_rcv_msg+0x10d/0x790
[  404.852240][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  404.853931][   T34]  ? __dev_queue_xmit+0x27b/0x3b50
[  404.855933][   T34]  ? radix_tree_lookup+0x240/0x290
[  404.857898][   T34]  genl_rcv_msg+0x10d/0x790
[  404.859599][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  404.861443][   T34]  ? ref_tracker_free+0x63a/0x7d0
[  404.863183][   T34]  ? __asan_memcpy+0x40/0x70
[  404.865274][   T34]  ? __pfx_ref_tracker_free+0x10/0x10
[  404.867043][   T34]  netlink_rcv_skb+0x208/0x470
[  404.868959][   T34]  ? __lock_acquire+0xab9/0xd20
[  404.870703][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  404.872599][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  404.874419][   T34]  ? down_read+0x1ad/0x2e0
[  404.876244][   T34]  genl_rcv+0x28/0x40
[  404.877514][   T34]  netlink_unicast+0x82f/0x9e0
[  404.878969][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  404.880591][   T34]  ? netlink_sendmsg+0x642/0xb30
[  404.882312][   T34]  ? skb_put+0x11b/0x210
[  404.883765][   T34]  netlink_sendmsg+0x805/0xb30
[  404.885706][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  404.887461][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  404.889177][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  404.891063][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  404.893101][   T34]  __sock_sendmsg+0x21c/0x270
[  404.895458][   T34]  __sys_sendto+0x3bd/0x520
[  404.897215][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  404.899086][   T34]  ? count_memcg_event_mm+0x21/0x260
[  404.900918][   T34]  ? exc_page_fault+0x76/0xf0
[  404.902684][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  404.904584][   T34]  __x64_sys_sendto+0xde/0x100
[  404.906938][   T34]  do_syscall_64+0xfa/0x3b0
[  404.908687][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  404.910431][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.912675][   T34]  ? exc_page_fault+0x9f/0xf0
[  404.914411][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.916927][   T34] RIP: 0033:0x7f7aef990a7c
[  404.918478][   T34] RSP: 002b:00007f7aedbf4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  404.922083][   T34] RAX: ffffffffffffffda RBX: 00007f7aedbf4fc0 RCX: 00007f7aef990a7c
[  404.925695][   T34] RDX: 0000000000000020 RSI: 00007f7aedbf5010 RDI: 0000000000000003
[  404.928627][   T34] RBP: 0000000000000000 R08: 00007f7aedbf4f14 R09: 000000000000000c
[  404.931403][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  404.933882][   T34] R13: 00007f7aedbf4f68 R14: 00007f7aedbf5010 R15: 0000000000000000
[  404.936724][   T34]  </TASK>
[  404.937746][   T34] INFO: task syz.1.2450:15371 blocked for more than 143 seconds.
[  404.940122][   T34]       Not tainted syzkaller #0
[  404.941656][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  404.944215][   T34] task:syz.1.2450      state:D stack:25128 pid:15371 tgid:15370 ppid:5846   task_flags:0x400140 flags:0x00004004
[  404.948054][   T34] Call Trace:
[  404.949105][   T34]  <TASK>
[  404.950041][   T34]  __schedule+0x1798/0x4cc0
[  404.951416][   T34]  ? __lock_acquire+0xab9/0xd20
[  404.952889][   T34]  ? __lock_acquire+0xab9/0xd20
[  404.954338][   T34]  ? __pfx___schedule+0x10/0x10
[  404.956219][   T34]  ? schedule+0x91/0x360
[  404.957542][   T34]  schedule+0x165/0x360
[  404.959094][   T34]  schedule_preempt_disabled+0x13/0x30
[  404.961149][   T34]  __mutex_lock+0x7e6/0x1360
[  404.962944][   T34]  ? __mutex_lock+0x5b6/0x1360
[  404.966217][   T34]  ? genl_rcv_msg+0x10d/0x790
[  404.968056][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  404.969966][   T34]  ? stack_trace_save+0x9c/0xe0
[  404.971705][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  404.973636][   T34]  ? radix_tree_lookup+0x240/0x290
[  404.975894][   T34]  genl_rcv_msg+0x10d/0x790
[  404.977590][   T34]  ? __lock_acquire+0xab9/0xd20
[  404.979343][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  404.981255][   T34]  netlink_rcv_skb+0x208/0x470
[  404.983012][   T34]  ? __lock_acquire+0xab9/0xd20
[  404.985108][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  404.987084][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  404.989228][   T34]  ? down_read+0x1ad/0x2e0
[  404.991045][   T34]  genl_rcv+0x28/0x40
[  404.992645][   T34]  netlink_unicast+0x82f/0x9e0
[  404.994527][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  404.996976][   T34]  ? netlink_sendmsg+0x642/0xb30
[  404.998591][   T34]  ? skb_put+0x11b/0x210
[  404.999941][   T34]  netlink_sendmsg+0x805/0xb30
[  405.001443][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  405.003384][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  405.006482][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  405.008322][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  405.010059][   T34]  __sock_sendmsg+0x21c/0x270
[  405.011743][   T34]  __sys_sendto+0x3bd/0x520
[  405.013380][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  405.015479][   T34]  ? count_memcg_event_mm+0x21/0x260
[  405.017423][   T34]  ? exc_page_fault+0x76/0xf0
[  405.019163][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  405.021032][   T34]  __x64_sys_sendto+0xde/0x100
[  405.022881][   T34]  do_syscall_64+0xfa/0x3b0
[  405.024568][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  405.027270][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.029555][   T34]  ? exc_page_fault+0x9f/0xf0
[  405.031182][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.033299][   T34] RIP: 0033:0x7fd5c9b90a7c
[  405.034686][   T34] RSP: 002b:00007fd5ca939ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  405.037859][   T34] RAX: ffffffffffffffda RBX: 00007fd5ca939fc0 RCX: 00007fd5c9b90a7c
[  405.040607][   T34] RDX: 0000000000000024 RSI: 00007fd5ca93a010 RDI: 0000000000000005
[  405.043188][   T34] RBP: 0000000000000000 R08: 00007fd5ca939f14 R09: 000000000000000c
[  405.046995][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005
[  405.050132][   T34] R13: 00007fd5ca939f68 R14: 00007fd5ca93a010 R15: 0000000000000000
[  405.052807][   T34]  </TASK>
[  405.053889][   T34] INFO: task syz.1.2450:15372 blocked for more than 143 seconds.
[  405.057057][   T34]       Not tainted syzkaller #0
[  405.059036][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  405.062324][   T34] task:syz.1.2450      state:D stack:27688 pid:15372 tgid:15370 ppid:5846   task_flags:0x400040 flags:0x00004004
[  405.067322][   T34] Call Trace:
[  405.068699][   T34]  <TASK>
[  405.069892][   T34]  __schedule+0x1798/0x4cc0
[  405.071724][   T34]  ? __lock_acquire+0xab9/0xd20
[  405.073635][   T34]  ? __lock_acquire+0xab9/0xd20
[  405.077639][   T34]  ? __pfx___schedule+0x10/0x10
[  405.079554][   T34]  ? schedule+0x91/0x360
[  405.081152][   T34]  schedule+0x165/0x360
[  405.082760][   T34]  schedule_preempt_disabled+0x13/0x30
[  405.085162][   T34]  __mutex_lock+0x7e6/0x1360
[  405.087062][   T34]  ? __mutex_lock+0x5b6/0x1360
[  405.088984][   T34]  ? genl_rcv_msg+0x10d/0x790
[  405.090880][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  405.092850][   T34]  ? __dev_queue_xmit+0x27b/0x3b50
[  405.095430][   T34]  ? radix_tree_lookup+0x240/0x290
[  405.097531][   T34]  genl_rcv_msg+0x10d/0x790
[  405.099327][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  405.101321][   T34]  ? ref_tracker_free+0x63a/0x7d0
[  405.103285][   T34]  ? __asan_memcpy+0x40/0x70
[  405.105702][   T34]  ? __pfx_ref_tracker_free+0x10/0x10
[  405.107889][   T34]  netlink_rcv_skb+0x208/0x470
[  405.109903][   T34]  ? __lock_acquire+0xab9/0xd20
[  405.111803][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  405.113777][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  405.116406][   T34]  ? down_read+0x1ad/0x2e0
[  405.118203][   T34]  genl_rcv+0x28/0x40
[  405.119800][   T34]  netlink_unicast+0x82f/0x9e0
[  405.121710][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  405.123776][   T34]  ? netlink_sendmsg+0x642/0xb30
[  405.126202][   T34]  ? skb_put+0x11b/0x210
[  405.127940][   T34]  netlink_sendmsg+0x805/0xb30
[  405.129518][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  405.131054][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  405.132585][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  405.134452][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  405.136988][   T34]  __sock_sendmsg+0x21c/0x270
[  405.138912][   T34]  ____sys_sendmsg+0x505/0x830
[  405.140802][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  405.142941][   T34]  ? import_iovec+0x74/0xa0
[  405.145542][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  405.147461][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  405.149552][   T34]  ? __fget_files+0x2a/0x420
[  405.151432][   T34]  ? __fget_files+0x3a0/0x420
[  405.153234][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  405.156179][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  405.158396][   T34]  ? do_syscall_64+0xbe/0x3b0
[  405.160028][   T34]  do_syscall_64+0xfa/0x3b0
[  405.161443][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  405.163042][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.165270][   T34]  ? exc_page_fault+0x9f/0xf0
[  405.166860][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.169101][   T34] RIP: 0033:0x7fd5c9b8ebe9
[  405.170749][   T34] RSP: 002b:00007fd5ca91a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  405.173514][   T34] RAX: ffffffffffffffda RBX: 00007fd5c9db6090 RCX: 00007fd5c9b8ebe9
[  405.177202][   T34] RDX: 0000000000000000 RSI: 00002000000029c0 RDI: 0000000000000004
[  405.180202][   T34] RBP: 00007fd5c9c11e19 R08: 0000000000000000 R09: 0000000000000000
[  405.182884][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  405.186413][   T34] R13: 00007fd5c9db6128 R14: 00007fd5c9db6090 R15: 00007ffec57294e8
[  405.189599][   T34]  </TASK>
[  405.190928][   T34] INFO: task syz.1.2450:15373 blocked for more than 143 seconds.
[  405.193907][   T34]       Not tainted syzkaller #0
[  405.196369][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  405.199681][   T34] task:syz.1.2450      state:D stack:24808 pid:15373 tgid:15370 ppid:5846   task_flags:0x400140 flags:0x00004004
[  405.204271][   T34] Call Trace:
[  405.206158][   T34]  <TASK>
[  405.207385][   T34]  __schedule+0x1798/0x4cc0
[  405.209167][   T34]  ? __lock_acquire+0xab9/0xd20
[  405.211269][   T34]  ? __lock_acquire+0xab9/0xd20
[  405.213149][   T34]  ? __pfx___schedule+0x10/0x10
[  405.215516][   T34]  ? schedule+0x91/0x360
[  405.217204][   T34]  schedule+0x165/0x360
[  405.218815][   T34]  schedule_preempt_disabled+0x13/0x30
[  405.220915][   T34]  __mutex_lock+0x7e6/0x1360
[  405.222713][   T34]  ? __mutex_lock+0x5b6/0x1360
[  405.224584][   T34]  ? genl_rcv_msg+0x10d/0x790
[  405.226949][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  405.228957][   T34]  ? __dev_queue_xmit+0x27b/0x3b50
[  405.230929][   T34]  ? radix_tree_lookup+0x240/0x290
[  405.232942][   T34]  genl_rcv_msg+0x10d/0x790
[  405.235302][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  405.237280][   T34]  ? ref_tracker_free+0x63a/0x7d0
[  405.239248][   T34]  ? __asan_memcpy+0x40/0x70
[  405.241071][   T34]  ? __pfx_ref_tracker_free+0x10/0x10
[  405.243224][   T34]  netlink_rcv_skb+0x208/0x470
[  405.245579][   T34]  ? __lock_acquire+0xab9/0xd20
[  405.247478][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  405.249391][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  405.251431][   T34]  ? down_read+0x1ad/0x2e0
[  405.253148][   T34]  genl_rcv+0x28/0x40
[  405.255192][   T34]  netlink_unicast+0x82f/0x9e0
[  405.257171][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  405.259229][   T34]  ? netlink_sendmsg+0x642/0xb30
[  405.261020][   T34]  ? skb_put+0x11b/0x210
[  405.262510][   T34]  netlink_sendmsg+0x805/0xb30
[  405.264244][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  405.266806][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  405.268630][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  405.270436][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  405.272219][   T34]  __sock_sendmsg+0x21c/0x270
[  405.273702][   T34]  __sys_sendto+0x3bd/0x520
[  405.275662][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  405.277584][   T34]  ? fd_install+0x97/0x540
[  405.279126][   T34]  ? fd_install+0x30d/0x540
[  405.280514][   T34]  __x64_sys_sendto+0xde/0x100
[  405.281969][   T34]  do_syscall_64+0xfa/0x3b0
[  405.283487][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  405.285480][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.287655][   T34]  ? exc_page_fault+0x9f/0xf0
[  405.289181][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.291366][   T34] RIP: 0033:0x7fd5c9b90a7c
[  405.292981][   T34] RSP: 002b:00007fd5c7df4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  405.295880][   T34] RAX: ffffffffffffffda RBX: 00007fd5c7df4fc0 RCX: 00007fd5c9b90a7c
[  405.298569][   T34] RDX: 0000000000000020 RSI: 00007fd5c7df5010 RDI: 000000000000000c
[  405.301094][   T34] RBP: 0000000000000000 R08: 00007fd5c7df4f14 R09: 000000000000000c
[  405.303756][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000c
[  405.306609][   T34] R13: 00007fd5c7df4f68 R14: 00007fd5c7df5010 R15: 0000000000000000
[  405.309574][   T34]  </TASK>
[  405.310751][   T34] 
[  405.310751][   T34] Showing all locks held in the system:
[  405.313855][   T34] 1 lock held by khungtaskd/34:
[  405.316394][   T34]  #0: ffffffff8e139ea0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  405.319756][   T34] 2 locks held by getty/5672:
[  405.321238][   T34]  #0: ffff88810dae50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  405.325201][   T34]  #1: ffffc900024c82f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  405.328680][   T34] 1 lock held by udevd/5947:
[  405.330080][   T34]  #0: ffff888107c61358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  405.332866][   T34] 6 locks held by syz.0.2447/15358:
[  405.334599][   T34]  #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  405.337569][   T34]  #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  405.340216][   T34]  #2: ffff888021ff1230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x36f/0x1870
[  405.343284][   T34]  #3: ffff888021e15f58 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0
[  405.346696][   T34]  #4: ffff888021e158f8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0
[  405.350841][   T34]  #5: ffff888021e15930 (&q->q_usage_counter(queue)){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0
[  405.355598][   T34] 2 locks held by syz.2.2448/15363:
[  405.357662][   T34]  #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  405.360583][   T34]  #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  405.363422][   T34] 2 locks held by syz.1.2450/15371:
[  405.365035][   T34]  #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  405.367525][   T34]  #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  405.370253][   T34] 2 locks held by syz.1.2450/15372:
[  405.371971][   T34]  #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  405.374615][   T34]  #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  405.377587][   T34] 2 locks held by syz.1.2450/15373:
[  405.379196][   T34]  #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  405.381952][   T34]  #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  405.385620][   T34] 2 locks held by syz-executor/15378:
[  405.387481][   T34]  #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  405.389906][   T34]  #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  405.392894][   T34] 2 locks held by syz-executor/15379:
[  405.394676][   T34]  #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  405.398613][   T34]  #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  405.401582][   T34] 2 locks held by syz-executor/15382:
[  405.403358][   T34]  #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  405.406540][   T34]  #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  405.409449][   T34] 2 locks held by syz-executor/15405:
[  405.411240][   T34]  #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  405.413903][   T34]  #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  405.417510][   T34] 2 locks held by syz-executor/15407:
[  405.419158][   T34]  #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  405.421597][   T34]  #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  405.424383][   T34] 2 locks held by syz-executor/15409:
[  405.426355][   T34]  #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  405.428981][   T34]  #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  405.431671][   T34] 2 locks held by syz-executor/15433:
[  405.433275][   T34]  #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  405.436025][   T34]  #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  405.438941][   T34] 2 locks held by syz-executor/15436:
[  405.440538][   T34]  #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  405.443124][   T34]  #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  405.446575][   T34] 2 locks held by syz-executor/15440:
[  405.448356][   T34]  #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  405.450945][   T34]  #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  405.453918][   T34] 
[  405.454651][   T34] =============================================
[  405.454651][   T34] 
[  405.457456][   T34] NMI backtrace for cpu 0
[  405.457467][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  405.457476][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  405.457481][   T34] Call Trace:
[  405.457485][   T34]  <TASK>
[  405.457490][   T34]  dump_stack_lvl+0x189/0x250
[  405.457504][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  405.457514][   T34]  ? __pfx__printk+0x10/0x10
[  405.457530][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  405.457541][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  405.457551][   T34]  ? __pfx__printk+0x10/0x10
[  405.457563][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  405.457576][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  405.457586][   T34]  watchdog+0xf93/0xfe0
[  405.457599][   T34]  ? watchdog+0x1de/0xfe0
[  405.457612][   T34]  kthread+0x711/0x8a0
[  405.457624][   T34]  ? __pfx_watchdog+0x10/0x10
[  405.457633][   T34]  ? __pfx_kthread+0x10/0x10
[  405.457643][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  405.457654][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  405.457664][   T34]  ? __pfx_kthread+0x10/0x10
[  405.457673][   T34]  ret_from_fork+0x3fc/0x770
[  405.457683][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  405.457693][   T34]  ? __switch_to_asm+0x39/0x70
[  405.457702][   T34]  ? __switch_to_asm+0x33/0x70
[  405.457711][   T34]  ? __pfx_kthread+0x10/0x10
[  405.457721][   T34]  ret_from_fork_asm+0x1a/0x30
[  405.457737][   T34]  </TASK>
[  405.457740][   T34] Sending NMI from CPU 0 to CPUs 1:
[  405.508487][    C1] NMI backtrace for cpu 1
[  405.508504][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  405.508519][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  405.508526][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  405.508549][    C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 c6 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  405.508561][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  405.508581][    C1] RAX: e7e977ea027c4b00 RBX: ffffffff819683a8 RCX: e7e977ea027c4b00
[  405.508591][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b6a5a RDI: ffffffff8be33300
[  405.508599][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  405.508610][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa37e30
[  405.508619][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1102001f000
[  405.508627][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  405.508637][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  405.508646][    C1] CR2: 00007efd3b687e20 CR3: 000000000df36000 CR4: 00000000000006f0
[  405.508679][    C1] Call Trace:
[  405.508686][    C1]  <TASK>
[  405.508691][    C1]  default_idle+0x13/0x20
[  405.508704][    C1]  default_idle_call+0x74/0xb0
[  405.508719][    C1]  do_idle+0x1e8/0x510
[  405.508734][    C1]  ? __pfx_do_idle+0x10/0x10
[  405.508754][    C1]  cpu_startup_entry+0x44/0x60
[  405.508767][    C1]  start_secondary+0x101/0x110
[  405.508786][    C1]  common_startup_64+0x13e/0x147
[  405.508810][    C1]  </TASK>
[  405.509448][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  405.562126][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  405.564944][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  405.568211][   T34] Call Trace:
[  405.569284][   T34]  <TASK>
[  405.570262][   T34]  dump_stack_lvl+0x99/0x250
[  405.571921][   T34]  ? __asan_memcpy+0x40/0x70
[  405.573501][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  405.575105][   T34]  ? __pfx__printk+0x10/0x10
[  405.576798][   T34]  vpanic+0x281/0x750
[  405.578145][   T34]  ? __pfx_vpanic+0x10/0x10
[  405.579513][   T34]  ? preempt_schedule+0xae/0xc0
[  405.580936][   T34]  ? preempt_schedule_common+0x83/0xd0
[  405.582546][   T34]  panic+0xb9/0xc0
[  405.583688][   T34]  ? __pfx_panic+0x10/0x10
[  405.585302][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  405.587302][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  405.589340][   T34]  watchdog+0xfd2/0xfe0
[  405.590666][   T34]  ? watchdog+0x1de/0xfe0
[  405.592074][   T34]  kthread+0x711/0x8a0
[  405.593667][   T34]  ? __pfx_watchdog+0x10/0x10
[  405.595299][   T34]  ? __pfx_kthread+0x10/0x10
[  405.597022][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  405.598690][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  405.600340][   T34]  ? __pfx_kthread+0x10/0x10
[  405.601863][   T34]  ret_from_fork+0x3fc/0x770
[  405.603523][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  405.605277][   T34]  ? __switch_to_asm+0x39/0x70
[  405.607071][   T34]  ? __switch_to_asm+0x33/0x70
[  405.608809][   T34]  ? __pfx_kthread+0x10/0x10
[  405.610195][   T34]  ret_from_fork_asm+0x1a/0x30
[  405.611852][   T34]  </TASK>
[  405.613678][   T34] Kernel Offset: disabled
[  405.615153][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
06:22:04  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000005d RBX=000000000000005d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff888107080237 R9 =1ffff11020e10046 R10=dffffc0000000000 R11=ffffffff854eff70
R12=dffffc0000000000 R13=ffffffff99afa8d6 R14=ffffffff99def3a0 R15=0000000000000000
RIP=ffffffff854effec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe6b649d28 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ff0000000000ff00 0000000000000000 XMM05=0000000000000021 000000000062642e
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffff000000 XMM09=0000000000000021 000000000062642e
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000040761 RBX=0000000000000001 RCX=0000000000000000 RDX=0000000000000003
RSI=0000000000000000 RDI=ffff888024f25640 RBP=0000000000000000 RSP=ffffc900028ff840
R8 =0000000000000000 R9 =ffffffff8b475a07 R10=dffffc0000000000 R11=fffffbfff1f46fc7
R12=0000000000000000 R13=0000000000000003 R14=ffff888024f26180 R15=0000000000000002
RIP=ffffffff819d63ac RFL=00000057 [---ZAPC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055a18e38c000 CR3=000000010edc6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
