last executing test programs:

18.543819297s ago: executing program 2 (id=2214):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f90fa3c92b", 0x14}], 0x1}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000a99201"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB='I\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7001fedbdf25390000000e0001006e657464657673690000000f0002006e657464657673696d3000000800730001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4810)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000007800)={0x84, @empty, 0x4e24, 0x0, 'lc\x00', 0x20, 0x7f, 0x31}, 0x2c)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6, 0x810, r1, 0xcf497000)
r6 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000000)=<r9=>0x0)
bind$nfc_llcp(r7, &(0x7f0000001040)={0x27, r9, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
readv(r7, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/109, 0x6d}], 0x1)
close(r8)
bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r10 = socket$inet6(0xa, 0x5, 0x0)
r11 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r11, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendto$x25(r11, &(0x7f0000000440)="376036873da4abe91472544342ad6afeb3d50b41fd59e035bd1a65eb70f529c5237d007df3a96643f3b47e5d7cced59cfffc3642184cf211d6ece0ec7933238b93576a8820f62be83fddf6219aa5ad9e1b74ccde5340db0128082698d45fbe24f2", 0x61, 0x40, &(0x7f0000000100), 0x12)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
setsockopt$sock_int(r10, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
listen(r6, 0x1000)

18.453505049s ago: executing program 2 (id=2215):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x3f}, {0xfff1, 0xffff}, {0xffff, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x9}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x34}}, 0x44000)

18.453260939s ago: executing program 2 (id=2216):
r0 = socket(0x10, 0x803, 0x0)
ioctl$SIOCNRDECOBS(r0, 0x89e2)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1)
sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={0x1c, r2, 0x1, 0x703d25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044040}, 0x8842)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x100c3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000300)={0x10, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}}}, 0x108)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x29b1b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

18.323668054s ago: executing program 2 (id=2217):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) (async)
socket$igmp(0x2, 0x3, 0x2)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) (async)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x40383d0c, &(0x7f0000000180)={<r3=>r2, 0x0, 0x100, 0xd})
close(r1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="800002000a00020011"], 0x28}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x9, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000200000000000000000f00003d000c00f0ffffff18290000", @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, &(0x7f0000000100), 0x41100, 0x54, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000340)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0xf, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[r8, r3, r3, r3], &(0x7f0000000440)=[{0x5, 0x5, 0x4, 0x4}, {0x5, 0x1, 0x2, 0xc}, {0x0, 0x1, 0x3, 0xc}, {0x0, 0x4, 0x8}, {0x4, 0x3, 0x7, 0x3}, {0x1, 0x2, 0x4}], 0x10, 0x5}, 0x94)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

18.263739823s ago: executing program 2 (id=2220):
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x45a200, 0x0)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0)
write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98)
splice(r1, 0x0, r5, 0x0, 0x80, 0x8)
ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000240)=0x2)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x34, r9, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x48010}, 0x40044)
sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800014000000003040002000c000280050001000000000014000280080001000000000008000200ac1414000800054000000000090001"], 0x58}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000640)={'syztnl0\x00', <r10=>0x0, 0x20, 0x700, 0x4, 0x412, {{0x15, 0x4, 0x3, 0x5, 0x54, 0x68, 0x0, 0xff, 0x29, 0x0, @local, @local, {[@noop, @ssrr={0x89, 0x7, 0xd8, [@multicast2]}, @lsrr={0x83, 0x1b, 0x48, [@private=0xa010100, @multicast1, @dev={0xac, 0x14, 0x14, 0xe}, @rand_addr=0x64010101, @multicast2, @broadcast]}, @ssrr={0x89, 0x7, 0x87, [@loopback]}, @rr={0x7, 0xf, 0xd6, [@loopback, @rand_addr=0x64010100, @multicast2]}, @ra={0x94, 0x4}]}}}}})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_tracing={0x1a, 0x17, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000080000000000000092ffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000002400000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001103500000000000c175f8fff1ffffffbf91000000000000b70200000100000085000000010000000000"], &(0x7f0000000540)='GPL\x00', 0x6, 0x5d, &(0x7f00000005c0)=""/93, 0x41100, 0x48, '\x00', r10, 0x17, r1, 0x8, &(0x7f0000000700)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0x3, 0x1000, 0x3}, 0x10, 0x2a498, r2, 0x4, 0x0, &(0x7f0000000780)=[{0x3, 0x4, 0x10, 0x5}, {0x3, 0x2, 0x8, 0x7}, {0x1, 0x4, 0x3, 0x6}, {0x4, 0x4, 0x0, 0x3}], 0x10, 0x9}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'})
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[], 0x38}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'})
pipe(&(0x7f0000000300)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
write$cgroup_devices(r12, &(0x7f0000000400)=ANY=[@ANYBLOB="cc30000000000000bfd928a379c3844f02553db20a6822902a9419489281e47c3a649bf533e437af7b5ef12dd12657f252c5b4f4595b17f52a5e2784aca5c95b6001000000b693d4"], 0x8)
ioctl$PPPIOCGIDLE64(r4, 0x8010743f, &(0x7f00000000c0))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r14 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000e40)="d8000000180081064a81f782da02b904021d080400007c09e8fe55a10a0015c0050014a603600e1208000f0000000401a00016009a00014004000000036010fab94dcf5c0461c1d6900094007134cf6ee080000190d0a2ac922353a606487ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00320db70103000040fad95667dc06dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x48084)
sendmsg$kcm(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="a7086274b50164920ff22e09fa1a64921c6120a21d9b573d8aeaf1d59c089a918f139aedffbe3b6eccc3dd53e8982da3568a9aa657ffad5066f451245ff4a7dd0f561e0a441b71c1635216a29d2bc546ee3f69239684fb22558827c2373aedf0d0c030caf7ff1e8a2689e03991eb55655ae41f47ee950d79cc2ee0f503f6ad02a915a7b3ae6e7f46ea7a1dd2e457f372bee5ee3b7a669160178bb41d473a0f6652265edc0245edbc7ba191be7d37e4fc976d0f117cf299bc508ecf42d8a95340445bd66c0b7e6a4c9a6bbf55680d1324f79979e526e06fc9408545c8229b590aa82dfb8cd93416da", 0xe8}, {&(0x7f00000000c0)="fcd5520dbbe12eff82f37db693a59f73a81329a4da41fc4693c1887b8aafbab35e9ef258bd949c57d04cc0edac", 0x2d}, {0x0}, {&(0x7f0000000f40)="6077c495fba3c7fc3679248f7039beaddafce915b8b81421a8a2dbb8f31477c95aaaea1a9cc40aa2fbe4b120a5aad33d0c44f92a99f3b8fe50066e32c04ca9ffe15ea43d519023cf9b98cb017acbaddb0dd2a37223a5d8a76383f041325fcf5e19e02dc1b8fc410c37832c70f0fa9df0852f24405a142a7fbc6bc59cccbe20343698f03c792adc5b7a53a607aec48bcf2a02908def93c53ab5f4b2b25272fdb67e38d97ea0a7a5a56dffbbb9c106ce8c692c6cfaf5739d3a390635a06282ab87831cfc05a2ccc8b77d1ce2d3537ccc8e3f133c0842e60d850c6deed02235843784dc2f0c61898cf4209c8aab0eb4fb2792bb09ae325416ace3c29c8bf202922a5f3dcd9f73ff7e644399cf134c2a178876f386b7c4059de261c99685b0125659051786d4078d551dbb3a31ee53e1133505c877adf8f0ada2d09e3a3bbb4b02d3ea5cabed7bbd53ada62e15c451cb90c470a3c1f754f42d4e95e2870b6b9d6132d730272b99e6dd13955453b171fd56cf7ca306b6a2f28e2c629cdd108f37e932fdfffc53214f17212cbf15db43806d8fb37c826a5a4c0f344eec128cf6ea3ef2608b1a1c420ddbff4a1c47d9112f7543a43bb47b0f5f24dd896a9628c8d282c126267dfac9374b478e794b9177cf8e2af2cfb768c5f835d6caa1147b4d38a2adfd0954c14e0b08a8de16151bcbaf0eb84d5f4e0d48bb8562462e576cd90e37eea4494eae4da6fc2ad6889cde88389553b3dac77d5a265e1c569b5763b0a4fb634864a0b9597068cd18cd3546072561bb6baaedbca476ca29699e2441f881081a0fc2d6e3345297b9ac0bb8a93e7b65cf4cf52c561d4e2903d5b118cc26d8dcf03b3538bd9a1cf064c8ba72f844294b3b2ec146dfe4ae0786b5700c47c5e8c7b17967bea37bac948a1113bd82bb6274f577f7299546da4e68289bf1d527ec804eee58bad4fa7d1baacc19ee8c57a4c54bc503fd3dc21bb43e833b5d7a38e18d8e23d1fc6d78506c5b60b6da862365c208f04a67d70ef4b707b2531617509803c4c2e20c3092a153af2971a9c340d907cdaf8e9743541446be9c91c9688ec9658df127ddefb5ee60f36101e71872a89aa01b11434321ebe136310c28ff6033bf1970afe06a4a22dddb39396eaae07c323a76846de29f67f5743a069d587b8b5de6979bb64e45316aebc5f44932f6f3a99bd6197008384bff7a7c4897ababd0a6c40d1a94a0569cb26c9da4c464f73d6053e3c2ecfdc338ff522e5e40220b9b825053b5954d6d39cbc3c0e65f6028d81ecc7af014b693284f64284c4e78cebd365f5122e4a5539a87f4973d5f42a0b8b0f1f1af4f0ec828ccb18d54255929b8d69c7cec2f97249f2e4993d7eccf778fb00a312a889e5f067dcef83ec76abe0c97bf07ec9e88272616e4c6c72f5998bd27b740444d667ca1d6a29c3bfd9fad7fcb6859caaad950301490dae46adb97040c0ac8a6a2ed4ed9cbe95ef82aafebf469c0c7980b0d7b6d326faf7c9ea0ceee5eb2e92717a5637ff9a77d4db5bce283293044ca45bbeea80fd38b502269078944ab45e6a9fe09cb93b0191d6123402de24de425c8bdaf3575d60319261fe34123599fd497efc6b4b80907f4087508f2a1a8b7837b466d2b05171f64a447486c57eefa417139c337623561e42857e131f32d8e50d448092ae2fb70e1f58cf4338d82547e7902f37c9d5da5af0a851a7da8ec262a6de92bb98d946bff4c698275f4055dc2cc13452b26e4baa01eb1b83e412a71f0cd034bf4908fe1b6c082cd33010eb63182e562768f3e7fb89d5646190b150ffb1848e4984ca3bc8ac7544373cb906c56076cf4056f97cb385ea2bc249230dbc5131a3eba352ca0387f4d15adfc5a0b2e701a023274e5c2c594ee38d1b22094f557aa47b62f22182610f595ea51d9bedb0e9ad03467ac6454b9b1336d1736d223d55eec69bff4b20136d3cbdbcdfe5e2868eaa9906ba7e32b188753a35a93097f3fe112a390f242769fe8f13b2d182d24661bad62a0401dbdbc20d3a552ef89b18fb76b2d22282aab171e4b8accc947fe590c9409a55e44078ca15d9af89a9ce91ecf9ea5e83b026a1401c37bd08caf132731212a0bbbf2ac21570505c548baf30f3a4d11eee7cb1a00478ad60bbb1b85a7612b9a58b9db2f2f8f40039253319bd7d57fea6b267cdefb3e0ef70afdc55e0ae170b04ad9f7e1e4f10d1a10477d9cee2b0c234f026eb707d5326d2ec45b64647221bb882d6b67a33d5aac6d0446a9b6984118173badf11f2dac5f88f364e25cd44b1d59cc5e15c6be746153aaa369b55ecbe4c54290ce2f50b54077dfdc74102437b8531decdcb021c8359c94966a35e457db001b2381cbe675b15543bb2125a2610b4b0d3ff732816b1a6b72e273df54c4bd352b914027c3aa175197d532b09982fede3c458bce584b2ed8b1ee10bc094109dfa8776b276fe280f4976f34d8e58457aeef300be01df4652487102b5a955c27412b1f97f369c35df3c0892c2cd372b0474fccf371e2787d04990cefceb08b0d96c99ad0bc23c2ce86e7d2aa9eca511d4711d6866416bcb7e431283348359bfe45b5d8434b6666021f6e094ab03357330709a28d69c0147397a0b42967af66b24b69e32bea70705cbb2436c98f180fd05696f34b486646b87598ee7d2a406c97c11557266a0a3140f2bf01abd6aa643a7c907aee71ec75477053a4ef8e4fde6ce5f3566b2ac5cfc58fa7c307853717ccc1c3e1b87003b728d2e93912cb6c59912e643350ecc86bbcf32a4ef10eb0892b699a804af15a31c14e23baab919d0342f3903d7b5e9a34192c37d957fa659aacb0c2d48ff27a133d14fd17af15ea881449f066cff3d158227d51ab774608f7fc675fe9dcb7c60f154c7d7218e3980095d871fbe412bd6d45464b9866fb62ba306cdbd026711abeba6922d0f17a3c703a584a7ceb8828918c4493444f64695fa7ba3862fa9b506b2c4ada611985fd45451ad223a3d4f3961f2eb2265b8a934abf6b269912ba2b7303b0ecc00d9e0e037af7d275ee89565d50b53bf6f95e9bf1b671b8f63b18772441876f5befd6e3cdb33dea4882c4a359a40bccb70962af0b679a505bf9a985723cc9d65179a0c6502e086eb400e51c63401b37cc95e6168ab25d8c7afa0e6129be679694044fd9944e6df969af9ba69aa8a02a98cbcfc856575fdf6dee9d26d0d0aec2a20f3c52419ac8d4449f75682c6881cf1e3c5277f6d42288e899505fecc49460c58bcb0bc52d28f89f11a061de60ad21af23b26696dfd11dfcc93c5eeb46f6355b556f3d6c99d9e446f796549ab252d856a9d6fe931f2a88555c087d8db51454be9fe4c190a1d2d9cf55645ead5eedd3078eecf7ae8c94e6c695854d709ab93ba1f50c16a1e08805f756367df9faea82975ed8f02b4a8cce59d905450e4181dd6e3e2ef999376c49fc41a17f7944af91ba0c222d16d5bcdf78b242d817f045c0f51eb8c86156d17d7c456a1ae12e61009fe192af97a7c4fcb9fd662bd4d9d80ab4f6d553ae4cc7b4b3e40440a11b7e68416aaeb31310dfe8e7da9b11ed0bfb451a261bae353c4ab64b98b46ceb5f7871ca2747531e025da98cb4a32d90fe52bae2eaa9ab08243956d9d461bc1cdfefe351d33b55362ec7a843906bd1232c8468cd41c0b5a889700f995b647178177ecf8d56ba09ea1d5cad733972a991afaf69886c945f13dd0f9057492d619f0b07c0cb05a7dcbef801bcb6871b7474fadb5fecea26ed8d86fe90cad853f392b7e651a19d57c6470dbc592c6870f438621cbb73119a492a839508b9e20296d252d4c62dd3a88ea1536fce4497910cabc31e10aa3f0a687330a7e0834da5d9f846a36b1b80b10388cd7c6b903771dd1d911b210e3eef952a8f7a39eb4354c47c8a14cf031391c7091f04bdefcb5c2881298bda57184d7c6750fb286aab7ef4b6f9d7b24e7dd62616d08da6aff51d26a8b535caeb6aee9782277112a971d1076eab351e4fc800345e65b1b350e8368b7b837683e7a1acd0a3a4273058de37067ac3561c339c09170c0869defd3682344226da20dec9a8fca4b2f2a04de9a19f12137ecea5dae38a333566f82aa7a81926346bcc4c97106c09e6f1a0cd56e9fad4211b8b839e51bccc5fa4fa5a07373f3988ed42a710dbc45f20f10351c3bd0ba68a3b7364490f2e68540cea64c25f8f4ce6a7936512943930732d3f24a9f63f6b9996259e9637b8f408176d76089a1674b1814560279653e411d374c1c6b56ad70814b27fe72e1be0b65dd313f0886205fd67830e310d2afe766901ff904ad56d31ba46e679466451243073daad8495e5fbb9cdd10746387ce74d09ec190ffe550ab6d5ab7e1a853e47232b0f109da5e046b5ea14251caf80261964985428d8a6f9ebb8ed9555c0e0838c0e0bf3ef2412760971434e4b3f5357beb576b1a26d94ba98a547251cc7ff015b7e55f116329e64cd61b84f86ebaf6c8c3fcc8b64c5f91517bca087ec469bd18f343139280c265989e9cc4454fa463d6e3e55be79af56b7577a99611ac6e2bcce653dc36d4fbb56f4c3e0f9a8230c78e563349223ff9a54a773980dee52313130e3c7401d6a3947f98310c484c43ef398e246c9fb2ccd5a0322e3b8eddd60a06affdd32baedcdf4c488c31a30599f76be17b515865bb5dac49556b6c0ae7e6e44ad99919df6998b416486f0e2ba95f904b3c180867cdb8966d44d830ace05f952de415df72d90702bc5139b144414b8810e6e63d4192ff516b9fda6ed25ce85e4092ff47daa0132d442d13b12bc10dcabf7ba89e8a51eea2858ee1a75610fe0fe6eaa93d84b23ca85840f36bd9fee701405f026f885ddd4821d2ab983e4516020dc280317df487098fe5e4c5890ebc202e712683fa2d07d75bd85d65b6102af1b6c74d7f3bbd531d73643415ebe78d45d1b4ede637f6239259a9dc383dc5972700f0bdcac4a330621f30aa97af83822d1fd3ab03af28b55d37c2161815123e3edf2ea7d0835b5ba9daa33be7c4dfe52a3bbc39a3e6178086828d1d34998aeab6123da14a5d3425c6d2aa7eaeff022abad68568fd0099030b1e0fbbda9d7c2ac677bbc5b96fa2e5ccec6fce4d6eedfd86d14a5f6c8cf36a422aaac42b6f4fa728c94fff7c6d917977824ea0bd0eb9c3786e39a7acaeadbbb78bbbc189f63e0414f85a43e1ecea1d7b7fa603452f1485deaea88ba912d55da9f310229bbfce6129b23158eccd9cb93be96434668040a6ac4b83150dbbdd934298694b30c391377d10dda028d5218daeeb90bd116afb9c165911d174588756ed71f5c60095dc0d453b30c651101e32f9adee923af3349e5b23d9b70a2a65f4bc3c17bf7f015c9c756033662bd604b153ea0c0765cc88e922143b1632c5fec0d35360c4e845e09ccb7e07f31e9f9b76ccc48227af75511940e95b6fe144027e9d00637953c2021528f74a874fa0a5189b3c1a57f82e8ca5a8fad45b8886355317fb17ee9c2378f49d84a465fe395c4fa2ce5c5dd9c556bb98a41aa86527cb4db2ccedbabb94f5ae0e51f74377163761d20feac9ed2345ce5f410062abbfa5707ac057d6a0258eb9b3c2b4880e7229d819fb3cc166ed0b467210987e9a7fccee24cbc3c306c3789ef73f4adaffaddefad76fac1a6701d15be6e8c97c3a8ac3c4132ddd38132268fb7300f24f6636952fbf2e75519fff8ced4d943da05eaeed5664dc5986d0800936ac2da40b24fea17f74a21", 0xfe0}], 0x4}, 0x4008840)
ioctl$sock_netdev_private(r13, 0x89f8, &(0x7f0000000340)="c5b323700a8e5ab42b32ce9b")
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[], 0x54}, 0x1, 0xba01, 0x0, 0x11}, 0x4000000)

17.343313465s ago: executing program 1 (id=2236):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x38, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r1}]}}}]}, 0x38}}, 0x48010)
close(r1)
unshare(0x6a040000) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) (async)
unshare(0x10000400)
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) (async, rerun: 32)
syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async, rerun: 32)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r7, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) (async)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010027bd7000fcdbdf25020000000800010018000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) (async)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x18}}, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8)
r11 = accept4(r10, 0x0, 0x0, 0x0)
sendmmsg$inet(r11, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000009c0)="af8d195ac29a2a0fe48238e1543d21ee817644e51046a895ff2b7e18d764b6e016752938c9d661e72f7cc56a70a2967587d23dfbef4857038e1cf33269f981efe0dc9d60409b63866620856ebf18d3dc1efe26620cef44f9311cc7b4fb0aee4581ccb941afd07c76517b7cee360ef44217cf70bfb7f34b8cef568000e6a94f0e3a2a35edbe8739bc4203acd8179229f375ff9c71210818738eabb1988fa217f608427624c073807576e4dfbc6cae39f311d1aacfd5a6ee473edeb0947459", 0xbe}], 0x1}}, {{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000001ec0)="f6e15788a9", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000003240)="ffc74af594e3d59c35681d3ed9ed59684a2a2d84a1d60585b888797600eaa4911052cee7c5f5f210392fdb3bec0d84d4102116ae7567153b5f9359b65a80f341ada2af53c028694e069e7ebd7ffbfdbdd1bd39ea410c1cb0440f72e5f580180284251b248b43d463d3aab9", 0x6b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="194129cc7d4d5a140f1f749697f9304a16fe9a812c1393a8b28af6b73d22a9348d4146e171e424b36a245bbbfe6910cc2011059d90799b56b4730c9147ebfb06f4e56fa79974240bebebe7fb1d9c42ec1017ea7838bf9b1656bb64c907a01a2567448645aa39d6d780bcbe890706b29f4d6565c89138726bda82f90a8043f1d9a1340bc47d8ef644637a62aaf393", 0x8e}, {&(0x7f00000001c0)="72f6cd754bdd0954a2c5c00394", 0xd}, {&(0x7f0000000500)="2ea0fbb5b5acfba63dc1af7dcab574d01320ecdadbbd3068ba5f714acf60a480725f07945c823b001d54900e4fbca493b951b3fdd19e86ca7d6d2c260d8f0ede9df30695a2f2c0d0eb28e359e9e975e2ee05d2fe33ce50ef15cdb58dc1f01b37e8b1b1c90431a6139519929291f8b3af2990826f4fe727d3ef5d79a14d8e9fa7ae19e6233817e6f694ea90dae5b93b0dd986adc63b6cc53319a20d5e73f73a5d10b1c0f765e84a1686c15df780de8eefc415776f8148040f00801c897076391b8d305e", 0xc3}, {&(0x7f0000000600)="e33268b53a6cefd73876b72a5ce8c491492442b968e256d21576d23f20d4c904a1255bdc9da62b51bcaaa2a0944f192955dc8a5ae453c6c57c88ab4bff57fbbd9f085a00196f7b332cff900be5428cfb220b331e8ab5333014ba6ee6742a54678e3c757676a306e8db8eb356b369d5cdb95f80b4b8c8f44aea7980229f2e52348b00c5ec09be6b6c55f6ec919bffd9a643f4a8685b9235f73f9ab2755b3f92a3af1ad9d152b71832aa0c2ee7ad27bcbbd76d6b56db0c4296f6edc5597a8a8fa93783662528fee10d225075fb0ff671a38d4ee061d40aba5f4d46354a77", 0xdd}], 0x4}}], 0x4, 0x44008090)

17.203830288s ago: executing program 1 (id=2239):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = gettid()
r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x68}, @void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xa}, @NL80211_ATTR_PID={0x8, 0x52, r1}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x34}}, 0x4000000) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) (async)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="0000001801040700ff00c5"], 0x24e2) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) (async)
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r6, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xc00000}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x3}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x6}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x4}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x1}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x24, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x8}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0xb9}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0xb}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0xa}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80800}, 0x20000001) (async)
read(r2, 0x0, 0x97) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="942a000004000600140012800900010076657468000000000454f88008001300", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008040)

17.202510642s ago: executing program 0 (id=2240):
r0 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r1 = socket$netlink(0x10, 0x3, 0x0)
recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{0x0}], 0x1}, 0x5d}], 0x1, 0x10022, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x1}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0xffffff33) (async)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000005400010026bd70010000000007000000", @ANYRES32=r4, @ANYBLOB="de2ac109", @ANYRES32=r4, @ANYBLOB="00000380ff01000000000000000000000000000100000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r2, @ANYBLOB="fad70edaad5de52e56ed41be7bd9f1786c6b04348eba7da6f69c34151d2458204b6b76036afb0e30aa3fd1d9482a7cf62895cb910c3a1ef18c98a952061430eb23095a613e13dccaaefc65cff346beee1e91a4c9b6e7da8201ca15ccea39b9706266cf1c06dbf454074b0184375d86884c03b3cf80862e18e5bd7e0a02e1f0000e97a8de1df61bdcb49561b7904bf5759abe327618553357"], 0x28}}, 0x40000) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) (async)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
shutdown(r2, 0x0) (async)
r6 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) (async)
bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) (async)
socket$inet6(0xa, 0x80002, 0x0) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r7, 0x18000000000002a0, 0x22, 0x0, &(0x7f00000004c0)="b9ff030768441a8cb89e14f00800e075702b1c1dac4091b76a4bcbe4dc62b42e52a7", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r8, &(0x7f0000000b80)=[{{&(0x7f0000000940)=@x25, 0x80, &(0x7f0000000b40)=[{&(0x7f00000009c0)=""/210, 0xd2}, {&(0x7f0000000ac0)=""/41, 0x29}, {&(0x7f0000000b00)=""/26, 0x1a}], 0x3, 0xfffffffffffffffe}, 0x680}], 0x1, 0x40002110, &(0x7f0000000bc0)={0x77359400})
sendmsg$nl_generic(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000310001072abd70000000000003"], 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) (async)
syz_genetlink_get_family_id$smc(&(0x7f0000000040), r9)

17.202148026s ago: executing program 1 (id=2241):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000045c0)={'tunl0\x00', &(0x7f0000004580)=@ethtool_link_settings={0x26, 0x1, 0x1, 0x7f, 0x81, 0x8, 0x0, 0xf, 0xb, 0xe1, [0x674, 0x5, 0x2, 0x2, 0x7fffffff, 0x7, 0x80, 0x3]}})
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x17)

17.20093463s ago: executing program 0 (id=2242):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r2=>0x0})
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRES16=r1, @ANYBLOB="01000000000000000300000000000800010003000003000100000005000300071493622eaaf04ba4df031d635ad28558d371f38ef81575dfacb350d45fd66e8dbd87e09ef6daeaa975a846f1a91da0beeedef622f429033fa026a1bd0b93d793915786d82aeea262bac50600000000000000965aab796bcc9b9fde9eda944f11c6a02b274c496d5622609debefdac37958c336eb42f5abc540f205589800"/168], 0x38}}, 0x4000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="0000090000000000000037800b0003"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r6, &(0x7f0000000000), &(0x7f00000001c0)=""/4096}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000012c0)={{r6}, &(0x7f0000001780), &(0x7f00000017c0)='%pK    \x00'}, 0x20)
syz_emit_ethernet(0x28e, &(0x7f00000000c0)=ANY=[@ANYBLOB="e727dc07001f00000000000086dd609907a602582c03cb697a653e336f000000500000000000ff0200000000000000000000000000010102002e00000000"], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000001200)=ANY=[@ANYBLOB="011304133c76a56239b80db348696c5a28c800ec"], 0x7)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB], 0x44}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r9 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r9, 0x0, 0x0, 0x4c881, &(0x7f0000000400)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r11 = accept4(r10, 0x0, 0x0, 0x800)
sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x492492492492624, 0x0)
recvmsg(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)=""/65, 0x41}], 0x1}, 0x102)
recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
sendmmsg$inet6(r9, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000001540), 0x0, &(0x7f0000002100)}}, {{0x0, 0x0, &(0x7f0000001d40), 0x0, &(0x7f0000001dc0)=[@tclass={{0x14, 0x29, 0x43, 0x1}}], 0x18}}], 0x2, 0x4040005)
socket$nl_generic(0x10, 0x3, 0x10)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)

17.143892375s ago: executing program 0 (id=2243):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r3=>0x0})
bind$can_raw(r2, &(0x7f0000000000)={0x1d, r3}, 0x10)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
close(r2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0)

17.073531071s ago: executing program 0 (id=2244):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)=ANY=[@ANYBLOB="1900000000000000"], 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x2a, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt(r5, 0x0, 0x6, &(0x7f0000000080)=""/3, &(0x7f0000000040)=0x3)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x5, 0x8}}}}]}, 0x44}}, 0x4000)
socket(0x10, 0x803, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38)
close(0x4)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001300)=ANY=[@ANYRES32=r0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='cq_alloc_error\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000009000), 0x4)
unshare(0x62040200)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, 0x0, 0x0)

16.341814556s ago: executing program 1 (id=2245):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', <r2=>0x0})
socket$vsock_stream(0x28, 0x1, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r4, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2810, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x2f, 0x0, @empty, @multicast1}}}})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r4, &(0x7f00000000c0)="6493e31f54d23cc1401dcde6984334ecfc744c25a8d852aee81b2b4e8c97d84c0a7a745ac977cae330af0b6cf6c5d69e1d6e91f1bb017638b68b89056bd9ec767cc7d6a7070ff32976db8ec3f52e71c144eb1a4f1e6b5743e50cfc281dec827bbeb63a942f4e0773fc57ed9b700e0ed4f76616be75d63a81d2f8699cc7e44359fabfe484c67030402a9ee55ab29c6a4b767a19f539abd3ccd739d6a7472e9ed712e30957f3359f6b994b3b", &(0x7f00000001c0)=@udp=r5, 0x2}, 0x20)
connect$llc(r0, &(0x7f0000000040)={0x1a, 0x204, 0x9, 0x3, 0x9, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x200, 0xfffffffd, 0x203, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x800000003b9aca00}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x44040)

16.341086361s ago: executing program 1 (id=2246):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x80)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r4, 0x11, 0x4, 0x0, @void, @value=r3}, 0x20)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) (async, rerun: 64)
recvmmsg(0xffffffffffffffff, &(0x7f0000008b00)=[{{0x0, 0x0, &(0x7f00000076c0)=[{0x0}], 0x1}, 0xffffffff}], 0x1, 0x100, 0x0) (async, rerun: 64)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = socket$igmp(0x2, 0x3, 0x2) (async)
ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x4a, {}, 'lo\x00'})
ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1}, {0x0, @dev}, 0x8, {0x2, 0x0, @rand_addr=0x64010101}, 'lo\x00'}) (async)
r7 = socket$netlink(0x10, 0x3, 0x0)
writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

16.259722056s ago: executing program 1 (id=2247):
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa0800140600fe8000000000000000000000000000a01eb2f7f7076688f04e6db725f8aafe8000"/58, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0)
socket(0x2b, 0x1, 0x1)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_emit_ethernet(0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="ffff0903430500"/22], 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000085000000d000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xb, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e83", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000002c40), r4)
sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000200)={0x28, r5, 0x1, 0x70bd2b, 0x25dfdbf9, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x48894)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa50}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x42}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x90)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x60, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000"], 0xb8}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, 0x0, &(0x7f0000000000))
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, 0x0, &(0x7f0000001640))
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c000180080001407f0020010500070001000000060004404e2200000c000280080001407f00000187"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

16.257336146s ago: executing program 0 (id=2248):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
shutdown(r1, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x9, 0x3, 0x268, 0x128, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, &(0x7f0000000240), {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xe, 0x8, [0x1a, 0xf, 0xf, 0x2f, 0x23, 0x3e, 0x30, 0x15, 0x3b, 0xe, 0x1e, 0x17, 0x1b, 0x3c, 0x36, 0x4], 0x2, 0x2, 0x8}}}, {{@uncond, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x6, 0x0, 'snmp\x00', {0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20048800}, 0x4015)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
connect$tipc(r6, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x2}}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7}, &(0x7f0000000340), &(0x7f0000000280)}, 0x20)
sendmsg$can_bcm(r5, &(0x7f0000000300)={&(0x7f0000000100), 0x10, &(0x7f00000002c0)={&(0x7f0000000140)={0x4, 0x14, 0x7, {}, {}, {0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x36, 0x6, 0x0, 0x0, "154f1399c9da91b2659ef6253847161fcbf58f3203fd85e9304505f4cb61b8a4d11c56e753ea6bcf7489ff806734ccc58edcddfb08e1e5a1d9cf70cbda06d0e0"}}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)

15.293403559s ago: executing program 0 (id=2249):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_emit_ethernet(0x5a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xf, 0x6a, [@dev={0xac, 0x14, 0x14, 0x39}, @broadcast, @multicast2]}, @timestamp={0x44, 0x10, 0x5, 0x3, 0x0, [0x0, 0x0, 0x0]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)
r2 = accept4$rose(0xffffffffffffffff, &(0x7f0000000240)=@full={0xb, @remote, @netrom, 0x0, [@rose, @rose, @remote, @default, @bcast]}, &(0x7f0000000380)=0x40, 0x80000)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r3)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'ip6tnl0\x00', <r7=>0x0, 0x2f, 0x4, 0x9, 0x6, 0x0, @empty, @mcast1, 0x40, 0x8, 0xe, 0xe4c2}})
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x90, r6, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR={0x60, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x4000080)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000180)={0x1, {{0x2, 0x4, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000240)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f0000000740)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000002004e237f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7ff, 0x0, 0x10, 0x6, 0x3, 0xfffffffa, 0xc219, 0x1, 0x3ccd}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x200048e5}, 0x4008000)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

15.242714863s ago: executing program 2 (id=2250):
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@getstat={0xe0, 0x15, 0x1, 0x70bd28, 0x25dfdbfc, {{'morus1280-generic\x00'}, '\x00', '\x00', 0x2400, 0x200}, ["", "", "", "", "", ""]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000004}, 0x804)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x1)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)={0x234, r1, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xca6, 0x6e}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x5d84}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xcc}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xd3e}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x4}, @NL80211_MESHCONF_NOLEARN={0x5}]}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x1}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xde}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xbb}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x400}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xa}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_NOLEARN={0x5}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x15, 0x24, [{0x1b, 0x1}, {0x2, 0x1}, {0x9}, {0x4}, {0x24}, {0x24, 0x1}, {0x1b}, {0x0, 0x1}, {0x0, 0x1}, {0x1f, 0x1}, {0x2}, {0x48}, {0x6, 0x1}, {0x1, 0x1}, {0x12}, {0x9, 0x1}, {0x9, 0x1}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000001}], @NL80211_ATTR_TX_RATES={0x138, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x1b, 0x3, 0x9, 0x30, 0xb, 0x1, 0x36, 0x0, 0x3, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x5, 0x439c, 0x9, 0x3, 0x9, 0x6844, 0x8]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0xb, 0x1, 0x12, 0x5, 0x30, 0x18, 0xb, 0x2, 0x30, 0x60, 0xc, 0x6c, 0x1, 0x18]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x1, 0x24, 0x9, 0x0, 0x49, 0x60, 0x3, 0x48, 0x48, 0x18, 0x1f, 0x1b, 0x6c, 0x24, 0x5, 0x36, 0x3, 0x2, 0xc, 0x6, 0x4, 0xc, 0x16]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x7}, {0x0, 0x9}, {0x4, 0x4}, {0x3}, {0x3}, {0x2}, {0x4, 0x6}, {0x7, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9a0, 0x0, 0x41c9, 0x0, 0x100, 0x200, 0xb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xde, 0x5, 0x0, 0x6d4a, 0x8, 0x8, 0x7f]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x889, 0x5, 0x8001, 0xff, 0xd238, 0x4, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x18, 0x2, [{0x0, 0xa}, {0x2}, {0x6, 0x6}, {0x4, 0x6}, {0x0, 0x5}, {0x6, 0x2}, {0x2, 0xa}, {0x3, 0x2}, {0x4, 0x2}, {0x4, 0x1}, {0x1, 0x8}, {0x6, 0x8}, {0x4, 0x3}, {0x4, 0x3}, {0x3}, {0x1, 0x8}, {0x6, 0x7}, {}, {0x2, 0x2}, {0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x0, 0x9}, {0x3, 0x8}, {0x2, 0x5}, {0x1, 0x3}, {0x5, 0x4}, {0x2, 0x9}, {0x5, 0x9}, {0x1}, {0x4, 0x7}, {0x1, 0x8}, {0x2, 0x6}, {0x3, 0x7}, {}, {0x2, 0x7}, {0x1, 0x3}, {0x0, 0x7}, {0x6}, {}, {0x5, 0x2}, {0x6, 0x4}, {0x5, 0xa}, {0x0, 0x7}, {0x2, 0x1}, {0x4, 0x5}, {0x1, 0x5}, {0x3, 0x3}, {0x3, 0x2}, {0x0, 0x4}, {0x2, 0x4}, {0x5, 0x8}, {0x6, 0xa}, {0x6, 0x8}, {0x1}, {0x2, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, 0x234}}, 0x4004)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x18, 0x3f9, 0x10, 0x70bd28, 0x25dfdbfb, {0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x50}, 0x40000)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, <r3=>0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%-5lx  \x00'}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={0x1, <r5=>0xffffffffffffffff}, 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x2, 0x10001, 0xf, 0x40018, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x7ff, 0x1, 0x2}, 0x50)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000ac0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000b00)=0x14)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x1c, &(0x7f0000000b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xf}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x1, 0xc, 0x8, 0x2, 0x4, 0x8}, @generic={0x9, 0x3, 0x4, 0x81, 0x7ff}, @snprintf]}, &(0x7f0000000c80)='GPL\x00', 0x9, 0x57, &(0x7f0000000cc0)=""/87, 0x41000, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000d80)={0x3, 0x5, 0x4079, 0x200}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xd3}, 0x94)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000ec0)={0x0, 0x4, 0x10}, 0xc)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000f00)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x4)
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000fc0)={<r12=>r0, 0x3, 0x1, 0xffff})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001080)={{0x1, <r13=>0xffffffffffffffff}, &(0x7f0000001000), &(0x7f0000001040)='%ps    \x00'}, 0x20)
r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001100)=@generic={&(0x7f00000010c0)='./file0\x00', 0x0, 0x18}, 0x18)
r15 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1e, 0x28, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x43}, [@map_fd={0x18, 0xa, 0x1, 0x0, r3}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @call={0x85, 0x0, 0x0, 0x35}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa6f4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @map_val={0x18, 0x3, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000a80)='syzkaller\x00', 0x7ff, 0x0, 0x0, 0x41100, 0x8, '\x00', r7, @sk_lookup=0x24, r2, 0x8, &(0x7f0000000b40)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r8, 0x7, &(0x7f0000001140)=[0x1, r9, r10, r11, r12, r13, r14], &(0x7f0000001180)=[{0x0, 0x5, 0x10, 0xc}, {0x2, 0x1, 0x4}, {0x2, 0x5, 0x6, 0x4}, {0x2, 0x1, 0x5, 0x5}, {0x1, 0x3, 0x3, 0x1}, {0x2, 0x1, 0x1, 0x1}, {0x0, 0x4, 0x4, 0xa}], 0x10, 0x2}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001300)={'wlan0\x00', <r16=>0x0})
sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x30, r1, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r16}, @val={0xc, 0x99, {0xfffffff9, 0x3f}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048004}, 0x20000000)
ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000001440)={'veth1_to_hsr\x00', &(0x7f0000001400)=@ethtool_ts_info})
write$cgroup_subtree(r12, &(0x7f0000001480)={[{0x2d, 'cpuset'}, {0x2b, 'devices'}, {0x2d, 'net_prio'}]}, 0x1b)
setsockopt$IP_VS_SO_SET_EDITDEST(r12, 0x0, 0x489, &(0x7f00000014c0)={{0xff, @loopback, 0x4e20, 0x0, 'sh\x00', 0x2}, {@loopback, 0x4e23, 0x4, 0x6, 0xfffffffd, 0x2}}, 0x44)
sendto$x25(r15, &(0x7f0000001540)="93c3b4a474a556e85d3e6649f991ac54cf46fcbcc4d373b76937d206aa8361d742a9596fc3c7c3baf5552fba6af3a7c1d3b11046121efbd54dfa7b6152ccdc80a0615bef56c880a66af5834a750e17809f88f60d7cde512f4c9fa0e7454c188d961235b9c520473dbe51159fd94e7b57d3a0a450c08e85391db0c22f46dd4ebcda856930248d0d3e397bfe8b304900efc12e123d7d6ec8fb69c06c69ef656791753d78648b1c9b1cc02e8a7d412994d121ed76e0607f2b563d", 0xb9, 0x40080, &(0x7f0000001600)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12)
setsockopt$MRT_FLUSH(r12, 0x0, 0xd4, &(0x7f0000001640)=0x8, 0x4)
r17 = socket(0x1e, 0xa, 0x4)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000007, 0x110, r17, 0xd42ac000)
sendmsg$IPVS_CMD_GET_CONFIG(r17, &(0x7f0000001880)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001840)={&(0x7f0000001700)={0x138, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7453}]}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xf}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x65}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x11}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6000}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x2}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}]}, 0x138}, 0x1, 0x0, 0x0, 0x4040}, 0xc1)

1.020805632s ago: executing program 32 (id=2247):
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa0800140600fe8000000000000000000000000000a01eb2f7f7076688f04e6db725f8aafe8000"/58, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0)
socket(0x2b, 0x1, 0x1)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_emit_ethernet(0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="ffff0903430500"/22], 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000085000000d000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xb, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e83", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000002c40), r4)
sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000200)={0x28, r5, 0x1, 0x70bd2b, 0x25dfdbf9, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x48894)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa50}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x42}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x90)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x60, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000"], 0xb8}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, 0x0, &(0x7f0000000000))
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, 0x0, &(0x7f0000001640))
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c000180080001407f0020010500070001000000060004404e2200000c000280080001407f00000187"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

9.239216ms ago: executing program 33 (id=2249):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_emit_ethernet(0x5a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xf, 0x6a, [@dev={0xac, 0x14, 0x14, 0x39}, @broadcast, @multicast2]}, @timestamp={0x44, 0x10, 0x5, 0x3, 0x0, [0x0, 0x0, 0x0]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)
r2 = accept4$rose(0xffffffffffffffff, &(0x7f0000000240)=@full={0xb, @remote, @netrom, 0x0, [@rose, @rose, @remote, @default, @bcast]}, &(0x7f0000000380)=0x40, 0x80000)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r3)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'ip6tnl0\x00', <r7=>0x0, 0x2f, 0x4, 0x9, 0x6, 0x0, @empty, @mcast1, 0x40, 0x8, 0xe, 0xe4c2}})
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x90, r6, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR={0x60, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x4000080)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000180)={0x1, {{0x2, 0x4, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000240)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f0000000740)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000002004e237f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7ff, 0x0, 0x10, 0x6, 0x3, 0xfffffffa, 0xc219, 0x1, 0x3ccd}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x200048e5}, 0x4008000)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

0s ago: executing program 34 (id=2250):
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@getstat={0xe0, 0x15, 0x1, 0x70bd28, 0x25dfdbfc, {{'morus1280-generic\x00'}, '\x00', '\x00', 0x2400, 0x200}, ["", "", "", "", "", ""]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000004}, 0x804)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x1)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)={0x234, r1, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xca6, 0x6e}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x5d84}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xcc}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xd3e}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x4}, @NL80211_MESHCONF_NOLEARN={0x5}]}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x1}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xde}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xbb}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x400}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xa}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_NOLEARN={0x5}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x15, 0x24, [{0x1b, 0x1}, {0x2, 0x1}, {0x9}, {0x4}, {0x24}, {0x24, 0x1}, {0x1b}, {0x0, 0x1}, {0x0, 0x1}, {0x1f, 0x1}, {0x2}, {0x48}, {0x6, 0x1}, {0x1, 0x1}, {0x12}, {0x9, 0x1}, {0x9, 0x1}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000001}], @NL80211_ATTR_TX_RATES={0x138, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x1b, 0x3, 0x9, 0x30, 0xb, 0x1, 0x36, 0x0, 0x3, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x5, 0x439c, 0x9, 0x3, 0x9, 0x6844, 0x8]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0xb, 0x1, 0x12, 0x5, 0x30, 0x18, 0xb, 0x2, 0x30, 0x60, 0xc, 0x6c, 0x1, 0x18]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x1, 0x24, 0x9, 0x0, 0x49, 0x60, 0x3, 0x48, 0x48, 0x18, 0x1f, 0x1b, 0x6c, 0x24, 0x5, 0x36, 0x3, 0x2, 0xc, 0x6, 0x4, 0xc, 0x16]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x7}, {0x0, 0x9}, {0x4, 0x4}, {0x3}, {0x3}, {0x2}, {0x4, 0x6}, {0x7, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9a0, 0x0, 0x41c9, 0x0, 0x100, 0x200, 0xb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xde, 0x5, 0x0, 0x6d4a, 0x8, 0x8, 0x7f]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x889, 0x5, 0x8001, 0xff, 0xd238, 0x4, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x18, 0x2, [{0x0, 0xa}, {0x2}, {0x6, 0x6}, {0x4, 0x6}, {0x0, 0x5}, {0x6, 0x2}, {0x2, 0xa}, {0x3, 0x2}, {0x4, 0x2}, {0x4, 0x1}, {0x1, 0x8}, {0x6, 0x8}, {0x4, 0x3}, {0x4, 0x3}, {0x3}, {0x1, 0x8}, {0x6, 0x7}, {}, {0x2, 0x2}, {0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x0, 0x9}, {0x3, 0x8}, {0x2, 0x5}, {0x1, 0x3}, {0x5, 0x4}, {0x2, 0x9}, {0x5, 0x9}, {0x1}, {0x4, 0x7}, {0x1, 0x8}, {0x2, 0x6}, {0x3, 0x7}, {}, {0x2, 0x7}, {0x1, 0x3}, {0x0, 0x7}, {0x6}, {}, {0x5, 0x2}, {0x6, 0x4}, {0x5, 0xa}, {0x0, 0x7}, {0x2, 0x1}, {0x4, 0x5}, {0x1, 0x5}, {0x3, 0x3}, {0x3, 0x2}, {0x0, 0x4}, {0x2, 0x4}, {0x5, 0x8}, {0x6, 0xa}, {0x6, 0x8}, {0x1}, {0x2, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, 0x234}}, 0x4004)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x18, 0x3f9, 0x10, 0x70bd28, 0x25dfdbfb, {0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x50}, 0x40000)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, <r3=>0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%-5lx  \x00'}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={0x1, <r5=>0xffffffffffffffff}, 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x2, 0x10001, 0xf, 0x40018, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x7ff, 0x1, 0x2}, 0x50)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000ac0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000b00)=0x14)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x1c, &(0x7f0000000b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xf}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x1, 0xc, 0x8, 0x2, 0x4, 0x8}, @generic={0x9, 0x3, 0x4, 0x81, 0x7ff}, @snprintf]}, &(0x7f0000000c80)='GPL\x00', 0x9, 0x57, &(0x7f0000000cc0)=""/87, 0x41000, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000d80)={0x3, 0x5, 0x4079, 0x200}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xd3}, 0x94)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000ec0)={0x0, 0x4, 0x10}, 0xc)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000f00)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x4)
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000fc0)={<r12=>r0, 0x3, 0x1, 0xffff})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001080)={{0x1, <r13=>0xffffffffffffffff}, &(0x7f0000001000), &(0x7f0000001040)='%ps    \x00'}, 0x20)
r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001100)=@generic={&(0x7f00000010c0)='./file0\x00', 0x0, 0x18}, 0x18)
r15 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1e, 0x28, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x43}, [@map_fd={0x18, 0xa, 0x1, 0x0, r3}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @call={0x85, 0x0, 0x0, 0x35}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa6f4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @map_val={0x18, 0x3, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000a80)='syzkaller\x00', 0x7ff, 0x0, 0x0, 0x41100, 0x8, '\x00', r7, @sk_lookup=0x24, r2, 0x8, &(0x7f0000000b40)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r8, 0x7, &(0x7f0000001140)=[0x1, r9, r10, r11, r12, r13, r14], &(0x7f0000001180)=[{0x0, 0x5, 0x10, 0xc}, {0x2, 0x1, 0x4}, {0x2, 0x5, 0x6, 0x4}, {0x2, 0x1, 0x5, 0x5}, {0x1, 0x3, 0x3, 0x1}, {0x2, 0x1, 0x1, 0x1}, {0x0, 0x4, 0x4, 0xa}], 0x10, 0x2}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001300)={'wlan0\x00', <r16=>0x0})
sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x30, r1, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r16}, @val={0xc, 0x99, {0xfffffff9, 0x3f}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048004}, 0x20000000)
ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000001440)={'veth1_to_hsr\x00', &(0x7f0000001400)=@ethtool_ts_info})
write$cgroup_subtree(r12, &(0x7f0000001480)={[{0x2d, 'cpuset'}, {0x2b, 'devices'}, {0x2d, 'net_prio'}]}, 0x1b)
setsockopt$IP_VS_SO_SET_EDITDEST(r12, 0x0, 0x489, &(0x7f00000014c0)={{0xff, @loopback, 0x4e20, 0x0, 'sh\x00', 0x2}, {@loopback, 0x4e23, 0x4, 0x6, 0xfffffffd, 0x2}}, 0x44)
sendto$x25(r15, &(0x7f0000001540)="93c3b4a474a556e85d3e6649f991ac54cf46fcbcc4d373b76937d206aa8361d742a9596fc3c7c3baf5552fba6af3a7c1d3b11046121efbd54dfa7b6152ccdc80a0615bef56c880a66af5834a750e17809f88f60d7cde512f4c9fa0e7454c188d961235b9c520473dbe51159fd94e7b57d3a0a450c08e85391db0c22f46dd4ebcda856930248d0d3e397bfe8b304900efc12e123d7d6ec8fb69c06c69ef656791753d78648b1c9b1cc02e8a7d412994d121ed76e0607f2b563d", 0xb9, 0x40080, &(0x7f0000001600)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12)
setsockopt$MRT_FLUSH(r12, 0x0, 0xd4, &(0x7f0000001640)=0x8, 0x4)
r17 = socket(0x1e, 0xa, 0x4)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000007, 0x110, r17, 0xd42ac000)
sendmsg$IPVS_CMD_GET_CONFIG(r17, &(0x7f0000001880)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001840)={&(0x7f0000001700)={0x138, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7453}]}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xf}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x65}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x11}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6000}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x2}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}]}, 0x138}, 0x1, 0x0, 0x0, 0x4040}, 0xc1)

kernel console output (not intermixed with test programs):

Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  121.645902][ T9867] tipc: Resetting bearer <eth:syzkaller0>
[  121.655663][ T9867] syzkaller0: left promiscuous mode
[  121.668031][ T9867] tipc: Resetting bearer <eth:syzkaller0>
[  121.708056][ T9875] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  121.794893][ T9883] dvmrp0: left allmulticast mode
[  121.934404][ T9897] bridge0: port 1(erspan0) entered blocking state
[  121.936575][ T9897] bridge0: port 1(erspan0) entered disabled state
[  121.938699][ T9897] erspan0: entered allmulticast mode
[  121.940865][ T9897] erspan0: left allmulticast mode
[  122.212057][ T9906] netlink: 'syz.1.1060': attribute type 12 has an invalid length.
[  122.269187][ T9908] netlink: 'syz.1.1061': attribute type 4 has an invalid length.
[  122.276382][ T9908] netlink: 'syz.1.1061': attribute type 4 has an invalid length.
[  122.603173][ T9919] netlink: 'syz.2.1066': attribute type 1 has an invalid length.
[  122.723893][ T9933] netlink: 'syz.2.1069': attribute type 1 has an invalid length.
[  123.381953][ T9941] syz_tun: entered allmulticast mode
[  123.387039][ T9941] dvmrp8: entered allmulticast mode
[  123.390044][ T9941] syz_tun: left allmulticast mode
[  123.392637][ T9941] dvmrp8: left allmulticast mode
[  123.413982][ T9941] netlink: 'syz.1.1072': attribute type 23 has an invalid length.
[  123.527047][ T9955] syzkaller1: entered promiscuous mode
[  123.528853][ T9955] syzkaller1: entered allmulticast mode
[  123.535300][ T9957] netlink: 'syz.0.1074': attribute type 16 has an invalid length.
[  123.543171][ T9957] __nla_validate_parse: 28 callbacks suppressed
[  123.543183][ T9957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1074'.
[  123.553925][ T9957] IPv6: NLM_F_REPLACE set, but no existing node found!
[  123.695351][ T9959] can: request_module (can-proto-0) failed.
[  123.804823][ T9974] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  123.814726][ T9974] gretap0: entered promiscuous mode
[  123.817949][ T9974] gretap0: left promiscuous mode
[  123.878704][ T9980] bond18: (slave gretap2): Releasing active interface
[  123.886024][ T9980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1083'.
[  123.911992][ T9989] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  124.078661][ T9998] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1088'.
[  124.082501][ T9998] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  124.131779][T10006] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1091'.
[  124.161077][T10008] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1092'.
[  124.176984][T10008] 8021q: adding VLAN 0 to HW filter on device bond19
[  124.187093][T10008] bond19: (slave gretap3): making interface the new active one
[  124.192193][T10008] bond19: (slave gretap3): Enslaving as an active interface with an up link
[  124.197447][T10008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1092'.
[  124.204999][T10008] macsec2: entered promiscuous mode
[  124.206715][T10008] bond0: entered promiscuous mode
[  124.209139][T10008] bond0: left promiscuous mode
[  124.262402][T10008] syz.1.1092 (10008) used greatest stack depth: 18480 bytes left
[  124.324874][T10012] syzkaller0: left allmulticast mode
[  124.339860][T10015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1094'.
[  124.339868][T10016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1094'.
[  124.378731][T10020] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  124.387531][T10021] pimreg3: entered allmulticast mode
[  124.545212][T10034] bond19: (slave gretap3): Releasing active interface
[  124.555911][T10034] rdma_op ffff88811bdd89f0 conn xmit_rdma 0000000000000000
[  124.710477][T10045] can: request_module (can-proto-0) failed.
[  124.713787][T10045] openvswitch: netlink: IP tunnel dst address not specified
[  124.775007][T10047] siw: device registration error -23
[  124.778047][T10047] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1104'.
[  124.956621][T10056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1107'.
[  125.299792][T10070] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.305039][T10070] syzkaller0: entered promiscuous mode
[  125.307557][T10070] syzkaller0: entered allmulticast mode
[  125.326186][T10070] tipc: Resetting bearer <eth:syzkaller0>
[  125.331709][T10069] tipc: Resetting bearer <eth:syzkaller0>
[  125.336068][T10069] tipc: Disabling bearer <eth:syzkaller0>
[  125.471522][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  125.631968][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  126.382654][T10093] geneve0: entered promiscuous mode
[  126.387057][ T5717] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  126.397762][T10105] 8021q: adding VLAN 0 to HW filter on device bond11
[  126.405623][ T5717] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  126.408977][ T5717] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  126.421109][ T5717] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  126.476166][T10122] : entered promiscuous mode
[  126.769459][T10158] tipc: Resetting bearer <eth:gre0>
[  126.795911][T10158] tipc: Resetting bearer <eth:syzkaller0>
[  126.820632][   T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  126.824389][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  126.827649][   T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  126.830676][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  126.872587][   T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  126.876095][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  126.887960][   T13] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  126.897366][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  126.962883][   T10] IPVS: starting estimator thread 0...
[  126.965349][T10179] tipc: Failed to remove unknown binding: 66,1,1/0:124436199/124436201
[  126.970625][T10179] tipc: Failed to remove unknown binding: 66,1,1/0:124436199/124436201
[  126.974044][T10179] tipc: Failed to remove unknown binding: 66,1,1/0:124436199/124436201
[  127.075752][T10181] IPVS: using max 48 ests per chain, 115200 per kthread
[  127.153645][T10198] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.156674][T10198] syzkaller0: entered promiscuous mode
[  127.158979][T10198] syzkaller0: entered allmulticast mode
[  127.173678][T10200] tipc: Resetting bearer <eth:syzkaller0>
[  127.178073][T10200] tipc: Disabling bearer <eth:syzkaller0>
[  127.540047][T10213] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  128.454334][T10258] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.457825][T10258] syzkaller0: entered promiscuous mode
[  128.460090][T10258] syzkaller0: entered allmulticast mode
[  128.470838][T10258] tipc: Resetting bearer <eth:syzkaller0>
[  128.475618][T10258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  128.478930][T10258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  128.484990][T10257] tipc: Resetting bearer <eth:syzkaller0>
[  128.489727][T10257] tipc: Disabling bearer <eth:syzkaller0>
[  128.894609][T10267] validate_nla: 9 callbacks suppressed
[  128.894625][T10267] netlink: 'syz.1.1160': attribute type 1 has an invalid length.
[  128.899197][T10266] netlink: 'syz.1.1160': attribute type 1 has an invalid length.
[  128.904942][T10266] vlan2: entered promiscuous mode
[  128.906598][T10266] bond0: entered promiscuous mode
[  128.908456][T10266] vlan2: entered allmulticast mode
[  128.910482][T10266] bond0: entered allmulticast mode
[  128.921521][T10267] vlan2: entered promiscuous mode
[  128.923627][T10267] vlan2: entered allmulticast mode
[  129.134277][T10244] Set syz1 is full, maxelem 65536 reached
[  129.163000][T10274] __nla_validate_parse: 19 callbacks suppressed
[  129.163011][T10274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1162'.
[  129.184368][T10274] vlan2: entered allmulticast mode
[  129.186481][T10274] bond20: entered allmulticast mode
[  129.296907][T10279] bridge0: port 1(erspan0) entered blocking state
[  129.299582][T10279] bridge0: port 1(erspan0) entered disabled state
[  129.302620][T10279] erspan0: entered allmulticast mode
[  129.305523][T10279] erspan0: left allmulticast mode
[  129.476672][T10296] netlink: 'syz.2.1167': attribute type 1 has an invalid length.
[  129.498936][T10304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1170'.
[  129.516986][T10304] bond21: (slave vxcan7): The slave device specified does not support setting the MAC address
[  129.521098][T10304] bond21: (slave vxcan7): Error -95 calling set_mac_address
[  129.534153][T10307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1171'.
[  129.576668][T10310] macvlan3: entered promiscuous mode
[  129.578834][T10310] macvlan3: entered allmulticast mode
[  129.581723][T10310] bond21: (slave macvlan3): Error -98 calling set_mac_address
[  129.604623][T10312] vlan2: entered allmulticast mode
[  129.606374][T10312] bond0: entered allmulticast mode
[  129.629780][T10315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1174'.
[  129.634128][T10315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1174'.
[  129.695623][T10320] netlink: 'syz.1.1176': attribute type 1 has an invalid length.
[  129.712859][T10320] 8021q: adding VLAN 0 to HW filter on device bond22
[  129.776408][T10335] rdma_op ffff8881097e39f0 conn xmit_rdma 0000000000000000
[  129.835461][T10340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1180'.
[  129.877953][T10341] veth1: entered promiscuous mode
[  129.893407][T10343] netlink: 'syz.2.1181': attribute type 39 has an invalid length.
[  129.992979][T10345] tipc: Started in network mode
[  129.995123][T10345] tipc: Node identity a64f5219d7bc, cluster identity 4711
[  129.998587][T10345] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.004342][T10345] syzkaller0: entered promiscuous mode
[  130.006739][T10345] syzkaller0: entered allmulticast mode
[  130.013507][T10345] tipc: Resetting bearer <eth:syzkaller0>
[  130.016544][T10345] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.1182'.
[  130.032964][T10344] tipc: Resetting bearer <eth:syzkaller0>
[  130.037101][T10344] tipc: Disabling bearer <eth:syzkaller0>
[  130.225468][   T13] tipc: Left network mode
[  130.307714][T10351] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  130.384415][T10351] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1184'.
[  130.556483][T10362] netlink: 'syz.2.1186': attribute type 1 has an invalid length.
[  130.559527][T10362] netlink: 'syz.2.1186': attribute type 2 has an invalid length.
[  130.572113][T10363] netlink: 'syz.2.1186': attribute type 1 has an invalid length.
[  130.575244][T10363] netlink: 'syz.2.1186': attribute type 2 has an invalid length.
[  130.609434][T10363] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  130.623301][T10365] sctp: [Deprecated]: syz.0.1187 (pid 10365) Use of struct sctp_assoc_value in delayed_ack socket option.
[  130.623301][T10365] Use struct sctp_sack_info instead
[  130.653449][T10362] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  130.661257][T10362] tipc: Failed to remove unknown binding: 66,1,1/3341119203:1607125562/1607125564
[  130.665153][T10362] tipc: Failed to remove unknown binding: 66,1,1/3341119203:1607125562/1607125564
[  130.693139][T10369] netlink: 'syz.2.1189': attribute type 2 has an invalid length.
[  130.699702][T10369] : entered promiscuous mode
[  130.702348][T10367] pim6reg1: entered promiscuous mode
[  130.704444][T10367] pim6reg1: entered allmulticast mode
[  130.854644][T10371] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1188'.
[  130.867416][T10371] bond12 (unregistering): Released all slaves
[  131.011033][T10376] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.019311][T10381] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1191'.
[  131.026450][T10381] 8021q: adding VLAN 0 to HW filter on device bond0
[  131.057873][T10376] tipc: Disabling bearer <eth:syzkaller0>
[  131.914455][T10424] bridge12: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  131.993432][T10430] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  132.390201][T10449] veth5: entered promiscuous mode
[  132.394475][T10449] bond23: (slave veth5): Enslaving as a backup interface with a down link
[  132.658438][T10475] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  132.907673][T10488] syzkaller0: entered promiscuous mode
[  132.909926][T10488] syzkaller0: entered allmulticast mode
[  133.005214][T10497] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.005773][T10498] bond0: option mode: unable to set because the bond device is up
[  133.465650][T10542] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  133.495432][T10544] bridge12: port 1(bond18) entered blocking state
[  133.497973][T10544] bridge12: port 1(bond18) entered disabled state
[  133.500398][T10544] bond18: entered allmulticast mode
[  133.504086][T10549] ip6tnl0: entered promiscuous mode
[  133.513274][T10549] ip6tnl0: entered allmulticast mode
[  133.515584][T10549] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check.
[  133.524575][T10541] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  133.592353][T10565] batman_adv: batadv0: Adding interface: dummy0
[  133.594826][T10565] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  133.600744][T10562] syzkaller1: entered promiscuous mode
[  133.604124][T10562] syzkaller1: entered allmulticast mode
[  133.677321][T10573] syzkaller0: entered promiscuous mode
[  133.679630][T10573] syzkaller0: entered allmulticast mode
[  133.914024][T10585] dvmrp0: left allmulticast mode
[  133.951275][T10585] rdma_rxe: rxe_newlink: failed to add lo
[  133.975561][T10585] 8021q: adding VLAN 0 to HW filter on device team0
[  133.979602][T10585] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  134.065744][T10588] validate_nla: 11 callbacks suppressed
[  134.065761][T10588] netlink: 'syz.2.1248': attribute type 16 has an invalid length.
[  134.072061][T10588] netlink: 'syz.2.1248': attribute type 17 has an invalid length.
[  134.139453][T10588] IPv6: NLM_F_REPLACE set, but no existing node found!
[  134.444784][T10593] netlink: 'syz.1.1250': attribute type 3 has an invalid length.
[  134.449849][T10593] syz_tun: entered allmulticast mode
[  134.489183][T10593] siw: device registration error -23
[  134.493707][T10593] __nla_validate_parse: 92 callbacks suppressed
[  134.493718][T10593] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1250'.
[  134.499475][T10593] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1250'.
[  134.502878][T10593] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1250'.
[  134.505969][T10593] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1250'.
[  134.509327][T10593] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1250'.
[  134.515335][T10593] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1250'.
[  134.519094][T10593] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1250'.
[  134.522718][T10593] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1250'.
[  134.526549][T10593] ip6tnl0: left promiscuous mode
[  134.528789][T10593] ip6tnl0: left allmulticast mode
[  134.530484][T10593] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1250'.
[  134.533674][T10593] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1250'.
[  134.539034][T10593] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  134.541653][T10593] bond2: left promiscuous mode
[  134.543958][T10593] bond3: left promiscuous mode
[  134.546772][T10593] sit2: left promiscuous mode
[  134.548545][T10593] ip6gre1: left allmulticast mode
[  134.550373][T10593] macsec1: left promiscuous mode
[  134.552223][T10593] macsec1: left allmulticast mode
[  134.554151][T10593] bond9: left promiscuous mode
[  134.556271][T10593] geneve2: left promiscuous mode
[  134.558299][T10593] geneve2: left allmulticast mode
[  134.560455][T10593] geneve3: left promiscuous mode
[  134.562982][T10593] tipc: Resetting bearer <eth:syzkaller0>
[  134.565372][T10593] syzkaller0: left promiscuous mode
[  134.567160][T10593] syzkaller0: left allmulticast mode
[  134.569498][T10593] ip6tnl4: left promiscuous mode
[  134.572958][T10593] geneve0: left promiscuous mode
[  134.576265][T10593] veth1: left promiscuous mode
[  134.578894][T10593] veth5: left promiscuous mode
[  134.591737][ T1091] wlan1: Trigger new scan to find an IBSS to join
[  134.657210][T10592] syz_tun: left allmulticast mode
[  134.725196][T10608] netlink: 'syz.0.1254': attribute type 11 has an invalid length.
[  134.858448][T10619] netlink: 'syz.0.1258': attribute type 4 has an invalid length.
[  134.903950][T10626] netlink: 'syz.0.1258': attribute type 4 has an invalid length.
[  134.936128][T10628] netlink: 'syz.2.1260': attribute type 1 has an invalid length.
[  135.037168][T10636] netlink: 'syz.0.1263': attribute type 2 has an invalid length.
[  135.045529][T10636] : entered promiscuous mode
[  135.075499][T10647] netlink: 'syz.1.1266': attribute type 22 has an invalid length.
[  135.088614][T10647] netlink: 'syz.1.1266': attribute type 22 has an invalid length.
[  135.094463][ T7831] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  135.101471][ T7831] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  135.105072][ T7831] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  135.122885][ T7831] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  135.211119][T10654] netlink: 'syz.2.1268': attribute type 9 has an invalid length.
[  135.238684][T10670] .70: renamed from hsr0
[  135.245301][T10670] .70: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  135.251178][T10670] .70: entered allmulticast mode
[  135.254541][T10670] hsr_slave_0: entered allmulticast mode
[  135.257776][T10670] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check.
[  135.650609][T10689] bond18: left allmulticast mode
[  135.653404][T10689] bridge12: port 1(bond18) entered disabled state
[  135.755311][T10694] tap0: tun_chr_ioctl cmd 1074025680
[  136.016004][T10704] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  136.047455][T10706] batman_adv: batadv0: Removing interface: dummy0
[  136.294983][T10734] bond0: Unable to set up delay as MII monitoring is disabled
[  136.373985][T10740] bond25: (slave bridge14): making interface the new active one
[  136.377327][T10740] bond25: (slave bridge14): Enslaving as an active interface with an up link
[  136.472254][ T5868] IPVS: starting estimator thread 0...
[  136.500516][T10765] C: renamed from team_slave_0
[  136.563089][T10760] IPVS: using max 92 ests per chain, 220800 per kthread
[  136.697646][ T7831] IPVS: stop unused estimator thread 0...
[  136.749253][T10796] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.754974][T10796] syzkaller0: entered promiscuous mode
[  136.757188][T10796] syzkaller0: entered allmulticast mode
[  136.763488][T10796] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  136.773294][T10796] tipc: Resetting bearer <eth:syzkaller0>
[  136.776241][T10793] tipc: Resetting bearer <eth:syzkaller0>
[  136.780753][T10793] tipc: Disabling bearer <eth:syzkaller0>
[  137.044588][T10821] team0: Failed to send options change via netlink (err -105)
[  137.047060][T10821] team0: Port device dummy0 added
[  137.052607][T10821] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  137.059841][T10821] team0: Failed to send options change via netlink (err -105)
[  137.063132][T10821] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  137.067279][T10821] team0: Port device dummy0 removed
[  137.069664][T10821] bridge13: port 1(dummy0) entered blocking state
[  137.076604][T10821] bridge13: port 1(dummy0) entered disabled state
[  137.080132][T10821] dummy0: entered allmulticast mode
[  137.083231][T10821] dummy0: entered promiscuous mode
[  137.551445][ T1091] wlan1: Trigger new scan to find an IBSS to join
[  138.012808][T10854] .70: left allmulticast mode
[  138.014912][T10854] hsr_slave_0: left allmulticast mode
[  138.022806][T10854] vlan3: left promiscuous mode
[  138.025191][T10854] geneve1: left promiscuous mode
[  138.027503][T10854] vlan3: left allmulticast mode
[  138.029582][T10854] geneve1: left allmulticast mode
[  138.032085][T10854] gtp0: left promiscuous mode
[  138.035408][T10854] veth1: left promiscuous mode
[  138.037674][T10854] macsec2: left promiscuous mode
[  138.039816][T10854] macsec2: left allmulticast mode
[  138.043348][T10854] vlan2: left allmulticast mode
[  138.045779][T10854] bond0: left allmulticast mode
[  138.359569][T10884] vlan0: entered promiscuous mode
[  138.383844][T10893] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709549676)
[  138.387505][T10893] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  138.864010][T10920] wg1: entered promiscuous mode
[  138.866021][T10920] wg1: entered allmulticast mode
[  138.950158][T10925] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.953923][T10925] syzkaller0: entered promiscuous mode
[  138.955836][T10925] syzkaller0: entered allmulticast mode
[  138.960849][T10925] tipc: Resetting bearer <eth:syzkaller0>
[  138.964450][T10924] tipc: Resetting bearer <eth:syzkaller0>
[  138.967614][T10924] tipc: Disabling bearer <eth:syzkaller0>
[  139.207461][T10927] validate_nla: 12 callbacks suppressed
[  139.207476][T10927] netlink: 'syz.2.1344': attribute type 1 has an invalid length.
[  139.223134][T10927] 8021q: adding VLAN 0 to HW filter on device bond20
[  139.230653][T10927] 8021q: adding VLAN 0 to HW filter on device bond20
[  139.234072][T10927] bond20: (slave vcan0): The slave device specified does not support setting the MAC address
[  139.238677][T10927] bond20: (slave vcan0): Error -95 calling set_mac_address
[  139.285092][T10928] macvlan3: entered promiscuous mode
[  139.287188][T10928] macvlan3: entered allmulticast mode
[  139.290499][T10928] bond20: entered promiscuous mode
[  139.292987][T10928] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  139.297668][T10928] bond20: left promiscuous mode
[  139.356707][T10934] netlink: 'syz.2.1346': attribute type 1 has an invalid length.
[  139.437054][T10937] ip6gre0: entered promiscuous mode
[  139.439043][T10937] ip6gre0: entered allmulticast mode
[  139.769872][T10973] syzkaller0: entered promiscuous mode
[  139.775851][T10973] syzkaller0: entered allmulticast mode
[  139.780329][T10972] __nla_validate_parse: 287 callbacks suppressed
[  139.780338][T10972] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1355'.
[  139.791186][ T6533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.794206][ T6533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.798913][T10972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1355'.
[  139.805461][T10972] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  139.809434][T10972] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  139.856764][T10974] netlink: 'syz.2.1355': attribute type 10 has an invalid length.
[  140.214164][T10981] tap0: tun_chr_ioctl cmd 1074025678
[  140.216014][T10981] tap0: group set to 0
[  140.373124][T10984] netlink: 'syz.0.1359': attribute type 9 has an invalid length.
[  140.375763][T10984] netlink: 'syz.0.1359': attribute type 6 has an invalid length.
[  140.591596][ T1091] wlan1: Trigger new scan to find an IBSS to join
[  140.597230][T10986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1360'.
[  140.769996][T10999] bridge0: port 1(batadv0) entered blocking state
[  140.778460][T10999] bridge0: port 1(batadv0) entered disabled state
[  140.785125][T10999] batadv0: entered allmulticast mode
[  140.800777][T10999] batadv0: entered promiscuous mode
[  140.839559][T11005] vti0: entered promiscuous mode
[  140.883472][T11010] netlink: 'syz.1.1367': attribute type 1 has an invalid length.
[  140.883987][T11008] pimreg3: entered allmulticast mode
[  141.023407][T11021] macvlan3: entered allmulticast mode
[  141.025232][T11021] veth1_vlan: entered allmulticast mode
[  141.027664][T11021] veth1_vlan: left allmulticast mode
[  141.083053][T11029] netlink: 'syz.0.1371': attribute type 13 has an invalid length.
[  141.219079][T11036] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1372'.
[  141.222787][T11039] netlink: 'syz.2.1373': attribute type 2 has an invalid length.
[  141.223414][T11036] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1372'.
[  141.231136][T11040] syzkaller0: entered promiscuous mode
[  141.240389][T11040] syzkaller0: entered allmulticast mode
[  141.246680][T11036] rdma_rxe: rxe_newlink: failed to add lo
[  141.263213][ T5717] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  141.266507][ T5717] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  141.269682][T11036] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  141.280260][T11045] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1374'.
[  141.285215][T11045] netlink: 'syz.0.1374': attribute type 1 has an invalid length.
[  141.287908][T11045] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1374'.
[  141.291780][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  141.317002][T11047] workqueue: Failed to create a rescuer kthread for wq "bond27": -EINTR
[  141.349471][T11058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1377'.
[  141.393929][T11061] syzkaller0: entered promiscuous mode
[  141.395632][T11061] syzkaller0: entered allmulticast mode
[  141.432765][T11065] netlink: 'syz.0.1380': attribute type 12 has an invalid length.
[  141.501487][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  141.642056][T11079] : entered promiscuous mode
[  141.700494][T11087] IPVS: set_ctl: invalid protocol: 94 100.1.1.2:20001
[  141.727896][T11090] veth0_macvtap: left promiscuous mode
[  141.730071][T11090] veth0_macvtap: entered promiscuous mode
[  141.732908][T11090] veth0_macvtap: entered allmulticast mode
[  141.736346][T11089] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.784141][T11096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1389'.
[  141.828461][T11106] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  141.903595][T11122] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1397'.
[  141.990945][T11140] Unsupported ieee802154 address type: 0
[  141.998051][T11140] syzkaller1: entered promiscuous mode
[  141.999953][T11140] syzkaller1: entered allmulticast mode
[  142.005886][T11140] syz_tun: entered allmulticast mode
[  142.130903][T11155] x9: renamed from bridge_slave_0
[  142.273438][ T7831] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  142.305632][T11188] 8021q: adding VLAN 0 to HW filter on device bond21
[  142.316457][T11187] bond21: (slave gretap4): making interface the new active one
[  142.320526][T11187] bond21: (slave gretap4): Enslaving as an active interface with an up link
[  142.326406][T11189] macsec3: entered promiscuous mode
[  142.328018][T11189] bond0: entered promiscuous mode
[  142.333359][T11189] bond0: left promiscuous mode
[  142.458102][T11204] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  142.477689][T11204] macvlan3: entered promiscuous mode
[  142.479938][T11204] macvlan3: entered allmulticast mode
[  142.484091][T11204] bond22: (slave macvlan3): Opening slave failed
[  142.604645][T11215] 8021q: adding VLAN 0 to HW filter on device bond23
[  142.733399][T11229] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  142.851493][ T6148] tipc: Node number set to 2806279084
[  142.875224][T11249] 8021q: adding VLAN 0 to HW filter on device bond12
[  142.880976][T11249] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  142.886234][T11249] bond12: (slave wlan0): Enslaving as an active interface with a down link
[  143.167951][T11283] bond27: (slave vxcan7): The slave device specified does not support setting the MAC address
[  143.177875][T11283] bond27: (slave vxcan7): Error -95 calling set_mac_address
[  143.324288][T11306] bridge0: entered allmulticast mode
[  143.328023][ T5717] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  143.331252][ T5717] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  143.355428][T11309] syzkaller1: tun_chr_ioctl cmd 1074025677
[  143.357409][T11309] syzkaller1: linktype set to 804
[  143.522485][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  143.572073][T11333] bond13 (unregistering): Released all slaves
[  143.619661][T11337] bond13 (unregistering): Released all slaves
[  143.821241][T11384] bond12: (slave wlan0): Releasing active interface
[  143.970574][T11396] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  144.274052][T11414] validate_nla: 10 callbacks suppressed
[  144.274064][T11414] netlink: 'syz.2.1461': attribute type 10 has an invalid length.
[  144.525957][T11446] netlink: 'syz.2.1469': attribute type 8 has an invalid length.
[  144.586990][T11455] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  144.589375][T11456] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  144.593030][T11456] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  144.793156][T11479] vlan2: entered promiscuous mode
[  144.794408][T11478] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  144.794922][T11479] bond0: entered promiscuous mode
[  144.802213][T11479] vlan2: entered allmulticast mode
[  144.803999][T11479] bond0: entered allmulticast mode
[  144.842369][T11478] __nla_validate_parse: 36 callbacks suppressed
[  144.842380][T11478] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1479'.
[  144.848346][T11478] dummy0: left allmulticast mode
[  144.850293][T11478] dummy0: left promiscuous mode
[  144.853374][T11478] bridge13: port 1(dummy0) entered disabled state
[  144.923113][T11484] pim6reg1: entered promiscuous mode
[  144.925539][T11484] pim6reg1: entered allmulticast mode
[  144.928919][T11487] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  144.932332][T11486] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  144.940547][T11486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1481'.
[  144.947586][T11487] netlink: 'syz.1.1481': attribute type 5 has an invalid length.
[  145.010061][T11491] syzkaller1: entered promiscuous mode
[  145.013831][T11491] syzkaller1: entered allmulticast mode
[  145.035268][T11484] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1480'.
[  145.039083][T11484] vlan0: left promiscuous mode
[  145.040814][T11484] vlan0: entered allmulticast mode
[  145.043616][T11484] veth0_vlan: entered allmulticast mode
[  145.071519][ T6192] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  145.074044][T11499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1483'.
[  145.081283][T11499] syz_tun (unregistering): left allmulticast mode
[  145.094395][T11500] syzkaller1: left promiscuous mode
[  145.096094][T11500] syzkaller1: left allmulticast mode
[  145.168863][T11502] netlink: 'syz.0.1484': attribute type 21 has an invalid length.
[  145.171763][T11502] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1484'.
[  145.174973][T11502] netlink: 'syz.0.1484': attribute type 4 has an invalid length.
[  145.177533][T11502] netlink: 'syz.0.1484': attribute type 3 has an invalid length.
[  145.180399][T11502] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1484'.
[  145.291695][T11504] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  145.295356][T11504] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1485'.
[  145.310606][T11504] bond0 (unregistering): Released all slaves
[  145.370207][T11506] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1486'.
[  145.378659][T11506] batman_adv: batadv0: Adding interface: ip6gretap3
[  145.380922][T11506] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500.
[  145.387503][T11506] batman_adv: batadv0: Interface activated: ip6gretap3
[  145.497676][T11517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1489'.
[  145.503859][T11517] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  145.506874][T11517] syzkaller0: entered promiscuous mode
[  145.508617][T11517] syzkaller0: entered allmulticast mode
[  145.513086][T11517] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1489'.
[  145.517186][T11517] syzkaller0: Caught tx_queue_len zero misconfig
[  145.519700][T11517] syzkaller0: mtu less than device minimum
[  145.550235][T11521] veth13: entered allmulticast mode
[  145.794091][T11539] ip6tnl0: entered promiscuous mode
[  145.795815][T11539] ip6tnl0: entered allmulticast mode
[  145.798308][T11539] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check.
[  145.827076][T11541] netlink: 'syz.1.1495': attribute type 1 has an invalid length.
[  145.840219][T11541] 8021q: adding VLAN 0 to HW filter on device bond28
[  146.129017][T11565] netlink: 'syz.1.1501': attribute type 1 has an invalid length.
[  146.188578][T11573] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  146.247988][T11577] wg2: entered promiscuous mode
[  146.250890][T11577] wg2: entered allmulticast mode
[  146.505883][T11597] syzkaller1: entered promiscuous mode
[  146.508120][T11597] syzkaller1: entered allmulticast mode
[  146.628021][T11608] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  146.695366][T11608] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  146.728463][T11616] dvmrp8: entered allmulticast mode
[  146.733592][T11616] dvmrp8: left allmulticast mode
[  146.872924][T11622] netlink: 'syz.2.1509': attribute type 1 has an invalid length.
[  146.882242][T11622] 8021q: adding VLAN 0 to HW filter on device bond24
[  146.890663][T11622] 8021q: adding VLAN 0 to HW filter on device bond24
[  146.894222][T11622] bond24: (slave vxcan7): The slave device specified does not support setting the MAC address
[  146.898305][T11622] bond24: (slave vxcan7): Error -95 calling set_mac_address
[  146.938499][T11622] veth21: entered promiscuous mode
[  146.941509][T11622] bond24: (slave veth21): Enslaving as an active interface with a down link
[  146.945481][T11622] erspan0: entered allmulticast mode
[  147.066080][T11635] vlan0: entered allmulticast mode
[  147.068018][T11635] bond25: entered allmulticast mode
[  147.177712][T11639] netlink: 'syz.1.1515': attribute type 10 has an invalid length.
[  147.197132][T11643] Bluetooth: MGMT ver 1.23
[  147.209538][T11643] 8021q: adding VLAN 0 to HW filter on device bond30
[  147.218450][T11643] veth11: entered promiscuous mode
[  147.222893][T11643] bond30: (slave veth11): Enslaving as an active interface with a down link
[  147.226984][T11643] erspan0: entered allmulticast mode
[  147.466011][T11679] 8021q: adding VLAN 0 to HW filter on device bond31
[  147.471796][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  147.481584][T11682] 8021q: adding VLAN 0 to HW filter on device bond31
[  147.484491][T11682] bond31: (slave vxcan7): The slave device specified does not support setting the MAC address
[  147.489473][T11682] bond31: (slave vxcan7): Error -95 calling set_mac_address
[  147.519065][T11688] erspan0: left allmulticast mode
[  147.523776][T11688] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  147.714063][T11706] syzkaller0: Caught tx_queue_len zero misconfig
[  147.812328][T11724] 8021q: adding VLAN 0 to HW filter on device bond26
[  147.817119][T11729] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  147.824635][T11724] ipvlan1: entered allmulticast mode
[  147.826323][T11724] bond26: entered allmulticast mode
[  147.916609][T11740] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  148.008136][T11740] tipc: Resetting bearer <eth:syzkaller0>
[  148.056102][T11749] batadv0: left allmulticast mode
[  148.057794][T11749] batadv0: left promiscuous mode
[  148.059451][T11749] bridge0: port 1(batadv0) entered disabled state
[  148.066698][T11749] bond21: (slave gretap4): Releasing active interface
[  148.072854][T11749] bond24: (slave veth21): Releasing active interface
[  148.079706][T11749] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  148.159823][T11758] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  148.174209][T11760] netem: incorrect gi model size
[  148.176633][T11760] netem: change failed
[  148.293324][T11769] syzkaller1: entered promiscuous mode
[  148.295197][T11769] syzkaller1: entered allmulticast mode
[  148.443609][T11774] 8021q: adding VLAN 0 to HW filter on device bond27
[  148.455009][T11774] veth23: entered promiscuous mode
[  148.459282][T11774] bond27: (slave veth23): Enslaving as a backup interface with a down link
[  148.466493][T11774] bond27: (slave veth23): Releasing backup interface
[  148.502289][T11777] vlan4: entered promiscuous mode
[  148.504570][T11777] ip6gretap0: entered promiscuous mode
[  148.595127][T11780] pimreg: entered allmulticast mode
[  148.605071][T11779] pimreg: left allmulticast mode
[  148.814165][T11797] IPVS: set_ctl: invalid protocol: 46 172.20.20.170:20004
[  148.826269][T11797] pim6reg1: entered allmulticast mode
[  148.970065][T11806] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  149.054902][T11814] 8021q: adding VLAN 0 to HW filter on device bond13
[  149.207413][T11838] netem: incorrect gi model size
[  149.209458][T11838] netem: change failed
[  149.384826][T11846] bridge10: entered promiscuous mode
[  149.386848][T11846] bridge10: entered allmulticast mode
[  149.456182][T11855] validate_nla: 6 callbacks suppressed
[  149.456193][T11855] netlink: 'syz.2.1579': attribute type 7 has an invalid length.
[  149.500911][T11860] netlink: 'syz.0.1580': attribute type 4 has an invalid length.
[  149.599887][T11868] siw: device registration error -23
[  149.645452][T11867] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  149.654275][T11867] netlink: 'syz.2.1583': attribute type 4 has an invalid length.
[  149.726833][T11874] netlink: 'syz.0.1585': attribute type 1 has an invalid length.
[  149.753601][T11874] sit0: Master is either lo or non-ether device
[  149.786145][T11883] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  149.903156][T11892] netlink: 'syz.0.1589': attribute type 11 has an invalid length.
[  149.907751][T11892] __nla_validate_parse: 31 callbacks suppressed
[  149.907764][T11892] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1589'.
[  150.059348][T11903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1592'.
[  150.062432][T11903] netlink: 34 bytes leftover after parsing attributes in process `syz.1.1592'.
[  150.086791][T11906] tipc: Resetting bearer <eth:gre0>
[  150.109191][T11906] tipc: Resetting bearer <eth:syzkaller0>
[  150.120070][   T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  150.124268][   T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  150.129705][T11906] geneve4: entered promiscuous mode
[  150.132740][T11906] geneve4: entered allmulticast mode
[  150.135709][   T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  150.138763][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0
[  150.144073][   T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  150.147221][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0
[  150.151742][T11907] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  150.154478][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0
[  150.158597][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0
[  150.170707][T11912] macsec2: entered promiscuous mode
[  150.172713][T11912] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  150.174987][T11912] macsec2: entered allmulticast mode
[  150.176725][T11912] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  150.185487][T11912] macsec3: entered promiscuous mode
[  150.187578][T11912] macsec3: entered allmulticast mode
[  150.308156][T11914] netlink: 700 bytes leftover after parsing attributes in process `syz.2.1596'.
[  150.338167][T11923] IPVS: set_ctl: invalid protocol: 11612 172.20.20.187:21
[  150.516912][T11932] netlink: 'syz.1.1602': attribute type 13 has an invalid length.
[  150.519500][T11932] netlink: 'syz.1.1602': attribute type 17 has an invalid length.
[  150.569649][T11932] erspan0: left allmulticast mode
[  150.587743][T11932] ip6tnl0: left promiscuous mode
[  150.591470][T11932] ip6tnl0: left allmulticast mode
[  150.597629][T11937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1604'.
[  150.608166][T11932] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  150.613985][T11933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1602'.
[  150.617588][T11937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1604'.
[  150.618624][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  150.624785][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  150.632603][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  150.671809][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  150.718752][T11944] netlink: 'syz.2.1605': attribute type 303 has an invalid length.
[  150.723470][T11944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1605'.
[  150.728047][T11944] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  150.732606][T11944] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  150.844964][T11953] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  150.850515][T11953] tipc: Resetting bearer <eth:syzkaller0>
[  151.035497][T11961] syzkaller1: entered promiscuous mode
[  151.037905][T11961] syzkaller1: entered allmulticast mode
[  151.044297][T11961] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  151.048253][T11961] syzkaller1: left promiscuous mode
[  151.050408][T11961] syzkaller1: left allmulticast mode
[  151.136860][T11963] IPVS: set_ctl: invalid protocol: 8 100.1.1.0:20002
[  151.140433][T11963] IPVS: set_ctl: invalid protocol: 8 224.0.0.2:20000
[  151.198762][T11967] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.1612'.
[  151.305445][T11970] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  151.552196][ T5868] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  151.712775][   T60] block nbd1: Possible stuck request ffff888021d80000: control (read@0,1024B). Runtime 30 seconds
[  151.716376][   T60] block nbd1: Possible stuck request ffff888021d80200: control (read@1024,1024B). Runtime 30 seconds
[  151.719549][   T60] block nbd1: Possible stuck request ffff888021d80400: control (read@2048,1024B). Runtime 30 seconds
[  151.722807][   T60] block nbd1: Possible stuck request ffff888021d80600: control (read@3072,1024B). Runtime 30 seconds
[  152.120714][T12008] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1624'.
[  152.209083][T12020] @: renamed from veth0_vlan
[  153.414379][T12073] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  153.418034][T12074] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  153.469593][T12086] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  153.508053][T12093] netem: incorrect gi model size
[  153.510149][T12093] netem: change failed
[  153.775736][T12119] netlink: 'syz.1.1650': attribute type 8 has an invalid length.
[  153.876525][T12126] tipc: Resetting bearer <eth:gre0>
[  153.893955][T12126] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  153.896360][T12126] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  153.899247][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 19999 - 0
[  153.914538][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 19999 - 0
[  153.918000][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 19999 - 0
[  153.930245][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 19999 - 0
[  154.014764][T12141] netlink: 'syz.1.1655': attribute type 1 has an invalid length.
[  154.026600][T12141] 8021q: adding VLAN 0 to HW filter on device bond32
[  154.040131][T12141] 8021q: adding VLAN 0 to HW filter on device bond32
[  154.042816][T12141] bond32: (slave vxcan7): The slave device specified does not support setting the MAC address
[  154.046710][T12141] bond32: (slave vxcan7): Error -95 calling set_mac_address
[  154.107980][T12150] bond32: (slave bridge17): Enslaving as an active interface with a down link
[  154.299458][T12156] macvlan1: entered promiscuous mode
[  154.302420][T12156] ipvlan0: entered promiscuous mode
[  154.305139][T12156] ipvlan0: left promiscuous mode
[  154.307419][T12156] macvlan1: left promiscuous mode
[  154.373474][T12165] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  154.456186][T12168] 8021q: adding VLAN 0 to HW filter on device bond29
[  154.469096][T12163] bond29: (slave wlan0): Enslaving as an active interface with a down link
[  154.475774][T12163] vlan4: entered allmulticast mode
[  154.477403][T12163] veth1: entered allmulticast mode
[  154.479243][T12163] bond29: (slave vlan4): Opening slave failed
[  154.518388][T12172] netem: incorrect gi model size
[  154.520467][T12172] netem: change failed
[  154.833410][T12210] netem: incorrect gi model size
[  154.837467][T12210] netem: change failed
[  154.865877][T12212] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  154.978515][T12220] validate_nla: 3 callbacks suppressed
[  154.978531][T12220] netlink: 'syz.0.1678': attribute type 1 has an invalid length.
[  154.984163][T12220] netlink: 'syz.0.1678': attribute type 1 has an invalid length.
[  155.210098][T12232] __nla_validate_parse: 17 callbacks suppressed
[  155.210112][T12232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1681'.
[  155.218607][T12232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1681'.
[  155.269312][T12234] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  155.299312][T12236] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  155.318597][T12236] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  155.347319][T12238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1684'.
[  155.357694][T12241] netem: incorrect gi model size
[  155.359768][T12241] netem: change failed
[  155.368128][T12238] macsec4: entered promiscuous mode
[  155.370210][T12238] batadv0: entered promiscuous mode
[  155.374777][T12238] batadv0: left promiscuous mode
[  155.465104][T12247] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1686'.
[  155.490769][T12251] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1688'.
[  155.527916][T12256] netlink: 'syz.2.1690': attribute type 10 has an invalid length.
[  155.530908][T12257] syzkaller1: entered promiscuous mode
[  155.533148][T12257] syzkaller1: entered allmulticast mode
[  155.536078][T12247] syzkaller1: entered promiscuous mode
[  155.537905][T12247] syzkaller1: entered allmulticast mode
[  155.559540][T12256] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1690'.
[  155.603564][T12262] 8021q: adding VLAN 0 to HW filter on device bond30
[  155.608496][T12262] bond0: (slave bond30): Enslaving as an active interface with a down link
[  155.775414][T12282] netlink: 'syz.1.1695': attribute type 2 has an invalid length.
[  155.797169][T12282] : entered promiscuous mode
[  155.799592][T12267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1694'.
[  155.841130][T12291] ip6gretap5: default qdisc (pfifo_fast) fail, fallback to noqueue
[  155.849194][T12291] syzkaller1: entered promiscuous mode
[  155.851124][T12291] syzkaller1: entered allmulticast mode
[  155.867824][T12291] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  155.900836][T12296] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1699'.
[  155.928684][T12305] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1702'.
[  155.938528][T12307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1701'.
[  156.111011][T12331] netem: incorrect gi model size
[  156.113254][T12331] netem: change failed
[  156.318121][T12346] bridge0: port 1(batadv2) entered blocking state
[  156.321067][T12346] bridge0: port 1(batadv2) entered disabled state
[  156.323867][T12346] batadv2: entered allmulticast mode
[  156.326804][T12346] batadv2: entered promiscuous mode
[  156.636378][T12372] netem: incorrect gi model size
[  156.638192][T12372] netem: change failed
[  156.718681][T12380] netlink: 'syz.1.1715': attribute type 13 has an invalid length.
[  156.721686][T12380] netlink: 'syz.1.1715': attribute type 17 has an invalid length.
[  156.736050][T12380] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  156.742450][ T5717] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  156.748285][ T5717] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  156.761792][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  156.821719][ T5717] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled
[  156.825762][ T5717] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled
[  156.841236][T12389] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  156.848596][T12389] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[  156.901474][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  157.034332][T12406] batman_adv: batadv0: Interface deactivated: ip6gretap3
[  157.037132][T12406] batman_adv: batadv0: Removing interface: ip6gretap3
[  157.059167][T12416] netem: incorrect gi model size
[  157.063949][T12416] netem: change failed
[  157.111905][T12406] vlan0: entered promiscuous mode
[  157.114122][T12406] vlan0: left allmulticast mode
[  157.115988][T12406] @: left allmulticast mode
[  157.118243][T12406] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  157.156851][T12422] geneve3: entered promiscuous mode
[  157.158649][T12422] geneve3: entered allmulticast mode
[  157.161181][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  157.164920][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  157.174569][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  157.177155][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  157.231394][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  157.347624][T12441] 8021q: VLANs not supported on tunl0
[  157.551874][ T5868] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  157.784441][T12455] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  157.965321][T12485] netlink: 'syz.2.1745': attribute type 1 has an invalid length.
[  157.984179][T12485] veth25: entered promiscuous mode
[  157.987928][T12485] bond31: (slave veth25): Enslaving as a backup interface with a down link
[  158.057010][T12489] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  158.124674][T12489] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  158.166731][T12489] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  158.271392][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  158.295632][T12489] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  158.337468][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  158.351040][ T7831] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  158.354567][ T7831] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  158.364006][ T7831] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  158.428380][T12515] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  159.297139][T12550] netlink: 'syz.1.1765': attribute type 2 has an invalid length.
[  159.304100][T12550] : entered promiscuous mode
[  159.311432][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  159.797863][T12581] netlink: 'syz.2.1772': attribute type 2 has an invalid length.
[  159.803198][T12581] : entered promiscuous mode
[  159.972717][T12585] netlink: 'syz.2.1774': attribute type 13 has an invalid length.
[  159.980103][T12585] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  160.351390][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.428706][T12605] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  160.476931][T12615] __nla_validate_parse: 39 callbacks suppressed
[  160.476947][T12615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1781'.
[  160.506422][T12615] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1781'.
[  160.509676][T12615] 0X: renamed from caif0
[  160.523104][T12615] 0X: entered allmulticast mode
[  160.525029][T12615] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  160.566269][T12621] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  160.639474][T12621] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  160.685393][T12635] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1787'.
[  160.702502][T12635] bond34: entered promiscuous mode
[  160.704641][T12635] 8021q: adding VLAN 0 to HW filter on device bond34
[  160.708577][T12635] bond34 (unregistering): Released all slaves
[  160.734344][T12621] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  160.831474][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  160.852103][T12621] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  160.882492][T12641] validate_nla: 1 callbacks suppressed
[  160.882503][T12641] netlink: 'syz.0.1789': attribute type 13 has an invalid length.
[  160.950472][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  160.954529][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  160.964648][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  160.967899][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  160.972532][T12649] syzkaller0: left promiscuous mode
[  160.974525][T12649] syzkaller0: left allmulticast mode
[  161.045842][T12658] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1793'.
[  161.084091][T12665] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1795'.
[  161.168157][T12675] bond23: (slave veth5): Releasing backup interface
[  161.172992][T12675] bond25: (slave bridge14): Releasing active interface
[  161.177194][T12675] bond30: (slave veth11): Releasing active interface
[  161.184877][T12675] bond32: (slave bridge17): Releasing active interface
[  161.189321][T12675] batadv2: left allmulticast mode
[  161.190862][T12675] batadv2: left promiscuous mode
[  161.192903][ T6148] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  161.196331][T12675] bridge0: port 1(batadv2) entered disabled state
[  161.218913][T12675] rdma_op ffff888039d0b1f0 conn xmit_rdma 0000000000000000
[  161.222878][T12675] netlink: 'syz.1.1797': attribute type 10 has an invalid length.
[  161.343961][T12672] ip6gretap0: entered promiscuous mode
[  161.346371][T12672] macsec2: entered promiscuous mode
[  161.351895][T12672] ip6gretap0: left promiscuous mode
[  161.391380][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  161.393597][T12677] geneve3: entered promiscuous mode
[  161.398740][ T5717] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  161.402616][ T5717] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  161.405733][ T5717] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  161.407593][T12667] netlink: 'syz.2.1796': attribute type 8 has an invalid length.
[  161.408360][ T5717] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  161.712058][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  162.016277][T12701] netlink: 'syz.1.1802': attribute type 10 has an invalid length.
[  162.019701][T12703] only policy match revision 0 supported
[  162.019712][T12703] unable to load match
[  162.019928][T12701] netlink: 'syz.1.1802': attribute type 10 has an invalid length.
[  162.046971][T12706] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1804'.
[  162.051020][T12709] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1804'.
[  162.055928][ T6533] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  162.064350][T12709] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1804'.
[  162.067795][T12709] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1804'.
[  162.108069][T12712] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  162.201604][ T7831] bond29: (slave wlan0): failed to get link speed/duplex
[  162.248571][T12726] bond29: (slave wlan0): Releasing active interface
[  162.256586][T12726] bond0: (slave bond30): Releasing active interface
[  162.263183][T12726] bond31: (slave veth25): Releasing backup interface
[  162.284289][T12726] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  162.431396][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  162.664891][T12732] netlink: 15 bytes leftover after parsing attributes in process `syz.0.1809'.
[  162.894778][T12742] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  163.111827][T12750] netlink: 'syz.1.1814': attribute type 9 has an invalid length.
[  163.471476][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  163.683111][T12769] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  163.724242][T12782] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  163.759724][T12788] netlink: 'syz.2.1826': attribute type 3 has an invalid length.
[  163.804559][T12795] team_slave_1: entered allmulticast mode
[  163.865404][T12805] netlink: 'syz.2.1833': attribute type 1 has an invalid length.
[  163.909335][T12805] bond32: (slave bridge17): making interface the new active one
[  163.923543][T12805] bond32: (slave bridge17): Enslaving as an active interface with an up link
[  164.197277][T12844] netlink: 'syz.0.1841': attribute type 1 has an invalid length.
[  164.207333][T12844] 8021q: adding VLAN 0 to HW filter on device bond16
[  164.216173][T12844] bond16: (slave geneve4): making interface the new active one
[  164.219694][T12844] bond16: (slave geneve4): Enslaving as an active interface with an up link
[  164.226047][T12844] bond16: entered promiscuous mode
[  164.227692][T12844] geneve4: entered promiscuous mode
[  164.257472][T12847] bridge0: left allmulticast mode
[  164.258595][T12849] netlink: 'syz.2.1843': attribute type 13 has an invalid length.
[  164.295163][T12849] 0X: left allmulticast mode
[  164.296905][T12849] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  164.825315][T12872] bond10: (slave vcan65): The slave device specified does not support setting the MAC address
[  164.829016][T12872] bond10: (slave vcan65): Error -95 calling set_mac_address
[  164.867224][T12872] bond10: (slave vcan65): The slave device specified does not support setting the MAC address
[  164.870993][T12872] bond10: (slave vcan65): Error -95 calling set_mac_address
[  164.883131][T12870] 8021q: adding VLAN 0 to HW filter on device bond34
[  164.918212][T12874] 8021q: adding VLAN 0 to HW filter on device bond10
[  165.282921][T12913] 8021q: adding VLAN 0 to HW filter on device bond35
[  165.296938][T12916] tipc: Resetting bearer <eth:syzkaller0>
[  165.472256][T12930] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:21
[  165.537148][T12944] 8021q: adding VLAN 0 to HW filter on device bond36
[  165.556448][T12944] __nla_validate_parse: 23 callbacks suppressed
[  165.556465][T12944] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1868'.
[  165.578632][T12936] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1867'.
[  165.589657][T12950] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1869'.
[  165.892133][T12998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1879'.
[  165.895236][T12998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1879'.
[  165.898513][T12998] validate_nla: 11 callbacks suppressed
[  165.898523][T12998] netlink: 'syz.0.1879': attribute type 18 has an invalid length.
[  165.901535][T12997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1880'.
[  165.908721][T12997] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  165.912825][T12997] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[  165.929539][T12997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1880'.
[  165.941122][T13001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1881'.
[  165.953222][T13001] tipc: Resetting bearer <eth:gre0>
[  165.979396][T13008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1883'.
[  165.981185][T13001] tipc: Resetting bearer <eth:syzkaller0>
[  165.993665][T13008] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  166.026470][T13013] netlink: 'syz.2.1886': attribute type 6 has an invalid length.
[  166.027535][T13014] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  166.070249][T13012] netlink: 'syz.0.1884': attribute type 12 has an invalid length.
[  166.096699][T13025] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  166.164537][T13034] netlink: 'syz.0.1890': attribute type 1 has an invalid length.
[  166.184521][T13034] 8021q: adding VLAN 0 to HW filter on device bond17
[  166.196658][T13034] 8021q: adding VLAN 0 to HW filter on device bond17
[  166.198851][T13034] bond17: (slave vxcan1): The slave device specified does not support setting the MAC address
[  166.203624][T13034] bond17: (slave vxcan1): Error -95 calling set_mac_address
[  166.217589][T13043] dummy0: entered promiscuous mode
[  166.219214][T13043] macsec3: entered promiscuous mode
[  166.221055][T13043] macsec3: entered allmulticast mode
[  166.223322][T13043] dummy0: entered allmulticast mode
[  166.225605][T13043] dummy0: left allmulticast mode
[  166.227351][T13043] dummy0: left promiscuous mode
[  166.260827][T13048] netlink: 'syz.0.1895': attribute type 4 has an invalid length.
[  166.270390][T13048] netlink: 'syz.0.1895': attribute type 4 has an invalid length.
[  166.304050][T13050] netlink: 'syz.2.1896': attribute type 13 has an invalid length.
[  166.306715][T13050] netlink: 'syz.2.1896': attribute type 17 has an invalid length.
[  166.312303][T13050] net_ratelimit: 1 callbacks suppressed
[  166.312309][T13050] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  166.396076][T13058] netlink: 'syz.0.1898': attribute type 1 has an invalid length.
[  166.399170][T13058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1898'.
[  167.049762][T13073] netlink: 'syz.1.1903': attribute type 15 has an invalid length.
[  167.087093][T13077] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  167.126143][T13081] tipc: Enabling of bearer <ib:caif0> rejected, failed to enable media
[  167.314949][T13097] syzkaller1: entered promiscuous mode
[  167.317265][T13097] syzkaller1: entered allmulticast mode
[  167.615931][T13112] 8021q: adding VLAN 0 to HW filter on device bond18
[  167.628387][T13114] bond18: (slave ip6gretap6): making interface the new active one
[  167.640907][T13114] bond18: (slave ip6gretap6): Enslaving as an active interface with an up link
[  167.663262][T13112] veth15: entered promiscuous mode
[  167.667633][T13112] bond18: (slave veth15): Enslaving as an active interface with a down link
[  167.673261][T13112] erspan0: entered allmulticast mode
[  167.820143][T13133] macsec2: entered promiscuous mode
[  167.825495][T13133] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  167.827752][T13133] macsec2: entered allmulticast mode
[  167.829394][T13133] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  167.847472][T13133] macsec3: entered promiscuous mode
[  167.849439][T13133] macsec3: entered allmulticast mode
[  168.108438][T13163] 8021q: adding VLAN 0 to HW filter on device bond34
[  168.123455][T13163] 8021q: adding VLAN 0 to HW filter on device bond34
[  168.126157][T13163] bond34: (slave vxcan7): The slave device specified does not support setting the MAC address
[  168.130289][T13163] bond34: (slave vxcan7): Error -95 calling set_mac_address
[  168.147321][T13168] erspan0: left allmulticast mode
[  168.160073][T13168] wg1: left promiscuous mode
[  168.162347][T13168] wg1: left allmulticast mode
[  168.165544][T13168] vlan0: left promiscuous mode
[  168.168452][T13168] veth0_macvtap: left promiscuous mode
[  168.170459][T13168] veth0_macvtap: left allmulticast mode
[  168.176694][T13168] gretap3: left promiscuous mode
[  168.179666][T13168] tipc: Resetting bearer <eth:syzkaller0>
[  168.182648][T13168] syzkaller0: left promiscuous mode
[  168.184642][T13168] syzkaller0: left allmulticast mode
[  168.189369][T13168] veth13: left allmulticast mode
[  168.192200][T13168] bridge10: left promiscuous mode
[  168.193902][T13168] bridge10: left allmulticast mode
[  168.203714][T13168] geneve3: left promiscuous mode
[  168.206837][T13168] bond16: left promiscuous mode
[  168.208730][T13168] geneve4: left promiscuous mode
[  168.214756][T13168] veth15: left promiscuous mode
[  168.218162][T13168] macsec2: left promiscuous mode
[  168.220096][T13168] macsec2: left allmulticast mode
[  168.233256][T13168] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  168.235723][T13168] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  168.238011][T13168] macsec3: left promiscuous mode
[  168.239710][T13168] macsec3: left allmulticast mode
[  168.249587][T13171] bond34: (slave bridge0): Enslaving as an active interface with a down link
[  168.262806][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  168.275217][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  168.278381][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  168.283337][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  168.537308][T13211] 8021q: adding VLAN 0 to HW filter on device bond19
[  168.552641][T13211] bond19: (slave geneve5): making interface the new active one
[  168.555720][T13211] bond19: (slave geneve5): Enslaving as an active interface with an up link
[  168.558493][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.561199][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.568334][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.570838][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.640802][T13215] IPv6: sit5: Disabled Multicast RS
[  168.728582][T13235] syzkaller0: entered promiscuous mode
[  168.733819][T13235] syzkaller0: entered allmulticast mode
[  168.834042][T13247] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  168.939121][T13256] bond16: (slave geneve4): Releasing active interface
[  168.943337][T13256] bond18: (slave ip6gretap6): Releasing active interface
[  168.945574][T13256] bond18: (slave ip6gretap6): the permanent HWaddr of slave - 82:ef:6d:8f:11:d1 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  168.952301][T13256] bond18: (slave veth15): Releasing active interface
[  168.956549][T13256] bond19: (slave geneve5): Releasing active interface
[  168.962032][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  168.965272][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  168.969637][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  168.973345][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  168.973891][T13252] rdma_op ffff888039a181f0 conn xmit_rdma 0000000000000000
[  169.130103][T13266] 8021q: adding VLAN 0 to HW filter on device bond37
[  169.288706][T13280] vti0: entered promiscuous mode
[  169.290374][T13280] vti0: entered allmulticast mode
[  169.295903][T13283] pim6reg: entered allmulticast mode
[  169.324679][T13285] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  169.335662][T13290] syzkaller0: Caught tx_queue_len zero misconfig
[  169.424704][T13285] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  169.514393][T13285] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  169.604370][T13285] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  169.683428][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  169.686110][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  169.694222][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  169.702884][ T5906] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  169.750598][T13297] bond35: entered promiscuous mode
[  169.755207][T13297] bond35: entered allmulticast mode
[  169.757547][T13297] 8021q: adding VLAN 0 to HW filter on device bond35
[  169.775426][T13297] bridge18: entered promiscuous mode
[  169.779045][T13297] bridge18: entered allmulticast mode
[  169.782645][T13297] bond35: (slave bridge18): Enslaving as a backup interface with an up link
[  169.787811][T13300] pim6reg: left allmulticast mode
[  169.826726][T13302] rdma_op ffff888110c7f9f0 conn xmit_rdma 0000000000000000
[  169.861556][   T13] bond35: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  169.878135][T13307] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  169.971598][ T5717] bond35: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  170.711568][T13328] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  171.046407][T13339] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  171.078659][T13339] syzkaller0: entered promiscuous mode
[  171.080790][T13339] syzkaller0: entered allmulticast mode
[  171.150511][T13346] validate_nla: 14 callbacks suppressed
[  171.150527][T13346] netlink: 'syz.2.1982': attribute type 2 has an invalid length.
[  171.559762][T13351] __nla_validate_parse: 32 callbacks suppressed
[  171.559774][T13351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1983'.
[  171.714013][T13355] netlink: 'syz.0.1985': attribute type 1 has an invalid length.
[  171.727078][T13355] bond20: entered promiscuous mode
[  171.728844][T13355] bond20: entered allmulticast mode
[  171.731134][T13355] 8021q: adding VLAN 0 to HW filter on device bond20
[  171.812699][T13358] tipc: Resetting bearer <eth:syzkaller0>
[  171.983336][T13366] veth17: entered allmulticast mode
[  172.021864][T13365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1988'.
[  172.155045][T13390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1993'.
[  172.175135][T13392] bond38: entered promiscuous mode
[  172.176862][T13392] bond38: entered allmulticast mode
[  172.179277][T13392] 8021q: adding VLAN 0 to HW filter on device bond38
[  172.225624][T13397] sctp: [Deprecated]: syz.2.1995 (pid 13397) Use of int in maxseg socket option.
[  172.225624][T13397] Use struct sctp_assoc_value instead
[  172.431029][T13409] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  172.438419][T13412] netlink: 'syz.0.1998': attribute type 4 has an invalid length.
[  172.442849][T13413] netlink: 'syz.2.1999': attribute type 1 has an invalid length.
[  172.483621][T13411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1999'.
[  172.486926][T13411] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1999'.
[  172.496663][T13411] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap5
[  172.500888][T13411] gretap5: entered promiscuous mode
[  172.559837][T13421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2001'.
[  172.679377][T13431] bond10: option mode: unable to set because the bond device is up
[  172.691547][T13431] bond10: (slave ip6gretap5): Enslaving as a backup interface with an up link
[  172.780260][T13441] netlink: 'syz.0.2007': attribute type 1 has an invalid length.
[  172.796615][T13441] 8021q: adding VLAN 0 to HW filter on device bond21
[  172.816353][T13441] veth19: entered promiscuous mode
[  172.821790][T13441] bond21: (slave veth19): Enslaving as an active interface with a down link
[  172.843512][T13441] erspan0: entered allmulticast mode
[  172.968985][T13454] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  173.076498][T13468] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  173.116987][T13470] bridge0: failed insert local address into bridge forwarding table
[  173.123422][T13470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2015'.
[  173.165983][T13472] netlink: 'syz.0.2016': attribute type 2 has an invalid length.
[  173.178990][T13472] : entered promiscuous mode
[  173.232274][T13475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2017'.
[  173.473419][T13488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2019'.
[  173.586466][T13488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2019'.
[  173.842937][T13532] vlan0: entered promiscuous mode
[  173.900447][T13539] netlink: 'syz.0.2026': attribute type 3 has an invalid length.
[  173.908909][T13539] netlink: 'syz.0.2026': attribute type 1 has an invalid length.
[  174.036719][T13553] netlink: 'syz.2.2027': attribute type 9 has an invalid length.
[  174.044371][T13553] netlink: 'syz.2.2027': attribute type 6 has an invalid length.
[  174.457012][T13587] lo speed is unknown, defaulting to 1000
[  174.463104][T13587] lo speed is unknown, defaulting to 1000
[  174.465811][T13587] lo speed is unknown, defaulting to 1000
[  174.470898][T13587] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  174.486459][T13587] lo speed is unknown, defaulting to 1000
[  174.489329][T13587] lo speed is unknown, defaulting to 1000
[  174.492459][T13587] lo speed is unknown, defaulting to 1000
[  174.517458][T13589] bond22: (slave gretap4): making interface the new active one
[  174.520755][T13589] bond22: (slave gretap4): Enslaving as an active interface with an up link
[  174.633560][T13602] can: request_module (can-proto-0) failed.
[  174.636760][T13602] openvswitch: netlink: IP tunnel dst address not specified
[  175.455344][T13643] erspan0: left allmulticast mode
[  175.463652][T13643] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  175.496579][T13642] lo speed is unknown, defaulting to 1000
[  175.780503][T13648] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  175.803544][T13648] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  175.820484][T13648] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[  175.926637][T13664] bond21: (slave veth19): Releasing active interface
[  175.934556][T13664] bond22: (slave gretap4): Releasing active interface
[  175.967040][T13664] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  175.989010][T13671] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  175.991600][T13671] CPU: 0 UID: 0 PID: 13671 Comm: syz.1.2051 Not tainted syzkaller #0 PREEMPT(full) 
[  175.991612][T13671] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  175.991618][T13671] Call Trace:
[  175.991632][T13671]  <TASK>
[  175.991637][T13671]  dump_stack_lvl+0x189/0x250
[  175.991651][T13671]  ? __pfx_dump_stack_lvl+0x10/0x10
[  175.991660][T13671]  ? __pfx__printk+0x10/0x10
[  175.991669][T13671]  ? kernfs_root+0x1c/0x230
[  175.991679][T13671]  ? kernfs_path_from_node+0x2f/0x290
[  175.991687][T13671]  ? kernfs_path_from_node+0x250/0x290
[  175.991694][T13671]  ? kernfs_path_from_node+0x2f/0x290
[  175.991703][T13671]  sysfs_warn_dup+0x8e/0xa0
[  175.991710][T13671]  sysfs_do_create_link_sd+0xc0/0x110
[  175.991719][T13671]  device_add_class_symlinks+0x1cf/0x240
[  175.991728][T13671]  device_add+0x475/0xb50
[  175.991736][T13671]  wiphy_register+0x1ba6/0x28d0
[  175.991751][T13671]  ? __pfx_wiphy_register+0x10/0x10
[  175.991761][T13671]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  175.991772][T13671]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  175.991781][T13671]  ieee80211_register_hw+0x3425/0x4080
[  175.991812][T13671]  ? ieee80211_register_hw+0x1421/0x4080
[  175.991824][T13671]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  175.991833][T13671]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  175.991847][T13671]  ? __hrtimer_setup+0x187/0x210
[  175.991855][T13671]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  175.991867][T13671]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  175.991882][T13671]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  175.991891][T13671]  ? trace_kmalloc+0x1f/0xd0
[  175.991900][T13671]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  175.991910][T13671]  ? kstrndup+0xbf/0x160
[  175.991919][T13671]  hwsim_new_radio_nl+0xea4/0x1b10
[  175.991929][T13671]  ? __pfx___nla_validate_parse+0x10/0x10
[  175.991944][T13671]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  175.991960][T13671]  ? __nla_parse+0x40/0x60
[  175.991971][T13671]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  175.991982][T13671]  genl_family_rcv_msg_doit+0x215/0x300
[  175.991992][T13671]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  175.992003][T13671]  ? bpf_lsm_capable+0x9/0x20
[  175.992014][T13671]  ? security_capable+0x7e/0x2e0
[  175.992026][T13671]  genl_rcv_msg+0x60e/0x790
[  175.992035][T13671]  ? __pfx_genl_rcv_msg+0x10/0x10
[  175.992043][T13671]  ? __kasan_slab_alloc+0x6c/0x80
[  175.992052][T13671]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  175.992061][T13671]  ? __netlink_lookup+0xbd/0x810
[  175.992068][T13671]  ? rcu_is_watching+0x15/0xb0
[  175.992077][T13671]  netlink_rcv_skb+0x208/0x470
[  175.992088][T13671]  ? __pfx_genl_rcv_msg+0x10/0x10
[  175.992096][T13671]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  175.992109][T13671]  ? lock_release+0x4b/0x3e0
[  175.992120][T13671]  ? down_read+0x1ad/0x2e0
[  175.992127][T13671]  genl_rcv+0x28/0x40
[  175.992135][T13671]  netlink_unicast+0x82f/0x9e0
[  175.992146][T13671]  ? __pfx_netlink_unicast+0x10/0x10
[  175.992156][T13671]  ? netlink_sendmsg+0x642/0xb30
[  175.992162][T13671]  ? skb_put+0x11b/0x210
[  175.992170][T13671]  netlink_sendmsg+0x805/0xb30
[  175.992178][T13671]  ? __pfx_netlink_sendmsg+0x10/0x10
[  175.992185][T13671]  ? aa_sock_msg_perm+0xf1/0x1d0
[  175.992193][T13671]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  175.992200][T13671]  ? __pfx_netlink_sendmsg+0x10/0x10
[  175.992207][T13671]  __sock_sendmsg+0x21c/0x270
[  175.992217][T13671]  ____sys_sendmsg+0x505/0x830
[  175.992226][T13671]  ? __pfx_____sys_sendmsg+0x10/0x10
[  175.992235][T13671]  ? import_iovec+0x74/0xa0
[  175.992244][T13671]  ___sys_sendmsg+0x21f/0x2a0
[  175.992252][T13671]  ? __pfx____sys_sendmsg+0x10/0x10
[  175.992260][T13671]  ? futex_wake+0x4b2/0x560
[  175.992276][T13671]  ? __fget_files+0x2a/0x420
[  175.992282][T13671]  ? __fget_files+0x3a0/0x420
[  175.992290][T13671]  __x64_sys_sendmsg+0x19b/0x260
[  175.992298][T13671]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  175.992307][T13671]  ? rcu_is_watching+0x15/0xb0
[  175.992315][T13671]  ? rcu_is_watching+0x15/0xb0
[  175.992323][T13671]  do_syscall_64+0xfa/0x3b0
[  175.992330][T13671]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.992338][T13671]  ? exc_page_fault+0x9f/0xf0
[  175.992348][T13671]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.992356][T13671] RIP: 0033:0x7eff2d98ebe9
[  175.992364][T13671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  175.992371][T13671] RSP: 002b:00007eff2e846038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  175.992381][T13671] RAX: ffffffffffffffda RBX: 00007eff2dbc6090 RCX: 00007eff2d98ebe9
[  175.992386][T13671] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009
[  175.992391][T13671] RBP: 00007eff2da11e19 R08: 0000000000000000 R09: 0000000000000000
[  175.992396][T13671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  175.992401][T13671] R13: 00007eff2dbc6128 R14: 00007eff2dbc6090 R15: 00007fff0ad9d0b8
[  175.992409][T13671]  </TASK>
[  176.178730][T13673] geneve4: entered promiscuous mode
[  176.180762][T13675] validate_nla: 6 callbacks suppressed
[  176.180808][T13675] netlink: 'syz.0.2052': attribute type 10 has an invalid length.
[  176.192206][T13675] dummy0: entered promiscuous mode
[  176.194190][T13675] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  176.263037][T13684] vxcan1: entered allmulticast mode
[  176.390135][T13691] netlink: 'syz.2.2057': attribute type 10 has an invalid length.
[  176.441955][T13712] netlink: 'syz.1.2061': attribute type 12 has an invalid length.
[  176.445294][T13709] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  176.450417][T13714] netlink: 'syz.0.2062': attribute type 1 has an invalid length.
[  176.454960][T13707] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  176.480348][T13719] netlink: 'syz.2.2063': attribute type 1 has an invalid length.
[  176.503037][T13719] 8021q: adding VLAN 0 to HW filter on device bond36
[  176.508487][T13721] netlink: 'syz.0.2064': attribute type 1 has an invalid length.
[  176.530832][T13719] bond36: (slave veth27): Enslaving as an active interface with a down link
[  176.563163][T13721] 8021q: adding VLAN 0 to HW filter on device bond23
[  176.568377][T13721] bond23: entered promiscuous mode
[  176.573021][T13719] macvlan3: entered promiscuous mode
[  176.574876][T13719] macvlan3: entered allmulticast mode
[  176.577247][T13719] bond36: entered promiscuous mode
[  176.581816][T13719] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  176.584233][T13719] bond36: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  176.589600][T13719] bond36: left promiscuous mode
[  176.641944][T13734] __nla_validate_parse: 55 callbacks suppressed
[  176.641955][T13734] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2068'.
[  176.649270][T13734] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2068'.
[  176.679043][T13738] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20002
[  176.826876][T13746] lo speed is unknown, defaulting to 1000
[  176.983175][T13775] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2080'.
[  176.997835][T13772] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2079'.
[  177.005092][T13772] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2079'.
[  177.020892][T13772] bond32: (slave bridge17): Releasing active interface
[  177.023013][T13778] netlink: 'syz.0.2081': attribute type 1 has an invalid length.
[  177.029042][T13772] bond34: (slave bridge0): Releasing active interface
[  177.034996][T13772] bond35: (slave bridge18): Removing an active aggregator
[  177.037724][T13772] bond35: (slave bridge18): Releasing backup interface
[  177.040616][T13772] bridge18: left promiscuous mode
[  177.043417][T13772] bridge18: left allmulticast mode
[  177.047545][T13772] bond10: (slave ip6gretap5): Releasing backup interface
[  177.055662][T13772] bond36: (slave veth27): Releasing active interface
[  177.082451][T13780] 8021q: adding VLAN 0 to HW filter on device bond25
[  177.085303][T13780] bond24: (slave bond25): making interface the new active one
[  177.087896][T13780] bond24: (slave bond25): Enslaving as an active interface with an up link
[  177.097374][T13772] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  177.105897][T13778] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2081'.
[  177.110005][T13778] 8021q: adding VLAN 0 to HW filter on device bond24
[  177.142475][T13785] netlink: 'syz.0.2082': attribute type 1 has an invalid length.
[  177.209411][T13794] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2085'.
[  177.211002][T13793] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  177.219564][T13793] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  177.258337][T13796] netlink: 'syz.2.2087': attribute type 1 has an invalid length.
[  177.259359][T13798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2088'.
[  177.278781][T13798] 8021q: adding VLAN 0 to HW filter on device bond27
[  177.287090][T13798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2088'.
[  177.294160][T13798] macvlan3: entered promiscuous mode
[  177.296362][T13798] macvlan3: entered allmulticast mode
[  177.299420][T13798] bond27: (slave macvlan3): Opening slave failed
[  177.433149][T13811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2091'.
[  177.771958][T13827] syz_tun: entered allmulticast mode
[  177.797222][T13827] dvmrp8: entered allmulticast mode
[  177.813057][T13829] syz_tun: left allmulticast mode
[  177.815091][T13829] dvmrp8: left allmulticast mode
[  180.682144][ T5840] Bluetooth: hci1: command 0x0406 tx timeout
[  181.185587][T13855] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  181.208962][T13861] netlink: 'syz.0.2107': attribute type 1 has an invalid length.
[  181.238088][T13861] 8021q: adding VLAN 0 to HW filter on device bond28
[  181.293815][T13868] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  181.296898][T13868] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  181.540981][T13878] netlink: 'syz.1.2112': attribute type 22 has an invalid length.
[  181.544490][T13878] netlink: 'syz.1.2112': attribute type 22 has an invalid length.
[  181.611773][T13881] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  181.725337][T13889] __nla_validate_parse: 12 callbacks suppressed
[  181.725348][T13889] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2115'.
[  181.802932][   T60] block nbd1: Possible stuck request ffff888021d80000: control (read@0,1024B). Runtime 60 seconds
[  181.806572][   T60] block nbd1: Possible stuck request ffff888021d80200: control (read@1024,1024B). Runtime 60 seconds
[  181.810164][   T60] block nbd1: Possible stuck request ffff888021d80400: control (read@2048,1024B). Runtime 60 seconds
[  181.813840][   T60] block nbd1: Possible stuck request ffff888021d80600: control (read@3072,1024B). Runtime 60 seconds
[  182.036142][T13908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2120'.
[  182.071032][T13911] lo speed is unknown, defaulting to 1000
[  182.317992][T13923] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  182.372137][T13929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2126'.
[  182.394322][T13926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2123'.
[  182.512485][T13934] veth28: entered allmulticast mode
[  182.570464][T13936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2128'.
[  182.742997][T13947] netlink: 'syz.1.2131': attribute type 1 has an invalid length.
[  182.983624][T13952] netlink: 'syz.2.2132': attribute type 1 has an invalid length.
[  182.987328][T13953] netlink: 'syz.2.2132': attribute type 1 has an invalid length.
[  183.009413][T13952] veth29: entered promiscuous mode
[  183.063654][T13956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2133'.
[  183.356892][ T5717] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 19999 - 0
[  183.364566][ T5717] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 19999 - 0
[  183.372699][ T5717] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 19999 - 0
[  183.378298][ T5717] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 19999 - 0
[  183.523816][T13984] lo speed is unknown, defaulting to 1000
[  183.610036][T13990] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2141'.
[  183.616257][T13990] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2141'.
[  183.657339][T13994] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  183.695249][T13996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2144'.
[  183.700110][T13996] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  184.037547][T14013] lo speed is unknown, defaulting to 1000
[  184.109965][T14019] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2152'.
[  184.126495][T14019] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  184.397924][T14032] syzkaller1: entered allmulticast mode
[  184.565800][T14036] netlink: 'syz.1.2157': attribute type 1 has an invalid length.
[  184.576018][T14038] : renamed from vlan1
[  184.587607][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.591954][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.755858][T14048] macvlan3: entered allmulticast mode
[  184.758735][T14048] veth1_vlan: entered allmulticast mode
[  184.762656][T14048] veth1_vlan: left allmulticast mode
[  184.775483][T14050] macvlan3: entered allmulticast mode
[  184.777294][T14050] veth1_vlan: entered allmulticast mode
[  184.780284][T14050] veth1_vlan: left allmulticast mode
[  184.889217][T14060] netlink: 'syz.0.2163': attribute type 18 has an invalid length.
[  184.893099][T14060] netlink: 'syz.0.2163': attribute type 18 has an invalid length.
[  184.930032][T14062] netlink: 'syz.0.2164': attribute type 1 has an invalid length.
[  184.996830][ T8390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.001389][ T8390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.004819][T14066] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  185.007915][T14066] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  185.054504][T14070] tipc: Resetting bearer <eth:syzkaller0>
[  186.322992][T14123] validate_nla: 1 callbacks suppressed
[  186.323012][T14123] netlink: 'syz.0.2183': attribute type 1 has an invalid length.
[  186.709942][T14168] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  186.740536][T14175] __nla_validate_parse: 18 callbacks suppressed
[  186.740553][T14175] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2198'.
[  186.752110][T14168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2195'.
[  186.769843][T14168] bridge0: entered promiscuous mode
[  186.775202][T14168] bridge0: entered allmulticast mode
[  186.806154][T14181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2199'.
[  186.837692][T14188] lo speed is unknown, defaulting to 1000
[  186.904658][T14194] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2202'.
[  186.907546][T14194] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2202'.
[  186.930598][T14197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2200'.
[  187.029024][T14205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2204'.
[  187.082662][T14210] netlink: 'syz.2.2207': attribute type 10 has an invalid length.
[  187.086139][T14210] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  187.088799][T14210] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  187.127059][T14215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2208'.
[  187.190439][T14225] netlink: 'syz.2.2211': attribute type 1 has an invalid length.
[  187.218801][T14225] veth31: entered promiscuous mode
[  187.394276][T14231] netlink: 'syz.2.2213': attribute type 1 has an invalid length.
[  187.405653][T14231] 8021q: adding VLAN 0 to HW filter on device bond39
[  187.416923][T14231] bond39: (slave geneve4): making interface the new active one
[  187.420943][T14231] bond39: (slave geneve4): Enslaving as an active interface with an up link
[  187.424011][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  187.426990][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  187.430992][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  187.436201][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  187.516954][T14234] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  187.597969][T14242] tipc: Resetting bearer <eth:syzkaller0>
[  187.621571][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.639016][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.655095][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.665419][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.696643][T14244] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  187.699767][T14244] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  187.897102][T14267] netlink: 'syz.2.2220': attribute type 1 has an invalid length.
[  187.899425][T14267] netlink: 'syz.2.2220': attribute type 2 has an invalid length.
[  187.905104][T14267] netlink: 'syz.2.2220': attribute type 21 has an invalid length.
[  187.907550][T14267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2220'.
[  188.035277][T14273] tipc: Resetting bearer <eth:syzkaller0>
[  188.089782][T14278] syzkaller1: entered promiscuous mode
[  188.092375][T14278] syzkaller1: entered allmulticast mode
[  188.200563][T14281] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2226'.
[  188.484263][T14305] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  188.537388][T14311] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  188.594317][T14317] netlink: 'syz.1.2235': attribute type 11 has an invalid length.
[  188.666280][T14319] lo speed is unknown, defaulting to 1000
[  188.738944][T14330] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  188.994941][T14357] lo speed is unknown, defaulting to 1000
[  189.713204][T14363] netlink: 'syz.1.2246': attribute type 4 has an invalid length.
[  192.937126][ T5291] udevd[5291]: worker [8150] /devices/virtual/block/nbd1 is taking a long time
[  205.107135][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  205.109874][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  205.113124][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  205.116418][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  205.119066][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  205.138937][T14381] lo speed is unknown, defaulting to 1000
[  205.217286][T14381] chnl_net:caif_netlink_parms(): no params data found
[  205.269331][T14381] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.271866][T14381] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.274426][T14381] bridge_slave_0: entered allmulticast mode
[  205.276794][T14381] bridge_slave_0: entered promiscuous mode
[  205.279700][T14381] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.282769][T14381] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.285132][T14381] bridge_slave_1: entered allmulticast mode
[  205.288014][T14381] bridge_slave_1: entered promiscuous mode
[  205.303498][T14381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  205.307833][T14381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  205.322895][T14381] team0: Port device team_slave_0 added
[  205.325827][T14381] team0: Port device team_slave_1 added
[  205.338534][T14381] batman_adv: batadv0: Adding interface: batadv_slave_0
[  205.340767][T14381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.349839][T14381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  205.356467][T14381] batman_adv: batadv0: Adding interface: batadv_slave_1
[  205.359227][T14381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.369285][T14381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  205.394690][T14381] hsr_slave_0: entered promiscuous mode
[  205.397680][T14381] hsr_slave_1: entered promiscuous mode
[  206.143298][ T6192] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  206.145808][ T6192] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  206.148547][ T6192] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  206.152076][ T6192] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  206.156115][ T5231] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  206.159451][ T5231] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  206.163023][ T5231] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  206.165547][ T5231] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  206.171834][ T5231] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  206.174950][ T5231] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  206.200901][T14393] lo speed is unknown, defaulting to 1000
[  206.205066][T14391] lo speed is unknown, defaulting to 1000
[  206.293610][T14393] chnl_net:caif_netlink_parms(): no params data found
[  206.317273][T14391] chnl_net:caif_netlink_parms(): no params data found
[  206.337189][T14393] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.339580][T14393] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.342519][T14393] bridge_slave_0: entered allmulticast mode
[  206.345078][T14393] bridge_slave_0: entered promiscuous mode
[  206.356570][T14393] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.359476][T14393] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.362262][T14393] bridge_slave_1: entered allmulticast mode
[  206.364776][T14393] bridge_slave_1: entered promiscuous mode
[  206.397619][T14393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  206.400542][T14391] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.403336][T14391] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.405987][T14391] bridge_slave_0: entered allmulticast mode
[  206.408843][T14391] bridge_slave_0: entered promiscuous mode
[  206.414400][T14393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  206.417490][T14391] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.419794][T14391] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.422433][T14391] bridge_slave_1: entered allmulticast mode
[  206.424999][T14391] bridge_slave_1: entered promiscuous mode
[  206.447556][T14393] team0: Port device team_slave_0 added
[  206.450781][T14391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  206.455369][T14393] team0: Port device team_slave_1 added
[  206.458688][T14391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  206.483186][T14393] batman_adv: batadv0: Adding interface: batadv_slave_0
[  206.485416][T14393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.494129][T14393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  206.499334][T14391] team0: Port device team_slave_0 added
[  206.503147][T14391] team0: Port device team_slave_1 added
[  206.505727][T14393] batman_adv: batadv0: Adding interface: batadv_slave_1
[  206.508535][T14393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.518541][T14393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  206.538544][T14391] batman_adv: batadv0: Adding interface: batadv_slave_0
[  206.541245][T14391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.551797][T14391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  206.562833][T14391] batman_adv: batadv0: Adding interface: batadv_slave_1
[  206.565528][T14391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.575105][T14391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  206.589300][T14393] hsr_slave_0: entered promiscuous mode
[  206.592063][T14393] hsr_slave_1: entered promiscuous mode
[  206.594425][T14393] debugfs: 'hsr0' already exists in 'hsr'
[  206.596267][T14393] Cannot create hsr debugfs directory
[  206.622347][T14391] hsr_slave_0: entered promiscuous mode
[  206.624676][T14391] hsr_slave_1: entered promiscuous mode
[  206.626810][T14391] debugfs: 'hsr0' already exists in 'hsr'
[  206.629468][T14391] Cannot create hsr debugfs directory
[  207.151542][ T5840] Bluetooth: hci3: command tx timeout
[  208.191575][ T5840] Bluetooth: hci4: command tx timeout
[  208.191606][T14395] Bluetooth: hci5: command tx timeout
[  209.231625][T14395] Bluetooth: hci3: command tx timeout
[  210.271720][T14395] Bluetooth: hci4: command tx timeout
[  210.271746][ T5840] Bluetooth: hci5: command tx timeout
[  211.311704][ T5840] Bluetooth: hci3: command tx timeout
[  211.883487][   T60] block nbd1: Possible stuck request ffff888021d80000: control (read@0,1024B). Runtime 90 seconds
[  211.887185][   T60] block nbd1: Possible stuck request ffff888021d80200: control (read@1024,1024B). Runtime 90 seconds
[  211.890580][   T60] block nbd1: Possible stuck request ffff888021d80400: control (read@2048,1024B). Runtime 90 seconds
[  211.894077][   T60] block nbd1: Possible stuck request ffff888021d80600: control (read@3072,1024B). Runtime 90 seconds
[  212.351608][ T5840] Bluetooth: hci4: command tx timeout
[  212.351724][T14395] Bluetooth: hci5: command tx timeout
[  213.391558][T14395] Bluetooth: hci3: command tx timeout
[  214.431768][T14395] Bluetooth: hci4: command tx timeout
[  214.442268][T14395] Bluetooth: hci5: command tx timeout
[  241.961744][   T60] block nbd1: Possible stuck request ffff888021d80000: control (read@0,1024B). Runtime 120 seconds
[  241.965807][   T60] block nbd1: Possible stuck request ffff888021d80200: control (read@1024,1024B). Runtime 120 seconds
[  241.969875][   T60] block nbd1: Possible stuck request ffff888021d80400: control (read@2048,1024B). Runtime 120 seconds
[  241.974140][   T60] block nbd1: Possible stuck request ffff888021d80600: control (read@3072,1024B). Runtime 120 seconds
[  266.093864][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  266.096396][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  266.098996][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  266.103137][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  266.106087][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  266.125569][T14413] lo speed is unknown, defaulting to 1000
[  266.212634][T14413] chnl_net:caif_netlink_parms(): no params data found
[  266.258654][T14413] bridge0: port 1(bridge_slave_0) entered blocking state
[  266.261547][T14413] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.264518][T14413] bridge_slave_0: entered allmulticast mode
[  266.267700][T14413] bridge_slave_0: entered promiscuous mode
[  266.271887][T14413] bridge0: port 2(bridge_slave_1) entered blocking state
[  266.274763][T14413] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.277681][T14413] bridge_slave_1: entered allmulticast mode
[  266.280795][T14413] bridge_slave_1: entered promiscuous mode
[  266.301519][T14413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  266.307258][T14413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  266.327656][T14413] team0: Port device team_slave_0 added
[  266.332621][T14413] team0: Port device team_slave_1 added
[  266.351042][T14413] batman_adv: batadv0: Adding interface: batadv_slave_0
[  266.355735][T14413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  266.365268][T14413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  266.370482][T14413] batman_adv: batadv0: Adding interface: batadv_slave_1
[  266.373358][T14413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  266.383105][T14413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  266.411504][T14413] hsr_slave_0: entered promiscuous mode
[  266.413963][T14413] hsr_slave_1: entered promiscuous mode
[  266.416269][T14413] debugfs: 'hsr0' already exists in 'hsr'
[  266.418232][T14413] Cannot create hsr debugfs directory
[  267.122708][T14395] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  267.125776][T14395] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  267.128792][T14395] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  267.133707][T14395] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  267.136847][T14395] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  267.150480][ T5840] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  267.153976][ T5840] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  267.156954][ T5840] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  267.159659][T14423] lo speed is unknown, defaulting to 1000
[  267.160163][ T5840] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  267.165781][ T5840] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  267.208681][T14425] lo speed is unknown, defaulting to 1000
[  267.230121][T14423] chnl_net:caif_netlink_parms(): no params data found
[  267.293074][T14423] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.295234][T14423] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.297514][T14423] bridge_slave_0: entered allmulticast mode
[  267.300381][T14423] bridge_slave_0: entered promiscuous mode
[  267.303733][T14423] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.305946][T14423] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.308277][T14423] bridge_slave_1: entered allmulticast mode
[  267.310701][T14423] bridge_slave_1: entered promiscuous mode
[  267.344530][T14423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  267.349315][T14423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  267.364833][T14423] team0: Port device team_slave_0 added
[  267.366872][T14425] chnl_net:caif_netlink_parms(): no params data found
[  267.371857][T14423] team0: Port device team_slave_1 added
[  267.387752][T14423] batman_adv: batadv0: Adding interface: batadv_slave_0
[  267.389849][T14423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.397647][T14423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  267.406784][T14423] batman_adv: batadv0: Adding interface: batadv_slave_1
[  267.408916][T14423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.416898][T14423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  267.453961][T14423] hsr_slave_0: entered promiscuous mode
[  267.456756][T14423] hsr_slave_1: entered promiscuous mode
[  267.459118][T14423] debugfs: 'hsr0' already exists in 'hsr'
[  267.461060][T14423] Cannot create hsr debugfs directory
[  267.463809][T14425] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.466247][T14425] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.468535][T14425] bridge_slave_0: entered allmulticast mode
[  267.471022][T14425] bridge_slave_0: entered promiscuous mode
[  267.474375][T14425] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.476611][T14425] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.479453][T14425] bridge_slave_1: entered allmulticast mode
[  267.482561][T14425] bridge_slave_1: entered promiscuous mode
[  267.511981][T14425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  267.518672][T14425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  267.544947][T14425] team0: Port device team_slave_0 added
[  267.549997][T14425] team0: Port device team_slave_1 added
[  267.572010][T14425] batman_adv: batadv0: Adding interface: batadv_slave_0
[  267.574181][T14425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.582235][T14425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  267.589582][T14425] batman_adv: batadv0: Adding interface: batadv_slave_1
[  267.592541][T14425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.601224][T14425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  267.636664][T14425] hsr_slave_0: entered promiscuous mode
[  267.639456][T14425] hsr_slave_1: entered promiscuous mode
[  267.642028][T14425] debugfs: 'hsr0' already exists in 'hsr'
[  267.643897][T14425] Cannot create hsr debugfs directory
[  268.111703][T14395] Bluetooth: hci6: command tx timeout
[  269.151496][T14395] Bluetooth: hci7: command tx timeout
[  269.231583][T14395] Bluetooth: hci8: command tx timeout
[  270.202049][T14395] Bluetooth: hci6: command tx timeout
[  271.231807][T14395] Bluetooth: hci7: command tx timeout
[  271.311830][T14395] Bluetooth: hci8: command tx timeout
[  272.032004][   T11] block nbd1: Possible stuck request ffff888021d80000: control (read@0,1024B). Runtime 150 seconds
[  272.036107][   T11] block nbd1: Possible stuck request ffff888021d80200: control (read@1024,1024B). Runtime 150 seconds
[  272.040352][   T11] block nbd1: Possible stuck request ffff888021d80400: control (read@2048,1024B). Runtime 150 seconds
[  272.044961][   T11] block nbd1: Possible stuck request ffff888021d80600: control (read@3072,1024B). Runtime 150 seconds
[  272.271744][T14395] Bluetooth: hci6: command tx timeout
[  273.311539][T14395] Bluetooth: hci7: command tx timeout
[  273.391665][T14395] Bluetooth: hci8: command tx timeout
[  274.351535][T14395] Bluetooth: hci6: command tx timeout
[  275.391695][T14395] Bluetooth: hci7: command tx timeout
[  275.471706][T14395] Bluetooth: hci8: command tx timeout
[  302.131555][   T11] block nbd1: Possible stuck request ffff888021d80000: control (read@0,1024B). Runtime 180 seconds
[  302.135134][   T11] block nbd1: Possible stuck request ffff888021d80200: control (read@1024,1024B). Runtime 180 seconds
[  302.138713][   T11] block nbd1: Possible stuck request ffff888021d80400: control (read@2048,1024B). Runtime 180 seconds
[  302.142377][   T11] block nbd1: Possible stuck request ffff888021d80600: control (read@3072,1024B). Runtime 180 seconds
[  304.082832][ T5291] udevd[5291]: worker [8150] /devices/virtual/block/nbd1 timeout; kill it
[  304.086415][ T5291] udevd[5291]: seq 16854 '/devices/virtual/block/nbd1' killed
[  313.791637][ T5840] Bluetooth: hci2: command 0x0405 tx timeout
[  326.157925][ T5840] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  326.160996][ T5840] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  326.164448][ T5840] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  326.167933][ T5840] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  326.171216][ T5840] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  326.186356][T14440] lo speed is unknown, defaulting to 1000
[  326.249176][T14440] chnl_net:caif_netlink_parms(): no params data found
[  326.299056][T14440] bridge0: port 1(bridge_slave_0) entered blocking state
[  326.301676][T14440] bridge0: port 1(bridge_slave_0) entered disabled state
[  326.303961][T14440] bridge_slave_0: entered allmulticast mode
[  326.306738][T14440] bridge_slave_0: entered promiscuous mode
[  326.309748][T14440] bridge0: port 2(bridge_slave_1) entered blocking state
[  326.313138][T14440] bridge0: port 2(bridge_slave_1) entered disabled state
[  326.315881][T14440] bridge_slave_1: entered allmulticast mode
[  326.318626][T14440] bridge_slave_1: entered promiscuous mode
[  326.333274][T14440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  326.337849][T14440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  326.353420][T14440] team0: Port device team_slave_0 added
[  326.356966][T14440] team0: Port device team_slave_1 added
[  326.373628][T14440] batman_adv: batadv0: Adding interface: batadv_slave_0
[  326.375960][T14440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  326.385445][T14440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  326.390723][T14440] batman_adv: batadv0: Adding interface: batadv_slave_1
[  326.394083][T14440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  326.403606][T14440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  326.428384][T14440] hsr_slave_0: entered promiscuous mode
[  326.431834][T14440] hsr_slave_1: entered promiscuous mode
[  326.434177][T14440] debugfs: 'hsr0' already exists in 'hsr'
[  326.435975][T14440] Cannot create hsr debugfs directory
[  328.205870][T14452] Bluetooth: hci9: command tx timeout
[  328.208084][ T6192] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  328.210829][ T6192] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  328.211287][T14456] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  328.215130][ T6192] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  328.219815][T14456] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  328.221855][ T6192] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  328.225562][T14456] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  328.225621][ T6192] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  328.231964][ T6192] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  328.235324][ T6192] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  328.261634][T14453] lo speed is unknown, defaulting to 1000
[  328.265262][T14450] lo speed is unknown, defaulting to 1000
[  328.377145][T14453] chnl_net:caif_netlink_parms(): no params data found
[  328.410996][T14450] chnl_net:caif_netlink_parms(): no params data found
[  328.439603][T14453] bridge0: port 1(bridge_slave_0) entered blocking state
[  328.442675][T14453] bridge0: port 1(bridge_slave_0) entered disabled state
[  328.445658][T14453] bridge_slave_0: entered allmulticast mode
[  328.448962][T14453] bridge_slave_0: entered promiscuous mode
[  328.460601][T14453] bridge0: port 2(bridge_slave_1) entered blocking state
[  328.462972][T14453] bridge0: port 2(bridge_slave_1) entered disabled state
[  328.465145][T14453] bridge_slave_1: entered allmulticast mode
[  328.467494][T14453] bridge_slave_1: entered promiscuous mode
[  328.515043][T14453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  328.530562][T14453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  328.534139][T14450] bridge0: port 1(bridge_slave_0) entered blocking state
[  328.537131][T14450] bridge0: port 1(bridge_slave_0) entered disabled state
[  328.540230][T14450] bridge_slave_0: entered allmulticast mode
[  328.547714][T14450] bridge_slave_0: entered promiscuous mode
[  328.560202][T14450] bridge0: port 2(bridge_slave_1) entered blocking state
[  328.563502][T14450] bridge0: port 2(bridge_slave_1) entered disabled state
[  328.566495][T14450] bridge_slave_1: entered allmulticast mode
[  328.569933][T14450] bridge_slave_1: entered promiscuous mode
[  328.585437][T14453] team0: Port device team_slave_0 added
[  328.597217][T14453] team0: Port device team_slave_1 added
[  328.605334][T14450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  328.617345][T14450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  328.635047][T14453] batman_adv: batadv0: Adding interface: batadv_slave_0
[  328.637552][T14453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  328.646315][T14453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  328.657694][T14453] batman_adv: batadv0: Adding interface: batadv_slave_1
[  328.660659][T14453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  328.671832][T14453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  328.678021][T14450] team0: Port device team_slave_0 added
[  328.685239][T14450] team0: Port device team_slave_1 added
[  328.719198][T14450] batman_adv: batadv0: Adding interface: batadv_slave_0
[  328.722425][T14450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  328.732030][T14450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  328.737602][T14453] hsr_slave_0: entered promiscuous mode
[  328.740580][T14453] hsr_slave_1: entered promiscuous mode
[  328.744118][T14453] debugfs: 'hsr0' already exists in 'hsr'
[  328.746214][T14453] Cannot create hsr debugfs directory
[  328.748506][T14450] batman_adv: batadv0: Adding interface: batadv_slave_1
[  328.750745][T14450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  328.759603][T14450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  328.810660][T14450] hsr_slave_0: entered promiscuous mode
[  328.814458][T14450] hsr_slave_1: entered promiscuous mode
[  328.817107][T14450] debugfs: 'hsr0' already exists in 'hsr'
[  328.819342][T14450] Cannot create hsr debugfs directory
[  329.151532][ T5231] Bluetooth: hci3: command 0x0406 tx timeout
[  329.153929][T14452] Bluetooth: hci5: command 0x0406 tx timeout
[  329.156298][T14452] Bluetooth: hci4: command 0x0406 tx timeout
[  330.271736][T14395] Bluetooth: hci11: command tx timeout
[  330.274040][T14395] Bluetooth: hci10: command tx timeout
[  330.276155][T14395] Bluetooth: hci9: command tx timeout
[  332.192061][   T11] block nbd1: Possible stuck request ffff888021d80000: control (read@0,1024B). Runtime 210 seconds
[  332.195789][   T11] block nbd1: Possible stuck request ffff888021d80200: control (read@1024,1024B). Runtime 210 seconds
[  332.199506][   T11] block nbd1: Possible stuck request ffff888021d80400: control (read@2048,1024B). Runtime 210 seconds
[  332.205534][   T11] block nbd1: Possible stuck request ffff888021d80600: control (read@3072,1024B). Runtime 210 seconds
[  332.351641][   T54] Bluetooth: hci9: command tx timeout
[  332.353455][   T54] Bluetooth: hci10: command tx timeout
[  332.355363][   T54] Bluetooth: hci11: command tx timeout
[  334.431686][ T5840] Bluetooth: hci11: command tx timeout
[  334.441846][   T54] Bluetooth: hci9: command tx timeout
[  334.443925][ T5840] Bluetooth: hci10: command tx timeout
[  334.751982][   T34] INFO: task syz.1.2247:14366 blocked for more than 143 seconds.
SYZFAIL: failed to recv rpc
[  334.755043][   T34]       Not tainted syzkaller #0
[  334.757197][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  334.761922][   T34] task:syz.1.2247      state:D stack:26024 pid:14366 tgid:14365 ppid:5848   task_flags:0x480140 flags:0x00004004
[  334.766682][   T34] Call Trace:
[  334.768076][   T34]  <TASK>
[  334.769301][   T34]  __schedule+0x1798/0x4cc0
[  334.771191][   T34]  ? do_raw_spin_lock+0x121/0x290
[  334.774028][   T34]  ? __pfx___schedule+0x10/0x10
[  334.775975][   T34]  ? schedule+0x91/0x360
[  334.777680][   T34]  ? rcu_is_watching+0x15/0xb0
[  334.779658][   T34]  ? lock_release+0x4b/0x3e0
[  334.782310][   T34]  schedule+0x165/0x360
[  334.783977][   T34]  blk_mq_freeze_queue_wait+0xf4/0x170
[  334.786126][   T34]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[  334.788593][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[  334.791048][   T34]  ? percpu_ref_kill_and_confirm+0xa3/0x130
[  334.794433][   T34]  queue_limits_commit_update_frozen+0x5d/0x3e0
[  334.797039][   T34]  nbd_set_size+0x47e/0x6a0
[  334.798991][   T34]  ? __pfx_nbd_set_size+0x10/0x10
[  334.801094][   T34]  ? nla_memcpy+0x5b/0xc0
[  334.803668][   T34]  nbd_genl_size_set+0x2eb/0x3c0
[  334.805764][   T34]  ? __pfx_nbd_genl_size_set+0x10/0x10
[  334.808021][   T34]  ? __pfx_nbd_get_config_unlocked+0x10/0x10
[  334.810451][   T34]  ? bpf_lsm_capable+0x9/0x20
[  334.813202][   T34]  ? security_capable+0x7e/0x2e0
[  334.815345][   T34]  ? radix_tree_lookup+0x240/0x290
[  334.817514][   T34]  nbd_genl_reconfigure+0x409/0x1870
[  334.819734][   T34]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  334.822448][   T34]  ? __nla_parse+0x40/0x60
[  334.824325][   T34]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  334.826973][   T34]  genl_family_rcv_msg_doit+0x215/0x300
[  334.829225][   T34]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  334.832621][   T34]  ? stack_trace_save+0x9c/0xe0
[  334.834672][   T34]  genl_rcv_msg+0x60e/0x790
[  334.836555][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  334.838607][   T34]  ? __kasan_slab_alloc+0x6c/0x80
[  334.840557][   T34]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  334.843495][   T34]  ? __netlink_lookup+0xbd/0x810
[  334.845459][   T34]  ? rcu_is_watching+0x15/0xb0
[  334.847386][   T34]  netlink_rcv_skb+0x208/0x470
[  334.849375][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  334.851237][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  334.853428][   T34]  ? lock_release+0x4b/0x3e0
[  334.855085][   T34]  ? down_read+0x1ad/0x2e0
[  334.856672][   T34]  genl_rcv+0x28/0x40
[  334.858202][   T34]  netlink_unicast+0x82f/0x9e0
[  334.859900][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  334.862756][   T34]  ? netlink_sendmsg+0x642/0xb30
[  334.864737][   T34]  ? skb_put+0x11b/0x210
[  334.866363][   T34]  netlink_sendmsg+0x805/0xb30
[  334.868196][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  334.870541][   T34]  ? futex_unqueue+0x22/0x240
[  334.873298][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  334.875481][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  334.877634][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  334.890190][   T34]  __sock_sendmsg+0x21c/0x270
[  334.900674][   T34]  ____sys_sendmsg+0x505/0x830
[  334.904959][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  334.907152][   T34]  ? import_iovec+0x74/0xa0
[  334.909544][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  334.911663][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  334.913976][   T34]  ? futex_wait+0x285/0x360
[  334.915876][   T34]  ? __fget_files+0x2a/0x420
[  334.917781][   T34]  ? __fget_files+0x3a0/0x420
[  334.919716][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  334.922197][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  334.924410][   T34]  ? rcu_is_watching+0x15/0xb0
[  334.926378][   T34]  do_syscall_64+0xfa/0x3b0
[  334.928236][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.930792][   T34]  ? exc_page_fault+0x9f/0xf0
[  334.932996][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.935428][   T34] RIP: 0033:0x7eff2d98ebe9
[  334.937237][   T34] RSP: 002b:00007eff2e867038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  334.940570][   T34] RAX: ffffffffffffffda RBX: 00007eff2dbc5fa0 RCX: 00007eff2d98ebe9
[  334.943870][   T34] RDX: 0000000000048894 RSI: 0000200000002d80 RDI: 0000000000000009
[  334.947069][   T34] RBP: 00007eff2da11e19 R08: 0000000000000000 R09: 0000000000000000
[  334.950233][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  334.953952][   T34] R13: 00007eff2dbc6038 R14: 00007eff2dbc5fa0 R15: 00007fff0ad9d0b8
[  334.957227][   T34]  </TASK>
[  334.958555][   T34] INFO: task syz.0.2249:14374 blocked for more than 143 seconds.
[  334.961538][   T34]       Not tainted syzkaller #0
[  334.963372][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  334.966586][   T34] task:syz.0.2249      state:D stack:28456 pid:14374 tgid:14373 ppid:5845   task_flags:0x400140 flags:0x00004004
[  334.971046][   T34] Call Trace:
[  334.972433][   T34]  <TASK>
[  334.973580][   T34]  __schedule+0x1798/0x4cc0
[  334.975312][   T34]  ? __pfx___schedule+0x10/0x10
[  334.977140][   T34]  ? schedule+0x91/0x360
[  334.978748][   T34]  ? rcu_is_watching+0x15/0xb0
[  334.980530][   T34]  ? lock_release+0x4b/0x3e0
[  334.982622][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  334.984830][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  334.987182][   T34]  schedule+0x165/0x360
[  334.988759][   T34]  schedule_preempt_disabled+0x13/0x30
[  334.990877][   T34]  __mutex_lock+0x7e6/0x1350
[  334.992947][   T34]  ? __mutex_lock+0x5bb/0x1350
[  334.994782][   T34]  ? genl_rcv_msg+0x10d/0x790
[  334.996580][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  334.998504][   T34]  ? __dev_queue_xmit+0x27b/0x3b50
[  335.000400][   T34]  ? radix_tree_lookup+0x240/0x290
[  335.002487][   T34]  genl_rcv_msg+0x10d/0x790
[  335.004175][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  335.006061][   T34]  ? ref_tracker_free+0x63a/0x7d0
[  335.007956][   T34]  ? __asan_memcpy+0x40/0x70
[  335.009722][   T34]  ? __pfx_ref_tracker_free+0x10/0x10
[  335.012257][   T34]  ? __skb_clone+0x63/0x7a0
[  335.014325][   T34]  netlink_rcv_skb+0x208/0x470
[  335.016206][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  335.018066][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  335.020066][   T34]  ? lock_release+0x4b/0x3e0
[  335.021947][   T34]  ? down_read+0x1ad/0x2e0
[  335.023692][   T34]  genl_rcv+0x28/0x40
[  335.025187][   T34]  netlink_unicast+0x82f/0x9e0
[  335.027048][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  335.029100][   T34]  ? netlink_sendmsg+0x642/0xb30
[  335.030976][   T34]  ? skb_put+0x11b/0x210
[  335.032798][   T34]  netlink_sendmsg+0x805/0xb30
[  335.034600][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  335.036537][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  335.038421][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  335.040402][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  335.042731][   T34]  __sock_sendmsg+0x21c/0x270
[  335.044477][   T34]  __sys_sendto+0x3bd/0x520
[  335.046161][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  335.048033][   T34]  ? count_memcg_event_mm+0x21/0x260
[  335.050113][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  335.052393][   T34]  __x64_sys_sendto+0xde/0x100
[  335.054390][   T34]  do_syscall_64+0xfa/0x3b0
[  335.056412][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.059081][   T34]  ? exc_page_fault+0x9f/0xf0
[  335.061020][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.063633][   T34] RIP: 0033:0x7f5141190a7c
[  335.065601][   T34] RSP: 002b:00007f514205cec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  335.068895][   T34] RAX: ffffffffffffffda RBX: 00007f514205cfc0 RCX: 00007f5141190a7c
[  335.072174][   T34] RDX: 0000000000000020 RSI: 00007f514205d010 RDI: 0000000000000006
[  335.075235][   T34] RBP: 0000000000000000 R08: 00007f514205cf14 R09: 000000000000000c
[  335.078426][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006
[  335.081811][   T34] R13: 00007f514205cf68 R14: 00007f514205d010 R15: 0000000000000000
[  335.085099][   T34]  </TASK>
[  335.086532][   T34] INFO: task syz.0.2249:14377 blocked for more than 143 seconds.
[  335.089674][   T34]       Not tainted syzkaller #0
[  335.091805][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  335.095286][   T34] task:syz.0.2249      state:D stack:27112 pid:14377 tgid:14373 ppid:5845   task_flags:0x400040 flags:0x00004004
[  335.100062][   T34] Call Trace:
[  335.101915][   T34]  <TASK>
[  335.103200][   T34]  __schedule+0x1798/0x4cc0
[  335.105108][   T34]  ? __pfx___schedule+0x10/0x10
[  335.107152][   T34]  ? schedule+0x91/0x360
[  335.108968][   T34]  ? rcu_is_watching+0x15/0xb0
[  335.110920][   T34]  ? lock_release+0x4b/0x3e0
[  335.112963][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  335.115372][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  335.117948][   T34]  schedule+0x165/0x360
[  335.119709][   T34]  schedule_preempt_disabled+0x13/0x30
[  335.122354][   T34]  __mutex_lock+0x7e6/0x1350
[  335.124581][   T34]  ? __mutex_lock+0x5bb/0x1350
[  335.126579][   T34]  ? genl_rcv_msg+0x10d/0x790
[  335.128518][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  335.130688][   T34]  ? __dev_queue_xmit+0x27b/0x3b50
[  335.133174][   T34]  ? radix_tree_lookup+0x240/0x290
[  335.135276][   T34]  genl_rcv_msg+0x10d/0x790
[  335.137151][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  335.139255][   T34]  ? ref_tracker_free+0x63a/0x7d0
[  335.141565][   T34]  ? __asan_memcpy+0x40/0x70
[  335.143469][   T34]  ? __pfx_ref_tracker_free+0x10/0x10
[  335.145673][   T34]  ? __skb_clone+0x63/0x7a0
[  335.147521][   T34]  netlink_rcv_skb+0x208/0x470
[  335.149489][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  335.151807][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  335.153979][   T34]  ? lock_release+0x4b/0x3e0
[  335.155888][   T34]  ? down_read+0x1ad/0x2e0
[  335.157730][   T34]  genl_rcv+0x28/0x40
[  335.159460][   T34]  netlink_unicast+0x82f/0x9e0
[  335.161741][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  335.163883][   T34]  ? netlink_sendmsg+0x642/0xb30
[  335.165879][   T34]  ? skb_put+0x11b/0x210
[  335.167630][   T34]  netlink_sendmsg+0x805/0xb30
[  335.170006][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  335.172907][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  335.175393][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  335.178095][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  335.180826][   T34]  __sock_sendmsg+0x21c/0x270
[  335.183397][   T34]  __sys_sendto+0x3bd/0x520
[  335.185525][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  335.188098][   T34]  ? count_memcg_event_mm+0x21/0x260
[  335.190821][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  335.193424][   T34]  __x64_sys_sendto+0xde/0x100
[  335.195955][   T34]  do_syscall_64+0xfa/0x3b0
[  335.198272][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.201191][   T34]  ? exc_page_fault+0x9f/0xf0
[  335.203410][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.205881][   T34] RIP: 0033:0x7f5141190a7c
[  335.207754][   T34] RSP: 002b:00007f514203bec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  335.211191][   T34] RAX: ffffffffffffffda RBX: 00007f514203bfc0 RCX: 00007f5141190a7c
[  335.215916][   T34] RDX: 0000000000000024 RSI: 00007f514203c010 RDI: 0000000000000006
[  335.219236][   T34] RBP: 0000000000000000 R08: 00007f514203bf14 R09: 000000000000000c
[  335.224356][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006
[  335.227605][   T34] R13: 00007f514203bf68 R14: 00007f514203c010 R15: 0000000000000000
[  335.230783][   T34]  </TASK>
[  335.234085][   T34] INFO: task syz.2.2250:14376 blocked for more than 143 seconds.
[  335.237712][   T34]       Not tainted syzkaller #0
[  335.239743][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  335.245045][   T34] task:syz.2.2250      state:D stack:28664 pid:14376 tgid:14375 ppid:5839   task_flags:0x400040 flags:0x00004004
[  335.249587][   T34] Call Trace:
[  335.250937][   T34]  <TASK>
[  335.252720][   T34]  __schedule+0x1798/0x4cc0
[  335.254589][   T34]  ? stack_trace_save+0x9c/0xe0
[  335.256530][   T34]  ? __pfx___schedule+0x10/0x10
[  335.258459][   T34]  ? schedule+0x91/0x360
[  335.260122][   T34]  ? rcu_is_watching+0x15/0xb0
[  335.262095][   T34]  ? lock_release+0x4b/0x3e0
[  335.263946][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  335.266320][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  335.268892][   T34]  schedule+0x165/0x360
[  335.270565][   T34]  schedule_preempt_disabled+0x13/0x30
[  335.272881][   T34]  __mutex_lock+0x7e6/0x1350
[  335.274777][   T34]  ? __mutex_lock+0x5bb/0x1350
[  335.276683][   T34]  ? genl_rcv_msg+0x10d/0x790
[  335.278590][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  335.280627][   T34]  ? stack_trace_save+0x9c/0xe0
[  335.282963][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  335.285140][   T34]  ? radix_tree_lookup+0x240/0x290
[  335.287213][   T34]  genl_rcv_msg+0x10d/0x790
[  335.289072][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  335.291107][   T34]  ? __kasan_slab_alloc+0x6c/0x80
[  335.293293][   T34]  ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  335.295746][   T34]  ? kmalloc_reserve+0xbd/0x290
[  335.297746][   T34]  ? __netlink_lookup+0xbd/0x810
[  335.299742][   T34]  ? rcu_is_watching+0x15/0xb0
[  335.301794][   T34]  netlink_rcv_skb+0x208/0x470
[  335.303751][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  335.305769][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  335.307889][   T34]  ? lock_release+0x4b/0x3e0
[  335.309749][   T34]  ? down_read+0x1ad/0x2e0
[  335.311930][   T34]  genl_rcv+0x28/0x40
[  335.313561][   T34]  netlink_unicast+0x82f/0x9e0
[  335.315524][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  335.317655][   T34]  ? netlink_sendmsg+0x642/0xb30
[  335.319665][   T34]  ? skb_put+0x11b/0x210
[  335.321627][   T34]  netlink_sendmsg+0x805/0xb30
[  335.323579][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  335.325619][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  335.327592][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  335.329703][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  335.332063][   T34]  __sock_sendmsg+0x21c/0x270
[  335.333929][   T34]  __sys_sendto+0x3bd/0x520
[  335.335695][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  335.337631][   T34]  ? count_memcg_event_mm+0x21/0x260
[  335.339712][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  335.342266][   T34]  __x64_sys_sendto+0xde/0x100
[  335.344510][   T34]  do_syscall_64+0xfa/0x3b0
[  335.346336][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.348747][   T34]  ? exc_page_fault+0x9f/0xf0
[  335.350589][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.353051][   T34] RIP: 0033:0x7f4f34990a7c
[  335.354849][   T34] RSP: 002b:00007f4f35787ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  335.358102][   T34] RAX: ffffffffffffffda RBX: 00007f4f35787fc0 RCX: 00007f4f34990a7c
[  335.361639][   T34] RDX: 0000000000000020 RSI: 00007f4f35788010 RDI: 0000000000000003
[  335.364672][   T34] RBP: 0000000000000000 R08: 00007f4f35787f14 R09: 000000000000000c
[  335.367791][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  335.370884][   T34] R13: 00007f4f35787f68 R14: 00007f4f35788010 R15: 0000000000000000
[  335.374279][   T34]  </TASK>
[  335.375577][   T34] INFO: lockdep is turned off.
[  335.377536][   T34] NMI backtrace for cpu 0
[  335.377549][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  335.377564][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  335.377571][   T34] Call Trace:
[  335.377577][   T34]  <TASK>
[  335.377583][   T34]  dump_stack_lvl+0x189/0x250
[  335.377601][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  335.377616][   T34]  ? __pfx__printk+0x10/0x10
[  335.377635][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  335.377652][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  335.377667][   T34]  ? __pfx__printk+0x10/0x10
[  335.377684][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  335.377704][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  335.377720][   T34]  watchdog+0xf93/0xfe0
[  335.377738][   T34]  ? watchdog+0x1de/0xfe0
[  335.377756][   T34]  kthread+0x711/0x8a0
[  335.377771][   T34]  ? __pfx_watchdog+0x10/0x10
[  335.377786][   T34]  ? __pfx_kthread+0x10/0x10
[  335.377800][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  335.377817][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  335.377834][   T34]  ? __pfx_kthread+0x10/0x10
[  335.377852][   T34]  ret_from_fork+0x3fc/0x770
[  335.377866][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  335.377879][   T34]  ? __switch_to_asm+0x39/0x70
[  335.377894][   T34]  ? __switch_to_asm+0x33/0x70
[  335.377908][   T34]  ? __pfx_kthread+0x10/0x10
[  335.377922][   T34]  ret_from_fork_asm+0x1a/0x30
[  335.377942][   T34]  </TASK>
[  335.377947][   T34] Sending NMI from CPU 0 to CPUs 1:
[  335.435834][    C1] NMI backtrace for cpu 1
[  335.435846][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  335.435855][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  335.435861][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  335.435893][    C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 36 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  335.435901][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  335.435909][    C1] RAX: 45aa230bae392700 RBX: ffffffff819683b8 RCX: 45aa230bae392700
[  335.435915][    C1] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8
[  335.435920][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  335.435925][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa38430
[  335.435931][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d4000
[  335.435935][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c1a000(0000) knlGS:0000000000000000
[  335.435942][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  335.435947][    C1] CR2: 00007fb6ce887e20 CR3: 000000010ede8000 CR4: 00000000000006f0
[  335.435969][    C1] Call Trace:
[  335.435975][    C1]  <TASK>
[  335.435978][    C1]  default_idle+0x13/0x20
[  335.435986][    C1]  default_idle_call+0x74/0xb0
[  335.435995][    C1]  do_idle+0x1e8/0x510
[  335.436004][    C1]  ? __pfx_do_idle+0x10/0x10
[  335.436012][    C1]  ? do_idle+0x4ef/0x510
[  335.436019][    C1]  cpu_startup_entry+0x44/0x60
[  335.436026][    C1]  start_secondary+0x101/0x110
[  335.436038][    C1]  common_startup_64+0x13e/0x147
[  335.436051][    C1]  </TASK>
[  335.436908][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  335.502561][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  335.506057][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  335.509995][   T34] Call Trace:
[  335.511340][   T34]  <TASK>
[  335.512513][   T34]  dump_stack_lvl+0x99/0x250
[  335.514285][   T34]  ? __asan_memcpy+0x40/0x70
[  335.516131][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  335.518175][   T34]  ? __pfx__printk+0x10/0x10
[  335.520032][   T34]  vpanic+0x281/0x750
[  335.521665][   T34]  ? __pfx_vpanic+0x10/0x10
[  335.523419][   T34]  ? rcu_is_watching+0x15/0xb0
[  335.525262][   T34]  ? preempt_schedule+0xae/0xc0
[  335.527099][   T34]  ? preempt_schedule_common+0x83/0xd0
[  335.529177][   T34]  panic+0xb9/0xc0
[  335.530622][   T34]  ? __pfx_panic+0x10/0x10
[  335.532363][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  335.534598][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  335.537074][   T34]  watchdog+0xfd2/0xfe0
[  335.538726][   T34]  ? watchdog+0x1de/0xfe0
[  335.540451][   T34]  kthread+0x711/0x8a0
[  335.542118][   T34]  ? __pfx_watchdog+0x10/0x10
[  335.544026][   T34]  ? __pfx_kthread+0x10/0x10
[  335.545901][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  335.547905][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  335.550009][   T34]  ? __pfx_kthread+0x10/0x10
[  335.551865][   T34]  ret_from_fork+0x3fc/0x770
[  335.553748][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  335.555816][   T34]  ? __switch_to_asm+0x39/0x70
[  335.557676][   T34]  ? __switch_to_asm+0x33/0x70
[  335.559553][   T34]  ? __pfx_kthread+0x10/0x10
[  335.561324][   T34]  ret_from_fork_asm+0x1a/0x30
[  335.563169][   T34]  </TASK>
[  335.565095][   T34] Kernel Offset: disabled
[  335.566751][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:28:07  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000063 RBX=0000000000000063 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff8881075c8237 R9 =1ffff11020eb9046 R10=dffffc0000000000 R11=ffffffff854f2340
R12=dffffc0000000000 R13=ffffffff99afb8e6 R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f23bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007facfccf7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff8211c601 RBX=ffffffffffffffff RCX=ffffffff8211c6e7 RDX=0000000000000000
RSI=0000000000000004 RDI=ffff888104acce70 RBP=0000000000000001 RSP=ffffc900034af4d8
R8 =ffff888104acce73 R9 =1ffff110209599ce R10=dffffc0000000000 R11=ffffed10209599ce
R12=0000000000000001 R13=dffffc0000000000 R14=ffffed10209599cf R15=1ffff110209599ce
RIP=ffffffff8222ff15 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9158ef7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f91583976c3 00007f91583976c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 000000000003bf12
XMM06=0000000000000018 02a2081a0000005f XMM07=0426900300000000 8803060800268003
XMM08=0210000100000208 060401700000005e XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
