last executing test programs:

2m40.991424037s ago: executing program 2 (id=146):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r2)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000004c0)={'team0\x00', <r5=>0x0})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0xaa2c}, @TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x44}}, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000640)=0x14)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000001980)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x8c, r4, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x8c}}, 0x4004)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00'})
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_delrule={0x68, 0x21, 0x200, 0x70bd28, 0x25dfdbfa, {0xa, 0x14, 0x10, 0x6, 0x4, 0x0, 0x0, 0x1, 0x9}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x6}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e22}}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x13}}, @FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00'}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0xb}}]}, 0x68}}, 0x24048850)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000002c0), &(0x7f0000000380)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x4, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0x6e}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r12, &(0x7f00000006c0)="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", &(0x7f0000000080)=""/60}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x2c, r11, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
r14 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', <r15=>0x0})
sendmsg$nl_route_sched(r14, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000016c0)=@newqdisc={0x1b0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x180, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x5, 0x4, 0x1ff, 0x2, 0x8001, 0x3}}, {0x4}}, {{0x1c, 0x1, {0x81, 0x1, 0x0, 0x0, 0x1, 0x8, 0x9}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x3, 0x80, 0x10001, 0x1, 0x9, 0x2, 0x3}}, {0xa, 0x2, [0xff, 0xf, 0x0]}}, {{0x1c, 0x1, {0x0, 0x4, 0x8, 0x528, 0x1, 0x6, 0x800, 0x4}}, {0xc, 0x2, [0x4, 0x26, 0x7f, 0x1]}}, {{0x1c, 0x1, {0xfc, 0x8, 0x0, 0x7a, 0x0, 0x9, 0x4}}, {0x4}}, {{0x1c, 0x1, {0x3, 0xd, 0x6, 0x9, 0x2, 0x1, 0x1, 0x4}}, {0xc, 0x2, [0x7ff, 0x6, 0x800, 0x5]}}, {{0x1c, 0x1, {0x6, 0x0, 0x7fff, 0x81, 0x0, 0x101, 0x1, 0x7}}, {0x12, 0x2, [0x8, 0x5, 0x7, 0x3, 0x9, 0x101, 0xfff8]}}, {{0x1c, 0x1, {0x5, 0x5, 0x4, 0x80000001, 0x2, 0x7fff, 0xfffff43d, 0x5}}, {0xe, 0x2, [0x1, 0x5, 0x0, 0xb, 0xfb]}}, {{0x1c, 0x1, {0xe, 0x3, 0x7fff, 0x4, 0x0, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x9, 0xb, 0x6, 0x3, 0x0, 0x2, 0x8, 0x3}}, {0xa, 0x2, [0x101, 0x6, 0xf]}}]}]}, 0x1b0}}, 0x40010)
setsockopt$SO_TIMESTAMPING(r14, 0x1, 0x41, &(0x7f00000001c0)=0x25b, 0x4)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r12, @ANYRESHEX=r0, @ANYRESOCT=r0], 0x20}}, 0x44091)

2m40.931426255s ago: executing program 2 (id=147):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000080000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={r1, r0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x8000000, 0xfffffffd, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x12, 0x3, 0xffffffffffffffff, 0x1, 0x7c2}, 0x40000002}}]}, {0x14, 0x6, "156c58e6140000000000000047d3289b"}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x240400c0)
sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000040)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1}}}], 0x20}, 0x20002800)

2m40.881253496s ago: executing program 2 (id=148):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcf20}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000b40)={'wpan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x98, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x3c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xb0}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x6}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}]}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x81}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20008894}, 0x4c010)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001007369740024000280050009000000000008000200e0000002060008000000000005000a"], 0x50}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x64, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x108, 0x2101}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'ipvlan0\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x2, @random="d6c284c9afd1"}}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24048800}, 0x8880)

2m40.818585398s ago: executing program 2 (id=150):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@delqdisc={0x24, 0x26, 0x1, 0x60bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xf, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "41b57012b47bc8e8d8e3484d9c5998b3"}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x8, 0x1a95, 0x88ad, 0x2, 0x7, 0x2752}}, {0x4}}]}]}, 0x6c}}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r6, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0xe2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10000}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000180)="b0", 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r6, 0x1)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r8=>0x0}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000040)={r8}, &(0x7f0000000100)=0x8)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="000227b97000fedbdf250400000029468dc7f741a00cf02fcfa2581986a3b75529444286053cde8f64ede416482512622e9500714a110f0ca440d14699da23502c0306ca22ab57304602221f6c2187fef89eb63e602ba2718285db1dee7859f40103b2e4ce9e48b39956d034cd91dcfc51db64d104f4bbc67ff22a5611dc736075a2a3076563ca559f7c"], 0x14}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)
ioctl$int_in(r7, 0x5421, &(0x7f0000000140)=0xa340)

2m40.817433858s ago: executing program 2 (id=151):
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0x7, 0x40, 0x9e, 0x0, 0x76})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x884}, 0x20000080)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r1, 0x0, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r2, 0xfffffffc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="74e4f13452088868a0ffed3a9fd459e0104c99d5b73177cf6c9b7448d2bdc958faeb430ff373bf49f905cf51572d1ce1d47a609a9af0005eb4f8b0eafc356d953184feb199c8994f", @ANYRES16=r4, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0)

2m40.599760105s ago: executing program 2 (id=156):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0xdc, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0xfffc}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_MARK_MASK={0x8}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}]}, 0xdc}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x4, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xb2020080}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40090}, 0x8000)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000380)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x4, &(0x7f0000000680)=@ccm_128={{0x304}, "3d70e9e7c77db727", "b4096c00fcffffffffffffff00", "dc4d451d", "d61a94155a98be7c"}, 0x28)

2m40.445751865s ago: executing program 32 (id=156):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0xdc, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0xfffc}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_MARK_MASK={0x8}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}]}, 0xdc}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x4, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xb2020080}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x1, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40090}, 0x8000)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000380)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x4, &(0x7f0000000680)=@ccm_128={{0x304}, "3d70e9e7c77db727", "b4096c00fcffffffffffffff00", "dc4d451d", "d61a94155a98be7c"}, 0x28)

18.211094406s ago: executing program 1 (id=2074):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4)
getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f00000000c0)=@generic={0x1, 0x5, 0x4000000000000000})
sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0)
r6 = socket$tipc(0x1e, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="110000000400000004000000ff00101004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be)
sendmsg$tipc(r6, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))
sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0)
mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x2000001, 0x8010, r1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
r8 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'gretap0\x00', <r9=>0x0})
sendto$packet(r8, &(0x7f0000000380)="3100000000d679bb857469743e37d652ca714cb840625ddc0f5f5a77468e03c1cd3dd842343d5ba06dba794eec14bb35dcb4a2f408f13e310a42868972fd339a1c9cb58f404fd1223b69a2d7f569bd178dd2ffe1a0ea02f5a3da9943ce949eee09a00fdaee6a0d032a040af6b6bb291c78ae195c3bded752a50b115267c7cba0dbfced75406903b25066bba38251719536fee864f0279842c40a7eaa0e4b877b17", 0xa1, 0x240458c1, &(0x7f0000000200)={0x11, 0x8100, r9, 0x1, 0x85, 0x6, @remote}, 0x14)

17.957407353s ago: executing program 0 (id=2075):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000140)=0x40, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRESOCT=r2, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0a0006e92554130008021100000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'macsec0\x00', <r7=>0x0})
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14)
r8 = socket(0x29, 0x5, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r10=>0x0})
connect$can_bcm(r9, &(0x7f00000000c0)={0x1d, r10}, 0x10)
sendmsg$can_bcm(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000f80)=ANY=[@ANYBLOB="07400000400800002000000000000000b85cb053370be09d28e2258ff64ee6b5225a16499883aff4fa7b54adbe5bceca45e0b26b7f01b4fc1908510a069ffe7a63b5a4f6e41c4698e43b2c4585094543bed41dcf1086cca49dacac3f4f6aea82b5800bb2ee024998e60886d79ec6f64c7e566997cbe3ef75ba5752f56d62b9acdb46ffdffc453c2be5ebb8ebb7dced", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000ef1d62ee7e1a85a71b3ff1d082d4753620a2f0271768a8284c45a4e2b5e44dc77098b18fba64df81213608ec503db52d42f1a78c97322f4ae4c8cc89cf2b1440"], 0x80}}, 0x4000)
clock_gettime(0x0, &(0x7f00000010c0)={<r11=>0x0})
sendmsg$can_bcm(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001280)=ANY=[@ANYBLOB="02000000830000000300001d00000000", @ANYRES64=0x77359400, @ANYRESOCT=r2, @ANYRES64=r11, @ANYRES64=0x0, @ANYBLOB="030000e0010000000400008000020000d467aef0f23fe738"], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000)
sendmsg$can_bcm(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="011d0000900000000041000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000040010000ce2a4fa7a0aa108b"], 0x48}}, 0x40884)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=ANY=[], 0x40}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002d00)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
setsockopt$sock_timeval(r12, 0x1, 0x43, &(0x7f0000000140)={0x0, 0xea60}, 0x10)
sendmmsg$unix(r12, &(0x7f00000bd000), 0x318, 0x0)
close(0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000006000000bca30000000000002403000020feffff620af8fff8ffffff71a4f2ff000000000f03000000000000e5000300000000002604fdffff02000016010000033800001d13f8ff000000007a0a30ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x7}, 0x10}, 0x1d)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r7, {0xfffd, 0xfff3}, {0x1, 0xfff1}, {0xfff3, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)

17.676958804s ago: executing program 0 (id=2077):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000a80)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x78, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x578}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x48025}, 0x8050)
setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f00000000c0)=0x3a7b, 0x4)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100005800a"], 0x84}}, 0x20008040)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f00000000c0), 0x10)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r7], 0x448}}, 0x0)
sendmmsg$inet(r7, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086", 0x2b}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x0)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x2d, 0x20040040)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001b00)=ANY=[@ANYBLOB="180000002d00010026bd7000ecdbdf350400000004000e80"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
ppoll(&(0x7f00000000c0)=[{r6, 0x100a}, {r6, 0x212bdb8c3662ab0c}], 0x2, 0x0, 0x0, 0x0)
r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00')
ioctl$NS_GET_PARENT(r9, 0x8004b707, 0x0)
connect$unix(r6, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000180)={0x20000010})

17.496371929s ago: executing program 0 (id=2079):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8}, @CTA_TIMEOUT_TCP_CLOSE={0x8}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x38}}, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000940), 0x10) (async)
listen(r2, 0x0) (async)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f00000000c0)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)
sendmmsg(r3, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x40844)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) (async)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000180)=ANY=[@ANYBLOB="050000000208"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x60, 0x2, 0x6, 0x305, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x8800)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'tunl0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000008e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9971e43405d621ffbc9b0d8ca56b50f0c010d631f6dbc8486bc5d5bf2ca8285056892db03cf1c62d57c08a90b189d190c341035de53a9a13608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18a77dda613e0c64497fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be428ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600d8ded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100bd5828954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e113e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3eeec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e01506471e897bce38ac2bbcbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2d03aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c710bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c87acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b907d25379897e851e7106248f81d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10e53a9f792ecb28ec39cdafa3eff63de2a7f50d042667820f6f86f276afb2b8132301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3bd9b1d742e334319c8979ce67c7a1f8924017e73bcf1ae3ed821a4b9839725000000000000000000000000000000f0ce2bf979256f99e89e05d466843d32b983d19cfa3c2a04e9f48311b786927c6c2d505637cad9ae8ae32fbee21a721e38edf6e80ff33a3a3cef251918374de4d4636348ef77a7bad1e8250117d604f59921f29bda75f135865bdc3e10906562e01af1fef96e49b969eaf4ec6b4c51fa2dcc7c1a117243fd64d641426e6a582fcda4be9f58724d4a66e46c032e6f6b3d46fb9616b4b6efc5d083e003fdcf3d78fea7ee48b2a5cc89"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff})

17.409631092s ago: executing program 0 (id=2081):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4051}, 0x20008001)
recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1)
getsockopt$inet6_int(r1, 0x29, 0xc9, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
getsockopt(r2, 0x0, 0x15, 0xffffffffffffffff, &(0x7f0000000040)=0x2)
recvmsg$qrtr(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/44, 0x2c}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x140}, 0x38, 0x40010042)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r5 = socket$netlink(0x10, 0x3, 0x9)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000017c0)=r4, 0x4)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4080)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002d000100000000001000000004000000350011809e15c00619065e963eba3ef94d765eb501e2e4bea6b8d14b16632741a5bb965fe09b7844e4b103706a1038bc955454ed2f000000a1180adf7753efcae91eb507f4bbdeaf613df1ccb798c8ff9480f89ca1d1df56c3300d46ca7a70b98c551a4a8e1892b3da3a6878a657475f49ff70c42c3aaa4b4666882cc962a305ac4640976260d9c39728a4ccbbe38f6b10cf3f16c15ab222b5fd6eef694ce49dce294fdee9c4089b417fba28acf8c94d32ca5a7bcd1efd7216e3d4fe811eb431cb76ae59b9480f1136ad54f59dc8fdf0722b9923ad63f773c2f838"], 0x4c}], 0x1}, 0x300)

16.35119618s ago: executing program 1 (id=2087):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x2d, 0x2, 0x0)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40041)
sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0xc800)
bpf$MAP_CREATE(0x0, &(0x7f0000001a40)=@base={0x1, 0x2, 0x8, 0x3, 0x280, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e6ef1f00060000007f00000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x7, r3}, 0x38)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2], 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)='f', 0x1}], 0x1}, 0x40480d5)
setsockopt$sock_attach_bpf(r5, 0x1, 0xa, &(0x7f0000000180), 0x4)
recvmsg$unix(r5, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x100)
setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108)
setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000a80)={0x9, {{0x2, 0x4e26, @multicast2}}, 0x0, 0x1, [{{0x2, 0x4e24, @rand_addr=0x64010102}}]}, 0x110)
socket$kcm(0xa, 0x5, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_procs(r7, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
r9 = openat$cgroup_procs(r7, &(0x7f0000000080)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f0000000300), 0x12)
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000500)=@security={'security\x00', 0x44, 0x4, 0x478, 0xffffffff, 0x0, 0x2a0, 0x2a0, 0xffffffff, 0xffffffff, 0x3a8, 0x3a8, 0x3a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0xa8, 0x1d0, 0x8502}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:initctl_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x11}}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback, [0x0, 0x0, 0xff]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8)
sendfile(r8, r8, 0x0, 0x10001)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x8001}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010003b1500763d24c1ec28ffbdd90000000000000008000000", @ANYRES32=r12, @ANYBLOB="0002000000800000140012800900010076657468000000000400028008000300000000000a000100aaaaaaaaaabb0000"], 0x48}}, 0x8000)

16.301432981s ago: executing program 1 (id=2088):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)={0x1c, 0x25, 0x1, 0x70bd2a, 0x25dfdbff, {0x8}, [@typed={0x6, 0x1, 0x0, 0x0, @str='&\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x92, 0x0, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r3, &(0x7f00000000c0), 0x0}, 0x20)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c000380"], 0x50}}, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0xdd3a}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x1}]}, 0x24}}, 0x4044001)

16.220904137s ago: executing program 1 (id=2089):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3300, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) (async)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async)
setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000300)=0x9, 0x4) (async)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'veth0_macvtap\x00'}) (async)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) (async)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) (async)
write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="00006203ffffffffffffffffffffffff08004a00002000002000fc2f"], 0x32)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan0\x00'})
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3, 0x1c) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r5) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r7, 0x431, 0x70bd28, 0xfffffffd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40)

16.091098175s ago: executing program 1 (id=2090):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000700)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @loopback, 0x9}, 0x1c, &(0x7f00000004c0)}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x786ba9af, @mcast1, 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000580)="69b1cd1aa3b6b202915f0c2951725031cb90f8c0c68e6a62e5c9fe7f7b7f2d81acf1e3faaa1fccb4f3746804283c0f71c178f3f2f232c8b5f141f6cdb4607e7e08343a0de825412157fdc9b1ef59aa5126767d5568eefb4c274d539ead6f6f87cd926a6b970176e6e667c36d0dccd243494b01fc37dc56cdf4141d95", 0x7c}], 0x1, &(0x7f0000000a80)=[@hoplimit={{0x14, 0x29, 0x34, 0x7f}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xbf}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x1c}}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffc00}}], 0x88}}], 0x2, 0x2400c044)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r3, &(0x7f0000000480), 0x0, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000002040)={0x60, r7, 0x1, 0x200000, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x38, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xd08}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010)
r8 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x3d, 0x0, 0x0, 0x100}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, 0x0, &(0x7f0000000680)='GPL\x00', 0x80000, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0), 0x10, 0x5}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_CONNECT(r9, 0x0, 0x4010)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="b0000000080211000001080211000000080211000000100000000200000045388b4666dc09d7d56b75fe6b80128ec72aef58393bcda30dcceff4496a6ad0e4dd21211b755b7ed57d0963117546b297e7882f3d70cf679b1072bdd9af7aba5a4e5a63c43808f3306a973f07035d6c87eae20b7aadcf108a98b2b457fa8c8491c9b5bea3b93a4738d0e1e317ae9bab7f45939f31a8faea4230a6a7d97e5dd0f2d9d607f732e4a39631fae9116084796510d242f1a4a906cc142f0ec492188dd40ed7959df24ca147bb5dd73d6d4a28a2e88e81d1a25fbf5f59bc6a4f86077673216ba3294408"], 0x1e)

15.4097104s ago: executing program 3 (id=2096):
r0 = socket$netlink(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x108, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
socket$rxrpc(0x21, 0x2, 0xa)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000010000b0026bd70200040000003000000080002000700339d060001"], 0x24}}, 0x4040080)
getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00', <r6=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x703, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, 0x21911, 0x62000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async)
syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x108, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async)
socket$rxrpc(0x21, 0x2, 0xa) (async)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async)
ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) (async)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000010000b0026bd70200040000003000000080002000700339d060001"], 0x24}}, 0x4040080) (async)
getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00'}) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x703, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, 0x21911, 0x62000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x0) (async)

15.350372396s ago: executing program 3 (id=2097):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0xfffffffffffffe77}, 0x1, 0x0, 0x0, 0x8800}, 0x4000885)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
bind$netlink(r7, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r8, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$int_in(r11, 0x5452, &(0x7f0000000300)=0x80000000)
listen(r11, 0x0)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r12, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r11}, 0x20)
recvmmsg(r11, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x15, &(0x7f0000000280)=[{&(0x7f0000000180)=""/52, 0x34}], 0x1}, 0x1}], 0x2, 0x10082, 0x0)
shutdown(r11, 0x1)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44800)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x70bd2b, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

15.348873666s ago: executing program 3 (id=2098):
r0 = socket$netlink(0x10, 0x3, 0x1)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x14, 0x4, 0x70bd2d, 0x25dfdbfe, {0x2a, 0x46}, [@INET_DIAG_REQ_BYTECODE={0x14, 0x1, "4790f5303bc8e9f6240d027e90036509"}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="f00000001000130700000000fcdbdf252001000000000000000000000000000120010000000000000000000000000002000000004e2100020200000057000000e221f9f641d4a7ee6bc933471f07", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe3200000000000000000000000000ffffac1414bb000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000fcffffffffffffff43050000000000000400000000000000fffffffffffffd7f0100000000000000dfffff7f0000000003000000000000000000000025bd7000003500000a0004001000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x890}, 0x0)

15.347738034s ago: executing program 0 (id=2099):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9}, 0x20)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000180)="0b031200e0ff64000200475400f6a13b88a8", 0x36, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @local}, 0x14)
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x2, 0x4, 0x1004, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r6}, 0x50)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f80000001600010000000000001c00000a01010000000000000000000000000000000000000000000000ffff0000000000000000000000000000803d4262df33", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r6], 0xf8}}, 0x44800)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r7}, &(0x7f0000000840), &(0x7f0000000880)=r6}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r7, &(0x7f0000000900)}, 0x20)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x350, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x320, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8, 0x5, 0x3}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_STAB={0xfffffffffffffd7f, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x7}, @TCA_GRED_PARMS={0x0, 0x1, {0x87, 0x7b2a, 0x6, 0x9, 0x5, 0x2, 0x6e5, 0x7, 0x6, 0x5, 0x9, 0x1c, 0xd, 0x6, 0x7, 0x200}}, @TCA_GRED_STAB={0x0, 0x2, "9a493467bcc004b3a62f1e357852daf4a0c32a12657e1da47db416a163ad10fd446ab2e03741af59bc09a5b5533a187787ea150ef0322aeaba59e26b5199c8a6529bdfa57a1713a5b4cc5aca3842850e28f33e338120c7466b17bd38d52cfc4b33bb88ae0d7df6b7e61fc48ace6e276a0a26efb7cc77b421b86953fe1c518a50eb585de298cd25f2a321407db6b4b65a65124c575baeee4f6375282398a240e42b833803605cf44631918b20fee4a863e0b08f8e9c16e5c3082911cb887718ff323ea09e11cd1501f442fa855e16a433e00f2aab1495de281d650bf0ec8876a5e45b36cba61aa0e0352717b0cdb9c89ff1a8ddfaf8c5426a8c8106fc67e5d273"}]}}]}, 0x350}}, 0x0)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x18, 0x1410, 0x20, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x54881}, 0x8000)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
close(r12)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))

15.262213324s ago: executing program 3 (id=2100):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="018000000d0000000000014000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="018000000d0000000000014000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4) (async)
close(r4)
socket$unix(0x1, 0x1, 0x0) (async)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0xc) (async)
r7 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b040000000000000000020000001400048010000180090001006d617371000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x20000805}, 0x0)
r9 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r9, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="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", 0x5c1}, {&(0x7f0000000600)}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) (async)
sendmsg$inet(r9, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="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", 0x5c1}, {&(0x7f0000000600)}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
r11 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0xd, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x0, 0x5, 0x1, 0xc}, 0xb, 0xfffffffe, 0x8, 0x5, 0x9, 0x2, 0x9, 0xd, 0x5, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0xd, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x0, 0x5, 0x1, 0xc}, 0xb, 0xfffffffe, 0x8, 0x5, 0x9, 0x2, 0x9, 0xd, 0x5, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
socket$netlink(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r13 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCDELRT(r13, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) (async)
ioctl$sock_rose_SIOCDELRT(r13, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]})

15.258917083s ago: executing program 0 (id=2101):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockname(r2, 0x0, &(0x7f0000000a80))
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r4=>0x0})
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
r6 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r6, 0x1, 0x9, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', r4, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$igmp6(0xa, 0x3, 0x2)
bind$xdp(r5, &(0x7f0000000300)={0x2c, 0x0, r4, 0x3, r5}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x8, 0x6, 0x520, 0x120, 0x0, 0x1f0, 0x1f0, 0x120, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff, 0xff000000, 0xffffffff], 'ipvlan1\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x9, 0x2, 0x2}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x5002}}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@private=0xa010100, 0x0, 0x32, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r7)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r7)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f00000003c0)={<r10=>0x0, 0x5, 0x9, 0x6, 0x0, 0x2}, &(0x7f0000000400)=0x14)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000440)={r10, @in6={{0xa, 0x4e24, 0x8600, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, 0x10001, 0x4, 0x3, 0x8, 0x6, 0x1, 0x1}, &(0x7f0000000500)=0x9c)
r11 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r11, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c)
connect$inet6(r11, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x20}}, 0x1c}}, 0x0)
sendmmsg(r11, &(0x7f00000092c0), 0x4ff, 0x0)

15.258017389s ago: executing program 3 (id=2102):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206010305000000000000000000000605000100070000000900020073797a310000000014000780080013000000000008001240000000000500050002000000050004000000000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x73)
r3 = accept4(r2, 0x0, 0x0, 0x80000)
write(r3, &(0x7f0000000040)="cb", 0xfffffdef) (async)
setsockopt$sock_int(r3, 0x1, 0x49, &(0x7f00000009c0)=0xfefffffb, 0x4) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
shutdown(0xffffffffffffffff, 0x1) (async)
close(0x3)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000080) (async)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000bd7000fbdbdf2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)

15.19895227s ago: executing program 1 (id=2103):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a1150015400400142603600e120800060000001001a8001600a40004", 0x37}], 0x1}, 0x0)
bind$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @default, 0x4}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default]}, 0x48)
connect$ax25(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @default}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="11000000040000000400000009"], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f00000000c0)=r3}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061043c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r7, @ANYBLOB="2f0429bd7000fbdbdf25030000000c0002000700000000000000080001000000000005000a00ff000000400007800c0001800800feff", @ANYRES32, @ANYRES64=r6], 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_int(r8, &(0x7f0000000100)='hugetlb.2MB.failcnt\x00', 0x2, 0x0)
r10 = openat$cgroup_int(r8, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0)
sendfile(r10, r9, 0x0, 0x5)
tee(r0, r5, 0x8f5, 0x100000000000000)
getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b", 0x33}], 0x1}, 0xc001)
r12 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MFC_PROXY(r12, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x59548f70}, {0xa, 0x4e22, 0x8, @mcast1, 0x80}, 0x1, {[0xfffffffd, 0xd25e, 0x7, 0xffff, 0x7fff, 0xa4d9, 0x9, 0x5981490c]}}, 0x5c)
write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[], 0xfe33)

15.140814537s ago: executing program 3 (id=2104):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r0=>0xffffffffffffffff, 0x7, 0xfff, 0x1ff})
ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000040))
r1 = accept$ax25(r0, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @default, @remote, @netrom, @bcast, @netrom, @netrom, @default]}, &(0x7f0000000100)=0x48)
sendfile(r1, r0, &(0x7f0000000140)=0xda1a, 0x2)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFCTH_QUEUE_NUM={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x26040001)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, r3, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbtty_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x74}, 0x1, 0x0, 0x0, 0x24040000}, 0x40000)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000400), 0x4)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000440)={<r5=>0x0, 0x9}, &(0x7f0000000480)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000004c0)=@assoc_value={r5, 0x2}, 0x8)
pipe(&(0x7f0000000500)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$packet_int(r6, 0x107, 0x10, &(0x7f0000000540)=0x7b, 0x4)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$xdp(0x2c, 0x3, 0x0)
recvmmsg(r8, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/247, 0xf7}, {&(0x7f00000006c0)=""/234, 0xea}], 0x3}, 0x1395032}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/160, 0xa0}], 0x1, &(0x7f0000000900)=""/4096, 0x1000}, 0x2}], 0x2, 0x20020, &(0x7f0000001980)={0x77359400})
r9 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000001a80)={&(0x7f00000019c0)=""/142, 0x7000, 0x1000}, 0x20)
ioctl$PTP_EXTTS_REQUEST(r7, 0x40103d02, &(0x7f0000001ac0)={0x2a})
socket(0x18, 0x80000, 0x3)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r10, 0x0, 0x488, &(0x7f0000001b00)={{0x5e, @loopback, 0x4e24, 0x2, 'nq\x00', 0x14, 0x400, 0x31}, {@local, 0x4e20, 0x10007, 0x5, 0x0, 0x8bd0}}, 0x44)
ppoll(&(0x7f0000001b80)=[{r0, 0x108}, {r9, 0x4219}, {r6, 0x84}], 0x3, &(0x7f0000001bc0), &(0x7f0000001c00)={[0x68]}, 0x8)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001c80), r2)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001cc0)={'wpan0\x00', <r12=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001d00)={'wpan3\x00', <r13=>0x0})
sendmsg$NL802154_CMD_GET_SEC_KEY(r2, &(0x7f0000001e00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x54, r11, 0x508116fc8a442a28, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x40008814)

52.863738ms ago: executing program 33 (id=2101):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockname(r2, 0x0, &(0x7f0000000a80))
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r4=>0x0})
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
r6 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r6, 0x1, 0x9, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', r4, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$igmp6(0xa, 0x3, 0x2)
bind$xdp(r5, &(0x7f0000000300)={0x2c, 0x0, r4, 0x3, r5}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x8, 0x6, 0x520, 0x120, 0x0, 0x1f0, 0x1f0, 0x120, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff, 0xff000000, 0xffffffff], 'ipvlan1\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x9, 0x2, 0x2}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x5002}}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@private=0xa010100, 0x0, 0x32, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r7)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r7)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f00000003c0)={<r10=>0x0, 0x5, 0x9, 0x6, 0x0, 0x2}, &(0x7f0000000400)=0x14)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000440)={r10, @in6={{0xa, 0x4e24, 0x8600, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, 0x10001, 0x4, 0x3, 0x8, 0x6, 0x1, 0x1}, &(0x7f0000000500)=0x9c)
r11 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r11, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c)
connect$inet6(r11, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x20}}, 0x1c}}, 0x0)
sendmmsg(r11, &(0x7f00000092c0), 0x4ff, 0x0)

212.322µs ago: executing program 34 (id=2103):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a1150015400400142603600e120800060000001001a8001600a40004", 0x37}], 0x1}, 0x0)
bind$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @default, 0x4}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default]}, 0x48)
connect$ax25(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @default}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="11000000040000000400000009"], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f00000000c0)=r3}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061043c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r7, @ANYBLOB="2f0429bd7000fbdbdf25030000000c0002000700000000000000080001000000000005000a00ff000000400007800c0001800800feff", @ANYRES32, @ANYRES64=r6], 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_int(r8, &(0x7f0000000100)='hugetlb.2MB.failcnt\x00', 0x2, 0x0)
r10 = openat$cgroup_int(r8, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0)
sendfile(r10, r9, 0x0, 0x5)
tee(r0, r5, 0x8f5, 0x100000000000000)
getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b", 0x33}], 0x1}, 0xc001)
r12 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MFC_PROXY(r12, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x59548f70}, {0xa, 0x4e22, 0x8, @mcast1, 0x80}, 0x1, {[0xfffffffd, 0xd25e, 0x7, 0xffff, 0x7fff, 0xa4d9, 0x9, 0x5981490c]}}, 0x5c)
write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[], 0xfe33)

0s ago: executing program 35 (id=2104):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r0=>0xffffffffffffffff, 0x7, 0xfff, 0x1ff})
ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000040))
r1 = accept$ax25(r0, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @default, @remote, @netrom, @bcast, @netrom, @netrom, @default]}, &(0x7f0000000100)=0x48)
sendfile(r1, r0, &(0x7f0000000140)=0xda1a, 0x2)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFCTH_QUEUE_NUM={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x26040001)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, r3, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbtty_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x74}, 0x1, 0x0, 0x0, 0x24040000}, 0x40000)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000400), 0x4)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000440)={<r5=>0x0, 0x9}, &(0x7f0000000480)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000004c0)=@assoc_value={r5, 0x2}, 0x8)
pipe(&(0x7f0000000500)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$packet_int(r6, 0x107, 0x10, &(0x7f0000000540)=0x7b, 0x4)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$xdp(0x2c, 0x3, 0x0)
recvmmsg(r8, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/247, 0xf7}, {&(0x7f00000006c0)=""/234, 0xea}], 0x3}, 0x1395032}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/160, 0xa0}], 0x1, &(0x7f0000000900)=""/4096, 0x1000}, 0x2}], 0x2, 0x20020, &(0x7f0000001980)={0x77359400})
r9 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000001a80)={&(0x7f00000019c0)=""/142, 0x7000, 0x1000}, 0x20)
ioctl$PTP_EXTTS_REQUEST(r7, 0x40103d02, &(0x7f0000001ac0)={0x2a})
socket(0x18, 0x80000, 0x3)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r10, 0x0, 0x488, &(0x7f0000001b00)={{0x5e, @loopback, 0x4e24, 0x2, 'nq\x00', 0x14, 0x400, 0x31}, {@local, 0x4e20, 0x10007, 0x5, 0x0, 0x8bd0}}, 0x44)
ppoll(&(0x7f0000001b80)=[{r0, 0x108}, {r9, 0x4219}, {r6, 0x84}], 0x3, &(0x7f0000001bc0), &(0x7f0000001c00)={[0x68]}, 0x8)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001c80), r2)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001cc0)={'wpan0\x00', <r12=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001d00)={'wpan3\x00', <r13=>0x0})
sendmsg$NL802154_CMD_GET_SEC_KEY(r2, &(0x7f0000001e00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x54, r11, 0x508116fc8a442a28, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x40008814)

kernel console output (not intermixed with test programs):

ing bearer <eth:syzkaller0>
[  137.875687][ T9417] netlink: 'syz.1.951': attribute type 10 has an invalid length.
[  137.881738][ T9417] veth0_macvtap: left promiscuous mode
[  137.884077][ T9417] team0: Device veth0_macvtap failed to register rx_handler
[  138.094776][ T9433] netlink: 'syz.1.956': attribute type 21 has an invalid length.
[  138.098278][ T9433] netlink: 'syz.1.956': attribute type 22 has an invalid length.
[  138.101501][ T9433] netlink: 136 bytes leftover after parsing attributes in process `syz.1.956'.
[  138.139213][ T9434] wg1 speed is unknown, defaulting to 1000
[  138.151765][ T9436] netlink: 28 bytes leftover after parsing attributes in process `syz.1.957'.
[  138.223305][ T9440] netlink: 20 bytes leftover after parsing attributes in process `syz.1.957'.
[  138.282920][ T9441] netlink: 40 bytes leftover after parsing attributes in process `syz.1.957'.
[  138.335723][ T9446] tipc: Resetting bearer <eth:team0>
[  138.338850][ T9446] tipc: Resetting bearer <eth:team0>
[  138.342088][ T9446] wg2: left promiscuous mode
[  138.349561][ T9446] vlan0: left promiscuous mode
[  138.358363][ T9446] bond7: left promiscuous mode
[  138.361408][ T9446] veth9: left promiscuous mode
[  138.364768][ T9446] veth11: left promiscuous mode
[  138.372668][ T9446] openvswitch: netlink: VXLAN extension message has 2 unknown bytes.
[  138.405510][ T9446] netlink: 68 bytes leftover after parsing attributes in process `syz.0.959'.
[  138.527382][ T9449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.960'.
[  138.553914][ T9455] netlink: 68 bytes leftover after parsing attributes in process `syz.0.961'.
[  138.950007][ T9461] validate_nla: 1 callbacks suppressed
[  138.950021][ T9461] netlink: 'syz.3.963': attribute type 15 has an invalid length.
[  138.996072][ T9463] macsec2: entered promiscuous mode
[  138.998030][ T9463] mac80211_hwsim hwsim11 wlan0: entered promiscuous mode
[  139.000533][ T9463] macsec2: entered allmulticast mode
[  139.002410][ T9463] mac80211_hwsim hwsim11 wlan0: entered allmulticast mode
[  139.017289][ T9463] macsec3: entered promiscuous mode
[  139.019098][ T9463] macsec3: entered allmulticast mode
[  139.079582][ T9468] netlink: 'syz.1.965': attribute type 2 has an invalid length.
[  139.303956][ T9477] ip6tnl6: entered promiscuous mode
[  139.574428][ T9502] netlink: 'syz.0.974': attribute type 1 has an invalid length.
[  139.597161][ T9502] bond12: entered promiscuous mode
[  139.599681][ T9502] 8021q: adding VLAN 0 to HW filter on device bond12
[  139.620087][ T9495] 8021q: adding VLAN 0 to HW filter on device bond12
[  139.623272][ T9495] bond12: (slave vxcan1): The slave device specified does not support setting the MAC address
[  139.629954][ T9495] bond12: (slave vxcan1): Setting fail_over_mac to active for active-backup mode
[  139.637427][ T9495] bond12: (slave vxcan1): making interface the new active one
[  139.640515][ T9495] vxcan1: entered promiscuous mode
[  139.644145][ T9495] bond12: (slave vxcan1): Enslaving as an active interface with an up link
[  139.752837][ T9512] netlink: 'syz.0.979': attribute type 13 has an invalid length.
[  139.760521][ T9512] netlink: 'syz.0.979': attribute type 17 has an invalid length.
[  139.766302][ T9512] tipc: Resetting bearer <eth:team0>
[  139.769299][ T9512] tipc: Resetting bearer <eth:team0>
[  139.774039][ T9512] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  139.807226][ T9516] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  139.811172][ T9516] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.919482][ T9516] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  139.924397][ T9516] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.939217][ T9527] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.950985][ T9527] tipc: Disabling bearer <eth:syzkaller0>
[  139.969790][ T9516] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  139.973756][ T9516] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.991945][ T9531] bond0: (slave rose0): Error: Device can not be enslaved while up
[  139.998284][ T9531] tipc: Resetting bearer <eth:team0>
[  140.071047][ T9516] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  140.075285][ T9516] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.155625][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  140.159714][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.171372][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  140.174134][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.190548][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  140.198155][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.211472][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  140.215013][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.257910][ T9545] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  140.264857][ T9545] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  140.310995][ T9549] netlink: 'syz.1.989': attribute type 10 has an invalid length.
[  140.449031][ T9564] netlink: 'syz.3.994': attribute type 5 has an invalid length.
[  140.450529][ T9565] netlink: 'syz.3.994': attribute type 5 has an invalid length.
[  140.454161][ T9564] netlink: 'syz.3.994': attribute type 5 has an invalid length.
[  140.459195][ T9565] netlink: 'syz.3.994': attribute type 5 has an invalid length.
[  140.624697][ T9572] pimreg: entered allmulticast mode
[  140.694945][ T9589] vlan3: entered allmulticast mode
[  140.698007][ T9589] bridge_slave_0: entered allmulticast mode
[  140.844088][ T9599] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  140.849035][ T9601] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  141.724123][ T9648] mac80211_hwsim hwsim11 wlan0: left allmulticast mode
[  141.737651][ T9648] mac80211_hwsim hwsim11 wlan0: left promiscuous mode
[  141.752546][ T5872] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  141.755286][ T5872] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  141.762345][ T5872] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  141.765063][ T5872] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  141.792232][ T9666] __nla_validate_parse: 114 callbacks suppressed
[  141.792249][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1025'.
[  141.820342][ T9671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1026'.
[  141.881046][ T9676] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1027'.
[  141.890084][ T9676] batadv2: entered promiscuous mode
[  141.892365][ T9676] batadv2: entered allmulticast mode
[  142.253631][ T9684] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  142.340403][ T9696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1030'.
[  142.347803][ T9696] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1030'.
[  142.452444][ T5872] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  143.097215][ T9719] netlink: 'syz.3.1035': attribute type 11 has an invalid length.
[  143.190995][ T9723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1037'.
[  143.222634][ T9679] Set syz1 is full, maxelem 65536 reached
[  143.245796][ T9723] : entered promiscuous mode
[  143.249800][ T9723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1037'.
[  143.381866][ T9743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1043'.
[  143.389415][ T9743] batadv1: entered promiscuous mode
[  143.391811][ T9743] 8021q: adding VLAN 0 to HW filter on device batadv1
[  143.406992][ T9743] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  143.474944][ T9754] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1046'.
[  143.491222][ T9751] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1045'.
[  143.595405][ T9762] bond13: entered promiscuous mode
[  143.598781][ T9758] nbd0: detected capacity change from 0 to 63
[  143.601004][ T9762] bond13: entered allmulticast mode
[  143.602981][ T9762] 8021q: adding VLAN 0 to HW filter on device bond13
[  143.609531][   T56] block nbd0: Receive control failed (result -104)
[  143.655672][ T9767] 8021q: adding VLAN 0 to HW filter on device bond9
[  143.694140][ T9774] lo speed is unknown, defaulting to 1000
[  143.698273][ T9774] lo speed is unknown, defaulting to 1000
[  143.700494][ T9774] lo speed is unknown, defaulting to 1000
[  143.707908][ T9774] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  143.721536][ T9774] lo speed is unknown, defaulting to 1000
[  143.724366][ T9774] lo speed is unknown, defaulting to 1000
[  143.728261][ T9774] lo speed is unknown, defaulting to 1000
[  143.843892][ T9784] 8021q: adding VLAN 0 to HW filter on device bond10
[  143.858015][ T9784] bond10: (slave ip6gretap3): making interface the new active one
[  143.861871][ T9784] bond10: (slave ip6gretap3): Enslaving as an active interface with an up link
[  143.867231][ T9788] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  143.870409][ T9788] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.893823][ T9784] veth5: entered promiscuous mode
[  143.898692][ T9784] bond10: (slave veth5): Enslaving as an active interface with a down link
[  143.903649][ T9784] erspan0: entered allmulticast mode
[  143.911004][ T9784] bond10: (slave erspan0): Enslaving as an active interface with an up link
[  143.945874][ T9788] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  143.950135][ T9788] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.045675][ T9788] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  144.052958][ T9788] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.110118][ T9808] validate_nla: 53 callbacks suppressed
[  144.110129][ T9808] netlink: 'syz.3.1061': attribute type 10 has an invalid length.
[  144.114781][ T9808] mac80211_hwsim hwsim12 wlan1: left allmulticast mode
[  144.142808][ T9788] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  144.147191][ T9788] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.160605][ T9810] netlink: 'syz.0.1062': attribute type 1 has an invalid length.
[  144.163153][ T9808] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  144.188459][ T9810] bond14: entered promiscuous mode
[  144.190882][ T9810] bond14: entered allmulticast mode
[  144.210817][ T9810] bridge5: entered promiscuous mode
[  144.213181][ T9810] bridge5: entered allmulticast mode
[  144.218226][ T9810] bond14: (slave bridge5): making interface the new active one
[  144.222065][ T9810] bond14: (slave bridge5): Enslaving as an active interface with an up link
[  144.248483][ T9813] openvswitch: netlink: Message has 4 unknown bytes.
[  144.250730][ T9813] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.279725][ T5873] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  144.283394][ T5873] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.304502][ T5873] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  144.309412][ T5873] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.313943][ T5873] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  144.317981][ T5873] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.332404][ T5873] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  144.335908][ T5873] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.643855][ T9840] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  144.746488][ T9861] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  144.752070][ T9861] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.030359][ T9878] bond10: (slave erspan0): Releasing active interface
[  145.033296][ T9878] ip6gretap3: entered promiscuous mode
[  145.045085][ T9878] bond0: (slave 0!): Releasing backup interface
[  145.049704][ T9878] bond10: (slave ip6gretap3): Releasing active interface
[  145.052109][ T9878] bond10: (slave ip6gretap3): the permanent HWaddr of slave - c2:4e:8b:74:bd:ac - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  145.066614][ T9878] ip6gretap3: left promiscuous mode
[  145.086381][ T9878] bond10: (slave veth5): Releasing active interface
[  145.321361][ T9913] netlink: 'syz.1.1091': attribute type 6 has an invalid length.
[  145.415100][ T9929] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.419196][ T9929] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode
[  145.421724][ T9929] mac80211_hwsim hwsim12 syzkaller0: entered allmulticast mode
[  145.425415][ T9929] tipc: Resetting bearer <eth:syzkaller0>
[  145.486995][ T9923] wg1 speed is unknown, defaulting to 1000
[  145.490458][ T9923] lo speed is unknown, defaulting to 1000
[  145.615658][ T9944] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  146.071029][ T9974] geneve7: entered promiscuous mode
[  146.073296][ T9974] geneve7: entered allmulticast mode
[  146.076904][   T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  146.079673][   T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  146.082756][   T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  146.085647][   T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  146.093716][ T9972] syzkaller0: entered promiscuous mode
[  146.102254][ T9972] syzkaller0: entered allmulticast mode
[  146.224958][ T9986] sctp: [Deprecated]: syz.1.1103 (pid 9986) Use of int in max_burst socket option deprecated.
[  146.224958][ T9986] Use struct sctp_assoc_value instead
[  146.272812][ T9990] netlink: 'syz.3.1105': attribute type 21 has an invalid length.
[  146.324970][ T9990] 8021q: adding VLAN 0 to HW filter on device bond11
[  146.427681][   T24] tipc: Node number set to 2388516153
[  146.460010][T10001] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  146.658236][T10026] netlink: 'syz.0.1116': attribute type 10 has an invalid length.
[  146.680947][T10029] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  146.690133][T10029] netlink: 'syz.3.1117': attribute type 1 has an invalid length.
[  146.717808][T10029] 8021q: adding VLAN 0 to HW filter on device bond12
[  146.972452][T10045] __nla_validate_parse: 35 callbacks suppressed
[  146.972556][T10045] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1122'.
[  147.005252][T10048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1123'.
[  147.118367][T10051] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.123978][T10051] tipc: Resetting bearer <eth:syzkaller0>
[  147.129937][T10050] tipc: Disabling bearer <eth:syzkaller0>
[  147.351100][T10063] bond0: (slave wlan1): Releasing backup interface
[  147.359218][T10063] bond12: (slave vxcan1): Releasing backup interface
[  147.362030][T10063] vxcan1: left promiscuous mode
[  147.370446][T10063] bond14: (slave bridge5): Releasing backup interface
[  147.395717][T10063] netlink: 'syz.0.1126': attribute type 10 has an invalid length.
[  147.399645][T10063] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  147.407218][T10063] 8021q: adding VLAN 0 to HW filter on device bond0
[  147.410901][T10063] bond0: (slave wlan1): Opening slave failed
[  147.681960][T10072] wg1 speed is unknown, defaulting to 1000
[  147.685007][T10072] lo speed is unknown, defaulting to 1000
[  147.732957][T10075] syzkaller1: entered promiscuous mode
[  147.735435][T10075] syzkaller1: entered allmulticast mode
[  147.849331][T10080] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1131'.
[  147.935780][T10086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1134'.
[  147.945689][T10086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1134'.
[  147.948851][T10086] netlink: 'syz.3.1134': attribute type 20 has an invalid length.
[  148.097587][T10096] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1138'.
[  148.105798][T10097] pim6reg: entered allmulticast mode
[  148.142090][T10096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1138'.
[  148.149914][T10102] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1140'.
[  148.179047][T10106] netlink: 'syz.1.1142': attribute type 1 has an invalid length.
[  148.195899][T10103] netlink: 'syz.3.1139': attribute type 1 has an invalid length.
[  148.217804][T10103] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address
[  148.221930][T10103] bond13: (slave vxcan3): Error -95 calling set_mac_address
[  148.239131][T10106] bond14: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  148.248995][T10106] 8021q: adding VLAN 0 to HW filter on device bond14
[  148.252337][ T5873] bond14: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  148.279541][T10103] gretap2: entered promiscuous mode
[  148.283077][T10103] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1139'.
[  148.286268][T10103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  148.306958][T10113] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1143'.
[  148.377740][ T5873] bond14: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  148.420144][T10125] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  148.454983][T10130] wg1 speed is unknown, defaulting to 1000
[  148.459150][T10130] lo speed is unknown, defaulting to 1000
[  148.895594][T10175] can: request_module (can-proto-0) failed.
[  148.900249][T10175] openvswitch: netlink: IP tunnel dst address not specified
[  148.904483][T10175] : entered promiscuous mode
[  148.910927][T10175] : entered allmulticast mode
[  148.913542][T10175] bridge0: port 1() entered blocking state
[  148.916356][T10175] bridge0: port 1() entered disabled state
[  148.920363][T10175] bridge0: port 1() entered blocking state
[  148.922703][T10175] bridge0: port 1() entered forwarding state
[  149.024627][T10181] syzkaller1: entered promiscuous mode
[  149.027264][T10181] syzkaller1: entered allmulticast mode
[  149.173742][T10191] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  149.293157][T10194] batadv2: entered promiscuous mode
[  149.295520][T10194] batadv2: entered allmulticast mode
[  149.685848][T10213] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  149.719731][T10213] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  149.781815][T10213] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  149.821590][T10213] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  149.893420][ T5872] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  149.900704][ T5872] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  149.910354][ T5872] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  149.920609][ T5873] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  150.009931][T10220] veth0: entered promiscuous mode
[  150.012722][T10220] veth0 (unregistering): left promiscuous mode
[  150.341227][T10246] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  150.344497][T10246] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  150.645683][T10267] dvmrp1: tun_chr_ioctl cmd 1074025677
[  150.648351][T10267] dvmrp1: linktype set to 768
[  150.710715][T10273] validate_nla: 4 callbacks suppressed
[  150.710725][T10273] netlink: 'syz.3.1191': attribute type 1 has an invalid length.
[  150.715245][T10273] netlink: 'syz.3.1191': attribute type 2 has an invalid length.
[  150.939689][T10282] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  151.039548][T10286] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  151.090914][T10286] bond15: entered promiscuous mode
[  151.092895][T10286] 8021q: adding VLAN 0 to HW filter on device bond15
[  151.459988][T10311] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  151.702524][T10321] wg1 speed is unknown, defaulting to 1000
[  151.706354][T10321] lo speed is unknown, defaulting to 1000
[  151.737491][T10323] 8021q: adding VLAN 0 to HW filter on device bond16
[  152.073257][T10345] wg1: entered promiscuous mode
[  152.075463][T10345] wg1: entered allmulticast mode
[  152.193315][T10347] __nla_validate_parse: 34 callbacks suppressed
[  152.193331][T10347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1211'.
[  152.200222][T10347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1211'.
[  152.373032][T10350] bridge7: entered promiscuous mode
[  152.375302][T10350] bridge7: entered allmulticast mode
[  152.380580][T10350] team0: Port device bridge7 added
[  152.609365][T10352] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  152.704622][T10352] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  152.751423][T10352] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  152.803975][T10352] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  152.833745][T10360] lo speed is unknown, defaulting to 1000
[  152.838216][T10360] lo speed is unknown, defaulting to 1000
[  152.842231][T10360] lo speed is unknown, defaulting to 1000
[  152.852118][T10360] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  152.869382][T10360] lo speed is unknown, defaulting to 1000
[  152.872614][T10360] lo speed is unknown, defaulting to 1000
[  152.875849][T10360] lo speed is unknown, defaulting to 1000
[  152.890872][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  152.910951][ T5872] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  152.927755][ T5872] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  152.930553][ T5872] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  152.959664][T10364] netlink: 'syz.0.1215': attribute type 1 has an invalid length.
[  152.961382][T10366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1216'.
[  153.208863][T10386] netlink: 'syz.1.1220': attribute type 4 has an invalid length.
[  153.838783][T10389] delete_channel: no stack
[  153.850683][T10387] delete_channel: no stack
[  153.855225][T10392] wg1 speed is unknown, defaulting to 1000
[  153.860681][T10392] lo speed is unknown, defaulting to 1000
[  153.864547][T10392] lo speed is unknown, defaulting to 1000
[  153.869547][T10391] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  153.911903][T10398] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1225'.
[  153.919418][T10398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1225'.
[  153.984669][T10402] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1227'.
[  153.989418][T10402] bond0: invalid ARP target 0.0.0.0 specified for addition
[  153.992047][T10402] bond0: option arp_ip_target: invalid value (0)
[  153.995212][T10402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1227'.
[  154.021473][T10405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1228'.
[  154.043233][T10408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1229'.
[  154.060248][T10410] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.269215][T10437] netlink: 'syz.1.1233': attribute type 27 has an invalid length.
[  154.342006][T10443] 8021q: adding VLAN 0 to HW filter on device bond17
[  154.345151][T10443] bridge0: port 1(bond17) entered blocking state
[  154.363715][T10443] bridge0: port 1(bond17) entered disabled state
[  154.368411][T10443] bond17: entered allmulticast mode
[  154.371802][T10443] bond17: entered promiscuous mode
[  154.431048][T10449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1236'.
[  154.450613][T10447] wg1: left promiscuous mode
[  154.452690][T10447] wg1: left allmulticast mode
[  154.456894][T10447] wg2: left allmulticast mode
[  154.512380][T10447] bond12: left promiscuous mode
[  154.520890][T10447] batadv1: left promiscuous mode
[  154.529068][T10447] bond13: left promiscuous mode
[  154.531159][T10447] bond13: left allmulticast mode
[  154.541042][T10447] bond14: left promiscuous mode
[  154.543180][T10447] bond14: left allmulticast mode
[  154.545556][T10447] bridge5: left promiscuous mode
[  154.548532][T10447] bridge5: left allmulticast mode
[  154.555211][T10447] bond15: left promiscuous mode
[  154.565201][ T5893] lo speed is unknown, defaulting to 1000
[  154.576361][ T5893] syz1: Port: 1 Link DOWN
[  154.610084][T10456] hsr_slave_0: left promiscuous mode
[  154.612589][T10456] hsr_slave_1: left promiscuous mode
[  154.929833][T10467] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  155.045821][T10467] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  155.109875][T10477] : left promiscuous mode
[  155.124065][T10467] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  155.176388][ T5893] tipc: Node number set to 3897292316
[  155.181139][T10467] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  155.225793][T10480] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[  155.261429][ T6574] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  155.287564][ T6574] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  155.291356][ T6574] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  155.305916][ T6574] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  155.405618][T10490] IPVS: set_ctl: invalid protocol: 135 10.1.1.0:20001
[  155.485545][T10496] netlink: 'syz.3.1249': attribute type 4 has an invalid length.
[  155.489477][T10496] : renamed from bond0
[  155.613317][T10502] netlink: 'syz.3.1252': attribute type 5 has an invalid length.
[  155.731523][T10516] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  155.735116][T10516] CPU: 1 UID: 0 PID: 10516 Comm: syz.3.1256 Not tainted syzkaller #0 PREEMPT(full) 
[  155.735134][T10516] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  155.735142][T10516] Call Trace:
[  155.735148][T10516]  <TASK>
[  155.735154][T10516]  dump_stack_lvl+0x189/0x250
[  155.735178][T10516]  ? __pfx_dump_stack_lvl+0x10/0x10
[  155.735193][T10516]  ? __pfx__printk+0x10/0x10
[  155.735215][T10516]  ? kernfs_path_from_node+0x2f/0x290
[  155.735229][T10516]  ? kernfs_path_from_node+0x250/0x290
[  155.735241][T10516]  ? kernfs_path_from_node+0x2f/0x290
[  155.735282][T10516]  sysfs_warn_dup+0x8e/0xa0
[  155.735298][T10516]  sysfs_do_create_link_sd+0xc0/0x110
[  155.735314][T10516]  device_add_class_symlinks+0x1cf/0x240
[  155.735332][T10516]  device_add+0x475/0xb50
[  155.735349][T10516]  wiphy_register+0x1ba6/0x28d0
[  155.735382][T10516]  ? __pfx_wiphy_register+0x10/0x10
[  155.735399][T10516]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  155.735420][T10516]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  155.735446][T10516]  ieee80211_register_hw+0x3484/0x4100
[  155.735474][T10516]  ? ieee80211_register_hw+0x1481/0x4100
[  155.735498][T10516]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  155.735516][T10516]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  155.735539][T10516]  ? __hrtimer_setup+0x187/0x210
[  155.735551][T10516]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  155.735571][T10516]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  155.735611][T10516]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  155.735626][T10516]  ? trace_kmalloc+0x1f/0xd0
[  155.735639][T10516]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  155.735656][T10516]  ? kstrndup+0xbf/0x160
[  155.735676][T10516]  hwsim_new_radio_nl+0xea4/0x1b10
[  155.735694][T10516]  ? __pfx___nla_validate_parse+0x10/0x10
[  155.735721][T10516]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  155.735748][T10516]  ? __nla_parse+0x40/0x60
[  155.735769][T10516]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  155.735791][T10516]  genl_family_rcv_msg_doit+0x215/0x300
[  155.735812][T10516]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  155.735837][T10516]  ? bpf_lsm_capable+0x9/0x20
[  155.735853][T10516]  ? security_capable+0x7e/0x2e0
[  155.735877][T10516]  genl_rcv_msg+0x60e/0x790
[  155.735897][T10516]  ? __pfx_genl_rcv_msg+0x10/0x10
[  155.735911][T10516]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  155.735940][T10516]  netlink_rcv_skb+0x208/0x470
[  155.735956][T10516]  ? __lock_acquire+0xab9/0xd20
[  155.735974][T10516]  ? __pfx_genl_rcv_msg+0x10/0x10
[  155.736010][T10516]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  155.736045][T10516]  ? down_read+0x1ad/0x2e0
[  155.736059][T10516]  genl_rcv+0x28/0x40
[  155.736071][T10516]  netlink_unicast+0x82f/0x9e0
[  155.736092][T10516]  ? __pfx_netlink_unicast+0x10/0x10
[  155.736107][T10516]  ? netlink_sendmsg+0x642/0xb30
[  155.736115][T10516]  ? skb_put+0x11b/0x210
[  155.736128][T10516]  netlink_sendmsg+0x805/0xb30
[  155.736162][T10516]  ? __pfx_netlink_sendmsg+0x10/0x10
[  155.736179][T10516]  ? aa_sock_msg_perm+0xf1/0x1d0
[  155.736192][T10516]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  155.736204][T10516]  ? __pfx_netlink_sendmsg+0x10/0x10
[  155.736214][T10516]  __sock_sendmsg+0x21c/0x270
[  155.736230][T10516]  ____sys_sendmsg+0x505/0x830
[  155.736246][T10516]  ? __pfx_____sys_sendmsg+0x10/0x10
[  155.736291][T10516]  ? import_iovec+0x74/0xa0
[  155.736308][T10516]  ___sys_sendmsg+0x21f/0x2a0
[  155.736324][T10516]  ? __pfx____sys_sendmsg+0x10/0x10
[  155.736366][T10516]  ? __fget_files+0x2a/0x420
[  155.736384][T10516]  ? __fget_files+0x3a0/0x420
[  155.736409][T10516]  __x64_sys_sendmsg+0x19b/0x260
[  155.736424][T10516]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  155.736453][T10516]  ? rcu_is_watching+0x15/0xb0
[  155.736470][T10516]  ? do_syscall_64+0xbe/0x3b0
[  155.736484][T10516]  do_syscall_64+0xfa/0x3b0
[  155.736493][T10516]  ? lockdep_hardirqs_on+0x9c/0x150
[  155.736508][T10516]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.736518][T10516]  ? exc_page_fault+0x9f/0xf0
[  155.736535][T10516]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.736546][T10516] RIP: 0033:0x7fecf718eba9
[  155.736558][T10516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  155.736567][T10516] RSP: 002b:00007fecf800f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  155.736581][T10516] RAX: ffffffffffffffda RBX: 00007fecf73d5fa0 RCX: 00007fecf718eba9
[  155.736589][T10516] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009
[  155.736596][T10516] RBP: 00007fecf7211e19 R08: 0000000000000000 R09: 0000000000000000
[  155.736603][T10516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  155.736610][T10516] R13: 00007fecf73d6038 R14: 00007fecf73d5fa0 R15: 00007ffcb59d5558
[  155.736630][T10516]  </TASK>
[  155.964500][T10522] netlink: 'syz.1.1258': attribute type 11 has an invalid length.
[  155.972705][T10523] netlink: 'syz.1.1258': attribute type 3 has an invalid length.
[  156.024091][T10534] netlink: 'syz.1.1262': attribute type 1 has an invalid length.
[  156.050142][T10534] 8021q: adding VLAN 0 to HW filter on device bond15
[  156.052697][T10532] : renamed from bond_slave_0
[  156.071647][T10534] bond15: (slave veth5): Enslaving as an active interface with a down link
[  156.178322][T10547] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.181669][T10547] bridge0: port 2(bond0) entered blocking state
[  156.184531][T10547] bridge0: port 2(bond0) entered disabled state
[  156.188030][T10547] bond0: entered allmulticast mode
[  156.192044][T10547] bond0: entered promiscuous mode
[  156.230807][T10551] netlink: 'syz.3.1266': attribute type 10 has an invalid length.
[  156.234852][T10551] wlan1: mtu less than device minimum
[  156.238170][T10551] : (slave wlan1): Error -22 calling dev_set_mtu
[  156.432305][T10557] netlink: 'syz.3.1268': attribute type 1 has an invalid length.
[  156.463833][T10557] 8021q: adding VLAN 0 to HW filter on device bond18
[  156.480750][T10557] ipvlan3: entered allmulticast mode
[  156.483027][T10557] bond18: entered allmulticast mode
[  156.680901][T10564] openvswitch: netlink: Missing key (keys=40, expected=100)
[  156.685164][T10564] netlink: 'syz.3.1271': attribute type 1 has an invalid length.
[  156.690476][T10564] netlink: 'syz.3.1271': attribute type 6 has an invalid length.
[  156.693577][T10564] netlink: 'syz.3.1271': attribute type 3 has an invalid length.
[  156.910683][T10571] wg1 speed is unknown, defaulting to 1000
[  156.917642][T10571] lo speed is unknown, defaulting to 1000
[  156.921028][T10571] lo speed is unknown, defaulting to 1000
[  156.994788][T10579] netlink: 'syz.0.1274': attribute type 7 has an invalid length.
[  157.008726][T10579] : entered promiscuous mode
[  157.211543][T10589] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.250492][T10601] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  157.250968][T10603] xt_policy: too many policy elements
[  157.267580][T10603] ip6gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue
[  157.271913][T10589] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  157.276552][T10589] tipc: Resetting bearer <eth:syzkaller0>
[  157.281002][T10588] tipc: Disabling bearer <eth:syzkaller0>
[  157.302430][T10606] netlink: 'syz.1.1282': attribute type 1 has an invalid length.
[  157.327903][T10606] 8021q: adding VLAN 0 to HW filter on device bond16
[  157.367805][T10611] netlink: 'syz.3.1283': attribute type 6 has an invalid length.
[  157.378167][T10611] __nla_validate_parse: 22 callbacks suppressed
[  157.378180][T10611] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.1283'.
[  157.474035][T10613] wg1 speed is unknown, defaulting to 1000
[  157.477875][T10613] lo speed is unknown, defaulting to 1000
[  157.481731][T10613] lo speed is unknown, defaulting to 1000
[  157.512825][T10623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1288'.
[  157.587583][T10631] wg1 speed is unknown, defaulting to 1000
[  157.590209][T10631] lo speed is unknown, defaulting to 1000
[  157.592760][T10631] lo speed is unknown, defaulting to 1000
[  157.645431][T10641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1290'.
[  157.812101][T10639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1291'.
[  157.815403][T10653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1291'.
[  157.889090][T10659] Bluetooth: MGMT ver 1.23
[  157.898702][T10659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1292'.
[  157.917971][T10659] macsec0: entered promiscuous mode
[  157.920235][T10659] batadv0: entered promiscuous mode
[  157.928605][T10659] batadv0: left promiscuous mode
[  157.965507][T10641] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1290'.
[  157.981628][T10641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1290'.
[  158.067711][T10670] dvmrp0: left allmulticast mode
[  158.069520][T10670] dvmrp8: left allmulticast mode
[  158.118390][T10671] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1294'.
[  158.133922][T10671] rdma_rxe: rxe_newlink: failed to add lo
[  158.144367][T10682] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  158.160979][T10671] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  158.323957][T10703] netlink: 201916 bytes leftover after parsing attributes in process `syz.1.1300'.
[  158.441230][T10714] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  158.846413][T10752] syzkaller0: create flow: hash 3542242503 index 1
[  158.934344][T10748] syzkaller0: delete flow: hash 3542242503 index 1
[  159.960265][T10766] wg1 speed is unknown, defaulting to 1000
[  159.970368][T10766] lo speed is unknown, defaulting to 1000
[  159.984033][T10774] 8021q: adding VLAN 0 to HW filter on device bond17
[  159.988741][T10774] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  159.998289][T10766] lo speed is unknown, defaulting to 1000
[  160.030644][T10774] : left allmulticast mode
[  160.032188][T10774] : left promiscuous mode
[  160.033865][T10774] bridge0: port 1() entered disabled state
[  160.052520][T10774] bond14: (slave ip6gretap1): Removing an active aggregator
[  160.059450][T10774] bond14: (slave ip6gretap1): Releasing backup interface
[  160.071472][T10774] team0: Port device bridge7 removed
[  160.075143][T10774] bond15: (slave veth5): Releasing active interface
[  160.243974][T10778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  160.520337][T10797] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  160.618507][T10805] siw: device registration error -23
[  160.622486][T10807] siw: device registration error -23
[  160.812266][T10820] bridge_slave_0: default FDB implementation only supports local addresses
[  160.941191][T10828] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.122924][T10847] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  161.184085][T10853] validate_nla: 5 callbacks suppressed
[  161.184095][T10853] netlink: 'syz.3.1342': attribute type 1 has an invalid length.
[  161.195013][T10853] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.251156][T10860] netlink: 'syz.3.1344': attribute type 1 has an invalid length.
[  161.254688][T10860] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR
[  161.707551][T10891] vlan3: entered allmulticast mode
[  161.712159][T10891] bridge_slave_0: entered allmulticast mode
[  161.720949][T10893] netlink: 'syz.3.1354': attribute type 5 has an invalid length.
[  162.914949][T10904] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  162.918512][T10906] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR
[  162.951617][T10907] syzkaller0: entered promiscuous mode
[  162.957793][T10907] syzkaller0: entered allmulticast mode
[  162.960609][T10907] tipc: Resetting bearer <eth:syzkaller0>
[  163.010325][   T53] tipc: Resetting bearer <eth:syzkaller0>
[  163.012584][T10902] tipc: Resetting bearer <eth:syzkaller0>
[  163.038285][T10919] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  163.045952][T10919] __nla_validate_parse: 21 callbacks suppressed
[  163.045961][T10919] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1363'.
[  164.072808][T10902] tipc: Disabling bearer <eth:syzkaller0>
[  164.109364][T10926] netlink: 'syz.3.1364': attribute type 1 has an invalid length.
[  164.128317][T10926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1364'.
[  164.140123][T10926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1364'.
[  164.190189][T10932] netlink: 'syz.0.1366': attribute type 1 has an invalid length.
[  164.193296][T10932] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1366'.
[  164.262392][T10937] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  164.273360][T10937] syzkaller0: entered promiscuous mode
[  164.275921][T10937] syzkaller0: entered allmulticast mode
[  164.297209][T10937] tipc: Resetting bearer <eth:syzkaller0>
[  164.324157][T10946] netlink: 'syz.1.1370': attribute type 32 has an invalid length.
[  164.328753][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1370'.
[  164.332017][T10946] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  164.388289][T10952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1371'.
[  164.410965][T10952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1371'.
[  164.436501][T10956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1372'.
[  164.443477][T10956] bond0: (slave rose0): Error: Device can not be enslaved while up
[  164.549441][T10965] netlink: 'syz.0.1374': attribute type 1 has an invalid length.
[  164.610173][T10974] syzkaller1: entered promiscuous mode
[  164.612498][T10974] syzkaller1: entered allmulticast mode
[  164.760352][T10984] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1379'.
[  164.774863][T10974] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1376'.
[  164.793534][T10974] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  164.805699][T10984] wg1 speed is unknown, defaulting to 1000
[  164.809818][T10984] lo speed is unknown, defaulting to 1000
[  164.813670][T10984] lo speed is unknown, defaulting to 1000
[  164.969207][T10989] veth0_to_bridge: entered promiscuous mode
[  164.971558][T10989] veth0_to_bridge: entered allmulticast mode
[  165.073075][T10993] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  165.100087][T10994] tipc: Disabling bearer <eth:syzkaller0>
[  165.170570][T10999] dvmrp10: entered allmulticast mode
[  165.203298][T11002] netlink: 'syz.0.1384': attribute type 1 has an invalid length.
[  165.238726][T11002] bond17: entered promiscuous mode
[  165.240938][T11002] bond17: entered allmulticast mode
[  165.991365][T11014] netlink: 'syz.1.1387': attribute type 10 has an invalid length.
[  165.995203][T11016] netlink: 'syz.1.1387': attribute type 10 has an invalid length.
[  166.000969][T11014] team0: Port device 0! added
[  166.003357][T11017] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  166.022148][T11016] team0: Port device 0! removed
[  166.172912][T11031] vlan2: entered promiscuous mode
[  166.217937][T11040] netlink: 'syz.1.1394': attribute type 1 has an invalid length.
[  166.243956][T11040] 8021q: adding VLAN 0 to HW filter on device bond19
[  166.297471][T11049] wg1 speed is unknown, defaulting to 1000
[  166.300202][T11049] lo speed is unknown, defaulting to 1000
[  166.302775][T11049] lo speed is unknown, defaulting to 1000
[  166.303379][T11048] tipc: Invalid UDP bearer configuration
[  166.304796][T11048] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  166.381098][T11056] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.388736][T11056] netlink: 'syz.0.1399': attribute type 10 has an invalid length.
[  166.392173][T11056] bond0: entered promiscuous mode
[  166.394351][T11056] bond0: entered allmulticast mode
[  166.397684][T11056] bridge1: port 1(bond0) entered blocking state
[  166.400591][T11056] bridge1: port 1(bond0) entered disabled state
[  166.653618][T11074] sctp: [Deprecated]: syz.1.1403 (pid 11074) Use of int in maxseg socket option.
[  166.653618][T11074] Use struct sctp_assoc_value instead
[  166.868125][T11095] siw: device registration error -23
[  166.912609][T11099] tipc: Failed to remove unknown binding: 66,1,1/3897292316:1758473639/1758473641
[  166.980862][T11102] 8021q: adding VLAN 0 to HW filter on device bond2
[  167.214880][T11123] netlink: 'syz.3.1416': attribute type 10 has an invalid length.
[  167.259708][T11117] vlan0: left promiscuous mode
[  167.261772][T11117] veth1_vlan: left allmulticast mode
[  167.263904][T11117] macvlan1: left promiscuous mode
[  167.266181][T11117] macvlan1: left allmulticast mode
[  167.270038][T11117] macvlan2: left promiscuous mode
[  167.281331][T11117] ipvlan2: left promiscuous mode
[  167.306126][T11117] bond4: left promiscuous mode
[  167.309523][T11117] ip6tnl1: left promiscuous mode
[  167.351987][T11117] vlan2: left promiscuous mode
[  167.354532][T11117] bond7: left promiscuous mode
[  167.369004][T11117] xfrm1: left promiscuous mode
[  167.373002][T11117] xfrm1: left allmulticast mode
[  167.409953][T11117] ipvlan0: left allmulticast mode
[  167.413398][T11117] bond13: left allmulticast mode
[  167.415946][T11117] ip6tnl6: left promiscuous mode
[  167.427716][T11117] tipc: Resetting bearer <eth:syzkaller0>
[  167.430902][T11117] syzkaller0: left promiscuous mode
[  167.433392][T11117] syzkaller0: left allmulticast mode
[  167.455314][T11117] bridge7: left promiscuous mode
[  167.457956][T11117] bridge7: left allmulticast mode
[  167.523905][T11123] team0: Port device macvlan1 added
[  167.530195][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  167.533414][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.539715][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  167.543111][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.552431][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  167.558982][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.561633][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  167.564353][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.872183][T11147] netlink: 'syz.0.1420': attribute type 1 has an invalid length.
[  168.072450][T11161] __nla_validate_parse: 47 callbacks suppressed
[  168.072465][T11161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1423'.
[  168.132104][T11163] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  168.135099][T11163] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  168.518886][T11173] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (255)
[  169.270835][T11181] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  169.280962][T11181] team0: Device gtp17 is up. Set it down before adding it as a team port
[  169.434853][T11186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1432'.
[  169.439824][T11186] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1432'.
[  169.521175][T11192] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  169.575680][T11195] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  169.597870][T11197] netlink: 'syz.1.1435': attribute type 11 has an invalid length.
[  169.672468][T11202] netlink: 'syz.3.1436': attribute type 10 has an invalid length.
[  169.691017][T11202] : (slave batadv_slave_0): Enslaving as an active interface with a down link
[  169.823947][T11217] wg1 speed is unknown, defaulting to 1000
[  169.831457][T11217] lo speed is unknown, defaulting to 1000
[  169.843604][T11217] lo speed is unknown, defaulting to 1000
[  169.952129][T11219] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  169.957855][T11219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1441'.
[  169.961401][T11219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1441'.
[  169.964504][T11219] netlink: 'syz.1.1441': attribute type 12 has an invalid length.
[  169.967447][T11219] netlink: 'syz.1.1441': attribute type 14 has an invalid length.
[  170.433926][T11235] pim6reg1: entered promiscuous mode
[  170.440042][T11235] pim6reg1: entered allmulticast mode
[  170.675779][T11243] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1445'.
[  170.680842][T11243] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  170.684182][T11243] syzkaller0: entered promiscuous mode
[  170.686639][T11243] syzkaller0: entered allmulticast mode
[  170.718260][T11239] tipc: Resetting bearer <eth:syzkaller0>
[  170.750371][T11239] tipc: Disabling bearer <eth:syzkaller0>
[  170.819739][T11245] trusted_key: syz.1.1446 sent an empty control message without MSG_MORE.
[  170.895543][T11253] netlink: 'syz.3.1448': attribute type 13 has an invalid length.
[  170.903563][T11253] netlink: 'syz.3.1448': attribute type 17 has an invalid length.
[  170.930246][T11253] erspan0: left allmulticast mode
[  170.942824][T11253] ip6tnl0: left promiscuous mode
[  170.944480][T11253] ip6tnl0: left allmulticast mode
[  170.955761][T11253] 8021q: adding VLAN 0 to HW filter on device 
[  170.961862][T11253] 8021q: adding VLAN 0 to HW filter on device team0
[  170.968230][T11253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  170.974580][    T9] lo speed is unknown, defaulting to 1000
[  170.980533][    T9] syz2: Port: 1 Link ACTIVE
[  171.023661][T11257] wg1 speed is unknown, defaulting to 1000
[  171.031094][T11257] lo speed is unknown, defaulting to 1000
[  171.031894][T11253] wg1 speed is unknown, defaulting to 1000
[  171.034876][T11257] lo speed is unknown, defaulting to 1000
[  171.037693][T11253] lo speed is unknown, defaulting to 1000
[  171.053318][T11253] lo speed is unknown, defaulting to 1000
[  171.167365][T11270] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[  171.171537][T11270] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  171.218934][T11272] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1452'.
[  171.271457][T11272] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1452'.
[  171.275253][T11272] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1452'.
[  171.364012][T11277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1452'.
[  172.131991][T11290] geneve8: entered promiscuous mode
[  172.133973][T11290] geneve8: entered allmulticast mode
[  172.136765][   T12] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  172.141580][   T12] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  172.145277][   T12] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  172.153117][   T12] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  172.303522][T11300] netlink: 'syz.1.1460': attribute type 6 has an invalid length.
[  172.311682][T11300] netlink: 'syz.1.1460': attribute type 12 has an invalid length.
[  172.357723][T11301] netlink: 'syz.1.1460': attribute type 12 has an invalid length.
[  172.632541][T11332] netlink: 'syz.3.1470': attribute type 1 has an invalid length.
[  172.679215][T11334] vlan3: entered promiscuous mode
[  172.774843][T11340] openvswitch: netlink: Multiple metadata blocks provided
[  173.095065][T11367] __nla_validate_parse: 7 callbacks suppressed
[  173.095074][T11367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1481'.
[  173.413587][T11376] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  173.416449][T11376] syzkaller0: entered promiscuous mode
[  173.418349][T11376] syzkaller0: entered allmulticast mode
[  173.422837][T11376] tipc: Resetting bearer <eth:syzkaller0>
[  173.426783][T11375] tipc: Resetting bearer <eth:syzkaller0>
[  173.438610][T11375] tipc: Disabling bearer <eth:syzkaller0>
[  173.610704][T11388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1489'.
[  173.622435][T11392] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1488'.
[  173.788770][T11400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1492'.
[  173.896576][T11408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1494'.
[  173.945038][T11417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1496'.
[  173.978951][T11415] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  173.984279][T11415] syzkaller0: entered promiscuous mode
[  173.988624][T11415] syzkaller0: entered allmulticast mode
[  174.024712][T11422] netlink: 844 bytes leftover after parsing attributes in process `syz.3.1498'.
[  174.089665][T11425] netlink: 'syz.1.1499': attribute type 3 has an invalid length.
[  174.099713][T11425] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1499'.
[  174.165509][T11429] netlink: 'syz.1.1501': attribute type 4 has an invalid length.
[  174.175310][T11429] netlink: 'syz.1.1501': attribute type 4 has an invalid length.
[  174.253872][   T61] block nbd0: Possible stuck request ffff8880214d8000: control (read@0,1024B). Runtime 30 seconds
[  174.258904][   T61] block nbd0: Possible stuck request ffff8880214d8200: control (read@1024,1024B). Runtime 30 seconds
[  174.263487][   T61] block nbd0: Possible stuck request ffff8880214d8400: control (read@2048,1024B). Runtime 30 seconds
[  174.271125][   T61] block nbd0: Possible stuck request ffff8880214d8600: control (read@3072,1024B). Runtime 30 seconds
[  174.421886][T11440] : renamed from bond_slave_0
[  174.741910][T11464] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1510'.
[  174.750422][T11464] batadv2: entered promiscuous mode
[  174.752562][T11464] batadv2: entered allmulticast mode
[  174.873486][T11469] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1509'.
[  175.056331][ T6461] Bluetooth: hci2: command 0x0405 tx timeout
[  175.220498][T11480] netlink: 'syz.1.1513': attribute type 1 has an invalid length.
[  175.223714][T11480] netlink: 'syz.1.1513': attribute type 4 has an invalid length.
[  175.229113][T11480] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  175.609526][T11498] wg1 speed is unknown, defaulting to 1000
[  175.613301][T11498] lo speed is unknown, defaulting to 1000
[  175.618826][T11498] lo speed is unknown, defaulting to 1000
[  175.824326][T11510] netlink: 'syz.3.1521': attribute type 21 has an invalid length.
[  175.910229][T11515] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  176.071602][T11527] : (slave batadv_slave_0): Releasing backup interface
[  176.083258][T11527] team0: Port device macvlan1 removed
[  176.089100][T11527] bond17: left allmulticast mode
[  176.091411][T11527] bond17: left promiscuous mode
[  176.093736][T11527] bridge0: port 1(bond17) entered disabled state
[  176.101000][T11527] bond0: left allmulticast mode
[  176.103338][T11527] bridge0: port 2(bond0) entered disabled state
[  176.279424][T11547] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  176.461566][T11564] tipc: Resetting bearer <eth:syzkaller0>
[  176.468493][T11564] IPv6: NLM_F_REPLACE set, but no existing node found!
[  176.553497][T11569] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  176.569525][T11579] openvswitch: netlink: VXLAN extension message has 2 unknown bytes.
[  176.586818][T11578] geneve4: left promiscuous mode
[  176.590934][T11578] gretap1: left promiscuous mode
[  176.593267][T11578] ip6tnl2: left promiscuous mode
[  176.595703][T11578] veth5: left promiscuous mode
[  176.598761][T11578] mac80211_hwsim hwsim12 syzkaller0: left promiscuous mode
[  176.602677][T11578] geneve7: left promiscuous mode
[  176.605505][T11578] gretap2: left promiscuous mode
[  176.609946][T11578] vlan2: left promiscuous mode
[  176.611827][T11578] geneve8: left promiscuous mode
[  176.613776][T11578] vlan3: left promiscuous mode
[  176.615394][T11578] bond0: left promiscuous mode
[  176.687778][T11586] 8021q: adding VLAN 0 to HW filter on device bond19
[  177.567745][T11630] validate_nla: 3 callbacks suppressed
[  177.567756][T11630] netlink: 'syz.1.1554': attribute type 1 has an invalid length.
[  177.584667][T11630] 8021q: adding VLAN 0 to HW filter on device bond20
[  177.591875][T11630] vlan4: entered promiscuous mode
[  177.593568][T11630] bond20: entered promiscuous mode
[  177.595436][T11630] vlan4: entered allmulticast mode
[  177.598854][T11630] bond20: entered allmulticast mode
[  177.621661][T11637] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode
[  178.474886][T11649] netlink: 'syz.0.1559': attribute type 16 has an invalid length.
[  178.480037][T11649] netlink: 'syz.0.1559': attribute type 17 has an invalid length.
[  178.529621][T11649] bond0: left promiscuous mode
[  178.537704][T11649] 8021q: adding VLAN 0 to HW filter on device team0
[  178.540692][T11649] tipc: Resetting bearer <eth:team0>
[  178.543078][T11649] tipc: Resetting bearer <eth:team0>
[  178.554119][T11649] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  178.566223][   T24] lo speed is unknown, defaulting to 1000
[  178.568321][   T24] syz1: Port: 1 Link ACTIVE
[  178.645301][T11667] __nla_validate_parse: 26 callbacks suppressed
[  178.645311][T11667] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1565'.
[  178.824909][T11681] wg1 speed is unknown, defaulting to 1000
[  178.831482][T11681] lo speed is unknown, defaulting to 1000
[  178.834947][T11681] lo speed is unknown, defaulting to 1000
[  178.918039][T11681] netlink: 'syz.3.1569': attribute type 1 has an invalid length.
[  178.920804][T11681] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1569'.
[  178.924763][T11681] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  179.011796][T11692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1571'.
[  179.573017][T11706] pim6reg1: entered promiscuous mode
[  179.581950][T11706] pim6reg1: entered allmulticast mode
[  179.586569][T11706] netlink: 'syz.3.1573': attribute type 11 has an invalid length.
[  179.590765][   T13] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22
[  179.598230][T11706] _Z`Ԁ@S: entered promiscuous mode
[  179.692537][T11713] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1575'.
[  179.701172][T11713] netlink: 'syz.3.1575': attribute type 32 has an invalid length.
[  179.704569][T11713] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  179.753812][T11723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1577'.
[  179.851858][T11730] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  179.942489][T11740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1582'.
[  180.030711][T11753] netlink: 'syz.0.1585': attribute type 1 has an invalid length.
[  180.033420][T11757] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.053338][T11752] sctp: [Deprecated]: syz.0.1585 (pid 11752) Use of struct sctp_assoc_value in delayed_ack socket option.
[  180.053338][T11752] Use struct sctp_sack_info instead
[  180.358477][T11793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1595'.
[  180.361857][T11789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1595'.
[  180.481418][T11797] wg1 speed is unknown, defaulting to 1000
[  180.484211][T11797] lo speed is unknown, defaulting to 1000
[  180.489060][T11797] lo speed is unknown, defaulting to 1000
[  180.551702][T11797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  180.806221][ T5845] Bluetooth: hci1: command 0x0406 tx timeout
[  181.047993][ T6461] Bluetooth: hci2: command 0x0405 tx timeout
[  181.137313][T11809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1599'.
[  181.168357][T11806] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  181.192986][T11813] netlink: 'syz.1.1599': attribute type 13 has an invalid length.
[  181.202598][T11813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1599'.
[  181.208269][T11813] netlink: 'syz.1.1599': attribute type 13 has an invalid length.
[  181.235178][T11816] unknown channel width for channel at 909000KHz?
[  181.309344][T11811] netlink: 'syz.3.1600': attribute type 3 has an invalid length.
[  181.385557][T11830] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[  181.536100][T11845] mac80211_hwsim hwsim12 syzkaller0: left promiscuous mode
[  181.539069][T11845] mac80211_hwsim hwsim12 syzkaller0: left allmulticast mode
[  181.813772][T11867] wg1 speed is unknown, defaulting to 1000
[  181.817848][T11867] lo speed is unknown, defaulting to 1000
[  181.832716][T11867] lo speed is unknown, defaulting to 1000
[  182.006480][T11887] pim6reg1: entered promiscuous mode
[  182.008319][T11887] pim6reg1: entered allmulticast mode
[  182.505953][T11925] wg1 speed is unknown, defaulting to 1000
[  182.510281][T11925] lo speed is unknown, defaulting to 1000
[  182.513865][T11925] lo speed is unknown, defaulting to 1000
[  182.713696][T11932] syzkaller0: entered promiscuous mode
[  182.716706][T11932] syzkaller0: entered allmulticast mode
[  182.723244][T11942] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  183.046369][T11962] macvtap1: entered promiscuous mode
[  183.048490][T11962] vlan0: entered promiscuous mode
[  183.050731][T11962] macvtap1: entered allmulticast mode
[  183.053025][T11962] vlan0: entered allmulticast mode
[  183.055086][T11962] veth0_vlan: entered allmulticast mode
[  183.073177][T11962] macvtap2: entered promiscuous mode
[  183.075172][T11962] macvtap2: entered allmulticast mode
[  183.280995][T11980] IPVS: sh: UDP 172.20.20.187:0 - no destination available
[  183.359871][   T24] lo speed is unknown, defaulting to 1000
[  183.359924][ T5873] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 19999 - 0
[  183.361909][   T24] syz2: Port: 1 Link DOWN
[  183.365563][ T5873] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  183.373062][ T5873] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 19999 - 0
[  183.376669][ T5873] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  183.379992][ T5873] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 19999 - 0
[  183.383270][ T5873] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  183.388097][ T5873] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 19999 - 0
[  183.392388][ T5873] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  183.514424][T11998] validate_nla: 3 callbacks suppressed
[  183.514434][T11998] netlink: 'syz.3.1646': attribute type 1 has an invalid length.
[  183.548493][T11999] bridge0: port 1(erspan0) entered blocking state
[  183.550726][T11999] bridge0: port 1(erspan0) entered disabled state
[  183.553350][T11999] erspan0: entered allmulticast mode
[  183.562931][T11999] erspan0: left allmulticast mode
[  183.606882][T12003] bridge0: failed insert local address into bridge forwarding table
[  183.822071][T12018] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  183.826952][T12018] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode
[  183.829973][T12018] mac80211_hwsim hwsim12 syzkaller0: entered allmulticast mode
[  183.879822][T12018] netem: change failed
[  184.101883][T12041] __nla_validate_parse: 85 callbacks suppressed
[  184.101899][T12041] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1657'.
[  184.128316][T12043] openvswitch: netlink: Missing key (keys=40, expected=80)
[  184.149456][T12045] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1659'.
[  184.234694][T12056] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1661'.
[  184.242095][T12056] syzkaller0: left promiscuous mode
[  184.243952][T12056] syzkaller0: left allmulticast mode
[  184.247896][T12056] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  184.300074][T12061] netlink: 'syz.3.1663': attribute type 3 has an invalid length.
[  184.302707][T12061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1663'.
[  184.338862][T12063] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1664'.
[  184.343338][T12063] pim6reg1: entered allmulticast mode
[  184.351444][T12064] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1662'.
[  184.528196][T12068] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1665'.
[  184.550318][T12070] netlink: 'syz.0.1666': attribute type 4 has an invalid length.
[  184.572323][ T5893] lo speed is unknown, defaulting to 1000
[  184.575850][ T5893] syz1: Port: 1 Link DOWN
[  184.578075][T12070] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001
[  184.585100][T12070] bond0: (slave gretap0): Error: Device is in use and cannot be enslaved
[  184.676411][T12078] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  184.690031][T12078] netem: change failed
[  184.934603][T12085] netlink: 'syz.0.1672': attribute type 83 has an invalid length.
[  184.981008][T12094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1673'.
[  185.022996][T12096] netlink: 'syz.3.1675': attribute type 1 has an invalid length.
[  185.029080][T12096] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1675'.
[  185.073511][T12096] wg1 speed is unknown, defaulting to 1000
[  185.078298][T12096] lo speed is unknown, defaulting to 1000
[  185.081139][T12096] lo speed is unknown, defaulting to 1000
[  185.144780][T12104] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1676'.
[  185.264200][T12107] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  185.359480][T12111] veth9: entered promiscuous mode
[  185.497682][T12124] netlink: 'syz.3.1682': attribute type 10 has an invalid length.
[  185.541852][T12129] syzkaller0: entered promiscuous mode
[  185.544235][T12129] syzkaller0: entered allmulticast mode
[  185.553666][T12127] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  185.599208][T12137] netlink: 'syz.1.1687': attribute type 23 has an invalid length.
[  186.713603][T12189] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0
[  186.751722][T12191] netlink: 'syz.1.1700': attribute type 1 has an invalid length.
[  186.754328][T12191] netlink: 'syz.1.1700': attribute type 1 has an invalid length.
[  186.759051][T12193] netlink: 'syz.3.1699': attribute type 21 has an invalid length.
[  186.795824][T12198] bond21: entered promiscuous mode
[  186.799539][T12198] 8021q: adding VLAN 0 to HW filter on device bond21
[  186.885209][T12198] bond21 (unregistering): Released all slaves
[  186.900943][T12201] dvmrp8: entered allmulticast mode
[  186.924211][T12201] wg1 speed is unknown, defaulting to 1000
[  186.931664][T12201] lo speed is unknown, defaulting to 1000
[  186.935304][T12201] lo speed is unknown, defaulting to 1000
[  187.008014][T12200] dvmrp8: left allmulticast mode
[  187.131397][T12217] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  187.240745][T12217] bridge1: port 1(bond0) entered disabled state
[  187.249951][T12217] bond0 (unregistering): Released all slaves
[  188.234963][T12271] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  188.476483][T12281] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  188.558907][T12288] wg1 speed is unknown, defaulting to 1000
[  188.562298][T12288] lo speed is unknown, defaulting to 1000
[  188.565624][T12288] lo speed is unknown, defaulting to 1000
[  188.705473][T12301] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  188.788245][T12304] tipc: Resetting bearer <eth:team0>
[  189.168401][T12342] __nla_validate_parse: 21 callbacks suppressed
[  189.168415][T12342] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1737'.
[  189.176982][T12344] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1738'.
[  189.178813][T12345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1738'.
[  189.245563][T12349] IPVS: length: 111 != 24
[  189.288598][T12352] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1740'.
[  189.296138][T12352] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1740'.
[  189.300567][T12352] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1740'.
[  189.304190][T12352] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1740'.
[  189.309338][T12352] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1740'.
[  189.313160][T12352] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1740'.
[  189.335180][T12354] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  189.528641][T12366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1744'.
[  190.377046][T12394] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.804658][T12411] openvswitch: netlink: nsh attr 0 has unexpected len 60 expected 0
[  190.810517][T12411] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.880059][T12419] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  190.956899][T12419] netlink: 'syz.1.1761': attribute type 2 has an invalid length.
[  190.964801][T12419] : entered promiscuous mode
[  191.173633][T12443] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  191.208734][T12447] 8021q: adding VLAN 0 to HW filter on device bond21
[  191.218151][T12447] syzkaller0: left promiscuous mode
[  191.219991][T12447] syzkaller0: left allmulticast mode
[  191.222684][T12447] vxcan1: entered promiscuous mode
[  191.224570][T12447] vxcan1: entered allmulticast mode
[  191.622137][T12477] netlink: 'syz.1.1776': attribute type 1 has an invalid length.
[  191.625714][T12477] netlink: 'syz.1.1776': attribute type 2 has an invalid length.
[  191.744426][T12483] team1: entered promiscuous mode
[  191.747438][T12483] team1: entered allmulticast mode
[  191.750170][T12483] 8021q: adding VLAN 0 to HW filter on device team1
[  191.870083][T12495] sctp: [Deprecated]: syz.3.1783 (pid 12495) Use of struct sctp_assoc_value in delayed_ack socket option.
[  191.870083][T12495] Use struct sctp_sack_info instead
[  191.878182][T12495] sctp: [Deprecated]: syz.3.1783 (pid 12495) Use of struct sctp_assoc_value in delayed_ack socket option.
[  191.878182][T12495] Use struct sctp_sack_info instead
[  191.922153][T12498] netlink: 'syz.3.1784': attribute type 14 has an invalid length.
[  191.925050][T12498] netlink: 'syz.3.1784': attribute type 13 has an invalid length.
[  192.113051][T12510] sctp: [Deprecated]: syz.3.1787 (pid 12510) Use of struct sctp_assoc_value in delayed_ack socket option.
[  192.113051][T12510] Use struct sctp_sack_info instead
[  192.167084][T12514] openvswitch: netlink: IPv6 tunnel dst address is zero
[  192.170670][T12514] batadv_slave_1: entered promiscuous mode
[  192.204514][T12516] batadv_slave_1 (unregistering): left promiscuous mode
[  192.290947][T12528] netlink: 'syz.3.1793': attribute type 2 has an invalid length.
[  192.293527][T12528] netlink: 'syz.3.1793': attribute type 1 has an invalid length.
[  192.424681][T12541] wg1 speed is unknown, defaulting to 1000
[  192.429151][T12541] lo speed is unknown, defaulting to 1000
[  192.431826][T12541] lo speed is unknown, defaulting to 1000
[  192.628522][T12555] wg1 speed is unknown, defaulting to 1000
[  192.632598][T12555] lo speed is unknown, defaulting to 1000
[  192.638864][T12555] lo speed is unknown, defaulting to 1000
[  192.750888][T12555] wg1 speed is unknown, defaulting to 1000
[  192.753721][T12555] lo speed is unknown, defaulting to 1000
[  192.757661][T12555] lo speed is unknown, defaulting to 1000
[  193.224418][T12586] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.351735][T12596] tipc: Resetting bearer <eth:syzkaller0>
[  193.363018][T12596] vlan0: left allmulticast mode
[  193.364754][T12596] veth0_vlan: left allmulticast mode
[  193.366766][T12596] vlan0: left promiscuous mode
[  193.374753][T12595] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  193.421386][T12600] netlink: 'syz.3.1813': attribute type 1 has an invalid length.
[  193.469423][T12600] bond22: (slave bridge11): making interface the new active one
[  193.473153][T12600] bond22: (slave bridge11): Enslaving as an active interface with an up link
[  193.491072][T12600] pimreg: left allmulticast mode
[  193.728256][T12614] netlink: 'syz.3.1817': attribute type 10 has an invalid length.
[  193.731912][T12614] : (slave wlan1): Opening slave failed
[  193.737249][T12614] mac80211_hwsim hwsim12 syzkaller0: left promiscuous mode
[  193.739770][T12614] mac80211_hwsim hwsim12 syzkaller0: left allmulticast mode
[  193.765347][T12616] netlink: 'syz.3.1818': attribute type 9 has an invalid length.
[  194.423730][T12633] syzkaller0: entered promiscuous mode
[  194.428689][T12633] syzkaller0: entered allmulticast mode
[  194.672874][T12635] __nla_validate_parse: 93 callbacks suppressed
[  194.672885][T12635] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1823'.
[  194.731861][T12639] openvswitch: netlink: Flow key attr not present in new flow.
[  194.792371][T12640] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1824'.
[  195.625951][T12646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1826'.
[  195.654015][T12646] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1826'.
[  195.687998][T12649] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1827'.
[  195.858329][T12674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1833'.
[  195.865271][T12674] raw_sendmsg: syz.0.1833 forgot to set AF_INET. Fix it!
[  195.884909][T12674] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  195.891210][T12674] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  195.987230][T12684] wg1 speed is unknown, defaulting to 1000
[  195.997381][T12684] lo speed is unknown, defaulting to 1000
[  196.007644][T12684] lo speed is unknown, defaulting to 1000
[  196.151142][T12687] wg1 speed is unknown, defaulting to 1000
[  196.165182][T12687] lo speed is unknown, defaulting to 1000
[  196.184825][T12687] lo speed is unknown, defaulting to 1000
[  196.737837][T12697] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1838'.
[  196.753394][T12697] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1838'.
[  196.763506][T12697] netlink: 4900 bytes leftover after parsing attributes in process `syz.0.1838'.
[  197.169795][T12729] netlink: 'syz.3.1846': attribute type 1 has an invalid length.
[  197.191087][T12729] 8021q: adding VLAN 0 to HW filter on device bond23
[  197.210957][T12729] bond23: (slave veth1): Enslaving as an active interface with a down link
[  197.219299][T12729] 8021q: adding VLAN 0 to HW filter on device batadv2
[  197.221802][T12729] bond23: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  197.358408][T12735] bond0: entered promiscuous mode
[  197.360811][T12735] batadv0: entered promiscuous mode
[  197.363622][T12735] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  197.367838][T12735] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  197.371732][T12735] 8021q: adding VLAN 0 to HW filter on device hsr0
[  197.377558][T12735] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1848'.
[  197.559792][T12719] netlink: 'syz.1.1843': attribute type 12 has an invalid length.
[  197.732773][T12751] netlink: 'syz.0.1854': attribute type 10 has an invalid length.
[  197.834117][T12764] netlink: 'syz.3.1858': attribute type 12 has an invalid length.
[  197.837902][T12764] netlink: 'syz.3.1858': attribute type 11 has an invalid length.
[  198.428674][T12806] pimreg: entered allmulticast mode
[  198.465445][T12810] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  198.469119][T12810] syzkaller0: entered promiscuous mode
[  198.470997][T12810] syzkaller0: entered allmulticast mode
[  198.486684][T12810] tipc: Resetting bearer <eth:syzkaller0>
[  198.490605][T12809] tipc: Resetting bearer <eth:syzkaller0>
[  198.499708][T12809] tipc: Disabling bearer <eth:syzkaller0>
[  199.070978][T12839] wg1 speed is unknown, defaulting to 1000
[  199.074712][T12839] lo speed is unknown, defaulting to 1000
[  199.079508][T12839] lo speed is unknown, defaulting to 1000
[  199.392564][T12851] syzkaller0: entered promiscuous mode
[  199.394687][T12851] syzkaller0: entered allmulticast mode
[  199.527761][T12871] tipc: Resetting bearer <eth:syzkaller0>
[  199.688189][T12886] netlink: 'syz.1.1892': attribute type 10 has an invalid length.
[  199.691741][T12886] __nla_validate_parse: 14 callbacks suppressed
[  199.691748][T12886] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1892'.
[  199.698149][T12886] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  199.818916][T12902] netlink: 'syz.1.1894': attribute type 40 has an invalid length.
[  199.930169][T12910] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  199.938461][T12910] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1895'.
[  199.942022][T12910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1895'.
[  199.994365][T12910] netlink: 'syz.0.1895': attribute type 10 has an invalid length.
[  200.205535][T12924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1899'.
[  200.279692][T12944] only policy match revision 0 supported
[  200.279708][T12944] unable to load match
[  200.313044][T12951] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  200.319393][T12951] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode
[  200.322017][T12951] mac80211_hwsim hwsim12 syzkaller0: entered allmulticast mode
[  200.328328][T12956] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1907'.
[  200.404731][T12967] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1910'.
[  200.409223][T12967] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1910'.
[  200.412574][T12967] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1910'.
[  200.419074][T12967] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1910'.
[  200.524095][T12987] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1913'.
[  200.620845][T12993] netlink: 'syz.3.1917': attribute type 13 has an invalid length.
[  200.623707][T12993] netlink: 'syz.3.1917': attribute type 17 has an invalid length.
[  200.645330][T12993] wg1 speed is unknown, defaulting to 1000
[  200.648695][T12993] lo speed is unknown, defaulting to 1000
[  200.651615][T12993] lo speed is unknown, defaulting to 1000
[  200.754582][T12993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  200.838512][T13003] bond19: entered promiscuous mode
[  200.841964][T13003] 8021q: adding VLAN 0 to HW filter on device bond19
[  200.855842][T13003] sctp: [Deprecated]: syz.0.1919 (pid 13003) Use of int in maxseg socket option.
[  200.855842][T13003] Use struct sctp_assoc_value instead
[  201.002037][T13007] vlan0: entered promiscuous mode
[  201.038687][T13007] wg1 speed is unknown, defaulting to 1000
[  201.041414][T13007] lo speed is unknown, defaulting to 1000
[  201.044363][T13007] lo speed is unknown, defaulting to 1000
[  201.361776][T13015] veth0: entered promiscuous mode
[  201.381315][T13019] veth0 (unregistering): left promiscuous mode
[  201.485836][T13027] wg2: entered promiscuous mode
[  201.490740][T13027] wg2: entered allmulticast mode
[  201.549513][T13031] veth9: entered promiscuous mode
[  201.803281][T13047] bond0: entered promiscuous mode
[  201.806791][T13042] openvswitch: netlink: Flow actions attr not present in new flow.
[  201.814552][T13047] bond0: left promiscuous mode
[  201.824796][T13045] bond0: entered promiscuous mode
[  201.827247][T13045] bond0: left promiscuous mode
[  202.413795][T13076] syzkaller0: entered promiscuous mode
[  202.415867][T13076] syzkaller0: entered allmulticast mode
[  203.727072][T13102] validate_nla: 5 callbacks suppressed
[  203.727082][T13102] netlink: 'syz.1.1949': attribute type 4 has an invalid length.
[  204.346230][   T61] block nbd0: Possible stuck request ffff8880214d8000: control (read@0,1024B). Runtime 60 seconds
[  204.350743][   T61] block nbd0: Possible stuck request ffff8880214d8200: control (read@1024,1024B). Runtime 60 seconds
[  204.355376][   T61] block nbd0: Possible stuck request ffff8880214d8400: control (read@2048,1024B). Runtime 60 seconds
[  204.360903][   T61] block nbd0: Possible stuck request ffff8880214d8600: control (read@3072,1024B). Runtime 60 seconds
[  204.587596][T13136] macvlan0: entered promiscuous mode
[  204.590014][T13136] bond0: entered promiscuous mode
[  204.592645][T13136] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  204.607611][T13138] bond12: (slave wireguard0): The slave device specified does not support setting the MAC address
[  204.612652][T13138] bond12: (slave wireguard0): Error -95 calling set_mac_address
[  204.719306][T13146] __nla_validate_parse: 47 callbacks suppressed
[  204.719316][T13146] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1962'.
[  204.740776][T13148] netlink: 'syz.0.1963': attribute type 32 has an invalid length.
[  204.743479][T13148] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1963'.
[  204.799100][T13146] netlink: 'syz.1.1962': attribute type 39 has an invalid length.
[  204.853469][T13152] netlink: 'syz.1.1962': attribute type 10 has an invalid length.
[  204.976620][T13171] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1967'.
[  205.008473][T13175] netlink: 'syz.1.1969': attribute type 1 has an invalid length.
[  205.023377][T13175] 8021q: adding VLAN 0 to HW filter on device bond22
[  205.038292][T13175] veth9: entered promiscuous mode
[  205.041460][T13175] sit0: entered promiscuous mode
[  205.043309][T13175] netlink: 'syz.1.1969': attribute type 1 has an invalid length.
[  205.045861][T13175] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1969'.
[  205.049206][T13175] erspan0: entered allmulticast mode
[  205.158979][T13196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1971'.
[  205.209934][T13195] wg1 speed is unknown, defaulting to 1000
[  205.212787][T13195] lo speed is unknown, defaulting to 1000
[  205.215809][T13195] lo speed is unknown, defaulting to 1000
[  205.277427][T13201] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1975'.
[  205.287361][T13200] pim6reg: left allmulticast mode
[  205.407168][T13206] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  205.426592][T13206] netem: change failed
[  205.525254][T13211] netlink: 'syz.1.1980': attribute type 5 has an invalid length.
[  205.530927][T13211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1980'.
[  205.535950][T13211] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1980'.
[  205.730324][T13220] wg2: left promiscuous mode
[  205.731920][T13220] wg2: left allmulticast mode
[  205.767071][T13222] delete_channel: no stack
[  205.865748][T13226] netlink: 'syz.1.1984': attribute type 2 has an invalid length.
[  205.874984][T13226] netlink: 'syz.1.1984': attribute type 1 has an invalid length.
[  206.165883][T13239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1988'.
[  206.322094][T13244] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  206.339787][T13244] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1990'.
[  206.491494][T13247] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  206.968464][T13259] netlink: 'syz.1.1995': attribute type 12 has an invalid length.
[  207.058395][T13260] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  207.061975][T13260] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  208.203436][T13291] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  208.362298][T13306] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  208.374938][T13306] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  209.555586][T13343] batadv1: entered promiscuous mode
[  209.571856][T13343] batadv1: entered allmulticast mode
[  209.595472][T13345] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  209.609485][T13345] validate_nla: 5 callbacks suppressed
[  209.609500][T13345] netlink: 'syz.3.2018': attribute type 13 has an invalid length.
[  209.622180][T13345] netlink: 'syz.3.2018': attribute type 17 has an invalid length.
[  209.646841][T13345] 8021q: adding VLAN 0 to HW filter on device 
[  209.651754][T13345] 8021q: adding VLAN 0 to HW filter on device team0
[  209.660433][T13345] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  209.667752][    T9] lo speed is unknown, defaulting to 1000
[  209.670296][    T9] syz2: Port: 1 Link ACTIVE
[  209.714650][T13348] veth1_virt_wifi: entered promiscuous mode
[  209.794316][T13362] netlink: 'syz.1.2022': attribute type 1 has an invalid length.
[  209.820267][T13357] __nla_validate_parse: 12 callbacks suppressed
[  209.820280][T13357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2021'.
[  209.864092][T13369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2024'.
[  209.997000][T13361] netlink: 208 bytes leftover after parsing attributes in process `syz.3.2023'.
[  210.000699][T13361] netlink: 208 bytes leftover after parsing attributes in process `syz.3.2023'.
[  210.024689][T13395] netlink: 'syz.0.2030': attribute type 21 has an invalid length.
[  210.028989][T13395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2030'.
[  210.034530][T13395] netlink: 'syz.0.2030': attribute type 21 has an invalid length.
[  210.039564][T13395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2030'.
[  210.123439][T13399] netlink: 'syz.0.2032': attribute type 11 has an invalid length.
[  210.144502][T13401] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  210.146403][T13399] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2032'.
[  210.157207][T13403] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  210.185609][T13399] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2032'.
[  210.348359][T13419] netlink: 'syz.3.2039': attribute type 5 has an invalid length.
[  210.351308][T13419] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2039'.
[  210.364784][T13422] netlink: 'syz.0.2040': attribute type 33 has an invalid length.
[  210.368063][T13422] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2040'.
[  210.375611][T13422] netlink: 'syz.0.2040': attribute type 1 has an invalid length.
[  210.383439][T13420] ip6gretap5: entered promiscuous mode
[  210.413728][T13422] bond20: (slave vcan0): The slave device specified does not support setting the MAC address
[  210.418343][T13422] bond20: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  210.425219][T13422] bond20: (slave vcan0): making interface the new active one
[  210.429357][T13422] bond20: (slave vcan0): Enslaving as an active interface with an up link
[  210.438295][T13422] bond20: (slave vcan1): The slave device specified does not support setting the MAC address
[  210.445265][T13422] bond20: (slave vcan1): Enslaving as a backup interface with an up link
[  210.457413][T13422] 8021q: adding VLAN 0 to HW filter on device bond20
[  210.839118][T13442] atomic_op ffff88803c064198 conn xmit_atomic 0000000000000000
[  211.444199][T13466] netlink: 'syz.3.2049': attribute type 17 has an invalid length.
[  211.474283][T13468] netlink: 'syz.1.2051': attribute type 1 has an invalid length.
[  211.492590][T13468] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  211.562966][T13466] wg1 speed is unknown, defaulting to 1000
[  211.565869][T13466] lo speed is unknown, defaulting to 1000
[  211.569695][T13466] lo speed is unknown, defaulting to 1000
[  211.837853][T13483] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  212.055389][T13497] batadv0: entered promiscuous mode
[  212.057468][T13497] batadv0: entered allmulticast mode
[  212.583274][T13522] wg1 speed is unknown, defaulting to 1000
[  212.587253][T13522] lo speed is unknown, defaulting to 1000
[  212.590542][T13522] lo speed is unknown, defaulting to 1000
[  212.842957][T13542] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  212.852063][T13542] syzkaller0: mtu less than device minimum
[  212.982349][T13549] syzkaller0: left promiscuous mode
[  212.984218][T13549] syzkaller0: left allmulticast mode
[  213.705364][T13570] bond24: entered promiscuous mode
[  213.707660][T13570] 8021q: adding VLAN 0 to HW filter on device bond24
[  213.730785][T13570] 8021q: adding VLAN 0 to HW filter on device bond24
[  213.733735][T13570] bond24: (slave vxcan3): The slave device specified does not support setting the MAC address
[  213.740169][T13570] bond24: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[  213.750348][T13570] bond24: (slave vxcan3): making interface the new active one
[  213.753320][T13570] vxcan3: entered promiscuous mode
[  213.755676][T13570] bond24: (slave vxcan3): Enslaving as an active interface with an up link
[  213.762581][T13573] tipc: Resetting bearer <eth:team0>
[  213.781854][T13573] bond20: (slave vcan0): Releasing backup interface
[  213.784669][T13573] bond20: (slave vcan1): making interface the new active one
[  213.798308][T13573] bond20: (slave vcan1): Releasing backup interface
[  213.898186][T13582] wg1 speed is unknown, defaulting to 1000
[  213.901130][T13582] lo speed is unknown, defaulting to 1000
[  213.903810][T13582] lo speed is unknown, defaulting to 1000
[  213.964843][T13582] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  214.063902][T13591] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  214.073707][T13591] CPU: 1 UID: 0 PID: 13591 Comm: syz.0.2081 Not tainted syzkaller #0 PREEMPT(full) 
[  214.073738][T13591] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  214.073742][T13591] Call Trace:
[  214.073746][T13591]  <TASK>
[  214.073750][T13591]  dump_stack_lvl+0x189/0x250
[  214.073767][T13591]  ? __pfx_dump_stack_lvl+0x10/0x10
[  214.073775][T13591]  ? __pfx__printk+0x10/0x10
[  214.073788][T13591]  ? kernfs_path_from_node+0x2f/0x290
[  214.073797][T13591]  ? kernfs_path_from_node+0x250/0x290
[  214.073804][T13591]  ? kernfs_path_from_node+0x2f/0x290
[  214.073813][T13591]  sysfs_warn_dup+0x8e/0xa0
[  214.073822][T13591]  sysfs_do_create_link_sd+0xc0/0x110
[  214.073830][T13591]  device_add_class_symlinks+0x1cf/0x240
[  214.073839][T13591]  device_add+0x475/0xb50
[  214.073848][T13591]  wiphy_register+0x1ba6/0x28d0
[  214.073866][T13591]  ? __pfx_wiphy_register+0x10/0x10
[  214.073876][T13591]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  214.073888][T13591]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  214.073897][T13591]  ieee80211_register_hw+0x3484/0x4100
[  214.073913][T13591]  ? ieee80211_register_hw+0x1481/0x4100
[  214.073926][T13591]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  214.073936][T13591]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  214.073951][T13591]  ? __hrtimer_setup+0x187/0x210
[  214.073957][T13591]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  214.073969][T13591]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  214.074010][T13591]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  214.074020][T13591]  ? trace_kmalloc+0x1f/0xd0
[  214.074028][T13591]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  214.074038][T13591]  ? kstrndup+0xbf/0x160
[  214.074049][T13591]  hwsim_new_radio_nl+0xea4/0x1b10
[  214.074060][T13591]  ? __pfx___nla_validate_parse+0x10/0x10
[  214.074079][T13591]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  214.074094][T13591]  ? __nla_parse+0x40/0x60
[  214.074106][T13591]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  214.074118][T13591]  genl_family_rcv_msg_doit+0x215/0x300
[  214.074130][T13591]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  214.074143][T13591]  ? bpf_lsm_capable+0x9/0x20
[  214.074152][T13591]  ? security_capable+0x7e/0x2e0
[  214.074170][T13591]  genl_rcv_msg+0x60e/0x790
[  214.074181][T13591]  ? __pfx_genl_rcv_msg+0x10/0x10
[  214.074189][T13591]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  214.074205][T13591]  netlink_rcv_skb+0x208/0x470
[  214.074215][T13591]  ? __lock_acquire+0xab9/0xd20
[  214.074226][T13591]  ? __pfx_genl_rcv_msg+0x10/0x10
[  214.074234][T13591]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  214.074254][T13591]  ? down_read+0x1ad/0x2e0
[  214.074262][T13591]  genl_rcv+0x28/0x40
[  214.074270][T13591]  netlink_unicast+0x82f/0x9e0
[  214.074283][T13591]  ? __pfx_netlink_unicast+0x10/0x10
[  214.074294][T13591]  ? netlink_sendmsg+0x642/0xb30
[  214.074299][T13591]  ? skb_put+0x11b/0x210
[  214.074308][T13591]  netlink_sendmsg+0x805/0xb30
[  214.074319][T13591]  ? __pfx_netlink_sendmsg+0x10/0x10
[  214.074329][T13591]  ? aa_sock_msg_perm+0xf1/0x1d0
[  214.074340][T13591]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  214.074351][T13591]  ? __pfx_netlink_sendmsg+0x10/0x10
[  214.074361][T13591]  __sock_sendmsg+0x21c/0x270
[  214.074377][T13591]  ____sys_sendmsg+0x505/0x830
[  214.074393][T13591]  ? __pfx_____sys_sendmsg+0x10/0x10
[  214.074414][T13591]  ? import_iovec+0x74/0xa0
[  214.074430][T13591]  ___sys_sendmsg+0x21f/0x2a0
[  214.074445][T13591]  ? __pfx____sys_sendmsg+0x10/0x10
[  214.074487][T13591]  ? __fget_files+0x2a/0x420
[  214.074504][T13591]  ? __fget_files+0x3a0/0x420
[  214.074522][T13591]  __x64_sys_sendmsg+0x19b/0x260
[  214.074531][T13591]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  214.074547][T13591]  ? do_syscall_64+0xbe/0x3b0
[  214.074557][T13591]  do_syscall_64+0xfa/0x3b0
[  214.074562][T13591]  ? lockdep_hardirqs_on+0x9c/0x150
[  214.074572][T13591]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.074579][T13591]  ? exc_page_fault+0x9f/0xf0
[  214.074590][T13591]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.074596][T13591] RIP: 0033:0x7ff59978eba9
[  214.074603][T13591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  214.074609][T13591] RSP: 002b:00007ff59a53b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  214.074618][T13591] RAX: ffffffffffffffda RBX: 00007ff5999d6270 RCX: 00007ff59978eba9
[  214.074623][T13591] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000007
[  214.074628][T13591] RBP: 00007ff599811e19 R08: 0000000000000000 R09: 0000000000000000
[  214.074632][T13591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  214.074636][T13591] R13: 00007ff5999d6308 R14: 00007ff5999d6270 R15: 00007ffc91f0c5a8
[  214.074649][T13591]  </TASK>
[  214.891764][T13605] __nla_validate_parse: 20 callbacks suppressed
[  214.891779][T13605] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2087'.
[  215.172780][T13614] validate_nla: 2 callbacks suppressed
[  215.172795][T13614] netlink: 'syz.1.2090': attribute type 13 has an invalid length.
[  215.188618][T13614] netlink: 'syz.1.2090': attribute type 17 has an invalid length.
[  215.213043][T13614] erspan0: left allmulticast mode
[  215.228219][T13614] sit0: left promiscuous mode
[  215.269291][T13614] 8021q: adding VLAN 0 to HW filter on device 
[  215.279755][T13614] 8021q: adding VLAN 0 to HW filter on device team0
[  215.296466][T13614] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  215.371845][T13616] wg1 speed is unknown, defaulting to 1000
[  215.377630][T13616] lo speed is unknown, defaulting to 1000
[  215.384774][T13616] lo speed is unknown, defaulting to 1000
[  215.457938][T13614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  215.503324][T13620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2091'.
[  215.513407][T13620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2091'.
[  215.537629][T13620] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2091'.
[  215.875681][T13642] 8021q: adding VLAN 0 to HW filter on device bond2
[  215.922405][T13645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2099'.
[  215.928769][T13645] netlink: 268 bytes leftover after parsing attributes in process `syz.0.2099'.
[  215.959568][T13650] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  215.962852][T13649] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  216.084793][T13663] sctp: [Deprecated]: syz.3.2104 (pid 13663) Use of struct sctp_assoc_value in delayed_ack socket option.
[  216.084793][T13663] Use struct sctp_sack_info instead
[  216.104229][T13665] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2103'.
[  216.110816][T13660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2101'.
[  216.164617][T13666] IPVS: set_ctl: invalid protocol: 94 127.0.0.1:20004
[  216.212620][T13670] C: renamed from team_slave_0
[  216.217359][T13670] netlink: 'syz.1.2103': attribute type 4 has an invalid length.
[  216.222007][T13670] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  220.851767][ T5295] udevd[5295]: worker [7662] /devices/virtual/block/nbd0 is taking a long time
[  231.397677][ T6461] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  231.401374][ T6461] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  231.404358][ T6461] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  231.408198][ T6461] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  231.411132][ T6461] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  231.431443][T13681] wg1 speed is unknown, defaulting to 1000
[  231.434084][T13681] lo speed is unknown, defaulting to 1000
[  231.448885][T13681] lo speed is unknown, defaulting to 1000
[  231.460734][ T6461] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  231.464366][ T6461] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  231.476527][ T6461] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  231.481029][ T6461] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  231.483967][ T6461] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  231.520306][ T5236] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  231.523618][ T5236] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  231.528098][ T5236] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  231.531240][ T5236] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  231.534461][ T5236] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  231.540558][T13683] wg1 speed is unknown, defaulting to 1000
[  231.557561][T13683] lo speed is unknown, defaulting to 1000
[  231.566419][T13683] lo speed is unknown, defaulting to 1000
[  231.593588][T13686] wg1 speed is unknown, defaulting to 1000
[  231.600865][T13681] chnl_net:caif_netlink_parms(): no params data found
[  231.618137][T13686] lo speed is unknown, defaulting to 1000
[  231.623101][T13686] lo speed is unknown, defaulting to 1000
[  231.695546][T13681] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.698840][T13681] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.702158][T13681] bridge_slave_0: entered allmulticast mode
[  231.706589][T13681] bridge_slave_0: entered promiscuous mode
[  231.714490][T13681] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.718142][T13681] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.721264][T13681] bridge_slave_1: entered allmulticast mode
[  231.725251][T13681] bridge_slave_1: entered promiscuous mode
[  231.769307][T13681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  231.779021][T13681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  231.829928][T13681] team0: Port device team_slave_0 added
[  231.833737][T13681] team0: Port device team_slave_1 added
[  231.887193][T13681] batman_adv: batadv0: Adding interface: batadv_slave_0
[  231.890051][T13681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.900748][T13681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  231.907817][T13681] batman_adv: batadv0: Adding interface: batadv_slave_1
[  231.910461][T13681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.920757][T13681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  231.927623][T13683] chnl_net:caif_netlink_parms(): no params data found
[  232.001970][T13681] hsr_slave_0: entered promiscuous mode
[  232.005227][T13681] hsr_slave_1: entered promiscuous mode
[  232.011868][T13681] debugfs: 'hsr0' already exists in 'hsr'
[  232.014284][T13681] Cannot create hsr debugfs directory
[  232.133127][T13686] chnl_net:caif_netlink_parms(): no params data found
[  232.140695][T13683] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.143646][T13683] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.147212][T13683] bridge_slave_0: entered allmulticast mode
[  232.151009][T13683] bridge_slave_0: entered promiscuous mode
[  232.180805][T13683] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.183190][T13683] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.185392][T13683] bridge_slave_1: entered allmulticast mode
[  232.189320][T13683] bridge_slave_1: entered promiscuous mode
[  232.267025][T13683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  232.290184][T13683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  232.350343][T13686] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.353499][T13686] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.357668][T13686] bridge_slave_0: entered allmulticast mode
[  232.361554][T13686] bridge_slave_0: entered promiscuous mode
[  232.375141][T13683] team0: Port device team_slave_0 added
[  232.388098][T13686] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.391043][T13686] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.394130][T13686] bridge_slave_1: entered allmulticast mode
[  232.398058][T13686] bridge_slave_1: entered promiscuous mode
[  232.414750][T13683] team0: Port device team_slave_1 added
[  232.459491][T13683] batman_adv: batadv0: Adding interface: batadv_slave_0
[  232.462417][T13683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  232.473047][T13683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  232.480835][T13686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  232.495588][T13683] batman_adv: batadv0: Adding interface: batadv_slave_1
[  232.498600][T13683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  232.508616][T13683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  232.515148][T13686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  232.542168][T13686] team0: Port device team_slave_0 added
[  232.568686][T13686] team0: Port device team_slave_1 added
[  232.622426][T13683] hsr_slave_0: entered promiscuous mode
[  232.625540][T13683] hsr_slave_1: entered promiscuous mode
[  232.628807][T13683] debugfs: 'hsr0' already exists in 'hsr'
[  232.630706][T13683] Cannot create hsr debugfs directory
[  232.656939][T13686] batman_adv: batadv0: Adding interface: batadv_slave_0
[  232.659722][T13686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  232.670266][T13686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  232.708821][T13686] batman_adv: batadv0: Adding interface: batadv_slave_1
[  232.711712][T13686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  232.722087][T13686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  232.784758][T13686] hsr_slave_0: entered promiscuous mode
[  232.792175][T13686] hsr_slave_1: entered promiscuous mode
[  232.795185][T13686] debugfs: 'hsr0' already exists in 'hsr'
[  232.798218][T13686] Cannot create hsr debugfs directory
[  233.456383][ T6461] Bluetooth: hci3: command tx timeout
[  233.526275][ T6461] Bluetooth: hci4: command tx timeout
[  233.606217][ T6461] Bluetooth: hci5: command tx timeout
[  234.406382][   T61] block nbd0: Possible stuck request ffff8880214d8000: control (read@0,1024B). Runtime 90 seconds
[  234.410751][   T61] block nbd0: Possible stuck request ffff8880214d8200: control (read@1024,1024B). Runtime 90 seconds
[  234.415250][   T61] block nbd0: Possible stuck request ffff8880214d8400: control (read@2048,1024B). Runtime 90 seconds
[  234.420068][   T61] block nbd0: Possible stuck request ffff8880214d8600: control (read@3072,1024B). Runtime 90 seconds
[  235.536198][ T6461] Bluetooth: hci3: command tx timeout
[  235.606246][ T6461] Bluetooth: hci4: command tx timeout
[  235.696660][ T6461] Bluetooth: hci5: command tx timeout
[  237.606386][ T6461] Bluetooth: hci3: command tx timeout
[  237.686340][ T6461] Bluetooth: hci4: command tx timeout
[  237.776403][ T6461] Bluetooth: hci5: command tx timeout
[  239.686559][ T6461] Bluetooth: hci3: command tx timeout
[  239.766391][ T6461] Bluetooth: hci4: command tx timeout
[  239.846202][ T6461] Bluetooth: hci5: command tx timeout
[  264.487208][   T61] block nbd0: Possible stuck request ffff8880214d8000: control (read@0,1024B). Runtime 120 seconds
[  264.491628][   T61] block nbd0: Possible stuck request ffff8880214d8200: control (read@1024,1024B). Runtime 120 seconds
[  264.496545][   T61] block nbd0: Possible stuck request ffff8880214d8400: control (read@2048,1024B). Runtime 120 seconds
[  264.501096][   T61] block nbd0: Possible stuck request ffff8880214d8600: control (read@3072,1024B). Runtime 120 seconds
[  291.437798][ T5236] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  291.442280][ T5236] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  291.445955][ T5236] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  291.450183][ T5236] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  291.453960][ T5236] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  291.482506][T13706] wg1 speed is unknown, defaulting to 1000
[  291.485051][T13706] lo speed is unknown, defaulting to 1000
[  291.487488][T13706] lo speed is unknown, defaulting to 1000
[  291.570158][T13706] chnl_net:caif_netlink_parms(): no params data found
[  291.630718][T13706] bridge0: port 1(bridge_slave_0) entered blocking state
[  291.633482][T13706] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.636086][T13706] bridge_slave_0: entered allmulticast mode
[  291.639669][T13706] bridge_slave_0: entered promiscuous mode
[  291.645204][T13706] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.648266][T13706] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.651146][T13706] bridge_slave_1: entered allmulticast mode
[  291.654513][T13706] bridge_slave_1: entered promiscuous mode
[  291.676359][T13706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  291.681432][T13706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  291.699788][T13706] team0: Port device team_slave_0 added
[  291.702964][T13706] team0: Port device team_slave_1 added
[  291.719043][T13706] batman_adv: batadv0: Adding interface: batadv_slave_0
[  291.721425][T13706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.731178][T13706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  291.735435][T13706] batman_adv: batadv0: Adding interface: batadv_slave_1
[  291.737762][T13706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.746398][T13706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  291.774413][T13706] hsr_slave_0: entered promiscuous mode
[  291.777222][T13706] hsr_slave_1: entered promiscuous mode
[  291.779771][T13706] debugfs: 'hsr0' already exists in 'hsr'
[  291.781721][T13706] Cannot create hsr debugfs directory
[  292.411261][ T6461] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  292.415312][ T6461] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  292.420673][ T6461] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  292.424022][ T6461] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  292.427255][ T6461] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  292.451534][ T6461] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  292.455071][ T6461] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  292.460728][ T6461] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  292.467372][ T6461] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  292.470666][ T6461] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  292.482018][T13716] wg1 speed is unknown, defaulting to 1000
[  292.485894][T13716] lo speed is unknown, defaulting to 1000
[  292.489214][T13716] lo speed is unknown, defaulting to 1000
[  292.512657][T13718] wg1 speed is unknown, defaulting to 1000
[  292.520937][T13718] lo speed is unknown, defaulting to 1000
[  292.523904][T13718] lo speed is unknown, defaulting to 1000
[  292.670688][T13716] chnl_net:caif_netlink_parms(): no params data found
[  292.732726][T13718] chnl_net:caif_netlink_parms(): no params data found
[  292.748333][T13716] bridge0: port 1(bridge_slave_0) entered blocking state
[  292.750825][T13716] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.753395][T13716] bridge_slave_0: entered allmulticast mode
[  292.756556][T13716] bridge_slave_0: entered promiscuous mode
[  292.776454][T13716] bridge0: port 2(bridge_slave_1) entered blocking state
[  292.779406][T13716] bridge0: port 2(bridge_slave_1) entered disabled state
[  292.782394][T13716] bridge_slave_1: entered allmulticast mode
[  292.786836][T13716] bridge_slave_1: entered promiscuous mode
[  292.831426][T13716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  292.842511][T13716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  292.934043][T13716] team0: Port device team_slave_0 added
[  292.950406][T13716] team0: Port device team_slave_1 added
[  292.952691][T13718] bridge0: port 1(bridge_slave_0) entered blocking state
[  292.955839][T13718] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.959766][T13718] bridge_slave_0: entered allmulticast mode
[  292.963808][T13718] bridge_slave_0: entered promiscuous mode
[  292.983809][T13718] bridge0: port 2(bridge_slave_1) entered blocking state
[  292.987497][T13718] bridge0: port 2(bridge_slave_1) entered disabled state
[  292.990671][T13718] bridge_slave_1: entered allmulticast mode
[  292.994592][T13718] bridge_slave_1: entered promiscuous mode
[  293.010384][T13716] batman_adv: batadv0: Adding interface: batadv_slave_0
[  293.012750][T13716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  293.023261][T13716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  293.038323][T13716] batman_adv: batadv0: Adding interface: batadv_slave_1
[  293.040804][T13716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  293.052066][T13716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  293.058693][T13718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  293.069047][T13718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  293.097290][T13718] team0: Port device team_slave_0 added
[  293.109474][T13718] team0: Port device team_slave_1 added
[  293.114597][T13716] hsr_slave_0: entered promiscuous mode
[  293.117646][T13716] hsr_slave_1: entered promiscuous mode
[  293.120192][T13716] debugfs: 'hsr0' already exists in 'hsr'
[  293.122395][T13716] Cannot create hsr debugfs directory
[  293.150544][T13718] batman_adv: batadv0: Adding interface: batadv_slave_0
[  293.152995][T13718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  293.162569][T13718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  293.172192][T13718] batman_adv: batadv0: Adding interface: batadv_slave_1
[  293.175156][T13718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  293.186810][T13718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  293.267226][T13718] hsr_slave_0: entered promiscuous mode
[  293.270521][T13718] hsr_slave_1: entered promiscuous mode
[  293.273413][T13718] debugfs: 'hsr0' already exists in 'hsr'
[  293.275834][T13718] Cannot create hsr debugfs directory
[  293.526184][ T5236] Bluetooth: hci6: command tx timeout
[  294.486220][ T6461] Bluetooth: hci7: command tx timeout
[  294.489105][ T5236] Bluetooth: hci8: command tx timeout
[  294.576231][   T61] block nbd0: Possible stuck request ffff8880214d8000: control (read@0,1024B). Runtime 150 seconds
[  294.580355][   T61] block nbd0: Possible stuck request ffff8880214d8200: control (read@1024,1024B). Runtime 150 seconds
[  294.584739][   T61] block nbd0: Possible stuck request ffff8880214d8400: control (read@2048,1024B). Runtime 150 seconds
[  294.589419][   T61] block nbd0: Possible stuck request ffff8880214d8600: control (read@3072,1024B). Runtime 150 seconds
[  295.606314][ T5236] Bluetooth: hci6: command tx timeout
[  296.566153][ T6461] Bluetooth: hci7: command tx timeout
[  296.568508][ T5236] Bluetooth: hci8: command tx timeout
[  297.686362][ T5236] Bluetooth: hci6: command tx timeout
[  298.646180][ T5236] Bluetooth: hci8: command tx timeout
[  298.646311][ T6461] Bluetooth: hci7: command tx timeout
[  299.766241][ T6461] Bluetooth: hci6: command tx timeout
[  300.726327][ T6461] Bluetooth: hci8: command tx timeout
[  300.726378][ T5236] Bluetooth: hci7: command tx timeout
[  323.894600][ T5295] udevd[5295]: worker [7662] /devices/virtual/block/nbd0 timeout; kill it
[  323.897698][ T5295] udevd[5295]: seq 15822 '/devices/virtual/block/nbd0' killed
[  324.656152][   T61] block nbd0: Possible stuck request ffff8880214d8000: control (read@0,1024B). Runtime 180 seconds
[  324.659836][   T61] block nbd0: Possible stuck request ffff8880214d8200: control (read@1024,1024B). Runtime 180 seconds
[  324.663761][   T61] block nbd0: Possible stuck request ffff8880214d8400: control (read@2048,1024B). Runtime 180 seconds
[  324.668149][   T61] block nbd0: Possible stuck request ffff8880214d8600: control (read@3072,1024B). Runtime 180 seconds
[  351.454269][ T6461] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  351.458102][ T6461] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  351.461923][ T6461] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  351.465683][ T6461] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  351.471341][ T6461] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  351.494261][T13733] wg1 speed is unknown, defaulting to 1000
[  351.497414][T13733] lo speed is unknown, defaulting to 1000
[  351.500820][T13733] lo speed is unknown, defaulting to 1000
[  351.626593][T13733] chnl_net:caif_netlink_parms(): no params data found
[  351.689050][T13733] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.691522][T13733] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.693994][T13733] bridge_slave_0: entered allmulticast mode
[  351.700015][T13733] bridge_slave_0: entered promiscuous mode
[  351.704452][T13733] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.707608][T13733] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.710541][T13733] bridge_slave_1: entered allmulticast mode
[  351.714421][T13733] bridge_slave_1: entered promiscuous mode
[  351.752549][T13733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  351.759067][T13733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  351.784388][T13733] team0: Port device team_slave_0 added
[  351.787988][T13733] team0: Port device team_slave_1 added
[  351.808319][T13733] batman_adv: batadv0: Adding interface: batadv_slave_0
[  351.810491][T13733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  351.818899][T13733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  351.823289][T13733] batman_adv: batadv0: Adding interface: batadv_slave_1
[  351.825459][T13733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  351.834058][T13733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  351.864176][T13733] hsr_slave_0: entered promiscuous mode
[  351.867157][T13733] hsr_slave_1: entered promiscuous mode
[  351.869511][T13733] debugfs: 'hsr0' already exists in 'hsr'
[  351.871415][T13733] Cannot create hsr debugfs directory
[  353.400631][T13746] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  353.404710][T13746] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  353.407678][T13746] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  353.410846][T13746] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  353.413789][T13746] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  353.436622][T13741] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  353.440063][T13744] wg1 speed is unknown, defaulting to 1000
[  353.440111][T13741] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  353.442676][T13744] lo speed is unknown, defaulting to 1000
[  353.447074][T13741] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  353.450419][T13741] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  353.450744][T13744] lo speed is unknown, defaulting to 1000
[  353.453589][T13741] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  353.525222][T13747] wg1 speed is unknown, defaulting to 1000
[  353.529380][T13747] lo speed is unknown, defaulting to 1000
[  353.533086][T13747] lo speed is unknown, defaulting to 1000
[  353.536514][T13741] Bluetooth: hci9: command tx timeout
[  353.564169][T13744] chnl_net:caif_netlink_parms(): no params data found
[  353.678400][T13744] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.681246][T13744] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.683835][T13744] bridge_slave_0: entered allmulticast mode
[  353.707931][T13744] bridge_slave_0: entered promiscuous mode
[  353.712498][T13744] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.715529][T13744] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.726599][T13744] bridge_slave_1: entered allmulticast mode
[  353.736377][T13744] bridge_slave_1: entered promiscuous mode
[  353.809500][T13744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  353.831696][T13744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  353.893261][T13744] team0: Port device team_slave_0 added
[  353.897474][T13744] team0: Port device team_slave_1 added
[  353.922684][T13744] batman_adv: batadv0: Adding interface: batadv_slave_0
[  353.925480][T13744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  353.938231][T13744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  353.941986][T13747] chnl_net:caif_netlink_parms(): no params data found
[  353.948520][T13744] batman_adv: batadv0: Adding interface: batadv_slave_1
[  353.951214][T13744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  353.962030][T13744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  354.058465][T13744] hsr_slave_0: entered promiscuous mode
[  354.061655][T13744] hsr_slave_1: entered promiscuous mode
[  354.064621][T13744] debugfs: 'hsr0' already exists in 'hsr'
[  354.069504][T13744] Cannot create hsr debugfs directory
[  354.088542][T13747] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.091805][T13747] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.094091][T13747] bridge_slave_0: entered allmulticast mode
[  354.097117][T13747] bridge_slave_0: entered promiscuous mode
[  354.102135][T13747] bridge0: port 2(bridge_slave_1) entered blocking state
[  354.105265][T13747] bridge0: port 2(bridge_slave_1) entered disabled state
[  354.108913][T13747] bridge_slave_1: entered allmulticast mode
[  354.112833][T13747] bridge_slave_1: entered promiscuous mode
[  354.165332][T13747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  354.177182][T13747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  354.233306][T13747] team0: Port device team_slave_0 added
[  354.238540][T13747] team0: Port device team_slave_1 added
[  354.284409][T13747] batman_adv: batadv0: Adding interface: batadv_slave_0
[  354.287798][T13747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  354.298292][T13747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  354.314949][T13747] batman_adv: batadv0: Adding interface: batadv_slave_1
[  354.318010][T13747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  354.328745][T13747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  354.381325][T13747] hsr_slave_0: entered promiscuous mode
[  354.384504][T13747] hsr_slave_1: entered promiscuous mode
[  354.388010][T13747] debugfs: 'hsr0' already exists in 'hsr'
[  354.390495][T13747] Cannot create hsr debugfs directory
[  354.731919][   T61] block nbd0: Possible stuck request ffff8880214d8000: control (read@0,1024B). Runtime 210 seconds
[  354.738852][   T61] block nbd0: Possible stuck request ffff8880214d8200: control (read@1024,1024B). Runtime 210 seconds
[  354.743495][   T61] block nbd0: Possible stuck request ffff8880214d8400: control (read@2048,1024B). Runtime 210 seconds
[  354.748178][   T61] block nbd0: Possible stuck request ffff8880214d8600: control (read@3072,1024B). Runtime 210 seconds
[  354.886290][T13741] Bluetooth: hci5: command 0x0406 tx timeout
[  354.886395][T13746] Bluetooth: hci3: command 0x0406 tx timeout
[  354.888452][T13741] Bluetooth: hci4: command 0x0406 tx timeout
[  355.446524][ T6461] Bluetooth: hci10: command tx timeout
[  355.536456][ T6461] Bluetooth: hci11: command tx timeout
[  355.616521][ T6461] Bluetooth: hci9: command tx timeout
[  357.526505][ T6461] Bluetooth: hci10: command tx timeout
[  357.606164][ T6461] Bluetooth: hci11: command tx timeout
[  357.686197][ T6461] Bluetooth: hci9: command tx timeout
[  359.607629][ T6461] Bluetooth: hci10: command tx timeout
[  359.686416][ T6461] Bluetooth: hci11: command tx timeout
[  359.766172][ T6461] Bluetooth: hci9: command tx timeout
[  361.686587][ T6461] Bluetooth: hci10: command tx timeout
[  361.766468][ T6461] Bluetooth: hci11: command tx timeout
[  377.127700][   T34] INFO: task syz.0.2101:13660 blocked for more than 143 seconds.
[  377.130864][   T34]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
[  377.133035][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  377.143478][   T34] task:syz.0.2101      state:D stack:25448 pid:13660 tgid:13654 ppid:5843   task_flags:0x400140 flags:0x00004004
[  377.148125][   T34] Call Trace:
[  377.149446][   T34]  <TASK>
[  377.150670][   T34]  __schedule+0x1798/0x4cc0
[  377.152565][   T34]  ? __lock_acquire+0xab9/0xd20
[  377.154452][   T34]  ? __lock_acquire+0xab9/0xd20
[  377.156613][   T34]  ? __pfx___schedule+0x10/0x10
[  377.186121][   T34]  ? schedule+0x91/0x360
[  377.187908][   T34]  schedule+0x165/0x360
[  377.189616][   T34]  schedule_preempt_disabled+0x13/0x30
[  377.191812][   T34]  __mutex_lock+0x7e6/0x1350
[  377.193703][   T34]  ? __mutex_lock+0x5bb/0x1350
[  377.195641][   T34]  ? genl_rcv_msg+0x10d/0x790
[  377.214974][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  377.217399][   T34]  ? stack_trace_save+0x9c/0xe0
[  377.219413][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  377.221752][   T34]  ? radix_tree_lookup+0x240/0x290
[  377.223923][   T34]  genl_rcv_msg+0x10d/0x790
[  377.225826][   T34]  ? __lock_acquire+0xab9/0xd20
[  377.228311][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  377.230424][   T34]  netlink_rcv_skb+0x208/0x470
[  377.232413][   T34]  ? __lock_acquire+0xab9/0xd20
[  377.234383][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  377.236651][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  377.238937][   T34]  ? down_read+0x1ad/0x2e0
[  377.240831][   T34]  genl_rcv+0x28/0x40
[  377.242619][   T34]  netlink_unicast+0x82f/0x9e0
[  377.244665][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  377.247027][   T34]  ? netlink_sendmsg+0x642/0xb30
[  377.249079][   T34]  ? skb_put+0x11b/0x210
[  377.250919][   T34]  netlink_sendmsg+0x805/0xb30
[  377.252924][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  377.255109][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  377.257363][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  377.259560][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  377.261774][   T34]  __sock_sendmsg+0x21c/0x270
[  377.263768][   T34]  __sys_sendto+0x3bd/0x520
[  377.265646][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  377.267810][   T34]  ? count_memcg_event_mm+0x21/0x260
[  377.270036][   T34]  ? exc_page_fault+0x76/0xf0
[  377.271981][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  377.274097][   T34]  __x64_sys_sendto+0xde/0x100
[  377.276302][   T34]  do_syscall_64+0xfa/0x3b0
[  377.278140][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  377.280293][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.282774][   T34]  ? exc_page_fault+0x9f/0xf0
[  377.284758][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.287519][   T34] RIP: 0033:0x7ff599790a3c
[  377.288981][   T34] RSP: 002b:00007ff59a59cec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  377.292285][   T34] RAX: ffffffffffffffda RBX: 00007ff59a59cfc0 RCX: 00007ff599790a3c
[  377.295167][   T34] RDX: 0000000000000024 RSI: 00007ff59a59d010 RDI: 000000000000000a
[  377.298358][   T34] RBP: 0000000000000000 R08: 00007ff59a59cf14 R09: 000000000000000c
[  377.301386][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000a
[  377.304349][   T34] R13: 00007ff59a59cf68 R14: 00007ff59a59d010 R15: 0000000000000000
[  377.307148][   T34]  </TASK>
[  377.308179][   T34] INFO: task syz.0.2101:13669 blocked for more than 143 seconds.
[  377.311017][   T34]       Not tainted syzkaller #0
[  377.312695][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  377.315672][   T34] task:syz.0.2101      state:D stack:27296 pid:13669 tgid:13654 ppid:5843   task_flags:0x400040 flags:0x00004004
[  377.320397][   T34] Call Trace:
[  377.321604][   T34]  <TASK>
[  377.322704][   T34]  __schedule+0x1798/0x4cc0
[  377.324314][   T34]  ? __lock_acquire+0xab9/0xd20
[  377.326192][   T34]  ? __lock_acquire+0xab9/0xd20
[  377.327779][   T34]  ? __pfx___schedule+0x10/0x10
[  377.329649][   T34]  ? schedule+0x91/0x360
[  377.331425][   T34]  schedule+0x165/0x360
[  377.333091][   T34]  schedule_preempt_disabled+0x13/0x30
[  377.335225][   T34]  __mutex_lock+0x7e6/0x1350
[  377.337449][   T34]  ? __mutex_lock+0x5bb/0x1350
[  377.339371][   T34]  ? genl_rcv_msg+0x10d/0x790
[  377.341265][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  377.343262][   T34]  ? stack_trace_save+0x9c/0xe0
[  377.345174][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  377.347624][   T34]  ? radix_tree_lookup+0x240/0x290
[  377.349792][   T34]  genl_rcv_msg+0x10d/0x790
[  377.351759][   T34]  ? __lock_acquire+0xab9/0xd20
[  377.353838][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  377.355961][   T34]  netlink_rcv_skb+0x208/0x470
[  377.358066][   T34]  ? __lock_acquire+0xab9/0xd20
[  377.360117][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  377.361761][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  377.363504][   T34]  ? down_read+0x1ad/0x2e0
[  377.365162][   T34]  genl_rcv+0x28/0x40
[  377.366967][   T34]  netlink_unicast+0x82f/0x9e0
[  377.368900][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  377.371050][   T34]  ? netlink_sendmsg+0x642/0xb30
[  377.372833][   T34]  ? skb_put+0x11b/0x210
[  377.374611][   T34]  netlink_sendmsg+0x805/0xb30
[  377.376685][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  377.378812][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  377.380793][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  377.382964][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  377.385086][   T34]  __sock_sendmsg+0x21c/0x270
[  377.387183][   T34]  __sys_sendto+0x3bd/0x520
[  377.388725][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  377.390520][   T34]  ? count_memcg_event_mm+0x21/0x260
[  377.392394][   T34]  ? exc_page_fault+0x76/0xf0
[  377.393892][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  377.395858][   T34]  __x64_sys_sendto+0xde/0x100
[  377.397799][   T34]  do_syscall_64+0xfa/0x3b0
[  377.399440][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  377.401433][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.403673][   T34]  ? exc_page_fault+0x9f/0xf0
[  377.405476][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.408848][   T34] RIP: 0033:0x7ff599790a3c
[  377.410367][   T34] RSP: 002b:00007ff59a57bec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  377.413401][   T34] RAX: ffffffffffffffda RBX: 00007ff59a57bfc0 RCX: 00007ff599790a3c
[  377.418384][   T34] RDX: 0000000000000024 RSI: 00007ff59a57c010 RDI: 000000000000000a
[  377.421123][   T34] RBP: 0000000000000000 R08: 00007ff59a57bf14 R09: 000000000000000c
[  377.424007][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000a
[  377.428608][   T34] R13: 00007ff59a57bf68 R14: 00007ff59a57c010 R15: 0000000000000000
[  377.431410][   T34]  </TASK>
[  377.432719][   T34] INFO: task syz.1.2103:13665 blocked for more than 143 seconds.
[  377.435888][   T34]       Not tainted syzkaller #0
[  377.442828][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  377.448835][   T34] task:syz.1.2103      state:D stack:26024 pid:13665 tgid:13655 ppid:5849   task_flags:0x480140 flags:0x00004004
[  377.453560][   T34] Call Trace:
[  377.454953][   T34]  <TASK>
[  377.456551][   T34]  __schedule+0x1798/0x4cc0
[  377.458443][   T34]  ? __lock_acquire+0xab9/0xd20
[  377.460413][   T34]  ? __lock_acquire+0xab9/0xd20
[  377.462423][   T34]  ? __pfx___schedule+0x10/0x10
[  377.464387][   T34]  ? schedule+0x91/0x360
[  377.466198][   T34]  schedule+0x165/0x360
[  377.467960][   T34]  blk_mq_freeze_queue_wait+0xf4/0x170
[  377.470202][   T34]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[  377.472714][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[  377.475214][   T34]  ? percpu_ref_kill_and_confirm+0xa3/0x130
[  377.477733][   T34]  queue_limits_commit_update_frozen+0x5d/0x3e0
[  377.480218][   T34]  nbd_set_size+0x47e/0x6a0
[  377.482041][   T34]  ? __pfx_nbd_set_size+0x10/0x10
[  377.484030][   T34]  ? nla_memcpy+0x5b/0xc0
[  377.485809][   T34]  nbd_genl_size_set+0x2eb/0x3c0
[  377.487911][   T34]  ? __pfx_nbd_genl_size_set+0x10/0x10
[  377.490090][   T34]  ? __pfx_nbd_get_config_unlocked+0x10/0x10
[  377.492525][   T34]  ? bpf_lsm_capable+0x9/0x20
[  377.494398][   T34]  ? security_capable+0x7e/0x2e0
[  377.496505][   T34]  ? radix_tree_lookup+0x240/0x290
[  377.498561][   T34]  nbd_genl_reconfigure+0x409/0x1870
[  377.500708][   T34]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  377.503005][   T34]  ? __nla_parse+0x40/0x60
[  377.504770][   T34]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  377.507398][   T34]  genl_family_rcv_msg_doit+0x215/0x300
[  377.509458][   T34]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  377.511346][   T34]  ? stack_trace_save+0x9c/0xe0
[  377.512894][   T34]  genl_rcv_msg+0x60e/0x790
[  377.514391][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  377.516117][   T34]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  377.518067][   T34]  netlink_rcv_skb+0x208/0x470
[  377.519758][   T34]  ? __lock_acquire+0xab9/0xd20
[  377.521379][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  377.523291][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  377.525493][   T34]  ? down_read+0x1ad/0x2e0
[  377.528492][   T34]  genl_rcv+0x28/0x40
[  377.530128][   T34]  netlink_unicast+0x82f/0x9e0
[  377.531959][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  377.533876][   T34]  ? netlink_sendmsg+0x642/0xb30
[  377.535468][   T34]  ? skb_put+0x11b/0x210
[  377.537046][   T34]  netlink_sendmsg+0x805/0xb30
[  377.538666][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  377.540558][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  377.542406][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  377.544364][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  377.546370][   T34]  __sock_sendmsg+0x21c/0x270
[  377.548030][   T34]  ____sys_sendmsg+0x505/0x830
[  377.549762][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  377.551571][   T34]  ? import_iovec+0x74/0xa0
[  377.553277][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  377.555155][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  377.557021][   T34]  ? __fget_files+0x2a/0x420
[  377.558562][   T34]  ? __fget_files+0x3a0/0x420
[  377.560131][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  377.562020][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  377.564277][   T34]  ? do_syscall_64+0xbe/0x3b0
[  377.566436][   T34]  do_syscall_64+0xfa/0x3b0
[  377.568313][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  377.570373][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.572807][   T34]  ? exc_page_fault+0x9f/0xf0
[  377.574742][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.577225][   T34] RIP: 0033:0x7f105778eba9
[  377.579085][   T34] RSP: 002b:00007f1058674038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  377.582568][   T34] RAX: ffffffffffffffda RBX: 00007f10579d6090 RCX: 00007f105778eba9
[  377.585722][   T34] RDX: 0000000020000800 RSI: 0000200000000200 RDI: 000000000000000c
[  377.588886][   T34] RBP: 00007f1057811e19 R08: 0000000000000000 R09: 0000000000000000
[  377.591681][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  377.594761][   T34] R13: 00007f10579d6128 R14: 00007f10579d6090 R15: 00007ffd128a9728
[  377.597548][   T34]  </TASK>
[  377.598684][   T34] INFO: task syz.3.2104:13666 blocked for more than 143 seconds.
[  377.601462][   T34]       Not tainted syzkaller #0
[  377.603071][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  377.605742][   T34] task:syz.3.2104      state:D stack:28456 pid:13666 tgid:13662 ppid:6457   task_flags:0x400140 flags:0x00004004
[  377.612717][   T34] Call Trace:
[  377.613848][   T34]  <TASK>
[  377.614872][   T34]  __schedule+0x1798/0x4cc0
[  377.616753][   T34]  ? __lock_acquire+0xab9/0xd20
[  377.618578][   T34]  ? __lock_acquire+0xab9/0xd20
[  377.620347][   T34]  ? __pfx___schedule+0x10/0x10
[  377.622121][   T34]  ? schedule+0x91/0x360
[  377.623612][   T34]  schedule+0x165/0x360
[  377.624990][   T34]  schedule_preempt_disabled+0x13/0x30
[  377.626980][   T34]  __mutex_lock+0x7e6/0x1350
[  377.628640][   T34]  ? __mutex_lock+0x5bb/0x1350
[  377.630306][   T34]  ? genl_rcv_msg+0x10d/0x790
[  377.632084][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  377.633738][   T34]  ? stack_trace_save+0x9c/0xe0
[  377.635387][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  377.637384][   T34]  ? radix_tree_lookup+0x240/0x290
[  377.639161][   T34]  genl_rcv_msg+0x10d/0x790
[  377.640767][   T34]  ? __lock_acquire+0xab9/0xd20
[  377.642396][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  377.644338][   T34]  netlink_rcv_skb+0x208/0x470
[  377.646312][   T34]  ? __lock_acquire+0xab9/0xd20
[  377.648101][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  377.649917][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  377.651754][   T34]  ? down_read+0x1ad/0x2e0
[  377.653553][   T34]  genl_rcv+0x28/0x40
[  377.654824][   T34]  netlink_unicast+0x82f/0x9e0
[  377.656576][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  377.658430][   T34]  ? netlink_sendmsg+0x642/0xb30
[  377.660051][   T34]  ? skb_put+0x11b/0x210
[  377.661473][   T34]  netlink_sendmsg+0x805/0xb30
[  377.663063][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  377.665040][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  377.666966][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  377.668756][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  377.670581][   T34]  __sock_sendmsg+0x21c/0x270
[  377.672138][   T34]  __sys_sendto+0x3bd/0x520
[  377.673877][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  377.675738][   T34]  ? count_memcg_event_mm+0x21/0x260
[  377.677898][   T34]  ? exc_page_fault+0x76/0xf0
[  377.679561][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  377.681639][   T34]  __x64_sys_sendto+0xde/0x100
[  377.683217][   T34]  do_syscall_64+0xfa/0x3b0
[  377.684993][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  377.686908][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.688900][   T34]  ? exc_page_fault+0x9f/0xf0
[  377.690714][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.692838][   T34] RIP: 0033:0x7fecf7190a3c
[  377.694513][   T34] RSP: 002b:00007fecf7fecec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  377.697482][   T34] RAX: ffffffffffffffda RBX: 00007fecf7fecfc0 RCX: 00007fecf7190a3c
[  377.700223][   T34] RDX: 0000000000000024 RSI: 00007fecf7fed010 RDI: 0000000000000004
[  377.702655][   T34] RBP: 0000000000000000 R08: 00007fecf7fecf14 R09: 000000000000000c
[  377.705323][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004
[  377.708137][   T34] R13: 00007fecf7fecf68 R14: 00007fecf7fed010 R15: 0000000000000000
[  377.711165][   T34]  </TASK>
[  377.712371][   T34] INFO: task syz-executor:13681 blocked for more than 143 seconds.
[  377.715265][   T34]       Not tainted syzkaller #0
[  377.716931][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  377.719721][   T34] task:syz-executor    state:D stack:22632 pid:13681 tgid:13681 ppid:1      task_flags:0x400140 flags:0x00004004
[  377.723872][   T34] Call Trace:
[  377.725095][   T34]  <TASK>
[  377.726270][   T34]  __schedule+0x1798/0x4cc0
[  377.727945][   T34]  ? __lock_acquire+0xab9/0xd20
[  377.729562][   T34]  ? __lock_acquire+0xab9/0xd20
[  377.731176][   T34]  ? __pfx___schedule+0x10/0x10
[  377.732740][   T34]  ? schedule+0x91/0x360
[  377.734190][   T34]  schedule+0x165/0x360
[  377.735592][   T34]  schedule_preempt_disabled+0x13/0x30
[  377.737677][   T34]  __mutex_lock+0x7e6/0x1350
[  377.739305][   T34]  ? __mutex_lock+0x5bb/0x1350
[  377.740896][   T34]  ? genl_rcv_msg+0x10d/0x790
[  377.742491][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  377.744200][   T34]  ? stack_trace_save+0x9c/0xe0
[  377.745813][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  377.747939][   T34]  ? radix_tree_lookup+0x240/0x290
[  377.749854][   T34]  genl_rcv_msg+0x10d/0x790
[  377.751471][   T34]  ? __lock_acquire+0xab9/0xd20
[  377.753253][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  377.755095][   T34]  netlink_rcv_skb+0x208/0x470
[  377.757202][   T34]  ? __lock_acquire+0xab9/0xd20
[  377.758950][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  377.760755][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  377.762429][   T34]  ? down_read+0x1ad/0x2e0
[  377.763938][   T34]  genl_rcv+0x28/0x40
[  377.765434][   T34]  netlink_unicast+0x82f/0x9e0
[  377.767513][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  377.769556][   T34]  ? netlink_sendmsg+0x642/0xb30
[  377.771419][   T34]  ? skb_put+0x11b/0x210
[  377.772947][   T34]  netlink_sendmsg+0x805/0xb30
[  377.774649][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  377.776659][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  377.778279][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  377.780258][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  377.782050][   T34]  __sock_sendmsg+0x21c/0x270
[  377.783639][   T34]  __sys_sendto+0x3bd/0x520
[  377.785071][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  377.786968][   T34]  ? fd_install+0x97/0x540
[  377.788384][   T34]  ? fd_install+0x30d/0x540
[  377.789801][   T34]  __x64_sys_sendto+0xde/0x100
[  377.791361][   T34]  do_syscall_64+0xfa/0x3b0
[  377.793017][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  377.795038][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.797444][   T34]  ? exc_page_fault+0x9f/0xf0
[  377.799043][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.800970][   T34] RIP: 0033:0x7f5cefb90a3c
[  377.802361][   T34] RSP: 002b:00007ffdad1d5600 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  377.804928][   T34] RAX: ffffffffffffffda RBX: 00007f5cf0904620 RCX: 00007f5cefb90a3c
[  377.808055][   T34] RDX: 0000000000000020 RSI: 00007f5cf0904670 RDI: 0000000000000005
[  377.811101][   T34] RBP: 0000000000000000 R08: 00007ffdad1d5654 R09: 000000000000000c
[  377.814086][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005
[  377.817016][   T34] R13: 00007ffdad1d56a8 R14: 00007f5cf0904670 R15: 0000000000000000
[  377.819982][   T34]  </TASK>
[  377.821106][   T34] INFO: task syz-executor:13683 blocked for more than 144 seconds.
[  377.823954][   T34]       Not tainted syzkaller #0
[  377.825704][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  377.828922][   T34] task:syz-executor    state:D stack:22632 pid:13683 tgid:13683 ppid:1      task_flags:0x400140 flags:0x00004004
[  377.832999][   T34] Call Trace:
[  377.834265][   T34]  <TASK>
[  377.835416][   T34]  __schedule+0x1798/0x4cc0
[  377.837263][   T34]  ? __lock_acquire+0xab9/0xd20
[  377.839052][   T34]  ? __lock_acquire+0xab9/0xd20
[  377.840942][   T34]  ? __pfx___schedule+0x10/0x10
[  377.842650][   T34]  ? schedule+0x91/0x360
[  377.843995][   T34]  schedule+0x165/0x360
[  377.845313][   T34]  schedule_preempt_disabled+0x13/0x30
[  377.847098][   T34]  __mutex_lock+0x7e6/0x1350
[  377.848552][   T34]  ? __mutex_lock+0x5bb/0x1350
[  377.850057][   T34]  ? genl_rcv_msg+0x10d/0x790
[  377.851568][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  377.853527][   T34]  ? stack_trace_save+0x9c/0xe0
[  377.855365][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  377.857353][   T34]  ? radix_tree_lookup+0x240/0x290
[  377.859173][   T34]  genl_rcv_msg+0x10d/0x790
[  377.861043][   T34]  ? __lock_acquire+0xab9/0xd20
[  377.863026][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  377.865083][   T34]  netlink_rcv_skb+0x208/0x470
[  377.867285][   T34]  ? __lock_acquire+0xab9/0xd20
[  377.869153][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  377.870876][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  377.872861][   T34]  ? down_read+0x1ad/0x2e0
[  377.874536][   T34]  genl_rcv+0x28/0x40
[  377.875916][   T34]  netlink_unicast+0x82f/0x9e0
[  377.877481][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  377.879273][   T34]  ? netlink_sendmsg+0x642/0xb30
[  377.881312][   T34]  ? skb_put+0x11b/0x210
[  377.883022][   T34]  netlink_sendmsg+0x805/0xb30
[  377.884895][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  377.887049][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  377.888878][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  377.890686][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  377.892451][   T34]  __sock_sendmsg+0x21c/0x270
[  377.893944][   T34]  __sys_sendto+0x3bd/0x520
[  377.895429][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  377.897158][   T34]  ? fd_install+0x97/0x540
[  377.898600][   T34]  ? fd_install+0x30d/0x540
[  377.900297][   T34]  __x64_sys_sendto+0xde/0x100
[  377.902028][   T34]  do_syscall_64+0xfa/0x3b0
[  377.903560][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  377.905196][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.907346][   T34]  ? exc_page_fault+0x9f/0xf0
[  377.908858][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.910813][   T34] RIP: 0033:0x7ff60bf90a3c
[  377.912248][   T34] RSP: 002b:00007ffd0e1e3cd0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  377.915092][   T34] RAX: ffffffffffffffda RBX: 00007ff60cd04620 RCX: 00007ff60bf90a3c
[  377.917777][   T34] RDX: 0000000000000020 RSI: 00007ff60cd04670 RDI: 0000000000000005
[  377.920678][   T34] RBP: 0000000000000000 R08: 00007ffd0e1e3d24 R09: 000000000000000c
[  377.923866][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005
[  377.927288][   T34] R13: 00007ffd0e1e3d78 R14: 00007ff60cd04670 R15: 0000000000000000
[  377.930522][   T34]  </TASK>
[  377.931844][   T34] INFO: task syz-executor:13686 blocked for more than 144 seconds.
[  377.935040][   T34]       Not tainted syzkaller #0
[  377.937181][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  377.940621][   T34] task:syz-executor    state:D stack:22632 pid:13686 tgid:13686 ppid:1      task_flags:0x400140 flags:0x00004004
[  377.945325][   T34] Call Trace:
[  377.947009][   T34]  <TASK>
[  377.948285][   T34]  __schedule+0x1798/0x4cc0
[  377.950162][   T34]  ? __lock_acquire+0xab9/0xd20
[  377.952219][   T34]  ? __lock_acquire+0xab9/0xd20
[  377.954252][   T34]  ? __pfx___schedule+0x10/0x10
[  377.956451][   T34]  ? schedule+0x91/0x360
[  377.958255][   T34]  schedule+0x165/0x360
[  377.959960][   T34]  schedule_preempt_disabled+0x13/0x30
[  377.962317][   T34]  __mutex_lock+0x7e6/0x1350
[  377.964265][   T34]  ? __mutex_lock+0x5bb/0x1350
[  377.966352][   T34]  ? genl_rcv_msg+0x10d/0x790
[  377.968354][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  377.970456][   T34]  ? stack_trace_save+0x9c/0xe0
[  377.972717][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  377.974952][   T34]  ? radix_tree_lookup+0x240/0x290
[  377.977084][   T34]  genl_rcv_msg+0x10d/0x790
[  377.978818][   T34]  ? __lock_acquire+0xab9/0xd20
[  377.980743][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  377.982485][   T34]  netlink_rcv_skb+0x208/0x470
[  377.984015][   T34]  ? __lock_acquire+0xab9/0xd20
[  377.985659][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  377.987369][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  377.989097][   T34]  ? down_read+0x1ad/0x2e0
[  377.990974][   T34]  genl_rcv+0x28/0x40
[  377.992435][   T34]  netlink_unicast+0x82f/0x9e0
[  377.994029][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  377.995788][   T34]  ? netlink_sendmsg+0x642/0xb30
[  377.997671][   T34]  ? skb_put+0x11b/0x210
[  377.999078][   T34]  netlink_sendmsg+0x805/0xb30
[  378.000627][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  378.002294][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  378.003865][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  378.005556][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  378.007339][   T34]  __sock_sendmsg+0x21c/0x270
[  378.008815][   T34]  __sys_sendto+0x3bd/0x520
[  378.010217][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  378.011893][   T34]  ? fd_install+0x97/0x540
[  378.013361][   T34]  ? fd_install+0x30d/0x540
[  378.014798][   T34]  __x64_sys_sendto+0xde/0x100
[  378.016374][   T34]  do_syscall_64+0xfa/0x3b0
[  378.017843][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  378.019753][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.021798][   T34]  ? exc_page_fault+0x9f/0xf0
[  378.023634][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.025819][   T34] RIP: 0033:0x7fa320990a3c
[  378.027552][   T34] RSP: 002b:00007fff73ce6210 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  378.030473][   T34] RAX: ffffffffffffffda RBX: 00007fa321704620 RCX: 00007fa320990a3c
[  378.033614][   T34] RDX: 0000000000000020 RSI: 00007fa321704670 RDI: 0000000000000005
[  378.036351][   T34] RBP: 0000000000000000 R08: 00007fff73ce6264 R09: 000000000000000c
[  378.039341][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005
[  378.042308][   T34] R13: 00007fff73ce62b8 R14: 00007fa321704670 R15: 0000000000000000
[  378.045191][   T34]  </TASK>
[  378.046579][   T34] 
[  378.046579][   T34] Showing all locks held in the system:
[  378.049539][   T34] 1 lock held by khungtaskd/34:
[  378.051456][   T34]  #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  378.055340][   T34] 2 locks held by getty/5674:
[  378.057343][   T34]  #0: ffff8880272d20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  378.061296][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  378.065208][   T34] 3 locks held by kworker/u8:5/6574:
[  378.067422][   T34] 1 lock held by udevd/7662:
[  378.069059][   T34]  #0: ffff888021451358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  378.071879][   T34] 2 locks held by syz.0.2101/13660:
[  378.073484][   T34]  #0: ffffffff8f59e0f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  378.075970][   T34]  #1: ffffffff8f59df08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  378.079264][   T34] 2 locks held by syz.0.2101/13669:
[  378.081005][   T34]  #0: ffffffff8f59e0f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  378.083798][   T34]  #1: ffffffff8f59df08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  378.087360][   T34] 6 locks held by syz.1.2103/13665:
[  378.089254][   T34]  #0: ffffffff8f59e0f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  378.092102][   T34]  #1: ffffffff8f59df08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  378.094995][   T34]  #2: ffff888021458a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x36f/0x1870
[  378.098455][   T34]  #3: ffff8881083adf58 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0
[  378.101639][   T34]  #4: ffff8881083ad8f8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0
[  378.105825][   T34]  #5: ffff8881083ad930 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0
[  378.110133][   T34] 2 locks held by syz.3.2104/13666:
[  378.112071][   T34]  #0: ffffffff8f59e0f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  378.115162][   T34]  #1: ffffffff8f59df08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  378.118936][   T34] 2 locks held by syz-executor/13681:
[  378.121149][   T34]  #0: ffffffff8f59e0f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  378.124526][   T34]  #1: ffffffff8f59df08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  378.128295][   T34] 2 locks held by syz-executor/13683:
[  378.130471][   T34]  #0: ffffffff8f59e0f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  378.133585][   T34]  #1: ffffffff8f59df08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  378.137207][   T34] 2 locks held by syz-executor/13686:
[  378.139080][   T34]  #0: ffffffff8f59e0f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  378.142070][   T34]  #1: ffffffff8f59df08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  378.145274][   T34] 2 locks held by syz-executor/13706:
[  378.147638][   T34]  #0: ffffffff8f59e0f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  378.150941][   T34]  #1: ffffffff8f59df08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  378.153923][   T34] 2 locks held by syz-executor/13716:
[  378.155578][   T34]  #0: ffffffff8f59e0f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  378.158333][   T34]  #1: ffffffff8f59df08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  378.161617][   T34] 2 locks held by syz-executor/13718:
[  378.163770][   T34]  #0: ffffffff8f59e0f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  378.166912][   T34]  #1: ffffffff8f59df08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  378.170174][   T34] 2 locks held by syz-executor/13733:
[  378.171896][   T34]  #0: ffffffff8f59e0f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  378.174496][   T34]  #1: ffffffff8f59df08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  378.177417][   T34] 2 locks held by syz-executor/13744:
[  378.179172][   T34]  #0: ffffffff8f59e0f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  378.181897][   T34]  #1: ffffffff8f59df08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  378.184774][   T34] 2 locks held by syz-executor/13747:
[  378.186918][   T34]  #0: ffffffff8f59e0f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  378.189802][   T34]  #1: ffffffff8f59df08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  378.192832][   T34] 
[  378.193761][   T34] =============================================
[  378.193761][   T34] 
[  378.196818][   T34] NMI backtrace for cpu 0
[  378.196826][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  378.196834][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  378.196839][   T34] Call Trace:
[  378.196842][   T34]  <TASK>
[  378.196846][   T34]  dump_stack_lvl+0x189/0x250
[  378.196857][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  378.196865][   T34]  ? __pfx__printk+0x10/0x10
[  378.196879][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  378.196889][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  378.196898][   T34]  ? __pfx__printk+0x10/0x10
[  378.196908][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  378.196919][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  378.196928][   T34]  watchdog+0xf93/0xfe0
[  378.196939][   T34]  ? watchdog+0x1de/0xfe0
[  378.196950][   T34]  kthread+0x711/0x8a0
[  378.196959][   T34]  ? __pfx_watchdog+0x10/0x10
[  378.196968][   T34]  ? __pfx_kthread+0x10/0x10
[  378.196976][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  378.196986][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  378.196994][   T34]  ? __pfx_kthread+0x10/0x10
[  378.197002][   T34]  ret_from_fork+0x3fc/0x770
[  378.197010][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  378.197018][   T34]  ? __switch_to_asm+0x39/0x70
[  378.197026][   T34]  ? __switch_to_asm+0x33/0x70
[  378.197034][   T34]  ? __pfx_kthread+0x10/0x10
[  378.197042][   T34]  ret_from_fork_asm+0x1a/0x30
[  378.197055][   T34]  </TASK>
[  378.197057][   T34] Sending NMI from CPU 0 to CPUs 1:
[  378.254655][    C1] NMI backtrace for cpu 1
[  378.254670][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  378.254682][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  378.254688][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  378.254707][    C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 66 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  378.254716][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  378.254726][    C1] RAX: 42145a9289fe7300 RBX: ffffffff819683c8 RCX: 42145a9289fe7300
[  378.254733][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b7f8c RDI: ffffffff8be33800
[  378.254740][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  378.254748][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa38e30
[  378.254755][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11020005000
[  378.254762][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c18000(0000) knlGS:0000000000000000
[  378.254772][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  378.254780][    C1] CR2: 00005643837475c8 CR3: 00000001082ca000 CR4: 00000000000006f0
[  378.254814][    C1] Call Trace:
[  378.254820][    C1]  <TASK>
[  378.254825][    C1]  default_idle+0x13/0x20
[  378.254837][    C1]  default_idle_call+0x74/0xb0
[  378.254848][    C1]  do_idle+0x1e8/0x510
[  378.254861][    C1]  ? __pfx_do_idle+0x10/0x10
[  378.254870][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  378.254890][    C1]  cpu_startup_entry+0x44/0x60
[  378.254901][    C1]  start_secondary+0x101/0x110
[  378.254917][    C1]  common_startup_64+0x13e/0x147
[  378.254936][    C1]  </TASK>
[  378.255706][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  378.317425][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  378.320873][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  378.324796][   T34] Call Trace:
[  378.325971][   T34]  <TASK>
[  378.326947][   T34]  dump_stack_lvl+0x99/0x250
[  378.328491][   T34]  ? __asan_memcpy+0x40/0x70
[  378.329988][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  378.331718][   T34]  ? __pfx__printk+0x10/0x10
[  378.333250][   T34]  vpanic+0x281/0x750
[  378.334546][   T34]  ? __pfx_vpanic+0x10/0x10
[  378.336113][   T34]  ? preempt_schedule+0xae/0xc0
[  378.337777][   T34]  ? preempt_schedule_common+0x83/0xd0
[  378.339704][   T34]  panic+0xb9/0xc0
[  378.341112][   T34]  ? __pfx_panic+0x10/0x10
[  378.342673][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  378.344520][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  378.346532][   T34]  watchdog+0xfd2/0xfe0
[  378.348025][   T34]  ? watchdog+0x1de/0xfe0
[  378.349682][   T34]  kthread+0x711/0x8a0
[  378.351141][   T34]  ? __pfx_watchdog+0x10/0x10
[  378.352853][   T34]  ? __pfx_kthread+0x10/0x10
[  378.354574][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  378.356420][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  378.358278][   T34]  ? __pfx_kthread+0x10/0x10
[  378.359925][   T34]  ret_from_fork+0x3fc/0x770
[  378.361622][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  378.363557][   T34]  ? __switch_to_asm+0x39/0x70
[  378.365222][   T34]  ? __switch_to_asm+0x33/0x70
[  378.367064][   T34]  ? __pfx_kthread+0x10/0x10
[  378.368654][   T34]  ret_from_fork_asm+0x1a/0x30
[  378.370415][   T34]  </TASK>
[  378.372318][   T34] Kernel Offset: disabled
[  378.373708][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
05:14:55  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000054 RBX=0000000000000054 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff888020218237 R9 =1ffff11004043046 R10=dffffc0000000000 R11=ffffffff854f38c0
R12=dffffc0000000000 R13=ffffffff99afd8d3 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f393c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffd7aeb3d38 CR3=000000002732a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff00ff00000000 XMM05=0000000000000171 00215f5454954127
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ff00000000000000 XMM09=106a7003b1e44478 9be05f96bba54127
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b44cfb RBX=1ffff11009608341 RCX=ffff88801e5fd640 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000379f700 RSP=ffffc9000379f578
R8 =ffffffff8fa38e37 R9 =1ffffffff1f471c6 R10=dffffc0000000000 R11=fffffbfff1f471c7
R12=ffff88804b041a08 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81bfabed RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3788907d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f3787da76c3 00007f3787da76c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 000000000003bf12
XMM06=1000201000060171 a004800400000007 XMM07=b208000100000000 06060121ce64f884
XMM08=8c08000480030010 0001000000000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
