last executing test programs:

37.381393176s ago: executing program 0 (id=1012):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7, 0x12288}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18c0000000000000000000000000000071120d000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x902}, 0x94)
r7 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40)

37.166194514s ago: executing program 0 (id=1013):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r1=>0x0})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), 0xffffffffffffffff)
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18)
r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14)
getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0x34, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @private=0xa010100}}, 0x0, 0x0, 0x4d, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0x110)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x2, {0x2, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x0, 0x101}, {0x0, 0x6, {0x0, 0xf0}, {0x0, 0x1, 0x2}, 0x0, 0x1}], 0x40)
close(r2)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4)
r5 = getuid()
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x14)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYRESDEC=r5], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', r6, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$ENABLE_STATS(0x20, &(0x7f0000000580), 0x4)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001840)=ANY=[@ANYBLOB="140000001000010000000000004083614cfe78bd58a56d5a6df50000000100000a14000000000a010400000000000000000100000328000000030a01010000000000000000010000000900010073797a300000000008000540fffffffc40000000050a010300000000000000000000000008000540fffffffd0c00024000000000000000020900030073797a32000000000900010073797a300000"], 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x20058000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', r6, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r9}, &(0x7f0000000400), &(0x7f0000000540)=r7}, 0x20)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0xffffffffffffff0b)
openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x102001, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0))

33.031759532s ago: executing program 0 (id=1013):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r1=>0x0})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), 0xffffffffffffffff)
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18)
r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14)
getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0x34, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @private=0xa010100}}, 0x0, 0x0, 0x4d, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0x110)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x2, {0x2, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x0, 0x101}, {0x0, 0x6, {0x0, 0xf0}, {0x0, 0x1, 0x2}, 0x0, 0x1}], 0x40)
close(r2)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4)
r5 = getuid()
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x14)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYRESDEC=r5], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', r6, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$ENABLE_STATS(0x20, &(0x7f0000000580), 0x4)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001840)=ANY=[@ANYBLOB="140000001000010000000000004083614cfe78bd58a56d5a6df50000000100000a14000000000a010400000000000000000100000328000000030a01010000000000000000010000000900010073797a300000000008000540fffffffc40000000050a010300000000000000000000000008000540fffffffd0c00024000000000000000020900030073797a32000000000900010073797a300000"], 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x20058000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', r6, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r9}, &(0x7f0000000400), &(0x7f0000000540)=r7}, 0x20)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0xffffffffffffff0b)
openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x102001, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0))

27.009040665s ago: executing program 0 (id=1013):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r1=>0x0})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), 0xffffffffffffffff)
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18)
r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14)
getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0x34, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @private=0xa010100}}, 0x0, 0x0, 0x4d, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0x110)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x2, {0x2, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x0, 0x101}, {0x0, 0x6, {0x0, 0xf0}, {0x0, 0x1, 0x2}, 0x0, 0x1}], 0x40)
close(r2)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4)
r5 = getuid()
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x14)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYRESDEC=r5], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', r6, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$ENABLE_STATS(0x20, &(0x7f0000000580), 0x4)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001840)=ANY=[@ANYBLOB="140000001000010000000000004083614cfe78bd58a56d5a6df50000000100000a14000000000a010400000000000000000100000328000000030a01010000000000000000010000000900010073797a300000000008000540fffffffc40000000050a010300000000000000000000000008000540fffffffd0c00024000000000000000020900030073797a32000000000900010073797a300000"], 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x20058000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', r6, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r9}, &(0x7f0000000400), &(0x7f0000000540)=r7}, 0x20)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0xffffffffffffff0b)
openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x102001, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0))

21.017633801s ago: executing program 0 (id=1013):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r1=>0x0})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), 0xffffffffffffffff)
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18)
r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14)
getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0x34, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @private=0xa010100}}, 0x0, 0x0, 0x4d, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0x110)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x2, {0x2, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x0, 0x101}, {0x0, 0x6, {0x0, 0xf0}, {0x0, 0x1, 0x2}, 0x0, 0x1}], 0x40)
close(r2)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4)
r5 = getuid()
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x14)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYRESDEC=r5], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', r6, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$ENABLE_STATS(0x20, &(0x7f0000000580), 0x4)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001840)=ANY=[@ANYBLOB="140000001000010000000000004083614cfe78bd58a56d5a6df50000000100000a14000000000a010400000000000000000100000328000000030a01010000000000000000010000000900010073797a300000000008000540fffffffc40000000050a010300000000000000000000000008000540fffffffd0c00024000000000000000020900030073797a32000000000900010073797a300000"], 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x20058000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', r6, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r9}, &(0x7f0000000400), &(0x7f0000000540)=r7}, 0x20)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0xffffffffffffff0b)
openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x102001, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0))

19.168779106s ago: executing program 1 (id=1164):
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) (async)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (async)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000040)={0x6, '\x00', {0xd}, 0x2})
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async, rerun: 64)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000140)=0x4)
sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_getaddr={0x34, 0x16, 0x100, 0x70bd25, 0x25dfdbfe, {0xa, 0x38, 0x0, 0xfd, r4}, [@IFA_FLAGS={0x8}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x40, 0x80000000, 0x7}}]}, 0x34}, 0x1, 0x0, 0x0, 0xa040}, 0x40800) (async, rerun: 32)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) (rerun: 32)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000400)={'ip_vti0\x00', <r5=>r4, 0x20, 0x10, 0x2, 0x8, {{0x3c, 0x4, 0x1, 0x2, 0xf0, 0x67, 0x0, 0xeb, 0x4, 0x0, @multicast2, @rand_addr=0x64010101, {[@lsrr={0x83, 0x13, 0xf1, [@rand_addr=0x64010102, @broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x27, 0x7c, [@multicast2, @local, @multicast1, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x27}, @multicast2, @multicast1, @rand_addr=0x64010101, @broadcast]}, @ssrr={0x89, 0x1f, 0x3a, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @rand_addr=0x64010100, @multicast1, @remote, @private=0xa010100]}, @rr={0x7, 0xf, 0x8, [@dev={0xac, 0x14, 0x14, 0x1f}, @empty, @remote]}, @cipso={0x86, 0x15, 0x3, [{0x6, 0xf, "2781378538b35df458596dbaee"}]}, @cipso={0x86, 0x17, 0x3, [{0x6, 0x11, "a12fc218ba06764e8747ba273ccacf"}]}, @timestamp_prespec={0x44, 0x34, 0x51, 0x3, 0xa, [{@multicast2, 0x4}, {@local, 0x6}, {@remote, 0x5}, {@loopback, 0x8}, {@broadcast, 0xa}, {@loopback, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0xfd, 0x3, 0x5, [{@remote, 0x5}, {@private=0xa010101, 0x2}]}]}}}}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x9, 0x24, &(0x7f0000000280)=@raw=[@exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0xa, 0x1, 0x0, r2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}], &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x4, '\x00', r5, 0x0, r2, 0x8, &(0x7f0000000580)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0xe, 0x8, 0xfffffff7}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000600)=[{0x2, 0x1, 0x0, 0xb}, {0x5, 0x2, 0xb, 0xc}, {0x1, 0x2, 0x4, 0x8}, {0x0, 0x5, 0x7, 0x6}]}, 0x94) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000007c0)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, "d34a59d67416e3fc16aeb0f783fb05e09eba612cf871dd83b68f18ac4c9a40aa", 0x9, 0x0, 0x5, 0x2}, 0x3c) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)=@deltaction={0xe8, 0x31, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2a}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x408c015}, 0x24004000)
getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000c00)={@local, <r7=>0x0}, &(0x7f0000000c40)=0x14)
getpeername$packet(r3, &(0x7f0000000c80)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000cc0)=0x14)
sendmsg$inet(r3, &(0x7f0000000e40)={&(0x7f00000009c0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000a00)="44c5a4a2f02f18f3fd9349869818042fa220898b73849d8c302be5c6afabe0bf28eb9fa0ee2f4146249ad15da18c04eb17ca913ac18dc3e00e28009de0418eae9b60d50046ac77112f90ee27d2aa3509336172310fe5f1d10b23c9ae4ebf9687d311cd7b92ea3548a68eef8046207f03775725c37d8897611f3e7a2113ccc9ccfd12d0b2b02ddcd186d385cf6fe6bc8d1e4fe491023711aa95f2d4f6f5f60baba138d7c964cb1822ad4371a391603df370da440c7267e00cf5f2473b85e9573aeb72e17cb47022bd", 0xc8}, {&(0x7f0000000b00)="958ccfcd8ec42e1b2a757ba59b57f46f57111671e3218dcb346c97ebf5a01e069880e930eb0a7feaa7515da113abdabe4906675ac85774a0180a943b293d9778ea9c12ccff5bf867020015cff16eee2036b8635abfa3a893765a543ba92e02857c94f3d8540ab05c2727b861fd7f96cf05412b550a7d6677cefdc69cab410ddb95ce17049b6ffe2a28c335b43a178fd143876223ba882a4c1927b27ce6cbda52c9f8d457da4ed91d02cc6fe2119bf74b4f", 0xb1}], 0x2, &(0x7f0000000d00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @rand_addr=0x64010101, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}, @ip_retopts={{0x40, 0x0, 0x7, {[@timestamp_addr={0x44, 0x2c, 0x13, 0x1, 0x8, [{@multicast1, 0x2466}, {@multicast1, 0x2}, {@multicast2}, {@private=0xa010100}, {@loopback, 0x5d6bd916}]}, @end]}}}, @ip_retopts={{0x70, 0x0, 0x7, {[@generic={0x83, 0xa, "7d8a938a1a83951a"}, @generic={0x86, 0x8, "e07f09e6df26"}, @rr={0x7, 0xf, 0xe3, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @timestamp_addr={0x44, 0x2c, 0xd2, 0x1, 0x3, [{@rand_addr=0x64010102, 0x1}, {@local, 0x4}, {@remote, 0x6}, {@remote, 0xfff}, {@multicast2, 0xb}]}, @timestamp={0x44, 0x10, 0x87, 0x0, 0x8, [0xe0000000, 0x5d82, 0xaee4]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @multicast1, @multicast2}}}], 0x128}, 0x8c4) (async)
ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000f80)={r3, r1, 0x6, 0xf0, &(0x7f0000000e80)="4042378e9b6404f6f51ba8e404a3a7ad9989a4c46a110cdf50311de4b13af59ee0724169067ec4d5c1272ac1e8f79dfae6f3cea1a3d6e699708a99d207c159659fefd63593769ece70d2211cf3c70df36f5f4168a3b9b95001a71b05f33e1912461a735acbcd6da6a2f22704a31c1c14c2315048b41ad7791c8c3a53388a9385996936d510671bf9e207c12bded346b60d025fc93caf8d145ce2029b4c5f03b91bc823e0f8ea5d41da46126624abc93b41c816a13027ce979fee96cecdb64b356e6f881114d86e6dae972c35f44d2d9e2f2216a1c5920b359d7b72961831e2e4cea4f014f7575b0909938e0f9c53497e", 0x3, 0x0, 0x1, 0x3, 0x8, 0x1, 0x8000, 'syz1\x00'}) (async)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001040)=<r9=>0x0)
syz_open_procfs$namespace(r9, &(0x7f0000001080)='ns/pid_for_children\x00') (async, rerun: 64)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001180)={'ip6_vti0\x00', &(0x7f0000001100)={'ip6_vti0\x00', <r10=>r8, 0x4, 0xe, 0x1, 0x3eb603af, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x80, 0x27, 0x5, 0xff}}) (rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000011c0)={'wg2\x00', <r11=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000001340)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001300)={&(0x7f0000001200)={0x100, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) (async)
setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000001380), 0x4)
sendmsg$key(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f00000013c0)={0x2, 0x7, 0x8, 0x6, 0x8, 0x0, 0x70bd2b, 0x25dfdbfc, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e20}, @sadb_x_filter={0x5, 0x1a, @in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6, 0x4, 0x14}]}, 0x40}}, 0x40) (async)
getsockopt$MRT6(r2, 0x29, 0xcf, &(0x7f0000001480), &(0x7f00000014c0)=0x4)
sendmsg$kcm(r2, &(0x7f0000001bc0)={&(0x7f0000001500)=@un=@abs={0x1, 0x0, 0x4e20}, 0x80, &(0x7f0000001940)=[{&(0x7f0000001580)="12eda160adb30827036d25c610dea5fd46484c11b9de424beac585d593b3d03b78190be79e4e6f0872bdfd275bd1d7acc9a427852b396d93a6e6baf71306dd4ab71dc5298e01e77e45bd9f34931f9e0e7334", 0x52}, {&(0x7f0000001600)="4a396709560b664a855d6d3c323cdc62adc7e16c3e41e76614a435462abd49c78301fd2cffcfdeec12a4cacd0d3741ea85ede8d49294374fffda491f0b12e5b5f5e215bf3e4312c888a52f3f58831af17236116f0399a1d39c490b7db77d8a309cf50fb7587021528eafda07db2e8d9ee20dff5e1f4ed954fef8", 0x7a}, {&(0x7f0000001680)="3f9c31ddecfc3065c2ae3091fbad927cdd6681e8f406f69060126b073322ea8e01135998ad712c3882ee56d4f5601eb5f72c21fbcb71dd3c01a40842976d19d01efd00e925479a56c6248b8a6b8f5143", 0x50}, {&(0x7f0000001700)="b77c36b8f13a98f0d5312390f9048fface9f30433fad02e8dc7a1622ded637df5675d68a7eb9a09606c3c6b38ec1c1a20a", 0x31}, {&(0x7f0000001740)="89d8409e4b5d6531a4217c0ae345cd78f9d24193ff62b621b6cc5bfc64edb44ebd48579c33ba578fa9ba57b169470bed2d041e7775a1b81d22e6f66c5566df18bc52284930de02dda4876809d0e37e122593d40d2046243fca5994cc4e26dcc53a70115408e5831d3513cff8dd9660621ed6e77ad8fa54b05ec37642101ee0a7a09161ca22aad080f64411b0b6dd77a16eda31f26a5c14514b5a4f10b605", 0x9e}, {&(0x7f0000001800)="82ecabf75328b63de7b50531e26972b73184cda13bf54955abd815052bd4", 0x1e}, {&(0x7f0000001840)="9f25e18a0ea2c55df349b41cefe217b2b2b25ea04bc224326cea571dbafac79fc38dc9a1d5e03b8b6659dadd8d487f810f458c626a4f7cbc668b3e7f2db52245cef1b059d5b355ee6f74aa31b021c450e81e4448a3ae7eb6da5b4d2e3093", 0x5e}, {&(0x7f00000018c0)="f4633bdbd02c9e6aaa6b6c60714be4a32974df84fbb62fe6911efcedf2a825182554c058d5e34b74f854d4ac9cb8f1e648e73f51362ccb01b34238edd51e8cde5a6a8d83567ca6bb429430931b0621d726f93e2cadda7eda52fadbc26031fcc2fa1fa2c761e7", 0x66}], 0x8, &(0x7f00000019c0)=[{0xf0, 0x29, 0x7f, "92dcfa0692cc9db5e581a2ba989a9b6cd4654bc246c874ab4fbf5688f502d1df34c71852fa419ac1e2d984137c7b43d078e249bb220489f3dea1b29d1d8c4c5fe1618fd035b14d55a5c5e243ad0c33c79f8bb454de5d134a5ad90acac1eb8c63e14fe4fe074c09c6cb6ed8e33aed811f46a9dd6156af5c6ab6c64d11881d73a5d252ef589af2cb06e8e8db728ad499e62000e791d784e721cd96bf3b2586cbd4d4bc99394a9bb0a01f4ecc80a38a0262d1ee0f3c06f5876cac49bc1fe81b73e797a4ed7fa408723575f88f31a54d70f658a8d6e4f910b1e6a85f1fdd"}, {0x78, 0x1, 0x9d0, "5ebe0ae051cdd6683230439905c9f0654f73389bd7c0e947de0c03621011afc56421113fa6486e63fbe5caea11dfc249b98fc200bcd965c569329ae9238eaf1b60145e6e782006f204bff5e95ba3b998ca545c0dd12ca293ee2559d902ac29853f6cd4"}, {0x10, 0x88, 0xe1}, {0x80, 0x10e, 0xffffffff, "5a861331cd4785021eeaa2c94b975415e170bec1f74f3b791f3037d6cb1fbfe28c2b3f25c855ec2f9b97c03903c59ba3758ad5e3b89a9b3a13d596be198dea3eaf927eaec0912389ddfb67075f3b167316d8e42f212e9459e30ed97f1e387a4dbb34aaa9b17a3a6c79bd"}], 0x1f8}, 0x4010) (async)
r12 = accept$packet(r2, &(0x7f0000001c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001c40)=0x14)
recvmsg(r12, &(0x7f00000030c0)={&(0x7f0000001c80)=@nfc, 0x80, &(0x7f0000003040)=[{&(0x7f0000001d00)=""/52, 0x34}, {&(0x7f0000001d40)=""/50, 0x32}, {&(0x7f0000001d80)=""/77, 0x4d}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/64, 0x40}, {&(0x7f0000002e40)=""/113, 0x71}, {&(0x7f0000002ec0)=""/116, 0x74}, {&(0x7f0000002f40)=""/244, 0xf4}], 0x8}, 0x10000)
getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000003240)={'broute\x00', 0x0, 0x4, 0xa0, [0xdb3, 0x4, 0xfffffffffffffff0, 0x6, 0xf240, 0x4], 0x7, &(0x7f0000003100)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000003180)=""/160}, &(0x7f00000032c0)=0x78)

18.800848953s ago: executing program 1 (id=1165):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}, 0x1, 0x300}, 0x0)
r0 = socket(0x10, 0x6, 0x100)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9403000010000104f04e93294c00000000001700", @ANYRES32=0x0, @ANYBLOB="00000000000000001400350076657468305f6d61637674617000000005001100050000000a000200aaaaaaaaaa0e00004c03168028000180100002"], 0x394}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)

18.67079237s ago: executing program 1 (id=1166):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000006a0019012cbd700100008025020000000000000808000a0000000000080005"], 0xfe80}, 0x1, 0x0, 0x0, 0x40d0}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}}, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r4 = socket$kcm(0x2, 0x3, 0x2)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_buf(r5, 0x29, 0x1f, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=0x1000)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r2, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x1, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x4, 0x2c, 0x0, 0x0, 0x8, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@noop]}}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x8, 0x0, 0xb9}}}}, 0x3a)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRES16=r0, @ANYBLOB="0280000008001b"], 0x3c}, 0x1, 0x0, 0x0, 0x54}, 0x0)

18.50952033s ago: executing program 1 (id=1167):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x400, 0xce, 0x0, 0x7, 0x5}, 0x4}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0)
close(r1)

17.679321847s ago: executing program 1 (id=1168):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_tracing={0x1a, 0x21, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@jmp={0x5, 0x1, 0x4, 0x2, 0x3, 0x0, 0x8}, @jmp={0x5, 0x1, 0x7, 0x8, 0x3, 0x0, 0xfffffffffffffffe}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='syzkaller\x00', 0x4, 0xec, &(0x7f0000000c80)=""/236, 0x41100, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000900)={0x4, 0x5, 0x10001, 0x1}, 0x10, 0x18634, r0, 0x4, &(0x7f0000000980)=[r4, r4, r4], &(0x7f00000009c0)=[{0x1, 0x1, 0x4, 0x1}, {0x3, 0x4, 0xb, 0x7}, {0x3, 0x1, 0x801, 0xc}, {0x5, 0x4, 0x10, 0x9}], 0x10, 0x8}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="50000000080211000001080211ef00000802110000000000000000000000000064000100010882848b960c121824"], 0x2e)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000002000010000000110012882845090b6551824"], 0x28)

16.756055734s ago: executing program 1 (id=1172):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "1332b8d5dbabacf7", "a177e8b1af3ec18be135ce99c7f9a82e", "81549a6a", "a1fd332905973b41"}, 0x28)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r4=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x90)
r5 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r6=>0x0})
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r10=>0x0})
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff})
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0x10c, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x7, 0x5, 0xffffff0a, 0x2]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_NAT_DST={0x90, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}, @CTA_NAT_PROTO={0x54, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x40}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, @CTA_MARK_MASK={0x8}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'snmp_trap\x00'}}, @CTA_LABELS_MASK={0xc, 0x17, [0x95f8, 0xfc]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000040)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r14=>0xffffffffffffffff})
r15 = socket(0x28, 0x1, 0x0)
connect$packet(r15, &(0x7f0000000500)={0x28, 0x2, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
connect$packet(r15, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140))
sendmsg$NBD_CMD_RECONFIGURE(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0xbc, r12, 0x181, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x800}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x123}, @NBD_ATTR_SOCKETS={0x58, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r15}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9b}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0)

15.7045043s ago: executing program 2 (id=1175):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x3, 'nq\x00', 0x28, 0xfffffff7, 0x47}, 0x2c)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0)

15.628029993s ago: executing program 2 (id=1176):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000260300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffd66, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0)
close(r0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0xa4}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, "dc"}, {0x10, 0x113}, {0x10, 0x117}], 0x38}, 0x404f444)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000010001fff00000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000260000280012800b00010062726964676500001800028005002a00030000000c00230003000000000027"], 0x48}}, 0x48004)

15.627714867s ago: executing program 2 (id=1177):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x103044, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e24, 0x20f, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1ff}, 0x1c)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x20000040}, 0x2004080)
setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000540)=0x1, 0x4)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYRES8=r3], 0x30}}, 0x20000040)
listen(r2, 0x8)
accept4(r2, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f00000003c0)="a21f6702e185a16734191fcd63171acae4749ac4e1c6334f30058af12e0f9f43155ef0e9afd7ac24de55cac00ee8810990433f4f0206282f81eec18500d936d9a9a6d0ff901e5f7d7c0d3de5e1d5a969b8cc725b299ff3a27af8b3b2d412a50d566334bc932924741feeeaf4fbe8714bf4aafed2758505519c3cd75efb7837f72fd3fbac11df288c331e0eb2542d2b079784c7593df98911488371afb5e2de10d2a03aebfafe1af2c54ac33d38fdf861ecd5ba6069891514358f902a106682aae404776795717e1050ef6075d13ad95f7308c919", 0xd4, 0x84, &(0x7f0000000500)={0x2, 0x4e23, @loopback}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)
socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, 0x0, &(0x7f0000000140)=0x9700)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1}})
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f00)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})

15.460618655s ago: executing program 2 (id=1178):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'netdevsim0\x00', 0x112})
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x12, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000010000000000000000000000711216000000000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x28055}, 0x20008090)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x8001, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000}]}]}, 0xfc}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000210001000000000000000000fc020000000000000000000000000000fe80000000000000000000000000003500000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000034011100ac14140c00000000000000003c000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa6c01a8000200000002000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000ff020000000000000000000000000001ff020000003500000a000800ac1414bb000000000000000000000000fc02000000000000000000000000000064010102000000000000000000000000fe8000000000000000000000000000323c"], 0x184}}, 0x0)

15.458769111s ago: executing program 2 (id=1179):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@gettaction={0xb4, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}, @action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x19, 0x3, 0x401}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x24044051) (async)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x5c, 0x2, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
close(0xffffffffffffffff) (async)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async)
listen(0xffffffffffffffff, 0x9) (async)
r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000}, 0x18)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={<r2=>0xffffffffffffffff}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@getchain={0x24, 0x66, 0x4, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xa, 0x7}, {0xd, 0xffe0}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x800) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

15.390789472s ago: executing program 2 (id=1180):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="1400010000000000f00000000000ffff81"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x6)
getsockopt$ax25_int(r5, 0x101, 0xd, &(0x7f0000000080), &(0x7f0000000040)=0x4)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000014000100000000aaad47ed86d9be1baf557faf6588770000000000022000ffb400e6b52b0b555531534bc2579ac278e1bd0c41aeb90995a4cf72f240e7e00a68810cd14e7740e2b4233e0f57125d3d43e3776e6780d53ff3ac1f9a6650fde784619d992dd32e8635b1132decbbed288fd4c95de064083d7871e1069c991fb354f163bf2ae8d9c92ef165f73ccfce2a6141dcbf303f771030038ee2a897c1d601b71263", @ANYRES32=r3, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0)
r6 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@rand_addr=0x64010101, @local, @private=0xa010101}, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x4)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r11=>0x0})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r14=>0x0})
r15 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r15, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r13, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, '-'}]}, 0x24}}, 0x48000)
r16 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r16, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r11, @ANYBLOB="05005b"], 0x24}}, 0x0)

15.38728328s ago: executing program 0 (id=1013):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r1=>0x0})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), 0xffffffffffffffff)
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18)
r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14)
getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0x34, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @private=0xa010100}}, 0x0, 0x0, 0x4d, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0x110)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x2, {0x2, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x0, 0x101}, {0x0, 0x6, {0x0, 0xf0}, {0x0, 0x1, 0x2}, 0x0, 0x1}], 0x40)
close(r2)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4)
r5 = getuid()
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x14)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYRESDEC=r5], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', r6, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$ENABLE_STATS(0x20, &(0x7f0000000580), 0x4)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001840)=ANY=[@ANYBLOB="140000001000010000000000004083614cfe78bd58a56d5a6df50000000100000a14000000000a010400000000000000000100000328000000030a01010000000000000000010000000900010073797a300000000008000540fffffffc40000000050a010300000000000000000000000008000540fffffffd0c00024000000000000000020900030073797a32000000000900010073797a300000"], 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x20058000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', r6, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r9}, &(0x7f0000000400), &(0x7f0000000540)=r7}, 0x20)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0xffffffffffffff0b)
openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x102001, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0))

1.009576543s ago: executing program 32 (id=1172):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "1332b8d5dbabacf7", "a177e8b1af3ec18be135ce99c7f9a82e", "81549a6a", "a1fd332905973b41"}, 0x28)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r4=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x90)
r5 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r6=>0x0})
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r10=>0x0})
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff})
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0x10c, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x7, 0x5, 0xffffff0a, 0x2]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_NAT_DST={0x90, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}, @CTA_NAT_PROTO={0x54, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x40}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, @CTA_MARK_MASK={0x8}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'snmp_trap\x00'}}, @CTA_LABELS_MASK={0xc, 0x17, [0x95f8, 0xfc]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000040)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r14=>0xffffffffffffffff})
r15 = socket(0x28, 0x1, 0x0)
connect$packet(r15, &(0x7f0000000500)={0x28, 0x2, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
connect$packet(r15, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140))
sendmsg$NBD_CMD_RECONFIGURE(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0xbc, r12, 0x181, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x800}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x123}, @NBD_ATTR_SOCKETS={0x58, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r15}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9b}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0)

0s ago: executing program 33 (id=1180):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="1400010000000000f00000000000ffff81"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x6)
getsockopt$ax25_int(r5, 0x101, 0xd, &(0x7f0000000080), &(0x7f0000000040)=0x4)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000014000100000000aaad47ed86d9be1baf557faf6588770000000000022000ffb400e6b52b0b555531534bc2579ac278e1bd0c41aeb90995a4cf72f240e7e00a68810cd14e7740e2b4233e0f57125d3d43e3776e6780d53ff3ac1f9a6650fde784619d992dd32e8635b1132decbbed288fd4c95de064083d7871e1069c991fb354f163bf2ae8d9c92ef165f73ccfce2a6141dcbf303f771030038ee2a897c1d601b71263", @ANYRES32=r3, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0)
r6 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@rand_addr=0x64010101, @local, @private=0xa010101}, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x4)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r11=>0x0})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r14=>0x0})
r15 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r15, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r13, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, '-'}]}, 0x24}}, 0x48000)
r16 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r16, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r11, @ANYBLOB="05005b"], 0x24}}, 0x0)

kernel console output (not intermixed with test programs):

promiscuous mode
[   86.037032][ T7716] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   86.183556][ T7718] team0 (unregistering): Port device team_slave_0 removed
[   86.192356][ T7718] team0 (unregistering): Port device team_slave_1 removed
[   86.199459][ T7718] team0 (unregistering): Port device bond0 removed
[   86.250174][ T7725] netlink: 'syz.2.445': attribute type 1 has an invalid length.
[   86.265777][ T7725] 8021q: adding VLAN 0 to HW filter on device bond8
[   86.292990][ T7725] 8021q: adding VLAN 0 to HW filter on device bond8
[   86.295421][ T7725] bond8: (slave vxcan5): The slave device specified does not support setting the MAC address
[   86.304832][ T7725] bond8: (slave vxcan5): Error -95 calling set_mac_address
[   86.316476][ T7729] netlink: 36 bytes leftover after parsing attributes in process `syz.1.446'.
[   86.465129][ T7749] netlink: 12 bytes leftover after parsing attributes in process `syz.2.451'.
[   86.480903][ T7747] netlink: 'syz.0.450': attribute type 32 has an invalid length.
[   86.483756][ T7747] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[   86.615116][ T7764] netlink: 'syz.0.456': attribute type 10 has an invalid length.
[   86.617691][ T7764] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   86.642274][ T7766] netlink: 'syz.1.455': attribute type 13 has an invalid length.
[   86.660344][ T7766] netlink: 'syz.1.455': attribute type 17 has an invalid length.
[   86.704528][ T7766] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.714729][ T7766] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   86.803223][ T7771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.871620][ T7766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.882706][ T7784] openvswitch: netlink: IPv6 tunnel dst address is zero
[   86.933335][ T7766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.991749][ T7788] IPVS: set_ctl: invalid protocol: 43 172.30.0.1:20003
[   87.087177][ T7792] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   87.156598][ T7794] bond0: left promiscuous mode
[   87.159401][ T7794] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.740385][ T7796] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.742653][ T7797] syzkaller0: entered promiscuous mode
[   87.744752][ T7797] syzkaller0: entered allmulticast mode
[   87.748042][ T7796] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   87.751901][ T7796] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   87.754549][ T7796] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   87.757199][ T7796] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   87.760191][ T7796] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   87.763728][ T7796] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   87.766365][ T7796] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   87.770343][ T7796] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   87.773005][ T7796] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   87.775658][ T7796] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   87.778437][ T7796] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   87.781961][ T7796] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   87.784718][ T7796] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   87.787529][ T7796] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   87.790485][ T7796] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   87.793345][ T7796] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   87.804535][ T7798] tipc: Resetting bearer <eth:syzkaller0>
[   87.817195][ T7798] tipc: Disabling bearer <eth:syzkaller0>
[   88.139023][ T7817] vlan5: entered promiscuous mode
[   88.149212][ T7817] bond0: entered promiscuous mode
[   88.545073][ T7860] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   88.677357][ T7870] netlink: 'syz.0.486': attribute type 1 has an invalid length.
[   89.460079][ T7876] netlink: 'syz.0.490': attribute type 1 has an invalid length.
[   89.507395][ T7876] vlan5: entered allmulticast mode
[   89.509059][ T7876] bond7: entered allmulticast mode
[   89.631723][ T7890] netlink: 'syz.2.493': attribute type 1 has an invalid length.
[   89.675738][ T7894] netlink: 'syz.0.495': attribute type 10 has an invalid length.
[   89.678156][ T7894] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   89.690966][ T7894] macsec0: entered promiscuous mode
[   89.692639][ T7894] dummy0: entered promiscuous mode
[   89.694509][ T7894] macsec0: entered allmulticast mode
[   89.696230][ T7894] dummy0: entered allmulticast mode
[   89.702752][ T7894] dummy0: left allmulticast mode
[   89.704336][ T7894] dummy0: left promiscuous mode
[   89.821068][ T7902] netlink: 'syz.2.498': attribute type 1 has an invalid length.
[   90.017701][ T7916] __nla_validate_parse: 48 callbacks suppressed
[   90.017715][ T7916] netlink: 52 bytes leftover after parsing attributes in process `syz.2.502'.
[   90.112513][ T7932] netlink: 48 bytes leftover after parsing attributes in process `syz.2.506'.
[   90.143736][ T7934] netlink: 'syz.2.507': attribute type 10 has an invalid length.
[   90.147296][ T7934] bridge0: port 1(batadv0) entered blocking state
[   90.149263][ T7934] bridge0: port 1(batadv0) entered listening state
[   90.157216][ T7934] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   90.230322][ T7919] block nbd0: server does not support multiple connections per device.
[   90.236541][ T7919] block nbd0: shutting down sockets
[   90.351226][ T7948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.512'.
[   90.360291][ T7948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.512'.
[   90.408418][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'.
[   90.415508][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'.
[   90.480747][ T7960] 8021q: adding VLAN 0 to HW filter on device bond8
[   90.555146][ T7966] netlink: 248 bytes leftover after parsing attributes in process `syz.0.515'.
[   90.775887][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.517'.
[   90.798583][ T7986] gretap0: entered promiscuous mode
[   91.049949][ T8028] netlink: 224 bytes leftover after parsing attributes in process `syz.2.527'.
[   91.075500][ T8028] 8021q: adding VLAN 0 to HW filter on device bond11
[   91.095555][ T8033] pim6reg1: entered promiscuous mode
[   91.103865][ T8033] pim6reg1: entered allmulticast mode
[   91.293882][ T8045] openvswitch: netlink: Message has 20 unknown bytes.
[   91.296020][ T8045] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.299351][ T8045] netlink: 16 bytes leftover after parsing attributes in process `syz.2.531'.
[   91.801463][ T8058] validate_nla: 3 callbacks suppressed
[   91.801475][ T8058] netlink: 'syz.2.534': attribute type 58 has an invalid length.
[   91.890505][ T8068] ipt_ECN: cannot use operation on non-tcp rule
[   91.959893][ T8074] ipt_REJECT: TCP_RESET invalid for non-tcp
[   92.029688][ T8083] syzkaller0: entered allmulticast mode
[   92.061886][ T8083] syzkaller0 (unregistering): left allmulticast mode
[   92.202528][ T8093] bond0: entered promiscuous mode
[   92.206869][ T8093] bond0: left promiscuous mode
[   92.646969][ T8132] netlink: 'syz.0.548': attribute type 1 has an invalid length.
[   92.675548][ T8134] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[   92.726846][ T8132] bond11 (unregistering): Released all slaves
[   92.743140][ T8140] netlink: 'syz.1.549': attribute type 18 has an invalid length.
[   92.838523][ T8143] bond10: (slave gretap2): making interface the new active one
[   92.843343][ T8143] bond10: (slave gretap2): Enslaving as an active interface with an up link
[   93.037811][ T8160] vlan0: entered promiscuous mode
[   93.200232][ T8167] nbd1: detected capacity change from 0 to 127
[   93.227747][   T56] block nbd1: Receive control failed (result -104)
[   93.267225][ T8183] netlink: 'syz.0.559': attribute type 12 has an invalid length.
[   93.449171][ T8191] hsr_slave_1 (unregistering): left promiscuous mode
[   93.735114][ T8215] vlan0: left promiscuous mode
[   93.740541][ T8215] ip6erspan0: left promiscuous mode
[   93.742200][ T8215] geneve4: left promiscuous mode
[   93.744031][ T8215] bridge7: left promiscuous mode
[   93.916033][    C0] Unknown status report in ack skb
[   93.922200][ T8233] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ?!CMMv^侦Kc'A
[   93.972643][ T8234] sysfs: cannot create duplicate filename '/class/ieee80211/?!CMMv^侦Kc'A_xD8TT!'
[   93.980720][ T8234] CPU: 1 UID: 0 PID: 8234 Comm: syz.0.575 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   93.980732][ T8234] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   93.980738][ T8234] Call Trace:
[   93.980741][ T8234]  <TASK>
[   93.980760][ T8234]  dump_stack_lvl+0x189/0x250
[   93.980776][ T8234]  ? __pfx_dump_stack_lvl+0x10/0x10
[   93.980786][ T8234]  ? __pfx__printk+0x10/0x10
[   93.980797][ T8234]  ? kernfs_path_from_node+0x2c/0x260
[   93.980810][ T8234]  ? kernfs_path_from_node+0x2c/0x260
[   93.980820][ T8234]  ? kernfs_path_from_node+0x2c/0x260
[   93.980831][ T8234]  ? kernfs_path_from_node+0x22c/0x260
[   93.980841][ T8234]  ? kernfs_path_from_node+0x2c/0x260
[   93.980853][ T8234]  sysfs_warn_dup+0x8e/0xa0
[   93.980864][ T8234]  sysfs_do_create_link_sd+0xc0/0x110
[   93.980876][ T8234]  device_add_class_symlinks+0x1cf/0x240
[   93.980888][ T8234]  device_add+0x475/0xb50
[   93.980900][ T8234]  wiphy_register+0x199a/0x26b0
[   93.980918][ T8234]  ? __pfx_wiphy_register+0x10/0x10
[   93.980927][ T8234]  ? minstrel_ht_alloc+0x6dd/0x7e0
[   93.980941][ T8234]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[   93.980954][ T8234]  ieee80211_register_hw+0x33e1/0x4120
[   93.980978][ T8234]  ? ieee80211_register_hw+0x13f1/0x4120
[   93.980993][ T8234]  ? __pfx_ieee80211_register_hw+0x10/0x10
[   93.981005][ T8234]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   93.981021][ T8234]  ? __hrtimer_setup+0x187/0x210
[   93.981030][ T8234]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   93.981043][ T8234]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[   93.981067][ T8234]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   93.981076][ T8234]  ? trace_kmalloc+0x1f/0xd0
[   93.981085][ T8234]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[   93.981094][ T8234]  ? kstrndup+0xbf/0x160
[   93.981110][ T8234]  hwsim_new_radio_nl+0xea4/0x1b10
[   93.981121][ T8234]  ? __pfx___nla_validate_parse+0x10/0x10
[   93.981137][ T8234]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   93.981153][ T8234]  ? __nla_parse+0x40/0x60
[   93.981163][ T8234]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   93.981175][ T8234]  genl_family_rcv_msg_doit+0x215/0x300
[   93.981190][ T8234]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   93.981208][ T8234]  ? bpf_lsm_capable+0x9/0x20
[   93.981217][ T8234]  ? security_capable+0x7e/0x2e0
[   93.981232][ T8234]  genl_rcv_msg+0x60e/0x790
[   93.981247][ T8234]  ? __pfx_genl_rcv_msg+0x10/0x10
[   93.981257][ T8234]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   93.981274][ T8234]  netlink_rcv_skb+0x208/0x470
[   93.981284][ T8234]  ? __pfx_genl_rcv_msg+0x10/0x10
[   93.981295][ T8234]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   93.981313][ T8234]  ? down_read+0x1ad/0x2e0
[   93.981323][ T8234]  genl_rcv+0x28/0x40
[   93.981333][ T8234]  netlink_unicast+0x75b/0x8d0
[   93.981347][ T8234]  netlink_sendmsg+0x805/0xb30
[   93.981361][ T8234]  ? __pfx_netlink_sendmsg+0x10/0x10
[   93.981403][ T8234]  ? aa_sock_msg_perm+0x94/0x160
[   93.981416][ T8234]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   93.981423][ T8234]  ? __pfx_netlink_sendmsg+0x10/0x10
[   93.981433][ T8234]  __sock_sendmsg+0x21c/0x270
[   93.981444][ T8234]  ____sys_sendmsg+0x505/0x830
[   93.981457][ T8234]  ? __pfx_____sys_sendmsg+0x10/0x10
[   93.981471][ T8234]  ? import_iovec+0x74/0xa0
[   93.981483][ T8234]  ___sys_sendmsg+0x21f/0x2a0
[   93.981494][ T8234]  ? __pfx____sys_sendmsg+0x10/0x10
[   93.981522][ T8234]  ? __fget_files+0x2a/0x420
[   93.981533][ T8234]  ? __fget_files+0x3a0/0x420
[   93.981548][ T8234]  __x64_sys_sendmsg+0x19b/0x260
[   93.981560][ T8234]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   93.981575][ T8234]  ? rcu_is_watching+0x15/0xb0
[   93.981587][ T8234]  ? do_syscall_64+0xbe/0x3b0
[   93.981598][ T8234]  do_syscall_64+0xfa/0x3b0
[   93.981605][ T8234]  ? lockdep_hardirqs_on+0x9c/0x150
[   93.981612][ T8234]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.981619][ T8234]  ? exc_page_fault+0x9f/0xf0
[   93.981631][ T8234]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.981639][ T8234] RIP: 0033:0x7f6cb498e929
[   93.981648][ T8234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   93.981654][ T8234] RSP: 002b:00007f6cb587c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   93.981665][ T8234] RAX: ffffffffffffffda RBX: 00007f6cb4bb6080 RCX: 00007f6cb498e929
[   93.981670][ T8234] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000c
[   93.981675][ T8234] RBP: 00007f6cb4a10b39 R08: 0000000000000000 R09: 0000000000000000
[   93.981680][ T8234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   93.981684][ T8234] R13: 0000000000000000 R14: 00007f6cb4bb6080 R15: 00007fff11cadca8
[   93.981698][ T8234]  </TASK>
[   94.442046][ T5895] IPVS: starting estimator thread 0...
[   94.491641][ T8266] netlink: 'syz.1.585': attribute type 11 has an invalid length.
[   94.507836][ T8267] netlink: 'syz.1.585': attribute type 11 has an invalid length.
[   94.559930][ T8263] IPVS: using max 62 ests per chain, 148800 per kthread
[   94.586092][ T8272] wireguard0: entered promiscuous mode
[   94.592162][ T8272] wireguard0: entered allmulticast mode
[   95.304332][ T8335] __nla_validate_parse: 28 callbacks suppressed
[   95.304344][ T8335] netlink: 60 bytes leftover after parsing attributes in process `syz.1.599'.
[   95.773894][ T8387] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.776973][ T8387] syzkaller0: entered promiscuous mode
[   95.778753][ T8387] syzkaller0: entered allmulticast mode
[   95.787212][ T8387] tipc: Resetting bearer <eth:syzkaller0>
[   95.802574][ T8386] tipc: Resetting bearer <eth:syzkaller0>
[   95.814377][ T8386] tipc: Disabling bearer <eth:syzkaller0>
[   95.919927][ T8399] netlink: 'syz.0.609': attribute type 10 has an invalid length.
[   95.922464][ T8399] netlink: 40 bytes leftover after parsing attributes in process `syz.0.609'.
[   95.928050][ T8399] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   96.012268][ T8406] ip6gre2: entered allmulticast mode
[   96.060291][ T8414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.613'.
[   96.142751][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.615'.
[   96.156478][ T8422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.615'.
[   96.165286][ T8422] netlink: 'syz.0.615': attribute type 13 has an invalid length.
[   96.188274][ T8422] netlink: 'syz.0.615': attribute type 12 has an invalid length.
[   96.368612][ T8444] vlan2: entered allmulticast mode
[   96.454333][ T8447] netlink: 'syz.1.621': attribute type 1 has an invalid length.
[   96.516320][ T8449] bond7: (slave gretap2): making interface the new active one
[   96.522425][ T8449] bond7: (slave gretap2): Enslaving as an active interface with an up link
[   96.533949][ T8449] syz.1.621 (8449) used greatest stack depth: 19088 bytes left
[   96.600001][ T8453] pim6reg1: entered promiscuous mode
[   96.602161][ T8453] pim6reg1: entered allmulticast mode
[   96.675536][ T8460] netlink: 'syz.2.623': attribute type 13 has an invalid length.
[   96.677923][ T8460] netlink: 'syz.2.623': attribute type 17 has an invalid length.
[   96.692946][ T8460] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   96.734004][ T8462] batadv_slave_0: entered promiscuous mode
[   96.738090][ T8461] batadv_slave_0: left promiscuous mode
[   96.765619][ T8467] netlink: 156 bytes leftover after parsing attributes in process `syz.2.625'.
[   96.769259][ T8467] netlink: 28 bytes leftover after parsing attributes in process `syz.2.625'.
[   96.813998][ T8473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.627'.
[   96.816797][ T8473] netlink: 'syz.2.627': attribute type 1 has an invalid length.
[   96.834110][ T8473] netlink: 'syz.2.627': attribute type 2 has an invalid length.
[   96.836795][ T8473] netlink: 80 bytes leftover after parsing attributes in process `syz.2.627'.
[   96.970598][ T8486] netlink: 28 bytes leftover after parsing attributes in process `syz.1.628'.
[   97.158546][ T8519] bond10: (slave gretap2): Releasing backup interface
[   97.301684][ T8533] 8021q: adding VLAN 0 to HW filter on device bond14
[   97.304121][ T8533] bridge0: port 2(bond14) entered blocking state
[   97.306292][ T8533] bridge0: port 2(bond14) entered disabled state
[   97.308356][ T8533] bond14: entered allmulticast mode
[   97.311558][ T8533] bond14: entered promiscuous mode
[   97.314053][ T8533] bridge0: port 2(bond14) entered blocking state
[   97.316164][ T8533] bridge0: port 2(bond14) entered listening state
[   97.410738][ T8547] netlink: 'syz.1.646': attribute type 1 has an invalid length.
[   97.498235][ T8559] netlink: 'syz.2.649': attribute type 1 has an invalid length.
[   97.553904][ T8559] 8021q: adding VLAN 0 to HW filter on device bond15
[   97.571836][ T8559] ipvlan0: entered allmulticast mode
[   97.573868][ T8559] bond15: entered allmulticast mode
[   97.598370][ T8559] bond15: (slave gretap3): making interface the new active one
[   97.607941][ T8559] gretap3: entered allmulticast mode
[   97.612415][ T8559] bond15: (slave gretap3): Enslaving as an active interface with an up link
[   97.618335][   T83] bridge0: port 2(bond14) entered disabled state
[   97.644874][ T8568] netlink: 'syz.0.651': attribute type 6 has an invalid length.
[   97.647313][ T8568] netlink: 'syz.0.651': attribute type 5 has an invalid length.
[   97.675631][   T13] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[   97.678614][   T13] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[   97.700284][    T9] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[   97.705874][ T8570] netlink: 'syz.2.652': attribute type 1 has an invalid length.
[   97.723885][ T8570] netlink: 'syz.2.652': attribute type 1 has an invalid length.
[   97.726334][ T8570] netlink: 'syz.2.652': attribute type 1 has an invalid length.
[   97.865186][ T8570] team0 (unregistering): Port device bond7 removed
[   98.033818][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.043925][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.057199][ T8589] ipt_ECN: cannot use operation on non-tcp rule
[   98.077974][ T8593] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.087048][ T8593] syzkaller0: entered promiscuous mode
[   98.096986][ T8593] syzkaller0: entered allmulticast mode
[   98.103035][ T8594] tipc: Resetting bearer <eth:syzkaller0>
[   98.198627][ T8603] netlink: 'syz.2.663': attribute type 4 has an invalid length.
[   98.207753][ T8603] : renamed from bond0 (while UP)
[   98.240928][ T8598] syzkaller1: entered promiscuous mode
[   98.243003][ T8598] syzkaller1: entered allmulticast mode
[   98.246023][ T8597] syzkaller1: left promiscuous mode
[   98.247723][ T8597] syzkaller1: left allmulticast mode
[   98.352127][ T8619] C: renamed from team_slave_0
[   98.356609][ T8619] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   98.380859][    T9] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[   98.408599][ T8623] No such timeout policy "syz1"
[   98.416269][ T8623] xt_CONNSECMARK: invalid mode: 254
[   98.426969][ T8623] ip6tnl2: entered promiscuous mode
[   98.428671][ T8623] ip6tnl2: entered allmulticast mode
[   98.699799][   T10] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[   98.768210][ T8637] 8021q: adding VLAN 0 to HW filter on device 
[   98.773200][ T8637] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   98.987642][ T8646] DRBG: could not allocate digest TFM handle: hmac(sha512)
[   99.011094][ T8644] vlan0: entered promiscuous mode
[   99.016581][ T8644] hsr_slave_1: entered promiscuous mode
[   99.023669][ T8644] vlan0: entered allmulticast mode
[   99.026912][ T8644] hsr_slave_1: entered allmulticast mode
[   99.080791][  T972] tipc: Node number set to 3227567625
[   99.192854][ T8660] pim6reg1: entered promiscuous mode
[   99.201163][ T8660] pim6reg1: entered allmulticast mode
[   99.502816][ T8687] bridge_slave_0: entered allmulticast mode
[   99.525650][ T8693] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[   99.688428][ T8707] dummy0: left allmulticast mode
[   99.697474][ T8707] dummy0: left promiscuous mode
[   99.702387][ T8707] bridge0: port 3(dummy0) entered disabled state
[   99.718807][ T8707] bridge_slave_0: left promiscuous mode
[   99.722745][ T8707] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.733575][ T8707] bridge_slave_1: left allmulticast mode
[   99.735391][ T8707] bridge_slave_1: left promiscuous mode
[   99.737179][ T8707] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.759514][ T8707] bond0: (slave bond_slave_0): Releasing backup interface
[   99.772688][ T8707] bond0: (slave bond_slave_1): Releasing backup interface
[   99.804125][ T8707] bond0: (slave wlan1): Releasing backup interface
[   99.815870][ T8707] bond3: (slave ip6gretap1): Releasing active interface
[   99.824392][ T8707] bond5: (slave gretap1): Releasing active interface
[   99.832880][ T8707] bond7: (slave gretap2): Releasing active interface
[   99.855562][ T8710] bond12: entered promiscuous mode
[   99.857373][ T8710] 8021q: adding VLAN 0 to HW filter on device bond12
[   99.920136][ T8710] bond12 (unregistering): Released all slaves
[  100.338671][ T8736] bond0: entered promiscuous mode
[  100.342998][ T8736] bond0: entered allmulticast mode
[  100.345079][ T8736] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.385751][ T8740] sctp: [Deprecated]: syz.2.695 (pid 8740) Use of struct sctp_assoc_value in delayed_ack socket option.
[  100.385751][ T8740] Use struct sctp_sack_info instead
[  100.391833][ T8740] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  100.775168][ T8760] __nla_validate_parse: 24 callbacks suppressed
[  100.775181][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.701'.
[  100.812794][ T8762] netlink: 16 bytes leftover after parsing attributes in process `syz.2.702'.
[  100.888068][ T8769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.704'.
[  101.047665][ T8781] bond0: left promiscuous mode
[  101.049350][ T8781] bond0: left allmulticast mode
[  101.087502][ T8786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.708'.
[  101.252953][ T8792] netlink: 20 bytes leftover after parsing attributes in process `syz.0.711'.
[  101.290278][ T8795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.712'.
[  101.485257][ T8806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.715'.
[  101.615644][ T8814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.718'.
[  101.632197][ T8814] macvtap1: entered promiscuous mode
[  101.633921][ T8814] bond0: entered promiscuous mode
[  101.635550][ T8814] macvtap1: entered allmulticast mode
[  101.637193][ T8814] bond0: entered allmulticast mode
[  101.650302][ T8814] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  101.670108][ T8814] bond0: left allmulticast mode
[  101.671693][ T8814] bond0: left promiscuous mode
[  101.707490][ T8816] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  101.711338][ T8816] batadv_slave_1: mtu less than device minimum
[  101.884607][ T8823] validate_nla: 9 callbacks suppressed
[  101.885922][ T8823] netlink: 'syz.2.722': attribute type 1 has an invalid length.
[  101.917346][ T8823] 8021q: adding VLAN 0 to HW filter on device bond16
[  101.984964][ T8833] netlink: 'syz.2.725': attribute type 1 has an invalid length.
[  102.010614][ T8833] 8021q: adding VLAN 0 to HW filter on device bond17
[  102.027220][ T8833] 8021q: adding VLAN 0 to HW filter on device bond17
[  102.029481][ T8833] bond17: (slave vxcan5): The slave device specified does not support setting the MAC address
[  102.033937][ T8833] bond17: (slave vxcan5): Error -95 calling set_mac_address
[  102.136758][ T8833] vti0: entered promiscuous mode
[  102.138280][ T8833] vti0: entered allmulticast mode
[  102.140642][ T8833] bond17: (slave vti0): The slave device specified does not support setting the MAC address
[  102.143855][ T8833] bond17: (slave vti0): Error -95 calling set_mac_address
[  102.199554][ T8855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.730'.
[  102.334296][ T5882] IPVS: starting estimator thread 0...
[  102.429710][ T8860] IPVS: using max 62 ests per chain, 148800 per kthread
[  102.469259][ T8863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.733'.
[  102.759235][ T8871] bond0 (unregistering): Released all slaves
[  103.135121][ T8891] netlink: 'syz.2.744': attribute type 4 has an invalid length.
[  103.167827][ T8891] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  103.196622][ T8898] Cannot find add_set index 0 as target
[  103.763367][ T8947] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  104.106565][ T8987] netlink: 'syz.1.767': attribute type 12 has an invalid length.
[  104.177912][ T8994] netlink: 'syz.1.767': attribute type 13 has an invalid length.
[  104.181138][ T8994] netlink: 'syz.1.767': attribute type 17 has an invalid length.
[  104.205103][ T8994] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  104.246599][ T8996] netlink: 'syz.0.770': attribute type 1 has an invalid length.
[  104.251299][ T8996] netlink: 'syz.0.770': attribute type 1 has an invalid length.
[  104.255860][ T8996] xt_hashlimit: max too large, truncated to 1048576
[  104.983400][ T9041] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.985978][ T9041] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.988423][ T9041] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.991688][ T9041] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.010076][ T9041] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  105.012887][ T9041] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  105.015389][ T9041] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  105.017971][ T9041] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  105.071285][ T9041] tipc: Resetting bearer <eth:syzkaller0>
[  105.149194][ T9047] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  105.558368][ T9074] xt_HMARK: proto mask must be zero with L3 mode
[  106.224134][ T9116] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  106.390575][ T9127] bridge7: entered allmulticast mode
[  106.502769][ T9139] bond_slave_1: entered promiscuous mode
[  106.531640][ T9141] __nla_validate_parse: 16 callbacks suppressed
[  106.531652][ T9141] netlink: 256 bytes leftover after parsing attributes in process `syz.2.797'.
[  106.559431][ T9144] xt_hashlimit: size too large, truncated to 1048576
[  106.564881][ T9141] 8021q: adding VLAN 0 to HW filter on device bond19
[  106.567580][ T9141] bridge0: port 3(bond19) entered blocking state
[  106.571628][ T9141] bridge0: port 3(bond19) entered disabled state
[  106.574417][ T9141] bond19: entered allmulticast mode
[  106.577668][ T9141] bond19: entered promiscuous mode
[  106.579719][ T9141] bridge0: port 3(bond19) entered blocking state
[  106.581767][ T9141] bridge0: port 3(bond19) entered listening state
[  106.594567][ T9141] netlink: 20 bytes leftover after parsing attributes in process `syz.2.797'.
[  106.597310][ T9141] netlink: 28 bytes leftover after parsing attributes in process `syz.2.797'.
[  106.612280][ T9147] netlink: 24 bytes leftover after parsing attributes in process `syz.1.798'.
[  106.616030][ T9147] netlink: 68 bytes leftover after parsing attributes in process `syz.1.798'.
[  106.710675][ T9149] IPVS: set_ctl: invalid protocol: 46 10.1.1.1:20004
[  106.752847][ T9154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.801'.
[  106.755734][ T9154] netlink: 52 bytes leftover after parsing attributes in process `syz.2.801'.
[  106.766859][ T9154] xt_hashlimit: size too large, truncated to 1048576
[  106.767406][ T9156] netlink: 'syz.1.802': attribute type 1 has an invalid length.
[  106.777749][ T9156] gretap3: entered promiscuous mode
[  106.916650][ T9162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.804'.
[  106.984925][ T9163] netlink: 36 bytes leftover after parsing attributes in process `syz.1.803'.
[  106.987852][ T9163] netlink: 16 bytes leftover after parsing attributes in process `syz.1.803'.
[  107.423441][ T3034] bridge0: port 3(bond19) entered disabled state
[  108.037667][ T9200] xt_TCPMSS: Only works on TCP SYN packets
[  108.051313][ T9199] netlink: 'syz.1.811': attribute type 11 has an invalid length.
[  108.196440][ T9210] _Z`Ԁ@: entered promiscuous mode
[  108.274626][ T9216] ip6gretap0: entered promiscuous mode
[  108.283980][ T9216] ip6gretap0: left promiscuous mode
[  108.320626][ T9218] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.326586][ T9225] syzkaller0: entered promiscuous mode
[  108.332246][ T9225] syzkaller0: entered allmulticast mode
[  108.355550][ T9225] tipc: Resetting bearer <eth:syzkaller0>
[  108.370351][ T9225] tipc: Disabling bearer <eth:syzkaller0>
[  108.686576][ T9250] netlink: 'syz.0.822': attribute type 1 has an invalid length.
[  108.724049][ T9250] bond0: entered promiscuous mode
[  108.726854][ T9250] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.933235][ T9264] hsr_slave_0: left promiscuous mode
[  109.083118][ T9272] bridge8: entered allmulticast mode
[  109.342295][ T9287] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  109.375918][ T9291] netlink: 'syz.2.834': attribute type 4 has an invalid length.
[  109.451196][ T9295] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.453854][ T9295] syzkaller0: entered promiscuous mode
[  109.455520][ T9295] syzkaller0: entered allmulticast mode
[  109.473503][ T9295] tipc: Resetting bearer <eth:syzkaller0>
[  109.476898][ T9294] tipc: Resetting bearer <eth:syzkaller0>
[  109.487585][ T9294] tipc: Disabling bearer <eth:syzkaller0>
[  109.741445][ T9314] xt_hashlimit: size too large, truncated to 1048576
[  109.936201][ T9320] bridge0: port 1(batadv0) entered disabled state
[  109.990121][ T9320] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  109.993008][ T9320] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  109.995655][ T9320] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  109.998264][ T9320] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  110.177509][ T9333] tc_dump_action: action bad kind
[  110.187124][ T9333] tc_dump_action: action bad kind
[  110.603690][ T9378] ip6gre0: entered promiscuous mode
[  110.605925][ T9378] ip6gre0: entered allmulticast mode
[  110.724664][ T9389] xt_l2tp: invalid flags combination: c
[  110.737272][ T9389] mac80211_hwsim hwsim11 wlan0: entered promiscuous mode
[  111.061927][ T9422] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  111.064756][ T9422] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  111.067413][ T9422] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  111.114221][ T9422] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  111.117445][ T9422] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  111.141288][ T9422] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  111.147446][ T9426] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.165488][ T9426] syzkaller0: entered promiscuous mode
[  111.167233][ T9426] syzkaller0: entered allmulticast mode
[  111.235389][ T9441] tipc: Resetting bearer <eth:syzkaller0>
[  111.248081][ T9425] tipc: Resetting bearer <eth:syzkaller0>
[  111.263732][ T9425] tipc: Disabling bearer <eth:syzkaller0>
[  111.301482][ T9449] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  111.316776][ T9451] netlink: 'syz.0.874': attribute type 1 has an invalid length.
[  111.353861][ T9451] 8021q: adding VLAN 0 to HW filter on device bond12
[  111.357634][ T9449] sch_fq: defrate 257 ignored.
[  111.372994][ T9451] bond12: (slave bridge11): making interface the new active one
[  111.376314][ T9451] bond12: (slave bridge11): Enslaving as an active interface with an up link
[  111.383705][ T9449] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  111.402340][ T9451] macvlan2: entered promiscuous mode
[  111.404135][ T9451] macvlan2: entered allmulticast mode
[  111.406212][ T9451] bond12: entered promiscuous mode
[  111.407838][ T9451] bridge11: entered promiscuous mode
[  111.410703][ T9451] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  111.413317][ T9451] bond12: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  111.418771][ T9451] bond12: left promiscuous mode
[  111.422395][ T9451] bridge11: left promiscuous mode
[  111.496046][ T9459] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  111.557717][ T9464] __nla_validate_parse: 23 callbacks suppressed
[  111.557729][ T9464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.878'.
[  111.670709][ T9474] netlink: 'syz.1.880': attribute type 4 has an invalid length.
[  111.707622][ T9480] netlink: 'syz.0.881': attribute type 1 has an invalid length.
[  111.776552][ T9472] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address
[  111.789430][ T9472] bond13: (slave vxcan3): Error -95 calling set_mac_address
[  111.853039][ T9472] macvlan2: entered promiscuous mode
[  111.854778][ T9472] macvlan2: entered allmulticast mode
[  111.862803][ T9472] bond13: entered promiscuous mode
[  111.867183][ T9487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.882'.
[  111.870331][ T9472] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  111.875094][ T9472] bond13: left promiscuous mode
[  111.910438][ T9491] netlink: 48 bytes leftover after parsing attributes in process `syz.1.883'.
[  111.962382][ T9495] mac80211_hwsim hwsim20 pimreg: entered allmulticast mode
[  112.251215][ T9514] netlink: 'syz.0.890': attribute type 1 has an invalid length.
[  112.295117][ T9514] 8021q: adding VLAN 0 to HW filter on device bond15
[  112.299072][ T9514] bond14: (slave bond15): making interface the new active one
[  112.302236][ T9514] bond14: (slave bond15): Enslaving as an active interface with an up link
[  112.311777][ T9514] netlink: 28 bytes leftover after parsing attributes in process `syz.0.890'.
[  112.318717][ T9514] 8021q: adding VLAN 0 to HW filter on device bond14
[  112.561795][ T9524] syzkaller0: entered promiscuous mode
[  112.563819][ T9524] syzkaller0: entered allmulticast mode
[  112.654505][ T9524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.893'.
[  112.717139][ T5839] Bluetooth: hci2: command tx timeout
[  112.795942][ T9530] delete_channel: no stack
[  112.877814][ T9533] : entered promiscuous mode
[  113.946246][ T9544] netlink: 44 bytes leftover after parsing attributes in process `syz.1.900'.
[  113.950762][ T9546] netlink: 40 bytes leftover after parsing attributes in process `syz.0.901'.
[  113.953777][ T9546] netlink: 40 bytes leftover after parsing attributes in process `syz.0.901'.
[  113.967202][ T9546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.901'.
[  114.073822][ T9550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.903'.
[  114.399091][ T9571] syzkaller0: entered promiscuous mode
[  114.401529][ T9571] syzkaller0: entered allmulticast mode
[  115.507724][ T9575] @: renamed from bond_slave_0
[  115.615142][ T9579] ipvlan1: entered promiscuous mode
[  115.617366][ T9579] 8021q: adding VLAN 0 to HW filter on device ipvlan1
[  115.622542][ T9579] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  115.638031][ T9583] wg1: entered promiscuous mode
[  115.639531][ T9583] wg1: entered allmulticast mode
[  115.749918][ T9592] xt_TCPMSS: Only works on TCP SYN packets
[  115.815303][ T9595] bridge0: port 1(ip6gretap2) entered blocking state
[  115.817650][ T9595] bridge0: port 1(ip6gretap2) entered disabled state
[  115.823537][ T9595] ip6gretap2: entered allmulticast mode
[  115.827310][ T9595] ip6gretap2: entered promiscuous mode
[  115.851118][ T9595] veth5: entered promiscuous mode
[  115.852933][ T9595] bridge0: port 2(veth5) entered blocking state
[  115.855130][ T9595] bridge0: port 2(veth5) entered disabled state
[  115.857206][ T9595] veth5: entered allmulticast mode
[  115.931601][ T9603] x_tables: duplicate entry at hook 1
[  116.037263][ T9601] _Z`Ԁ@: entered promiscuous mode
[  116.638697][ T9646] __nla_validate_parse: 9 callbacks suppressed
[  116.638709][ T9646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.929'.
[  116.779151][ T1203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.782776][ T1203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.302863][ T9650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  117.317778][ T9659] netlink: 16 bytes leftover after parsing attributes in process `syz.2.931'.
[  117.323047][ T9659] netlink: 20 bytes leftover after parsing attributes in process `syz.2.931'.
[  117.333389][ T9659] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.336279][ T9659] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.339095][ T9659] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.343501][ T9659] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.350096][ T9659] geneve1: entered allmulticast mode
[  117.665707][ T9686] netlink: 'syz.1.940': attribute type 1 has an invalid length.
[  117.668470][ T9686] netlink: 224 bytes leftover after parsing attributes in process `syz.1.940'.
[  117.678975][ T9690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.938'.
[  118.432547][ T9692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.941'.
[  118.828177][ T9702] netlink: 'syz.2.944': attribute type 1 has an invalid length.
[  118.838696][ T9702] netlink: 28 bytes leftover after parsing attributes in process `syz.2.944'.
[  118.850773][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.944'.
[  118.878139][ T9710] netlink: 'syz.0.946': attribute type 11 has an invalid length.
[  118.885465][ T9702] netlink: 'syz.2.944': attribute type 10 has an invalid length.
[  119.099093][ T9728] netlink: 32 bytes leftover after parsing attributes in process `syz.1.951'.
[  119.131094][ T9730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.952'.
[  119.138483][ T9731] netlink: 'syz.0.952': attribute type 20 has an invalid length.
[  119.144484][ T9731] netlink: 'syz.0.952': attribute type 21 has an invalid length.
[  119.147698][ T9730] netlink: 'syz.0.952': attribute type 20 has an invalid length.
[  119.152247][ T9730] netlink: 'syz.0.952': attribute type 21 has an invalid length.
[  119.155376][ T9733] x_tables: duplicate underflow at hook 2
[  119.320228][ T9745] netem: incorrect ge model size
[  119.322138][ T9745] netem: change failed
[  119.577623][ T9760] netlink: 'syz.0.959': attribute type 7 has an invalid length.
[  119.589953][ T9760] netlink: 'syz.0.959': attribute type 8 has an invalid length.
[  119.600420][ T9760] gretap0: entered promiscuous mode
[  119.603868][ T9760] gretap0: left promiscuous mode
[  119.837149][ T9772] sock: sock_set_timeout: `syz.0.963' (pid 9772) tries to set negative timeout
[  119.860247][ T9774] netlink: 'syz.2.964': attribute type 1 has an invalid length.
[  119.880970][ T9774] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  119.883905][ T9774] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  119.886619][ T9774] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  119.889228][ T9774] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  119.896320][ T9774] bond20: (slave geneve2): making interface the new active one
[  119.899199][ T9774] bond20: (slave geneve2): Enslaving as an active interface with an up link
[  119.912401][ T9774] 8021q: adding VLAN 0 to HW filter on device bond20
[  120.118892][ T9795] xfrm1: entered promiscuous mode
[  120.122888][ T9795] xfrm1: entered allmulticast mode
[  120.616403][ T9841] syzkaller0: entered promiscuous mode
[  120.618270][ T9841] syzkaller0: entered allmulticast mode
[  121.848331][ T9877] wireguard1: entered promiscuous mode
[  121.850486][ T9877] wireguard1: entered allmulticast mode
[  121.899269][ T9883] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  121.904195][ T9883] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  121.906750][ T9883] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  122.555822][ T9927] __nla_validate_parse: 15 callbacks suppressed
[  122.555833][ T9927] netlink: 24 bytes leftover after parsing attributes in process `syz.2.993'.
[  122.607551][ T9933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.994'.
[  122.615044][ T9933] netlink: 36 bytes leftover after parsing attributes in process `syz.0.994'.
[  122.617923][ T9933] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  122.682703][ T9941] netlink: 36 bytes leftover after parsing attributes in process `syz.1.998'.
[  122.685861][ T9941] validate_nla: 2 callbacks suppressed
[  122.685868][ T9941] netlink: 'syz.1.998': attribute type 29 has an invalid length.
[  122.738023][ T9944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.997'.
[  122.752184][ T9951] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  122.812568][ T9954] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1000'.
[  122.827797][ T9958] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  122.830906][ T9958] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  122.840290][ T9958] ip6gre2: left allmulticast mode
[  122.842688][ T9958] mac80211_hwsim hwsim20 pimreg: left allmulticast mode
[  122.845931][ T9958] bond0: left promiscuous mode
[  122.865110][ T9954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1000'.
[  123.006785][ T9964] netlink: 'syz.0.1001': attribute type 1 has an invalid length.
[  123.048541][ T9971] netlink: 'syz.2.1005': attribute type 1 has an invalid length.
[  123.066243][ T9971] bond22 (unregistering): Released all slaves
[  123.104502][ T9975] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1005'.
[  123.312996][ T9981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1007'.
[  123.318473][ T9981] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1007'.
[  123.341939][ T1116] block nbd1: Possible stuck request ffff8880228d8000: control (read@0,1024B). Runtime 30 seconds
[  123.345619][ T1116] block nbd1: Possible stuck request ffff8880228d8200: control (read@1024,1024B). Runtime 30 seconds
[  123.348780][ T1116] block nbd1: Possible stuck request ffff8880228d8400: control (read@2048,1024B). Runtime 30 seconds
[  123.352361][ T1116] block nbd1: Possible stuck request ffff8880228d8600: control (read@3072,1024B). Runtime 30 seconds
[  123.548629][ T9991] batadv1: entered promiscuous mode
[  124.252848][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  124.260018][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  124.263653][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  124.266977][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  124.269436][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  124.446412][T10041] tipc: Resetting bearer <eth:syzkaller0>
[  124.469070][T10032] chnl_net:caif_netlink_parms(): no params data found
[  124.474321][    T9] IPVS: starting estimator thread 0...
[  124.569193][T10032] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.579977][T10032] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.582215][T10032] bridge_slave_0: entered allmulticast mode
[  124.584845][T10032] bridge_slave_0: entered promiscuous mode
[  124.587400][T10043] IPVS: using max 62 ests per chain, 148800 per kthread
[  124.594447][T10032] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.596608][T10032] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.601428][T10032] bridge_slave_1: entered allmulticast mode
[  124.605628][T10032] bridge_slave_1: entered promiscuous mode
[  124.630690][T10032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  124.637645][T10047] pim6reg1: entered promiscuous mode
[  124.640910][T10047] pim6reg1: entered allmulticast mode
[  124.645569][T10032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  124.698634][T10032] team0: Port device team_slave_0 added
[  124.703750][T10032] team0: Port device team_slave_1 added
[  124.814152][T10032] batman_adv: batadv0: Adding interface: batadv_slave_0
[  124.817705][T10032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.825903][T10032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  124.833246][T10032] batman_adv: batadv0: Adding interface: batadv_slave_1
[  124.837803][T10032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.854759][T10032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  124.867364][T10054] geneve3: entered promiscuous mode
[  124.877582][T10054] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  124.903479][T10032] hsr_slave_0: entered promiscuous mode
[  124.906866][T10032] hsr_slave_1: entered promiscuous mode
[  125.271646][T10066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  125.341900][T10032] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  125.346462][T10032] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  125.351416][T10032] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  125.355381][T10032] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  125.402263][T10032] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.416246][T10032] 8021q: adding VLAN 0 to HW filter on device team0
[  125.422327][   T83] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.424759][   T83] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.435597][   T83] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.438074][   T83] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.537391][T10032] 8021q: adding VLAN 0 to HW filter on device batadv0
[  125.567665][T10032] veth0_vlan: entered promiscuous mode
[  125.575680][T10032] veth1_vlan: entered promiscuous mode
[  125.597881][T10032] veth0_macvtap: entered promiscuous mode
[  125.604417][T10032] veth1_macvtap: entered promiscuous mode
[  125.614624][T10032] batman_adv: batadv0: Interface activated: batadv_slave_0
[  125.621461][T10032] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.626441][T10032] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.629010][T10032] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.632363][T10032] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.637541][T10032] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.686134][ T3034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.688459][ T3034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.708836][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.712227][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.952571][T10092] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (47)
[  126.058625][T10096] gretap0: left promiscuous mode
[  126.075520][T10096] 8021q: adding VLAN 0 to HW filter on device 
[  126.079505][T10096] bridge0: port 1(batadv0) entered blocking state
[  126.081557][T10096] bridge0: port 1(batadv0) entered listening state
[  126.084447][T10096] 8021q: adding VLAN 0 to HW filter on device batadv0
[  126.093146][ T1203] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  126.097407][T10096] bridge_slave_0: left allmulticast mode
[  126.120194][T10096] veth1_macvtap: left promiscuous mode
[  126.122478][T10096] veth1_macvtap: entered promiscuous mode
[  126.125054][T10096] veth0_macvtap: left promiscuous mode
[  126.127615][T10096] veth0_macvtap: entered promiscuous mode
[  126.132212][T10096] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  126.135516][T10096] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  126.143432][T10096] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  126.146562][T10096] batman_adv: batadv0: Interface activated: ip6gretap2
[  126.152319][T10096] 8021q: adding VLAN 0 to HW filter on device bond1
[  126.901221][T10096] syz.2.1032: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  126.920795][T10096] CPU: 0 UID: 0 PID: 10096 Comm: syz.2.1032 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  126.920810][T10096] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  126.920816][T10096] Call Trace:
[  126.920821][T10096]  <TASK>
[  126.920826][T10096]  dump_stack_lvl+0x189/0x250
[  126.920841][T10096]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  126.920855][T10096]  ? __pfx_dump_stack_lvl+0x10/0x10
[  126.920865][T10096]  ? __pfx__printk+0x10/0x10
[  126.920876][T10096]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  126.920888][T10096]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  126.920902][T10096]  warn_alloc+0x214/0x310
[  126.920917][T10096]  ? __pfx_warn_alloc+0x10/0x10
[  126.920932][T10096]  ? __get_vm_area_node+0x28f/0x300
[  126.920942][T10096]  ? pfifo_fast_init+0x363/0x6b0
[  126.920955][T10096]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  126.920966][T10096]  ? trace_mm_page_alloc+0x3e/0x150
[  126.921011][T10096]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  126.921024][T10096]  ? rcu_is_watching+0x15/0xb0
[  126.921034][T10096]  ? pfifo_fast_init+0x363/0x6b0
[  126.921042][T10096]  ? pfifo_fast_init+0x363/0x6b0
[  126.921050][T10096]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  126.921062][T10096]  ? pfifo_fast_init+0x363/0x6b0
[  126.921074][T10096]  pfifo_fast_init+0x363/0x6b0
[  126.921085][T10096]  qdisc_create_dflt+0x13b/0x4e0
[  126.921097][T10096]  mq_init+0x2dc/0x660
[  126.921113][T10096]  ? __pfx_mq_init+0x10/0x10
[  126.921124][T10096]  ? qdisc_alloc+0x7a1/0xaa0
[  126.921137][T10096]  qdisc_create_dflt+0x13b/0x4e0
[  126.921146][T10096]  ? dev_activate+0x1a9/0x1150
[  126.921157][T10096]  dev_activate+0x1ce/0x1150
[  126.921172][T10096]  __dev_open+0x69c/0x880
[  126.921184][T10096]  ? __pfx___dev_open+0x10/0x10
[  126.921198][T10096]  __dev_change_flags+0x1ea/0x6d0
[  126.921211][T10096]  ? __pfx___dev_change_flags+0x10/0x10
[  126.921220][T10096]  ? netif_state_change+0x29e/0x3a0
[  126.921228][T10096]  ? lockdep_rtnl_is_held+0x26/0x40
[  126.921240][T10096]  ? __pfx_netif_state_change+0x10/0x10
[  126.921252][T10096]  netif_change_flags+0x88/0x1a0
[  126.921264][T10096]  do_setlink+0xc55/0x41c0
[  126.921275][T10096]  ? __kernel_text_address+0xd/0x40
[  126.921284][T10096]  ? arch_stack_walk+0xfc/0x150
[  126.921297][T10096]  ? __pfx_do_setlink+0x10/0x10
[  126.921315][T10096]  ? __lock_acquire+0xab9/0xd20
[  126.921327][T10096]  ? __mutex_trylock_common+0x153/0x260
[  126.921339][T10096]  ? __pfx___mutex_trylock_common+0x10/0x10
[  126.921351][T10096]  ? rcu_is_watching+0x15/0xb0
[  126.921360][T10096]  ? trace_contention_end+0x39/0x120
[  126.921370][T10096]  ? __mutex_lock+0x330/0xe80
[  126.921381][T10096]  ? __pfx_aa_get_newest_label+0x10/0x10
[  126.921396][T10096]  ? rtnl_newlink+0x8db/0x1c70
[  126.921404][T10096]  ? rcu_is_watching+0x15/0xb0
[  126.921414][T10096]  ? __pfx___mutex_lock+0x10/0x10
[  126.921426][T10096]  ? ns_capable+0x8a/0xf0
[  126.921436][T10096]  ? rtnl_link_get_net_capable+0x16a/0x350
[  126.921447][T10096]  rtnl_newlink+0x149f/0x1c70
[  126.921462][T10096]  ? __pfx_rtnl_newlink+0x10/0x10
[  126.921472][T10096]  ? __free_frozen_pages+0x76a/0xe70
[  126.921484][T10096]  ? __lock_acquire+0xab9/0xd20
[  126.921498][T10096]  ? __lock_acquire+0xab9/0xd20
[  126.921515][T10096]  ? is_bpf_text_address+0x26/0x2b0
[  126.921527][T10096]  ? is_bpf_text_address+0x292/0x2b0
[  126.921535][T10096]  ? is_bpf_text_address+0x26/0x2b0
[  126.921545][T10096]  ? kernel_text_address+0xa5/0xe0
[  126.921558][T10096]  ? __lock_acquire+0xab9/0xd20
[  126.921582][T10096]  ? __pfx_rtnl_newlink+0x10/0x10
[  126.921590][T10096]  rtnetlink_rcv_msg+0x7cf/0xb70
[  126.921601][T10096]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  126.921609][T10096]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  126.921626][T10096]  netlink_rcv_skb+0x208/0x470
[  126.921637][T10096]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  126.921646][T10096]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  126.921662][T10096]  ? netlink_deliver_tap+0x2e/0x1b0
[  126.921671][T10096]  ? netlink_deliver_tap+0x2e/0x1b0
[  126.921683][T10096]  netlink_unicast+0x75b/0x8d0
[  126.921697][T10096]  netlink_sendmsg+0x805/0xb30
[  126.921712][T10096]  ? __pfx_netlink_sendmsg+0x10/0x10
[  126.921723][T10096]  ? aa_sock_msg_perm+0x94/0x160
[  126.921736][T10096]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  126.921743][T10096]  ? __pfx_netlink_sendmsg+0x10/0x10
[  126.921754][T10096]  __sock_sendmsg+0x21c/0x270
[  126.921763][T10096]  ____sys_sendmsg+0x505/0x830
[  126.921776][T10096]  ? __pfx_____sys_sendmsg+0x10/0x10
[  126.921791][T10096]  ? import_iovec+0x74/0xa0
[  126.921803][T10096]  ___sys_sendmsg+0x21f/0x2a0
[  126.921815][T10096]  ? __pfx____sys_sendmsg+0x10/0x10
[  126.921855][T10096]  ? __fget_files+0x2a/0x420
[  126.921867][T10096]  ? __fget_files+0x3a0/0x420
[  126.921882][T10096]  __x64_sys_sendmsg+0x19b/0x260
[  126.921894][T10096]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  126.921913][T10096]  ? do_syscall_64+0xbe/0x3b0
[  126.921923][T10096]  do_syscall_64+0xfa/0x3b0
[  126.921931][T10096]  ? lockdep_hardirqs_on+0x9c/0x150
[  126.921938][T10096]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.921946][T10096]  ? exc_page_fault+0x9f/0xf0
[  126.921959][T10096]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.921967][T10096] RIP: 0033:0x7fbe15f8e929
[  126.921996][T10096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  126.922003][T10096] RSP: 002b:00007fbe16df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  126.922013][T10096] RAX: ffffffffffffffda RBX: 00007fbe161b5fa0 RCX: 00007fbe15f8e929
[  126.922019][T10096] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004
[  126.922024][T10096] RBP: 00007fbe16010b39 R08: 0000000000000000 R09: 0000000000000000
[  126.922029][T10096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  126.922034][T10096] R13: 0000000000000000 R14: 00007fbe161b5fa0 R15: 00007ffe41b03a38
[  126.922047][T10096]  </TASK>
[  126.923234][T10096] Mem-Info:
[  127.096935][T10096] active_anon:14033 inactive_anon:52 isolated_anon:17
[  127.096935][T10096]  active_file:1156 inactive_file:25734 isolated_file:17
[  127.096935][T10096]  unevictable:1768 dirty:58 writeback:0
[  127.096935][T10096]  slab_reclaimable:10205 slab_unreclaimable:278152
[  127.096935][T10096]  mapped:18292 shmem:2468 pagetables:918
[  127.096935][T10096]  sec_pagetables:0 bounce:0
[  127.096935][T10096]  kernel_misc_reclaimable:0
[  127.096935][T10096]  free:62841 free_pcp:901 free_cma:0
[  127.110541][T10096] Node 0 active_anon:14700kB inactive_anon:0kB active_file:3944kB inactive_file:100108kB unevictable:3536kB isolated(anon):68kB isolated(file):68kB mapped:44348kB dirty:84kB writeback:0kB shmem:4964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8064kB pagetables:2028kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  127.120269][T10096] Node 1 active_anon:41432kB inactive_anon:208kB active_file:680kB inactive_file:2828kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28820kB dirty:148kB writeback:0kB shmem:4908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5244kB pagetables:1644kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  127.130007][T10096] Node 0 DMA free:5076kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  127.138272][T10096] lowmem_reserve[]: 0 812 812 812 812
[  127.140046][T10096] Node 0 DMA32 free:130952kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14700kB inactive_anon:0kB active_file:3944kB inactive_file:100108kB unevictable:3536kB writepending:84kB present:1556484kB managed:831900kB mlocked:0kB bounce:0kB free_pcp:1148kB local_pcp:1136kB free_cma:0kB
[  127.149928][T10096] lowmem_reserve[]: 0 0 0 0 0
[  127.151417][T10096] Node 1 DMA32 free:24440kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:4096KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  127.160495][T10096] lowmem_reserve[]: 0 0 854 854 854
[  127.162159][T10096] Node 1 Normal free:90896kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41432kB inactive_anon:208kB active_file:680kB inactive_file:2828kB unevictable:3536kB writepending:148kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:2484kB local_pcp:976kB free_cma:0kB
[  127.171600][T10096] lowmem_reserve[]: 0 0 0 0 0
[  127.173109][T10096] Node 0 DMA: 1*4kB (U) 2*8kB (U) 2*16kB (U) 3*32kB (U) 3*64kB (U) 3*128kB (U) 3*256kB (U) 1*512kB (U) 1*1024kB (U) 1*2048kB (M) 0*4096kB = 5076kB
[  127.177685][T10096] Node 0 DMA32: 1150*4kB (UM) 210*8kB (UME) 158*16kB (UME) 362*32kB (UME) 222*64kB (UME) 141*128kB (UM) 71*256kB (UME) 49*512kB (UM) 28*1024kB (UM) 1*2048kB (M) 1*4096kB (M) = 130728kB
[  127.183289][T10096] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 4*4096kB (M) = 24440kB
[  127.187904][T10096] Node 1 Normal: 618*4kB (UME) 545*8kB (UME) 254*16kB (UME) 587*32kB (UME) 228*64kB (UME) 82*128kB (UME) 15*256kB (UME) 13*512kB (UM) 17*1024kB (UM) 2*2048kB (M) 1*4096kB (M) = 90864kB
[  127.193439][T10096] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  127.196174][T10096] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  127.198944][T10096] 29407 total pagecache pages
[  127.200591][T10096] 0 pages in swap cache
[  127.201865][T10096] Free swap  = 124996kB
[  127.203109][T10096] Total swap = 124996kB
[  127.204340][T10096] 786301 pages RAM
[  127.205470][T10096] 0 pages HighMem/MovableOnly
[  127.207095][T10096] 241078 pages reserved
[  127.208320][T10096] 0 pages cma reserved
[  127.624224][T10096] rose0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  127.635606][T10096] 8021q: adding VLAN 0 to HW filter on device bond2
[  127.638846][T10096] gretap1: left promiscuous mode
[  127.641880][T10096] 8021q: adding VLAN 0 to HW filter on device bond3
[  127.645134][T10096] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  127.647506][T10096] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  127.650131][T10096] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  127.652542][T10096] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  127.660770][T10096] 8021q: adding VLAN 0 to HW filter on device bond4
[  127.666196][T10096] 8021q: adding VLAN 0 to HW filter on device bond5
[  127.670716][T10096] 8021q: adding VLAN 0 to HW filter on device bond6
[  127.673399][T10096] 8021q: adding VLAN 0 to HW filter on device bond7
[  127.680625][T10096] ip6gre1: left allmulticast mode
[  127.685804][T10096] 8021q: adding VLAN 0 to HW filter on device bond8
[  127.699068][T10096] 8021q: adding VLAN 0 to HW filter on device bond9
[  127.703408][T10096] 8021q: adding VLAN 0 to HW filter on device bond10
[  127.706963][T10096] gretap0: entered promiscuous mode
[  127.709296][T10096] 8021q: adding VLAN 0 to HW filter on device bond11
[  127.716166][T10096] 8021q: adding VLAN 0 to HW filter on device bond12
[  127.719197][T10096] 8021q: adding VLAN 0 to HW filter on device bond13
[  127.722606][T10096] 8021q: adding VLAN 0 to HW filter on device bond14
[  127.726037][T10096] 8021q: adding VLAN 0 to HW filter on device bond15
[  127.728724][T10096] ipvlan0: left allmulticast mode
[  127.730453][T10096] bond15: left allmulticast mode
[  127.731940][T10096] gretap3: left allmulticast mode
[  127.734257][T10096] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  127.737509][T10096] A link change request failed with some changes committed already. Interface pimreg may have been left with an inconsistent configuration, please check.
[  127.759105][T10096] syz.2.1032 (10096) used greatest stack depth: 17384 bytes left
[  127.937143][T10121] __nla_validate_parse: 79 callbacks suppressed
[  127.937157][T10121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1038'.
[  127.944894][T10121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1038'.
[  127.971191][T10121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1038'.
[  127.974079][T10121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1038'.
[  127.977040][T10121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1038'.
[  128.064260][   T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  128.066660][   T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  128.068501][T10131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1041'.
[  128.085415][T10131] 8021q: adding VLAN 0 to HW filter on device bond10
[  128.090931][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  128.099512][T10131] macvlan2: entered promiscuous mode
[  128.109749][T10131] macvlan2: entered allmulticast mode
[  128.112155][T10131] bond10: (slave macvlan2): Opening slave failed
[  128.189952][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.319424][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.372089][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.469254][T10150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1045'.
[  128.476045][T10150] netlink: 'syz.1.1045': attribute type 10 has an invalid length.
[  128.480305][T10150] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  128.483645][T10150] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1045'.
[  128.486491][T10150] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  128.488873][T10150] IPv6: NLM_F_CREATE should be set when creating new route
[  128.522809][T10152] netlink: 'syz.1.1046': attribute type 1 has an invalid length.
[  128.554395][T10152] 8021q: adding VLAN 0 to HW filter on device bond11
[  128.569213][T10152] 8021q: adding VLAN 0 to HW filter on device bond11
[  128.591667][T10152] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address
[  128.595924][T10152] bond11: (slave vxcan1): Error -95 calling set_mac_address
[  128.624470][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  128.629201][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  128.633868][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  128.637722][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  128.644321][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  128.722265][T10169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1050'.
[  128.725629][T10169] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1050'.
[  128.825700][ T4844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.828098][ T4844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.855030][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.884941][T10162] chnl_net:caif_netlink_parms(): no params data found
[  128.950778][    T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  129.026090][    T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  129.079103][T10162] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.081978][T10162] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.084297][T10162] bridge_slave_0: entered allmulticast mode
[  129.087674][T10162] bridge_slave_0: entered promiscuous mode
[  129.108985][   T55] block nbd0: Receive control failed (result -32)
[  129.123701][T10162] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.133557][T10162] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.135834][T10162] bridge_slave_1: entered allmulticast mode
[  129.150571][T10162] bridge_slave_1: entered promiscuous mode
[  129.272888][T10162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  129.282519][T10205] pim6reg: entered allmulticast mode
[  129.292693][T10210] pim6reg: left allmulticast mode
[  129.316766][T10162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  129.325314][   T12] bridge_slave_1: left allmulticast mode
[  129.327134][   T12] bridge_slave_1: left promiscuous mode
[  129.330046][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.337099][   T12] bridge_slave_0: left allmulticast mode
[  129.338897][   T12] bridge_slave_0: left promiscuous mode
[  129.344775][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.622373][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  129.627911][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  129.632449][   T12] bond0 (unregistering): Released all slaves
[  129.721977][T10219] ip6gre0: left promiscuous mode
[  129.723601][T10219] ip6gre0: left allmulticast mode
[  129.733243][T10219] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.751959][T10219] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  129.776899][T10162] team0: Port device team_slave_0 added
[  129.840601][T10162] team0: Port device team_slave_1 added
[  129.947206][T10162] batman_adv: batadv0: Adding interface: batadv_slave_0
[  129.949351][T10162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.968010][T10162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  129.978160][T10162] batman_adv: batadv0: Adding interface: batadv_slave_1
[  129.988377][T10162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.996907][T10162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  130.137031][   T12] hsr_slave_0: left promiscuous mode
[  130.139108][   T12] hsr_slave_1: left promiscuous mode
[  130.146732][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  130.149193][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  130.154641][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  130.156886][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  130.179081][   T12] veth1_macvtap: left promiscuous mode
[  130.183255][   T12] veth0_macvtap: left promiscuous mode
[  130.185019][   T12] veth1_vlan: left promiscuous mode
[  130.186834][   T12] veth0_vlan: left promiscuous mode
[  130.529016][   T12] team0 (unregistering): Port device team_slave_1 removed
[  130.556771][   T12] team0 (unregistering): Port device team_slave_0 removed
[  130.700650][ T5839] Bluetooth: hci1: command tx timeout
[  130.837835][T10162] hsr_slave_0: entered promiscuous mode
[  130.840364][T10162] hsr_slave_1: entered promiscuous mode
[  130.914988][T10255] openvswitch: netlink: Message has 20 unknown bytes.
[  130.928979][T10255] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.050912][T10260] netlink: 'syz.2.1068': attribute type 10 has an invalid length.
[  131.479177][T10282] syzkaller1: entered promiscuous mode
[  131.482916][T10282] syzkaller1: entered allmulticast mode
[  131.493478][T10285] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  131.661519][ T1203] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  131.680046][T10162] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  131.692752][T10162] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  131.701960][T10162] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  131.706109][T10162] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  131.829202][T10162] 8021q: adding VLAN 0 to HW filter on device bond0
[  131.878880][T10162] 8021q: adding VLAN 0 to HW filter on device team0
[  131.906074][   T83] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.908346][   T83] bridge0: port 1(bridge_slave_0) entered forwarding state
[  131.919200][   T83] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.921516][   T83] bridge0: port 2(bridge_slave_1) entered forwarding state
[  131.988399][T10162] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  131.991833][T10162] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  132.188673][T10330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  132.250289][T10162] 8021q: adding VLAN 0 to HW filter on device batadv0
[  132.302350][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  132.346056][T10162] veth0_vlan: entered promiscuous mode
[  132.355938][T10162] veth1_vlan: entered promiscuous mode
[  132.405336][T10162] veth0_macvtap: entered promiscuous mode
[  132.419300][T10162] veth1_macvtap: entered promiscuous mode
[  132.453454][T10347] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  132.479392][T10347] bond22: entered promiscuous mode
[  132.482313][T10347] bond22: entered allmulticast mode
[  132.484121][T10347] 8021q: adding VLAN 0 to HW filter on device bond22
[  132.488533][T10162] batman_adv: batadv0: Interface activated: batadv_slave_0
[  132.596737][T10162] batman_adv: batadv0: Interface activated: batadv_slave_1
[  132.605808][T10162] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  132.608669][T10162] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  132.613063][T10162] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  132.615931][T10162] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.727252][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.730894][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.759130][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.762170][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.780087][ T5839] Bluetooth: hci1: command tx timeout
[  132.827858][T10368] erspan0: entered promiscuous mode
[  132.835800][T10368] batman_adv: batadv0: Adding interface: macvlan0
[  132.837993][T10368] batman_adv: batadv0: Interface activated: macvlan0
[  133.367278][T10391] netlink: 'syz.1.1091': attribute type 10 has an invalid length.
[  133.369874][T10391] __nla_validate_parse: 12 callbacks suppressed
[  133.369883][T10391] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1091'.
[  133.374655][T10391] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  133.563447][T10403] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1094'.
[  133.567913][T10403] netlink: 'syz.1.1094': attribute type 4 has an invalid length.
[  133.619342][T10407] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1095'.
[  133.685669][T10416] syzkaller1: entered promiscuous mode
[  133.687412][T10416] syzkaller1: entered allmulticast mode
[  133.828337][T10424] netlink: 'syz.2.1101': attribute type 10 has an invalid length.
[  133.836273][T10424] wlan1: mtu greater than device maximum
[  133.838030][T10424] : (slave wlan1): Error -22 calling dev_set_mtu
[  133.881517][T10426] netlink: 'syz.2.1102': attribute type 1 has an invalid length.
[  133.921215][T10426] 8021q: adding VLAN 0 to HW filter on device bond24
[  133.936351][T10426] 8021q: adding VLAN 0 to HW filter on device bond24
[  133.940109][T10426] bond24: (slave vxcan1): The slave device specified does not support setting the MAC address
[  133.944004][T10426] bond24: (slave vxcan1): Error -95 calling set_mac_address
[  133.984608][T10432] bond24: entered promiscuous mode
[  133.987373][T10432] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.1102'.
[  133.992823][T10432] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.1102'.
[  134.182852][ T9031] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.461311][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  134.464814][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  134.468148][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  134.471775][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  134.475175][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  134.640200][T10441] chnl_net:caif_netlink_parms(): no params data found
[  134.695630][T10441] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.697967][T10441] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.701731][T10441] bridge_slave_0: entered allmulticast mode
[  134.704655][T10441] bridge_slave_0: entered promiscuous mode
[  134.708784][T10441] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.711681][T10441] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.714021][T10441] bridge_slave_1: entered allmulticast mode
[  134.716720][T10441] bridge_slave_1: entered promiscuous mode
[  134.740083][T10441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  134.744905][T10441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  134.774825][T10441] team0: Port device team_slave_0 added
[  134.778486][T10441] team0: Port device team_slave_1 added
[  134.818392][T10441] batman_adv: batadv0: Adding interface: batadv_slave_0
[  134.821005][T10441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.828442][T10441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  134.833020][T10441] batman_adv: batadv0: Adding interface: batadv_slave_1
[  134.835175][T10441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.844326][T10441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  134.877456][T10441] hsr_slave_0: entered promiscuous mode
[  134.879872][T10441] hsr_slave_1: entered promiscuous mode
[  134.882150][T10441] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  134.884556][T10441] Cannot create hsr debugfs directory
[  135.070074][T10457] xt_CT: No such helper "snmp"
[  135.456824][T10480] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1110'.
[  135.483437][T10485] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1111'.
[  135.488420][T10485] netlink: zone id is out of range
[  135.490531][T10485] netlink: zone id is out of range
[  135.494263][T10485] netlink: zone id is out of range
[  135.495820][T10485] netlink: zone id is out of range
[  135.508022][T10485] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1111'.
[  135.818697][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1120'.
[  135.859004][ T9031] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.047220][ T9031] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.098514][ T9031] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.253017][ T9031] bridge_slave_1: left allmulticast mode
[  136.254855][ T9031] bridge_slave_1: left promiscuous mode
[  136.257334][ T9031] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.263170][ T9031] bridge_slave_0: left allmulticast mode
[  136.264929][ T9031] bridge_slave_0: left promiscuous mode
[  136.266784][ T9031] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.551959][ T5839] Bluetooth: hci1: command tx timeout
[  136.701090][   T83] net_ratelimit: 16 callbacks suppressed
[  136.701104][   T83] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  136.724615][ T9031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  136.742068][ T9031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  136.746920][ T9031] bond0 (unregistering): Released all slaves
[  136.751798][T10534] netlink: 'syz.2.1123': attribute type 1 has an invalid length.
[  136.862771][T10534] 8021q: adding VLAN 0 to HW filter on device bond26
[  136.910886][T10532] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1123'.
[  137.155141][ T9031] hsr_slave_0: left promiscuous mode
[  137.159751][ T9031] hsr_slave_1: left promiscuous mode
[  137.162187][ T9031] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.164517][ T9031] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.171534][ T9031] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.173955][ T9031] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.193438][ T9031] veth1_macvtap: left promiscuous mode
[  137.195242][ T9031] veth0_macvtap: left promiscuous mode
[  137.197359][ T9031] veth1_vlan: left promiscuous mode
[  137.200339][ T9031] veth0_vlan: left promiscuous mode
[  137.508966][ T9031] team0 (unregistering): Port device team_slave_1 removed
[  137.534107][ T9031] team0 (unregistering): Port device team_slave_0 removed
[  137.807219][T10550] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  137.824498][T10441] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  137.833306][T10441] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  137.845840][T10441] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  137.853153][T10441] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  137.880447][T10543] delete_channel: no stack
[  137.975715][T10441] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.994192][T10441] 8021q: adding VLAN 0 to HW filter on device team0
[  138.032188][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.034409][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[  138.053325][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.055594][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[  138.145957][T10575] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  138.148460][T10575] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  138.164738][T10575] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  138.167310][T10575] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  138.170570][T10575] geneve2: entered allmulticast mode
[  138.485741][T10593] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.488466][T10595] __nla_validate_parse: 5 callbacks suppressed
[  138.488474][T10595] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1131'.
[  138.498494][T10584] syzkaller0: entered promiscuous mode
[  138.500640][T10584] syzkaller0: entered allmulticast mode
[  138.503211][T10592] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  138.536412][T10441] 8021q: adding VLAN 0 to HW filter on device batadv0
[  138.548684][T10584] tipc: Resetting bearer <eth:syzkaller0>
[  138.583944][T10582] tipc: Resetting bearer <eth:syzkaller0>
[  138.605803][T10582] tipc: Disabling bearer <eth:syzkaller0>
[  138.620108][ T5839] Bluetooth: hci1: command tx timeout
[  138.700846][T10441] veth0_vlan: entered promiscuous mode
[  138.706201][T10441] veth1_vlan: entered promiscuous mode
[  138.735819][T10441] veth0_macvtap: entered promiscuous mode
[  138.741355][T10441] veth1_macvtap: entered promiscuous mode
[  138.770431][T10441] batman_adv: batadv0: Interface activated: batadv_slave_0
[  138.788650][T10441] batman_adv: batadv0: Interface activated: batadv_slave_1
[  138.806783][T10441] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  138.814467][T10441] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  138.817598][T10441] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  138.821879][T10441] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  138.843812][T10605] netlink: 'syz.2.1135': attribute type 1 has an invalid length.
[  138.863571][T10605] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1135'.
[  138.900534][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.903009][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.950680][ T1203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.953779][ T1203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.205182][T10614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1136'.
[  139.658860][T10632] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1143'.
[  139.667933][T10634] !: renamed from dummy0 (while UP)
[  139.728849][T10641] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.748845][T10639] : entered promiscuous mode
[  139.785331][T10641] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.876611][T10641] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.926381][T10641] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.935629][T10648] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1148'.
[  139.946886][T10648] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1148'.
[  140.059465][T10641] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.067647][T10641] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.079400][T10641] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.088111][T10641] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.164970][T10654] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1150'.
[  140.188678][ T5861] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.871576][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  140.887565][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  140.894228][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  140.901313][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  140.904867][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  140.929281][T10659] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  140.939238][T10659] bond0 (unregistering): Released all slaves
[  141.102395][T10673] : (slave bridge0): Releasing backup interface
[  141.107071][T10673] bridge0: port 1(batadv0) entered disabled state
[  141.115120][T10673] batadv0: left allmulticast mode
[  141.116884][T10673] batadv0: left promiscuous mode
[  141.118575][T10673] bridge0: port 1(batadv0) entered disabled state
[  141.129531][T10673] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  141.132495][T10673] batman_adv: batadv0: Removing interface: ip6gretap2
[  141.136521][T10673] bond1: (slave bridge1): Releasing backup interface
[  141.153389][T10673] bond2: (slave bridge2): Releasing active interface
[  141.155708][T10673] bond2: (slave bridge2): the permanent HWaddr of slave - 46:6d:f5:05:70:80 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  141.162302][T10673] bond2: (slave gretap1): making interface the new active one
[  141.162299][T10675] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20003
[  141.172824][T10673] bond2: (slave gretap1): Releasing active interface
[  141.179498][T10673] bond3: (slave gretap2): Releasing active interface
[  141.182748][ T6627] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  141.194924][T10673] bond14: left allmulticast mode
[  141.196676][T10673] bond14: left promiscuous mode
[  141.198324][T10673] bridge0: port 2(bond14) entered disabled state
[  141.205528][T10673] bond15: (slave gretap3): Releasing active interface
[  141.212357][T10673] bond19: left allmulticast mode
[  141.213844][T10673] bond19: left promiscuous mode
[  141.215579][T10673] bridge0: port 3(bond19) entered disabled state
[  141.226257][T10673] bond20: (slave geneve2): Releasing active interface
[  141.230359][T10673] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  141.232924][T10673] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  141.235523][T10673] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  141.238075][T10673] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  141.245707][T10673] batman_adv: batadv0: Interface deactivated: macvlan0
[  141.247972][T10673] batman_adv: batadv0: Removing interface: macvlan0
[  141.276038][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  141.280834][ T5861] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.293614][T10664] chnl_net:caif_netlink_parms(): no params data found
[  141.310897][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  141.404643][T10664] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.406984][T10664] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.409228][T10664] bridge_slave_0: entered allmulticast mode
[  141.412277][T10664] bridge_slave_0: entered promiscuous mode
[  141.415765][T10664] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.418347][T10664] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.424691][T10664] bridge_slave_1: entered allmulticast mode
[  141.441816][T10664] bridge_slave_1: entered promiscuous mode
[  141.473245][T10686] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1156'.
[  141.481814][T10664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  141.488287][T10664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  141.524524][T10664] team0: Port device team_slave_0 added
[  141.533356][T10664] team0: Port device team_slave_1 added
[  141.555738][T10688] netlink: 'syz.2.1157': attribute type 4 has an invalid length.
[  141.565770][T10664] batman_adv: batadv0: Adding interface: batadv_slave_0
[  141.567935][T10664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.578738][T10664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  141.591235][T10664] batman_adv: batadv0: Adding interface: batadv_slave_1
[  141.593357][T10664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.603504][T10664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  141.634122][T10664] hsr_slave_0: entered promiscuous mode
[  141.636388][T10664] hsr_slave_1: entered promiscuous mode
[  141.694765][ T5861] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.751644][T10692] bridge3: entered allmulticast mode
[  141.773543][ T5861] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.788640][T10690] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1158'.
[  141.807944][T10694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1160'.
[  141.986842][ T5861] bridge_slave_1: left allmulticast mode
[  141.991407][ T5861] bridge_slave_1: left promiscuous mode
[  141.995100][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.003169][ T5861] bridge_slave_0: left allmulticast mode
[  142.004856][ T5861] bridge_slave_0: left promiscuous mode
[  142.006614][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.257439][ T5861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  142.262175][ T5861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  142.266043][ T5861] bond0 (unregistering): Released all slaves
[  142.413542][T10715] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  142.500349][T10722] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  142.524687][T10722] syzkaller1: entered promiscuous mode
[  142.526484][T10722] syzkaller1: entered allmulticast mode
[  142.612874][ T5861] hsr_slave_0: left promiscuous mode
[  142.615082][ T5861] hsr_slave_1: left promiscuous mode
[  142.617137][ T5861] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  142.619451][ T5861] batman_adv: batadv0: Removing interface: batadv_slave_0
[  142.625966][ T5861] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  142.628272][ T5861] batman_adv: batadv0: Removing interface: batadv_slave_1
[  142.655244][ T5861] veth1_macvtap: left promiscuous mode
[  142.657023][ T5861] veth0_macvtap: left promiscuous mode
[  142.658812][ T5861] veth1_vlan: left promiscuous mode
[  142.660737][ T5861] veth0_vlan: left promiscuous mode
[  142.939785][ T5837] Bluetooth: hci1: command tx timeout
[  143.011833][ T5861] team0 (unregistering): Port device team_slave_1 removed
[  143.042465][ T5861] team0 (unregistering): Port device team_slave_0 removed
[  143.430713][T10664] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  143.435709][T10664] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  143.441851][T10664] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  143.446262][T10664] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  143.502927][T10744] netlink: 'syz.2.1169': attribute type 6 has an invalid length.
[  143.526525][T10744] netlink: 'syz.2.1169': attribute type 5 has an invalid length.
[  143.542752][T10664] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.568659][T10664] 8021q: adding VLAN 0 to HW filter on device team0
[  143.583167][T10750] netlink: 'syz.1.1168': attribute type 13 has an invalid length.
[  143.585565][T10750] netlink: 'syz.1.1168': attribute type 17 has an invalid length.
[  143.594070][T10748] veth0: entered promiscuous mode
[  143.595650][T10748] veth0: entered allmulticast mode
[  143.608165][T10750] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  143.621622][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.623882][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[  143.636534][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.638923][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[  143.701487][T10750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  143.766478][T10738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  143.823445][T10750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  143.858856][T10664] 8021q: adding VLAN 0 to HW filter on device batadv0
[  143.890164][T10664] veth0_vlan: entered promiscuous mode
[  143.895778][T10664] veth1_vlan: entered promiscuous mode
[  143.915907][T10664] veth0_macvtap: entered promiscuous mode
[  143.923543][T10664] veth1_macvtap: entered promiscuous mode
[  143.934890][T10664] batman_adv: batadv0: Interface activated: batadv_slave_0
[  143.944597][T10664] batman_adv: batadv0: Interface activated: batadv_slave_1
[  143.949947][T10664] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  143.952705][T10664] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  143.955310][T10664] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  143.958052][T10664] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.010263][   T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.012761][   T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.034003][ T4844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.036687][ T4844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.759455][T10229] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.766017][T10784] __nla_validate_parse: 3 callbacks suppressed
[  145.766029][T10784] netlink: 212296 bytes leftover after parsing attributes in process `syz.2.1180'.
[  145.789393][T10784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1180'.
[  146.522397][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  146.526785][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  146.529460][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  146.533291][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  146.536966][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  146.670011][T10788] chnl_net:caif_netlink_parms(): no params data found
[  146.724816][T10788] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.727107][T10788] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.729282][T10788] bridge_slave_0: entered allmulticast mode
[  146.732614][T10788] bridge_slave_0: entered promiscuous mode
[  146.736123][T10788] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.738273][T10788] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.740998][T10788] bridge_slave_1: entered allmulticast mode
[  146.743717][T10788] bridge_slave_1: entered promiscuous mode
[  146.764366][T10788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  146.769114][T10788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  146.794912][T10788] team0: Port device team_slave_0 added
[  146.800814][T10788] team0: Port device team_slave_1 added
[  146.820092][T10788] batman_adv: batadv0: Adding interface: batadv_slave_0
[  146.822197][T10788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.831002][T10788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  146.836838][T10788] batman_adv: batadv0: Adding interface: batadv_slave_1
[  146.838918][T10788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.846766][T10788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  146.875512][T10788] hsr_slave_0: entered promiscuous mode
[  146.877793][T10788] hsr_slave_1: entered promiscuous mode
[  146.879993][T10788] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  146.882264][T10788] Cannot create hsr debugfs directory
[  147.274634][T10229] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.491752][T10229] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.554126][T10229] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.690549][T10229] bridge_slave_1: left allmulticast mode
[  147.692680][T10229] bridge_slave_1: left promiscuous mode
[  147.694439][T10229] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.702332][T10229] bridge_slave_0: left allmulticast mode
[  147.704156][T10229] bridge_slave_0: left promiscuous mode
[  147.705969][T10229] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.006180][T10229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  148.013413][T10229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  148.017410][T10229] bond0 (unregistering): Released all slaves
[  148.316396][T10229] hsr_slave_0: left promiscuous mode
[  148.319062][T10229] hsr_slave_1: left promiscuous mode
[  148.321788][T10229] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  148.324097][T10229] batman_adv: batadv0: Removing interface: batadv_slave_0
[  148.327041][T10229] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  148.330071][T10229] batman_adv: batadv0: Removing interface: batadv_slave_1
[  148.348564][T10229] veth1_macvtap: left promiscuous mode
[  148.350505][T10229] veth0_macvtap: left promiscuous mode
[  148.352282][T10229] veth1_vlan: left promiscuous mode
[  148.353964][T10229] veth0_vlan: left promiscuous mode
[  148.619773][ T5837] Bluetooth: hci1: command tx timeout
[  148.685526][T10229] team0 (unregistering): Port device team_slave_1 removed
[  148.714025][T10229] team0 (unregistering): Port device team_slave_0 removed
[  150.709790][ T5837] Bluetooth: hci1: command tx timeout
[  152.779737][ T5837] Bluetooth: hci1: command tx timeout
[  153.426679][ T1116] block nbd1: Possible stuck request ffff8880228d8000: control (read@0,1024B). Runtime 60 seconds
[  153.431203][ T1116] block nbd1: Possible stuck request ffff8880228d8200: control (read@1024,1024B). Runtime 60 seconds
[  153.435415][ T1116] block nbd1: Possible stuck request ffff8880228d8400: control (read@2048,1024B). Runtime 60 seconds
[  153.438733][ T1116] block nbd1: Possible stuck request ffff8880228d8600: control (read@3072,1024B). Runtime 60 seconds
[  154.859879][ T5837] Bluetooth: hci1: command tx timeout
[  155.314236][ T5279] udevd[5279]: worker [5829] /devices/virtual/block/nbd1 is taking a long time
[  158.540104][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  160.294145][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  160.297927][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  160.300909][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  160.304973][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  160.307564][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  160.411369][T10797] chnl_net:caif_netlink_parms(): no params data found
[  160.460336][T10797] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.462617][T10797] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.464897][T10797] bridge_slave_0: entered allmulticast mode
[  160.467616][T10797] bridge_slave_0: entered promiscuous mode
[  160.471440][T10797] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.473720][T10797] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.475998][T10797] bridge_slave_1: entered allmulticast mode
[  160.478745][T10797] bridge_slave_1: entered promiscuous mode
[  160.500079][T10797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  160.504737][T10797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  160.526470][T10797] team0: Port device team_slave_0 added
[  160.530865][T10797] team0: Port device team_slave_1 added
[  160.550326][T10797] batman_adv: batadv0: Adding interface: batadv_slave_0
[  160.552470][T10797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  160.560950][T10797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  160.565230][T10797] batman_adv: batadv0: Adding interface: batadv_slave_1
[  160.567284][T10797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  160.575356][T10797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  160.602756][T10797] hsr_slave_0: entered promiscuous mode
[  160.605156][T10797] hsr_slave_1: entered promiscuous mode
[  161.327834][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  161.331653][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  161.334593][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  161.338589][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  161.342931][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  161.467927][T10806] chnl_net:caif_netlink_parms(): no params data found
[  161.522576][T10806] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.524860][T10806] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.527121][T10806] bridge_slave_0: entered allmulticast mode
[  161.530211][T10806] bridge_slave_0: entered promiscuous mode
[  161.533762][T10806] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.536008][T10806] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.538435][T10806] bridge_slave_1: entered allmulticast mode
[  161.541705][T10806] bridge_slave_1: entered promiscuous mode
[  161.563591][T10806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  161.568378][T10806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  161.591541][T10806] team0: Port device team_slave_0 added
[  161.595057][T10806] team0: Port device team_slave_1 added
[  161.613739][T10806] batman_adv: batadv0: Adding interface: batadv_slave_0
[  161.615836][T10806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.623867][T10806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  161.628871][T10806] batman_adv: batadv0: Adding interface: batadv_slave_1
[  161.631440][T10806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.638957][T10806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  161.668607][T10806] hsr_slave_0: entered promiscuous mode
[  161.671679][T10806] hsr_slave_1: entered promiscuous mode
[  161.673760][T10806] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  161.676059][T10806] Cannot create hsr debugfs directory
[  162.379916][ T5837] Bluetooth: hci3: command tx timeout
[  163.419900][ T5837] Bluetooth: hci4: command tx timeout
[  164.460164][ T5837] Bluetooth: hci3: command tx timeout
[  165.509859][ T5837] Bluetooth: hci4: command tx timeout
[  166.549857][ T5837] Bluetooth: hci3: command tx timeout
[  167.580648][ T5837] Bluetooth: hci4: command tx timeout
[  168.619934][ T5837] Bluetooth: hci3: command tx timeout
[  169.659888][ T5837] Bluetooth: hci4: command tx timeout
[  183.509954][   T11] block nbd1: Possible stuck request ffff8880228d8000: control (read@0,1024B). Runtime 90 seconds
[  183.513984][   T11] block nbd1: Possible stuck request ffff8880228d8200: control (read@1024,1024B). Runtime 90 seconds
[  183.518114][   T11] block nbd1: Possible stuck request ffff8880228d8400: control (read@2048,1024B). Runtime 90 seconds
[  183.522553][   T11] block nbd1: Possible stuck request ffff8880228d8600: control (read@3072,1024B). Runtime 90 seconds
[  192.460127][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  207.931424][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  207.934629][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  207.937350][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  207.943860][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  207.946299][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  208.071805][T10815] chnl_net:caif_netlink_parms(): no params data found
[  208.122989][T10815] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.125343][T10815] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.127742][T10815] bridge_slave_0: entered allmulticast mode
[  208.131470][T10815] bridge_slave_0: entered promiscuous mode
[  208.134863][T10815] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.137174][T10815] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.139483][T10815] bridge_slave_1: entered allmulticast mode
[  208.142820][T10815] bridge_slave_1: entered promiscuous mode
[  208.165206][T10815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  208.170310][T10815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  208.192946][T10815] team0: Port device team_slave_0 added
[  208.196579][T10815] team0: Port device team_slave_1 added
[  208.216114][T10815] batman_adv: batadv0: Adding interface: batadv_slave_0
[  208.218173][T10815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.227022][T10815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  208.231608][T10815] batman_adv: batadv0: Adding interface: batadv_slave_1
[  208.233760][T10815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.241851][T10815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  208.269196][T10815] hsr_slave_0: entered promiscuous mode
[  208.271631][T10815] hsr_slave_1: entered promiscuous mode
[  208.273798][T10815] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  208.276082][T10815] Cannot create hsr debugfs directory
[  209.979928][ T5837] Bluetooth: hci5: command tx timeout
[  212.059908][ T5837] Bluetooth: hci5: command tx timeout
[  213.589849][   T11] block nbd1: Possible stuck request ffff8880228d8000: control (read@0,1024B). Runtime 120 seconds
[  213.593952][   T11] block nbd1: Possible stuck request ffff8880228d8200: control (read@1024,1024B). Runtime 120 seconds
[  213.598191][   T11] block nbd1: Possible stuck request ffff8880228d8400: control (read@2048,1024B). Runtime 120 seconds
[  213.603110][   T11] block nbd1: Possible stuck request ffff8880228d8600: control (read@3072,1024B). Runtime 120 seconds
[  214.149812][ T5837] Bluetooth: hci5: command tx timeout
[  216.219838][ T5837] Bluetooth: hci5: command tx timeout
[  221.321521][ T5830] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  221.325608][ T5830] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  221.328754][ T5830] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  221.332896][ T5830] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  221.335519][ T5830] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  221.419725][ T5830] Bluetooth: hci2: command 0x0406 tx timeout
[  221.441696][T10824] chnl_net:caif_netlink_parms(): no params data found
[  221.494970][T10824] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.497284][T10824] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.499526][T10824] bridge_slave_0: entered allmulticast mode
[  221.502744][T10824] bridge_slave_0: entered promiscuous mode
[  221.506074][T10824] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.508322][T10824] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.510965][T10824] bridge_slave_1: entered allmulticast mode
[  221.513652][T10824] bridge_slave_1: entered promiscuous mode
[  221.535614][T10824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  221.541278][T10824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  221.564141][T10824] team0: Port device team_slave_0 added
[  221.567670][T10824] team0: Port device team_slave_1 added
[  221.587570][T10824] batman_adv: batadv0: Adding interface: batadv_slave_0
[  221.590001][T10824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  221.597770][T10824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  221.603251][T10824] batman_adv: batadv0: Adding interface: batadv_slave_1
[  221.605395][T10824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  221.613736][T10824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  221.642770][T10824] hsr_slave_0: entered promiscuous mode
[  221.645278][T10824] hsr_slave_1: entered promiscuous mode
[  221.647378][T10824] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  221.649960][T10824] Cannot create hsr debugfs directory
[  222.308161][ T5830] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  222.314754][ T5830] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  222.317611][ T5830] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  222.320930][ T5830] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  222.323611][ T5830] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  222.446598][T10833] chnl_net:caif_netlink_parms(): no params data found
[  222.507071][T10833] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.509337][T10833] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.512488][T10833] bridge_slave_0: entered allmulticast mode
[  222.515265][T10833] bridge_slave_0: entered promiscuous mode
[  222.518925][T10833] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.521458][T10833] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.523677][T10833] bridge_slave_1: entered allmulticast mode
[  222.526406][T10833] bridge_slave_1: entered promiscuous mode
[  222.548568][T10833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  222.553826][T10833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  222.576084][T10833] team0: Port device team_slave_0 added
[  222.580339][T10833] team0: Port device team_slave_1 added
[  222.599541][T10833] batman_adv: batadv0: Adding interface: batadv_slave_0
[  222.601851][T10833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  222.609438][T10833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  222.614387][T10833] batman_adv: batadv0: Adding interface: batadv_slave_1
[  222.616608][T10833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  222.624537][T10833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  222.655534][T10833] hsr_slave_0: entered promiscuous mode
[  222.657804][T10833] hsr_slave_1: entered promiscuous mode
[  222.660057][T10833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  222.662403][T10833] Cannot create hsr debugfs directory
[  223.419765][ T5830] Bluetooth: hci6: command tx timeout
[  224.379979][ T5830] Bluetooth: hci7: command tx timeout
[  225.510125][ T5830] Bluetooth: hci6: command tx timeout
[  226.469714][ T5830] Bluetooth: hci7: command tx timeout
[  227.579764][ T5830] Bluetooth: hci6: command tx timeout
[  228.543513][ T5830] Bluetooth: hci7: command tx timeout
[  229.669811][ T5830] Bluetooth: hci6: command tx timeout
[  230.619822][ T5830] Bluetooth: hci7: command tx timeout
[  243.666254][   T11] block nbd1: Possible stuck request ffff8880228d8000: control (read@0,1024B). Runtime 150 seconds
[  243.670598][   T11] block nbd1: Possible stuck request ffff8880228d8200: control (read@1024,1024B). Runtime 150 seconds
[  243.674856][   T11] block nbd1: Possible stuck request ffff8880228d8400: control (read@2048,1024B). Runtime 150 seconds
[  243.679004][   T11] block nbd1: Possible stuck request ffff8880228d8600: control (read@3072,1024B). Runtime 150 seconds
[  260.299924][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  269.021344][ T5837] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  269.024369][ T5837] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  269.027160][ T5837] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  269.036352][ T5837] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  269.041222][ T5837] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  269.166497][T10842] chnl_net:caif_netlink_parms(): no params data found
[  269.242076][T10842] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.244413][T10842] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.246828][T10842] bridge_slave_0: entered allmulticast mode
[  269.249537][T10842] bridge_slave_0: entered promiscuous mode
[  269.253668][T10842] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.255868][T10842] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.258102][T10842] bridge_slave_1: entered allmulticast mode
[  269.261108][T10842] bridge_slave_1: entered promiscuous mode
[  269.282812][T10842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  269.287485][T10842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  269.311474][T10842] team0: Port device team_slave_0 added
[  269.315980][T10842] team0: Port device team_slave_1 added
[  269.334571][T10842] batman_adv: batadv0: Adding interface: batadv_slave_0
[  269.336667][T10842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  269.344543][T10842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  269.349043][T10842] batman_adv: batadv0: Adding interface: batadv_slave_1
[  269.351527][T10842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  269.359132][T10842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  269.388465][T10842] hsr_slave_0: entered promiscuous mode
[  269.391046][T10842] hsr_slave_1: entered promiscuous mode
[  269.393209][T10842] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  269.395501][T10842] Cannot create hsr debugfs directory
[  271.109874][ T5830] Bluetooth: hci8: command tx timeout
[  272.619957][ T5830] Bluetooth: hci1: command 0x0406 tx timeout
[  273.180989][ T5837] Bluetooth: hci8: command tx timeout
[  273.741428][   T11] block nbd1: Possible stuck request ffff8880228d8000: control (read@0,1024B). Runtime 180 seconds
[  273.744687][   T11] block nbd1: Possible stuck request ffff8880228d8200: control (read@1024,1024B). Runtime 180 seconds
[  273.747936][   T11] block nbd1: Possible stuck request ffff8880228d8400: control (read@2048,1024B). Runtime 180 seconds
[  273.751804][   T11] block nbd1: Possible stuck request ffff8880228d8600: control (read@3072,1024B). Runtime 180 seconds
[  275.260010][ T5837] Bluetooth: hci8: command tx timeout
[  275.628435][ T5279] udevd[5279]: worker [5829] /devices/virtual/block/nbd1 timeout; kill it
[  275.632045][ T5279] udevd[5279]: seq 15152 '/devices/virtual/block/nbd1' killed
[  277.339913][ T5837] Bluetooth: hci8: command tx timeout
[  282.325890][ T5839] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  282.332175][ T5839] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  282.335930][ T5839] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  282.340710][ T5839] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  282.344503][ T5839] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  282.487325][T10851] chnl_net:caif_netlink_parms(): no params data found
[  282.560007][T10851] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.562300][T10851] bridge0: port 1(bridge_slave_0) entered disabled state
[  282.564820][T10851] bridge_slave_0: entered allmulticast mode
[  282.567638][T10851] bridge_slave_0: entered promiscuous mode
[  282.571321][T10851] bridge0: port 2(bridge_slave_1) entered blocking state
[  282.573571][T10851] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.575897][T10851] bridge_slave_1: entered allmulticast mode
[  282.579074][T10851] bridge_slave_1: entered promiscuous mode
[  282.602337][T10851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  282.607103][T10851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  282.631092][T10851] team0: Port device team_slave_0 added
[  282.635918][T10851] team0: Port device team_slave_1 added
[  282.656415][T10851] batman_adv: batadv0: Adding interface: batadv_slave_0
[  282.658582][T10851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  282.666965][T10851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  282.671629][T10851] batman_adv: batadv0: Adding interface: batadv_slave_1
[  282.673745][T10851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  282.682473][T10851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  282.717441][T10851] hsr_slave_0: entered promiscuous mode
[  282.720346][T10851] hsr_slave_1: entered promiscuous mode
[  282.722771][T10851] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  282.725014][T10851] Cannot create hsr debugfs directory
[  282.870071][ T5837] Bluetooth: hci3: command 0x0406 tx timeout
[  283.332906][ T5837] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  283.337033][ T5837] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  283.341398][ T5837] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  283.344770][ T5837] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  283.348333][ T5837] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  283.474949][T10860] chnl_net:caif_netlink_parms(): no params data found
[  283.542536][T10860] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.544838][T10860] bridge0: port 1(bridge_slave_0) entered disabled state
[  283.547125][T10860] bridge_slave_0: entered allmulticast mode
[  283.550477][T10860] bridge_slave_0: entered promiscuous mode
[  283.553790][T10860] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.555931][T10860] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.558633][T10860] bridge_slave_1: entered allmulticast mode
[  283.561991][T10860] bridge_slave_1: entered promiscuous mode
[  283.583382][T10860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  283.588215][T10860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  283.611698][T10860] team0: Port device team_slave_0 added
[  283.615415][T10860] team0: Port device team_slave_1 added
[  283.634650][T10860] batman_adv: batadv0: Adding interface: batadv_slave_0
[  283.636824][T10860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  283.644917][T10860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  283.650078][T10860] batman_adv: batadv0: Adding interface: batadv_slave_1
[  283.652245][T10860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  283.660277][T10860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  283.689845][T10860] hsr_slave_0: entered promiscuous mode
[  283.692240][T10860] hsr_slave_1: entered promiscuous mode
[  283.694429][T10860] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  283.696678][T10860] Cannot create hsr debugfs directory
[  284.389959][ T5830] Bluetooth: hci9: command tx timeout
[  285.420164][ T5830] Bluetooth: hci10: command tx timeout
[  286.460011][ T5830] Bluetooth: hci9: command tx timeout
[  287.499881][ T5830] Bluetooth: hci10: command tx timeout
[  287.979940][ T5830] Bluetooth: hci4: command 0x0406 tx timeout
[  288.539962][ T5837] Bluetooth: hci9: command tx timeout
[  289.580215][ T5837] Bluetooth: hci10: command tx timeout
[  290.619889][ T5837] Bluetooth: hci9: command tx timeout
[  291.670141][ T5837] Bluetooth: hci10: command tx timeout
[  303.820155][   T11] block nbd1: Possible stuck request ffff8880228d8000: control (read@0,1024B). Runtime 210 seconds
[  303.823626][   T11] block nbd1: Possible stuck request ffff8880228d8200: control (read@1024,1024B). Runtime 210 seconds
[  303.826993][   T11] block nbd1: Possible stuck request ffff8880228d8400: control (read@2048,1024B). Runtime 210 seconds
[  303.830764][   T11] block nbd1: Possible stuck request ffff8880228d8600: control (read@3072,1024B). Runtime 210 seconds
[  307.020003][   T35] INFO: task dhcpcd:5575 blocked for more than 143 seconds.
[  307.022332][   T35]       Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0
[  307.025143][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  307.037757][   T35] task:dhcpcd          state:D stack:24776 pid:5575  tgid:5575  ppid:1      task_flags:0x400140 flags:0x00004002
[  307.042806][   T35] Call Trace:
[  307.043943][   T35]  <TASK>
[  307.044906][   T35]  __schedule+0x16f5/0x4d00
[  307.046442][   T35]  ? __lock_acquire+0xab9/0xd20
[  307.048002][   T35]  ? __lock_acquire+0xab9/0xd20
[  307.049532][   T35]  ? schedule+0x165/0x360
[  307.058762][   T35]  ? __pfx___schedule+0x10/0x10
[  307.060950][   T35]  ? schedule+0x91/0x360
[  307.062668][   T35]  schedule+0x165/0x360
[  307.064191][   T35]  schedule_preempt_disabled+0x13/0x30
[  307.065981][   T35]  __mutex_lock+0x724/0xe80
[  307.067340][   T35]  ? unwind_get_return_address+0x4d/0x90
[  307.069092][   T35]  ? __mutex_lock+0x51b/0xe80
[  307.079187][   T35]  ? genl_rcv_msg+0x10d/0x790
[  307.083540][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  307.085513][   T35]  ? stack_trace_save+0x9c/0xe0
[  307.087440][   T35]  ? radix_tree_lookup+0x240/0x290
[  307.089476][   T35]  genl_rcv_msg+0x10d/0x790
[  307.101166][   T35]  ? __lock_acquire+0xab9/0xd20
[  307.103223][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  307.105222][   T35]  netlink_rcv_skb+0x208/0x470
[  307.107144][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  307.109148][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  307.119174][   T35]  ? down_read+0x1ad/0x2e0
[  307.121121][   T35]  genl_rcv+0x28/0x40
[  307.122720][   T35]  netlink_unicast+0x75b/0x8d0
[  307.124414][   T35]  netlink_sendmsg+0x805/0xb30
[  307.125926][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  307.141969][   T35]  ? __lock_acquire+0xab9/0xd20
[  307.143664][   T35]  ? aa_sock_msg_perm+0x94/0x160
[  307.145221][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  307.146861][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  307.148511][   T35]  __sock_sendmsg+0x21c/0x270
[  307.153127][   T35]  ____sys_sendmsg+0x505/0x830
[  307.154636][   T35]  ? __pfx_____sys_sendmsg+0x10/0x10
[  307.156240][   T35]  ? import_iovec+0x74/0xa0
[  307.157630][   T35]  ___sys_sendmsg+0x21f/0x2a0
[  307.159027][   T35]  ? __pfx____sys_sendmsg+0x10/0x10
[  307.162630][   T35]  ? netdev_run_todo+0xe1d/0xea0
[  307.164155][   T35]  __x64_sys_sendmsg+0x19b/0x260
[  307.165581][   T35]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  307.168128][   T35]  ? __secure_computing+0xe2/0x2a0
[  307.172392][   T35]  do_syscall_64+0xfa/0x3b0
[  307.173783][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.175648][   T35]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  307.177511][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.179305][   T35] RIP: 0033:0x7f3e5884ca4b
[  307.183105][   T35] RSP: 002b:00007ffd50ad33e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  307.185638][   T35] RAX: ffffffffffffffda RBX: 0000561adec9b94f RCX: 00007f3e5884ca4b
[  307.188081][   T35] RDX: 0000000000000000 RSI: 00007ffd50ad3430 RDI: 0000000000000010
[  307.193151][   T35] RBP: 00007ffd50ae78f8 R08: 0000000000000000 R09: 0000000000000000
[  307.195498][   T35] R10: 00007ffd50ae7b40 R11: 0000000000000246 R12: 0000000000000010
[  307.197829][   T35] R13: 00007ffd50ad7490 R14: 0000000000000000 R15: 0000561b02814708
[  307.201139][   T35]  </TASK>
[  307.202317][   T35] INFO: task syz.1.1172:10760 blocked for more than 143 seconds.
[  307.205049][   T35]       Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0
[  307.207549][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  307.210890][   T35] task:syz.1.1172      state:D stack:24008 pid:10760 tgid:10759 ppid:6261   task_flags:0x480140 flags:0x00004004
[  307.214674][   T35] Call Trace:
[  307.215767][   T35]  <TASK>
[  307.216715][   T35]  __schedule+0x16f5/0x4d00
[  307.218112][   T35]  ? __lock_acquire+0xab9/0xd20
[  307.220074][   T35]  ? schedule+0x165/0x360
[  307.221437][   T35]  ? __lock_acquire+0xab9/0xd20
[  307.222930][   T35]  ? __pfx___schedule+0x10/0x10
[  307.224513][   T35]  ? schedule+0x91/0x360
[  307.225942][   T35]  schedule+0x165/0x360
[  307.227292][   T35]  blk_mq_freeze_queue_wait+0xf4/0x170
[  307.229011][   T35]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[  307.231367][   T35]  ? __pfx_autoremove_wake_function+0x10/0x10
[  307.233251][   T35]  ? percpu_ref_kill_and_confirm+0xa3/0x130
[  307.235034][   T35]  queue_limits_commit_update_frozen+0x5e/0x360
[  307.236828][   T35]  ? nbd_set_size+0x2bb/0x6c0
[  307.238227][   T35]  nbd_set_size+0x494/0x6c0
[  307.240099][   T35]  ? __pfx_nbd_set_size+0x10/0x10
[  307.241629][   T35]  ? __mutex_trylock_common+0x153/0x260
[  307.243249][   T35]  ? __mutex_lock+0x330/0xe80
[  307.244609][   T35]  ? nla_memcpy+0x5b/0xc0
[  307.245897][   T35]  nbd_genl_size_set+0x2eb/0x3c0
[  307.247427][   T35]  ? __pfx_nbd_genl_size_set+0x10/0x10
[  307.249091][   T35]  ? __pfx_nbd_get_config_unlocked+0x10/0x10
[  307.251369][   T35]  ? bpf_lsm_capable+0x9/0x20
[  307.252844][   T35]  ? security_capable+0x7e/0x2e0
[  307.254434][   T35]  ? radix_tree_lookup+0x240/0x290
[  307.256014][   T35]  nbd_genl_reconfigure+0x409/0x1870
[  307.257634][   T35]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  307.259352][   T35]  ? __nla_parse+0x40/0x60
[  307.261284][   T35]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  307.263215][   T35]  genl_family_rcv_msg_doit+0x215/0x300
[  307.264945][   T35]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  307.266834][   T35]  genl_rcv_msg+0x60e/0x790
[  307.268229][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  307.270166][   T35]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  307.271951][   T35]  netlink_rcv_skb+0x208/0x470
[  307.273426][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  307.274952][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  307.276597][   T35]  ? down_read+0x1ad/0x2e0
[  307.277993][   T35]  genl_rcv+0x28/0x40
[  307.279247][   T35]  netlink_unicast+0x75b/0x8d0
[  307.281223][   T35]  netlink_sendmsg+0x805/0xb30
[  307.282714][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  307.284296][   T35]  ? aa_sock_msg_perm+0x94/0x160
[  307.285788][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  307.287375][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  307.288971][   T35]  __sock_sendmsg+0x21c/0x270
[  307.290827][   T35]  ____sys_sendmsg+0x505/0x830
[  307.292354][   T35]  ? __pfx_____sys_sendmsg+0x10/0x10
[  307.293950][   T35]  ? import_iovec+0x74/0xa0
[  307.295290][   T35]  ___sys_sendmsg+0x21f/0x2a0
[  307.296698][   T35]  ? __pfx____sys_sendmsg+0x10/0x10
[  307.298244][   T35]  ? __fget_files+0x2a/0x420
[  307.300073][   T35]  ? __fget_files+0x3a0/0x420
[  307.301517][   T35]  __x64_sys_sendmsg+0x19b/0x260
[  307.303063][   T35]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  307.304735][   T35]  ? rcu_is_watching+0x15/0xb0
[  307.306213][   T35]  ? do_syscall_64+0xbe/0x3b0
[  307.307659][   T35]  do_syscall_64+0xfa/0x3b0
[  307.309078][   T35]  ? lockdep_hardirqs_on+0x9c/0x150
[  307.311470][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.313320][   T35]  ? exc_page_fault+0x9f/0xf0
[  307.314743][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.316532][   T35] RIP: 0033:0x7f778878e929
[  307.317902][   T35] RSP: 002b:00007f77895d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  307.320850][   T35] RAX: ffffffffffffffda RBX: 00007f77889b5fa0 RCX: 00007f778878e929
[  307.323298][   T35] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000d
[  307.325708][   T35] RBP: 00007f7788810b39 R08: 0000000000000000 R09: 0000000000000000
[  307.328125][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  307.330811][   T35] R13: 0000000000000000 R14: 00007f77889b5fa0 R15: 00007ffdcc51e698
[  307.333275][   T35]  </TASK>
[  307.334262][   T35] INFO: task syz.2.1180:10784 blocked for more than 143 seconds.
[  307.336614][   T35]       Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0
[  307.339096][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  307.342070][   T35] task:syz.2.1180      state:D stack:22856 pid:10784 tgid:10783 ppid:5827   task_flags:0x400140 flags:0x00004004
[  307.345702][   T35] Call Trace:
[  307.346750][   T35]  <TASK>
[  307.347687][   T35]  __schedule+0x16f5/0x4d00
[  307.349131][   T35]  ? __lock_acquire+0xab9/0xd20
[  307.350707][   T35]  ? schedule+0x165/0x360
[  307.352089][   T35]  ? __pfx___schedule+0x10/0x10
[  307.353608][   T35]  ? schedule+0x91/0x360
[  307.354906][   T35]  schedule+0x165/0x360
[  307.356164][   T35]  schedule_preempt_disabled+0x13/0x30
[  307.357771][   T35]  __mutex_lock+0x724/0xe80
[  307.359142][   T35]  ? __mutex_lock+0x51b/0xe80
[  307.360756][   T35]  ? genl_rcv_msg+0x10d/0x790
[  307.362210][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  307.363720][   T35]  ? __pfx___dev_queue_xmit+0x10/0x10
[  307.365353][   T35]  ? radix_tree_lookup+0x240/0x290
[  307.366889][   T35]  genl_rcv_msg+0x10d/0x790
[  307.368220][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  307.369979][   T35]  ? ref_tracker_free+0x63a/0x7d0
[  307.371467][   T35]  ? __copy_skb_header+0xa7/0x550
[  307.373003][   T35]  ? __pfx_ref_tracker_free+0x10/0x10
[  307.374584][   T35]  netlink_rcv_skb+0x208/0x470
[  307.376077][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  307.377625][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  307.379198][   T35]  ? down_read+0x1ad/0x2e0
[  307.380736][   T35]  genl_rcv+0x28/0x40
[  307.381997][   T35]  netlink_unicast+0x75b/0x8d0
[  307.383426][   T35]  netlink_sendmsg+0x805/0xb30
[  307.384911][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  307.386479][   T35]  ? aa_sock_msg_perm+0x94/0x160
[  307.388024][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  307.389764][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  307.391416][   T35]  __sock_sendmsg+0x21c/0x270
[  307.392877][   T35]  __sys_sendto+0x3bd/0x520
[  307.394290][   T35]  ? __pfx___sys_sendto+0x10/0x10
[  307.395787][   T35]  ? count_memcg_event_mm+0x21/0x260
[  307.397411][   T35]  ? exc_page_fault+0x76/0xf0
[  307.398887][   T35]  ? do_user_addr_fault+0xc8a/0x1390
[  307.400624][   T35]  __x64_sys_sendto+0xde/0x100
[  307.402057][   T35]  do_syscall_64+0xfa/0x3b0
[  307.403415][   T35]  ? lockdep_hardirqs_on+0x9c/0x150
[  307.404958][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.406823][   T35]  ? exc_page_fault+0x9f/0xf0
[  307.408298][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.410291][   T35] RIP: 0033:0x7fbe15f907bc
[  307.411682][   T35] RSP: 002b:00007fbe16df4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  307.414240][   T35] RAX: ffffffffffffffda RBX: 00007fbe16df4fc0 RCX: 00007fbe15f907bc
[  307.416684][   T35] RDX: 0000000000000020 RSI: 00007fbe16df5010 RDI: 000000000000000c
[  307.419115][   T35] RBP: 0000000000000000 R08: 00007fbe16df4f14 R09: 000000000000000c
[  307.422236][   T35] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000c
[  307.424765][   T35] R13: 00007fbe16df4f68 R14: 00007fbe16df5010 R15: 0000000000000000
[  307.427163][   T35]  </TASK>
[  307.428115][   T35] INFO: task syz.2.1180:10785 blocked for more than 143 seconds.
[  307.430726][   T35]       Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0
[  307.433207][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  307.435832][   T35] task:syz.2.1180      state:D stack:28032 pid:10785 tgid:10783 ppid:5827   task_flags:0x400040 flags:0x00004004
[  307.439493][   T35] Call Trace:
[  307.440685][   T35]  <TASK>
[  307.441643][   T35]  __schedule+0x16f5/0x4d00
[  307.443079][   T35]  ? __lock_acquire+0xab9/0xd20
[  307.444587][   T35]  ? schedule+0x165/0x360
[  307.445919][   T35]  ? __pfx___schedule+0x10/0x10
[  307.447358][   T35]  ? schedule+0x91/0x360
[  307.448623][   T35]  schedule+0x165/0x360
[  307.450077][   T35]  schedule_preempt_disabled+0x13/0x30
[  307.451740][   T35]  __mutex_lock+0x724/0xe80
[  307.453095][   T35]  ? __mutex_lock+0x51b/0xe80
[  307.454537][   T35]  ? genl_rcv_msg+0x10d/0x790
[  307.455979][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  307.457461][   T35]  ? __pfx___dev_queue_xmit+0x10/0x10
[  307.459094][   T35]  ? radix_tree_lookup+0x240/0x290
[  307.460907][   T35]  genl_rcv_msg+0x10d/0x790
[  307.462286][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  307.463782][   T35]  ? ref_tracker_free+0x63a/0x7d0
[  307.465294][   T35]  ? __copy_skb_header+0xa7/0x550
[  307.466792][   T35]  ? __pfx_ref_tracker_free+0x10/0x10
[  307.468367][   T35]  netlink_rcv_skb+0x208/0x470
[  307.470668][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  307.472244][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  307.473813][   T35]  ? down_read+0x1ad/0x2e0
[  307.475200][   T35]  genl_rcv+0x28/0x40
[  307.476606][   T35]  netlink_unicast+0x75b/0x8d0
[  307.478129][   T35]  netlink_sendmsg+0x805/0xb30
[  307.479918][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  307.481563][   T35]  ? aa_sock_msg_perm+0x94/0x160
[  307.483121][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  307.484784][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  307.486445][   T35]  __sock_sendmsg+0x21c/0x270
[  307.487868][   T35]  __sys_sendto+0x3bd/0x520
[  307.489227][   T35]  ? __pfx___sys_sendto+0x10/0x10
[  307.491350][   T35]  ? fd_install+0x97/0x540
[  307.492746][   T35]  ? fd_install+0x30d/0x540
[  307.494174][   T35]  __x64_sys_sendto+0xde/0x100
[  307.495656][   T35]  do_syscall_64+0xfa/0x3b0
[  307.497070][   T35]  ? lockdep_hardirqs_on+0x9c/0x150
[  307.498670][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.500871][   T35]  ? exc_page_fault+0x9f/0xf0
[  307.502559][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.504336][   T35] RIP: 0033:0x7fbe15f907bc
[  307.505663][   T35] RSP: 002b:00007fbe16dd3ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  307.508087][   T35] RAX: ffffffffffffffda RBX: 00007fbe16dd3fc0 RCX: 00007fbe15f907bc
[  307.510580][   T35] RDX: 0000000000000020 RSI: 00007fbe16dd4010 RDI: 000000000000000f
[  307.513032][   T35] RBP: 0000000000000000 R08: 00007fbe16dd3f14 R09: 000000000000000c
[  307.515694][   T35] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000f
[  307.518112][   T35] R13: 00007fbe16dd3f68 R14: 00007fbe16dd4010 R15: 0000000000000000
[  307.520907][   T35]  </TASK>
[  307.521943][   T35] INFO: task syz-executor:10788 blocked for more than 143 seconds.
[  307.524365][   T35]       Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0
[  307.526799][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  307.529427][   T35] task:syz-executor    state:D stack:22568 pid:10788 tgid:10788 ppid:1      task_flags:0x400140 flags:0x00004004
[  307.533154][   T35] Call Trace:
[  307.534202][   T35]  <TASK>
[  307.535158][   T35]  __schedule+0x16f5/0x4d00
[  307.536619][   T35]  ? __lock_acquire+0xab9/0xd20
[  307.538516][   T35]  ? __lock_acquire+0xab9/0xd20
[  307.540295][   T35]  ? schedule+0x165/0x360
[  307.541662][   T35]  ? __pfx___schedule+0x10/0x10
[  307.543185][   T35]  ? schedule+0x91/0x360
[  307.544514][   T35]  schedule+0x165/0x360
[  307.545832][   T35]  schedule_preempt_disabled+0x13/0x30
[  307.547533][   T35]  __mutex_lock+0x724/0xe80
[  307.548951][   T35]  ? unwind_get_return_address+0x4d/0x90
[  307.550824][   T35]  ? __mutex_lock+0x51b/0xe80
[  307.552633][   T35]  ? genl_rcv_msg+0x10d/0x790
[  307.554145][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  307.555697][   T35]  ? stack_trace_save+0x9c/0xe0
[  307.557223][   T35]  ? radix_tree_lookup+0x240/0x290
[  307.558818][   T35]  genl_rcv_msg+0x10d/0x790
[  307.561115][   T35]  ? __lock_acquire+0xab9/0xd20
[  307.562649][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  307.564242][   T35]  netlink_rcv_skb+0x208/0x470
[  307.565723][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  307.567310][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  307.568950][   T35]  ? down_read+0x1ad/0x2e0
[  307.570470][   T35]  genl_rcv+0x28/0x40
[  307.571975][   T35]  netlink_unicast+0x75b/0x8d0
[  307.573479][   T35]  netlink_sendmsg+0x805/0xb30
[  307.574966][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  307.576606][   T35]  ? aa_sock_msg_perm+0x94/0x160
[  307.578147][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  307.579936][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  307.581805][   T35]  __sock_sendmsg+0x21c/0x270
[  307.583301][   T35]  __sys_sendto+0x3bd/0x520
[  307.584722][   T35]  ? __pfx___sys_sendto+0x10/0x10
[  307.586291][   T35]  ? fd_install+0x97/0x540
[  307.587611][   T35]  ? fd_install+0x30d/0x540
[  307.588976][   T35]  __x64_sys_sendto+0xde/0x100
[  307.590611][   T35]  do_syscall_64+0xfa/0x3b0
[  307.592272][   T35]  ? lockdep_hardirqs_on+0x9c/0x150
[  307.593905][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.595769][   T35]  ? exc_page_fault+0x9f/0xf0
[  307.597237][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.599055][   T35] RIP: 0033:0x7f4a395907bc
[  307.600550][   T35] RSP: 002b:00007fff8357b0b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  307.603358][   T35] RAX: ffffffffffffffda RBX: 00007f4a3a2e4620 RCX: 00007f4a395907bc
[  307.605799][   T35] RDX: 0000000000000020 RSI: 00007f4a3a2e4670 RDI: 0000000000000005
[  307.608181][   T35] RBP: 0000000000000000 R08: 00007fff8357b104 R09: 000000000000000c
[  307.610794][   T35] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005
[  307.613416][   T35] R13: 00007fff8357b158 R14: 00007f4a3a2e4670 R15: 0000000000000000
[  307.615800][   T35]  </TASK>
[  307.616765][   T35] INFO: task syz-executor:10797 blocked for more than 143 seconds.
[  307.619100][   T35]       Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0
[  307.621672][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  307.624554][   T35] task:syz-executor    state:D stack:22760 pid:10797 tgid:10797 ppid:1      task_flags:0x400140 flags:0x00004004
[  307.628149][   T35] Call Trace:
[  307.629174][   T35]  <TASK>
[  307.630225][   T35]  __schedule+0x16f5/0x4d00
[  307.631814][   T35]  ? __lock_acquire+0xab9/0xd20
[  307.633361][   T35]  ? __lock_acquire+0xab9/0xd20
[  307.634886][   T35]  ? schedule+0x165/0x360
[  307.636242][   T35]  ? __pfx___schedule+0x10/0x10
[  307.637764][   T35]  ? schedule+0x91/0x360
[  307.639100][   T35]  schedule+0x165/0x360
[  307.640572][   T35]  schedule_preempt_disabled+0x13/0x30
[  307.642553][   T35]  __mutex_lock+0x724/0xe80
[  307.643997][   T35]  ? unwind_get_return_address+0x4d/0x90
[  307.645675][   T35]  ? __mutex_lock+0x51b/0xe80
[  307.647143][   T35]  ? genl_rcv_msg+0x10d/0x790
[  307.648611][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  307.650267][   T35]  ? stack_trace_save+0x9c/0xe0
[  307.652035][   T35]  ? radix_tree_lookup+0x240/0x290
[  307.653630][   T35]  genl_rcv_msg+0x10d/0x790
[  307.655049][   T35]  ? __lock_acquire+0xab9/0xd20
[  307.656514][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  307.658055][   T35]  netlink_rcv_skb+0x208/0x470
[  307.659550][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  307.661472][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  307.663145][   T35]  ? down_read+0x1ad/0x2e0
[  307.664545][   T35]  genl_rcv+0x28/0x40
[  307.665791][   T35]  netlink_unicast+0x75b/0x8d0
[  307.667279][   T35]  netlink_sendmsg+0x805/0xb30
[  307.668792][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  307.671198][   T35]  ? aa_sock_msg_perm+0x94/0x160
[  307.672784][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  307.674685][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  307.676266][   T35]  __sock_sendmsg+0x21c/0x270
[  307.677679][   T35]  __sys_sendto+0x3bd/0x520
[  307.679050][   T35]  ? __pfx___sys_sendto+0x10/0x10
[  307.680710][   T35]  ? fd_install+0x97/0x540
[  307.682277][   T35]  ? fd_install+0x30d/0x540
[  307.683698][   T35]  __x64_sys_sendto+0xde/0x100
[  307.685158][   T35]  do_syscall_64+0xfa/0x3b0
[  307.686570][   T35]  ? lockdep_hardirqs_on+0x9c/0x150
[  307.688190][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.690158][   T35]  ? exc_page_fault+0x9f/0xf0
[  307.691853][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.693660][   T35] RIP: 0033:0x7f50f07907bc
[  307.695049][   T35] RSP: 002b:00007ffe4bb2a3a0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  307.697598][   T35] RAX: ffffffffffffffda RBX: 00007f50f14e4620 RCX: 00007f50f07907bc
[  307.700092][   T35] RDX: 0000000000000020 RSI: 00007f50f14e4670 RDI: 0000000000000005
[  307.702747][   T35] RBP: 0000000000000000 R08: 00007ffe4bb2a3f4 R09: 000000000000000c
[  307.705159][   T35] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005
[  307.707582][   T35] R13: 00007ffe4bb2a448 R14: 00007f50f14e4670 R15: 0000000000000000
[  307.710073][   T35]  </TASK>
[  307.711204][   T35] INFO: task syz-executor:10806 blocked for more than 144 seconds.
[  307.713586][   T35]       Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0
[  307.715998][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  307.718565][   T35] task:syz-executor    state:D stack:22760 pid:10806 tgid:10806 ppid:1      task_flags:0x400140 flags:0x00004004
[  307.722375][   T35] Call Trace:
[  307.723629][   T35]  <TASK>
[  307.724585][   T35]  __schedule+0x16f5/0x4d00
[  307.726034][   T35]  ? __lock_acquire+0xab9/0xd20
[  307.727547][   T35]  ? __lock_acquire+0xab9/0xd20
[  307.729074][   T35]  ? schedule+0x165/0x360
[  307.730572][   T35]  ? __pfx___schedule+0x10/0x10
[  307.732297][   T35]  ? schedule+0x91/0x360
[  307.733641][   T35]  schedule+0x165/0x360
[  307.734967][   T35]  schedule_preempt_disabled+0x13/0x30
[  307.736673][   T35]  __mutex_lock+0x724/0xe80
[  307.738095][   T35]  ? unwind_get_return_address+0x4d/0x90
[  307.739969][   T35]  ? __mutex_lock+0x51b/0xe80
[  307.741646][   T35]  ? genl_rcv_msg+0x10d/0x790
[  307.743134][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  307.744699][   T35]  ? stack_trace_save+0x9c/0xe0
[  307.746221][   T35]  ? radix_tree_lookup+0x240/0x290
[  307.747804][   T35]  genl_rcv_msg+0x10d/0x790
[  307.749232][   T35]  ? __lock_acquire+0xab9/0xd20
[  307.750983][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  307.752825][   T35]  netlink_rcv_skb+0x208/0x470
[  307.754359][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  307.755940][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  307.757609][   T35]  ? down_read+0x1ad/0x2e0
[  307.759024][   T35]  genl_rcv+0x28/0x40
[  307.760447][   T35]  netlink_unicast+0x75b/0x8d0
[  307.762320][   T35]  netlink_sendmsg+0x805/0xb30
[  307.763776][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  307.765389][   T35]  ? aa_sock_msg_perm+0x94/0x160
[  307.766945][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  307.768584][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  307.770315][   T35]  __sock_sendmsg+0x21c/0x270
[  307.772012][   T35]  __sys_sendto+0x3bd/0x520
[  307.773446][   T35]  ? __pfx___sys_sendto+0x10/0x10
[  307.775037][   T35]  ? fd_install+0x97/0x540
[  307.776430][   T35]  ? fd_install+0x30d/0x540
[  307.777859][   T35]  __x64_sys_sendto+0xde/0x100
[  307.779353][   T35]  do_syscall_64+0xfa/0x3b0
[  307.781579][   T35]  ? lockdep_hardirqs_on+0x9c/0x150
[  307.783203][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.785024][   T35]  ? exc_page_fault+0x9f/0xf0
[  307.786435][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.788213][   T35] RIP: 0033:0x7f1c8b7907bc
[  307.789682][   T35] RSP: 002b:00007ffc20cfce60 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  307.792420][   T35] RAX: ffffffffffffffda RBX: 00007f1c8c4e4620 RCX: 00007f1c8b7907bc
[  307.794786][   T35] RDX: 0000000000000020 RSI: 00007f1c8c4e4670 RDI: 0000000000000005
[  307.797170][   T35] RBP: 0000000000000000 R08: 00007ffc20cfceb4 R09: 000000000000000c
[  307.799507][   T35] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005
[  307.802114][   T35] R13: 00007ffc20cfcf08 R14: 00007f1c8c4e4670 R15: 0000000000000000
[  307.804526][   T35]  </TASK>
[  307.805528][   T35] 
[  307.805528][   T35] Showing all locks held in the system:
[  307.807787][   T35] 1 lock held by khungtaskd/35:
[  307.809293][   T35]  #0: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  307.812388][   T35] 1 lock held by klogd/5268:
[  307.813780][   T35]  #0: ffff88804b039f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  307.816738][   T35] 2 locks held by dhcpcd/5575:
[  307.818158][   T35]  #0: ffffffff8f582af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  307.820856][   T35]  #1: ffffffff8f582908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  307.823550][   T35] 2 locks held by getty/5659:
[  307.825004][   T35]  #0: ffff8881085550a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  307.828000][   T35]  #1: ffffc9000286f2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  307.831285][   T35] 1 lock held by udevd/5829:
[  307.832740][   T35]  #0: ffff8880227cc358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  307.835554][   T35] 6 locks held by syz.1.1172/10760:
[  307.837162][   T35]  #0: ffffffff8f582af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  307.839748][   T35]  #1: ffffffff8f582908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  307.842415][   T35]  #2: ffff8880227c5a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x36f/0x1870
[  307.845420][   T35]  #3: ffff88802273e8d0 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x2a2/0x6c0
[  307.848152][   T35]  #4: ffff88802273e278 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5e/0x360
[  307.851770][   T35]  #5: ffff88802273e2b0 (&q->q_usage_counter(queue)#2){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5e/0x360
[  307.855391][   T35] 2 locks held by syz.2.1180/10784:
[  307.856998][   T35]  #0: ffffffff8f582af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  307.859485][   T35]  #1: ffffffff8f582908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  307.865537][   T35] 2 locks held by syz.2.1180/10785:
[  307.867179][   T35]  #0: ffffffff8f582af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  307.869652][   T35]  #1: ffffffff8f582908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  307.873495][   T35] 2 locks held by syz-executor/10788:
[  307.875068][   T35]  #0: ffffffff8f582af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  307.877479][   T35]  #1: ffffffff8f582908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  307.883717][   T35] 2 locks held by syz-executor/10797:
[  307.885364][   T35]  #0: ffffffff8f582af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  307.887808][   T35]  #1: ffffffff8f582908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  307.891158][   T35] 2 locks held by syz-executor/10806:
[  307.892802][   T35]  #0: ffffffff8f582af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  307.895331][   T35]  #1: ffffffff8f582908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  307.898000][   T35] 2 locks held by syz-executor/10815:
[  307.899894][   T35]  #0: ffffffff8f582af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  307.902406][   T35]  #1: ffffffff8f582908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  307.905174][   T35] 2 locks held by syz-executor/10824:
[  307.906799][   T35]  #0: ffffffff8f582af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  307.909232][   T35]  #1: ffffffff8f582908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  307.912079][   T35] 2 locks held by syz-executor/10833:
[  307.913644][   T35]  #0: ffffffff8f582af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  307.916110][   T35]  #1: ffffffff8f582908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  307.918752][   T35] 2 locks held by syz-executor/10842:
[  307.920527][   T35]  #0: ffffffff8f582af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  307.923051][   T35]  #1: ffffffff8f582908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  307.925767][   T35] 2 locks held by syz-executor/10851:
[  307.927344][   T35]  #0: ffffffff8f582af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  307.929852][   T35]  #1: ffffffff8f582908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  307.932570][   T35] 2 locks held by syz-executor/10860:
[  307.934225][   T35]  #0: ffffffff8f582af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  307.936592][   T35]  #1: ffffffff8f582908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  307.939264][   T35] 
[  307.940130][   T35] =============================================
[  307.940130][   T35] 
[  307.942691][   T35] NMI backtrace for cpu 1
[  307.942700][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  307.942709][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  307.942714][   T35] Call Trace:
[  307.942720][   T35]  <TASK>
[  307.942724][   T35]  dump_stack_lvl+0x189/0x250
[  307.942736][   T35]  ? __wake_up_klogd+0xd9/0x110
[  307.942749][   T35]  ? __pfx_dump_stack_lvl+0x10/0x10
[  307.942758][   T35]  ? __pfx__printk+0x10/0x10
[  307.942775][   T35]  nmi_cpu_backtrace+0x39e/0x3d0
[  307.942790][   T35]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  307.942799][   T35]  ? _printk+0xcf/0x120
[  307.942810][   T35]  ? __pfx__printk+0x10/0x10
[  307.942843][   T35]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  307.942854][   T35]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  307.942866][   T35]  watchdog+0xfee/0x1030
[  307.942876][   T35]  ? watchdog+0x1de/0x1030
[  307.942887][   T35]  kthread+0x711/0x8a0
[  307.942900][   T35]  ? __pfx_watchdog+0x10/0x10
[  307.942907][   T35]  ? __pfx_kthread+0x10/0x10
[  307.942918][   T35]  ? _raw_spin_unlock_irq+0x23/0x50
[  307.942932][   T35]  ? lockdep_hardirqs_on+0x9c/0x150
[  307.942939][   T35]  ? __pfx_kthread+0x10/0x10
[  307.942950][   T35]  ret_from_fork+0x3fc/0x770
[  307.942960][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  307.942971][   T35]  ? __switch_to_asm+0x39/0x70
[  307.942981][   T35]  ? __switch_to_asm+0x33/0x70
[  307.942989][   T35]  ? __pfx_kthread+0x10/0x10
[  307.943000][   T35]  ret_from_fork_asm+0x1a/0x30
[  307.943016][   T35]  </TASK>
[  307.943020][   T35] Sending NMI from CPU 1 to CPUs 0:
[  307.991394][    C0] NMI backtrace for cpu 0
[  307.991411][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  307.991421][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  307.991426][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  307.991444][    C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d e3 45 19 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  307.991452][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000286
[  307.991461][    C0] RAX: 4595310497d00100 RBX: ffffffff81975d58 RCX: 4595310497d00100
[  307.991467][    C0] RDX: 0000000000000001 RSI: ffffffff8d996d3e RDI: ffffffff8be28fc0
[  307.991472][    C0] RBP: ffffffff8de07ea8 R08: ffff88804b032f5b R09: 1ffff110096065eb
[  307.991478][    C0] R10: dffffc0000000000 R11: ffffed10096065ec R12: ffffffff8fa1def0
[  307.991483][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50
[  307.991488][    C0] FS:  0000000000000000(0000) GS:ffff8880b861d000(0000) knlGS:0000000000000000
[  307.991494][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  307.991499][    C0] CR2: 00007f5784887e20 CR3: 000000000df38000 CR4: 00000000000006f0
[  307.991522][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  307.991528][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  307.991533][    C0] Call Trace:
[  307.991536][    C0]  <TASK>
[  307.991540][    C0]  default_idle+0x13/0x20
[  307.991549][    C0]  default_idle_call+0x74/0xb0
[  307.991557][    C0]  do_idle+0x1e8/0x510
[  307.991569][    C0]  ? __pfx_do_idle+0x10/0x10
[  307.991580][    C0]  cpu_startup_entry+0x44/0x60
[  307.991588][    C0]  rest_init+0x2de/0x300
[  307.991596][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[  307.991609][    C0]  start_kernel+0x47d/0x500
[  307.991619][    C0]  x86_64_start_reservations+0x24/0x30
[  307.991629][    C0]  x86_64_start_kernel+0x143/0x1c0
[  307.991639][    C0]  common_startup_64+0x13e/0x147
[  307.991654][    C0]  </TASK>
[  307.992361][   T35] Kernel panic - not syncing: hung_task: blocked tasks
[  308.054554][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  308.058138][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  308.061194][   T35] Call Trace:
[  308.062191][   T35]  <TASK>
[  308.063072][   T35]  dump_stack_lvl+0x99/0x250
[  308.064464][   T35]  ? __asan_memcpy+0x40/0x70
[  308.065896][   T35]  ? __pfx_dump_stack_lvl+0x10/0x10
[  308.067493][   T35]  ? __pfx__printk+0x10/0x10
[  308.068944][   T35]  panic+0x2db/0x790
[  308.070161][   T35]  ? __pfx_panic+0x10/0x10
[  308.071545][   T35]  ? nmi_backtrace_stall_check+0x433/0x440
[  308.073324][   T35]  ? preempt_schedule_thunk+0x16/0x30
[  308.074964][   T35]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  308.076842][   T35]  watchdog+0x102d/0x1030
[  308.078163][   T35]  ? watchdog+0x1de/0x1030
[  308.079544][   T35]  kthread+0x711/0x8a0
[  308.080753][   T35]  ? __pfx_watchdog+0x10/0x10
[  308.082164][   T35]  ? __pfx_kthread+0x10/0x10
[  308.083554][   T35]  ? _raw_spin_unlock_irq+0x23/0x50
[  308.085153][   T35]  ? lockdep_hardirqs_on+0x9c/0x150
[  308.086730][   T35]  ? __pfx_kthread+0x10/0x10
[  308.088153][   T35]  ret_from_fork+0x3fc/0x770
[  308.089547][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  308.091140][   T35]  ? __switch_to_asm+0x39/0x70
[  308.092621][   T35]  ? __switch_to_asm+0x33/0x70
[  308.094105][   T35]  ? __pfx_kthread+0x10/0x10
[  308.095537][   T35]  ret_from_fork_asm+0x1a/0x30
[  308.097010][   T35]  </TASK>
[  308.098499][   T35] Kernel Offset: disabled
[  308.099843][   T35] Rebooting in 86400 seconds..

VM DIAGNOSIS:
00:43:15  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000065 RBX=0000000000000065 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000069f6d0
R8 =ffff888021a88237 R9 =1ffff11004351046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af78d9 R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fda95439f55 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007fda97785d00
XMM02=031604000000003d 040036c800000000 XMM03=0310040036d8031f fffffff0080036d0
XMM04=0000000000000000 0000000000000011 XMM05=0000000000000000 000000000001df8a
XMM06=88100038900307f9 940800370000003f XMM07=0036fc0300000000 f8034c8e080036f0
XMM08=0316040036ec0310 040036e80000003e XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=dbaf7810ffce0f00 RBX=ffffffff81975d58 RCX=dbaf7810ffce0f00 RDX=0000000000000001
RSI=ffffffff8d996d3e RDI=ffffffff8be28fc0 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1def0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d3000
RIP=ffffffff8b6ee4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000056025715f000 CR3=00000000201c0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
