last executing test programs:

18.270788254s ago: executing program 0 (id=1125):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd], 0x1, [0x5, 0x4, 0x2, 0x80, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x8]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc850}, 0x0)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xd, 0x4, 0x6, 0xe, 0x13504, r7, 0x80, '\x00', r5, 0xffffffffffffffff, 0x2, 0x3, 0x2, 0x0, @void, @value, @value=r6}, 0x50)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r8=>0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9)
r11 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
ioctl$FICLONE(r11, 0x40049409, r7)
sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0)
write$nci(r3, 0x0, 0x0)
r12 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r12, 0x11, 0xb, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1}, 0x151}, {{0x0, 0x0, 0x0}, 0xcd}], 0x2, 0x1, 0x0)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
close(r13)
r14 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r13, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r14, 0x4, 0x3, 0x1, 0x40000003, {0xa, 0x4e20, 0xffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}}, 0x80, 0x0}, 0x886f5cad098bbc1)
ioctl$SIOCSIFHWADDR(r13, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @local})
r15 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f26c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_TXQLEN={0x8, 0xd, 0xfffffffa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40)
r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r17 = syz_genetlink_get_family_id$nfc(0x0, r16)
sendmsg$NFC_CMD_DEV_UP(r16, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r17, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)

17.399524879s ago: executing program 0 (id=1138):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r1, 0x91dabd4b569e2c23, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x3, @media='eth\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r6, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x8}]}, 0x3c}}, 0x0)
sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x200}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x8001}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x8}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x5}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x5}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x88c1}, 0x801)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0x1, 0x1}, 0x6)
socket$inet6(0xa, 0x6, 0x1)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@bridge_delvlan={0x30, 0x71, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0xd}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x4}}}]}, 0x30}}, 0x80000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) (async)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r1, 0x91dabd4b569e2c23, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x3, @media='eth\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) (async)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async)
sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r6, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x8}]}, 0x3c}}, 0x0) (async)
sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x200}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x8001}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x8}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x5}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x5}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x88c1}, 0x801) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0x1, 0x1}, 0x6) (async)
socket$inet6(0xa, 0x6, 0x1) (async)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@bridge_delvlan={0x30, 0x71, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0xd}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x4}}}]}, 0x30}}, 0x80000) (async)

17.394536886s ago: executing program 2 (id=1139):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f001f0055d13eda6ee40c030000002000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r0, &(0x7f0000000100)='^'}, 0x20) (async, rerun: 64)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) (async, rerun: 32)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRESHEX=r1], 0x80}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async, rerun: 32)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000d14000228bd70080000000000000800000000000800010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x20008010) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r5, &(0x7f0000000000)=ANY=[], 0x38) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) (async)
sendto$unix(r5, &(0x7f0000000840)="ae572bc8b3cf544987c623db42cc9ace88344243dadbd2d571444699791b1c373caaa6479a40f750f950c91e8736f6408869b1f4ff67e1aa6c079726c002cc06d413e64c3349820af769df9708192e91ccdb4496b3c15e8017276cb5611c3253e2e4146ceaea3e7bc409a67c58764b6e0836fb621505a68515437e562aa25c3dcc9ac664e9075cbc017453ad9abb995a028eb76938e1cd1913bee223dcb48e7160d70ab367d9d801f409e9db41c1da9727446500e711c2c60beaf8f60cb0982d6c0dd68987cf63", 0xc7, 0xc0d4, &(0x7f0000000940)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4)
sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x110, r6, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0xc9, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xbc\xdb\x7f\x9a\xf2\xb7\xc5\xb7|\xca\x85\xfd\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\xd9\\\xbf\\s0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xf1\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8f'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x110}}, 0x4904)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="640068007b7de5326ac9ef0084992d15354fa1573eeb20c36ab9d6880371847b1c4e790ba8a19d4337b23fb0b787dd466a95a29dc91fa1f8b698deb2c73ff8eaabe7bbe32325785ea172d18d211244124888e341418772", @ANYRES16=r6, @ANYBLOB="20002bbd7000fbdbdf250700000006000b000200000008000c000100000014000500fc02000000000000000000000000000006000b002b00000008000700ac1e0101080008000a01010214000600fe8000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
pipe(&(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
write$ppp(r8, &(0x7f00000005c0), 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r10, 0x0, 0xd}, 0x18)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x3c, 0x107, 0x0, 0x0, {0x2, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)
tee(r7, r9, 0xaf6, 0x6)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {}, {0x0, 0x6}, {}, {}, {}, {0x0, 0xeec}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffff84f}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r13 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0)

17.320429901s ago: executing program 0 (id=1140):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x100000000}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0xff}]}}}]}, 0x48}}, 0x2005044)
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x10000)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001500)={'batadv_slave_0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000f00)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x3], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0xffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0)

17.320031926s ago: executing program 2 (id=1141):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_rdma(0x10, 0x3, 0x14)
sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x4000004, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, 0x0, 0x0)
sendmmsg$sock(r1, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x1, 0x0, @mcast2, 0x807ff}], 0x2c)
sendto$inet6(r3, &(0x7f0000000000)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @private1, 0x5}, 0x1c)
shutdown(r1, 0x1)
setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000500)='\x00\xe7(\xe0\xd5c\xd0a\x16\xca\x03$\x18i\x15\xc6\xf3Sf\x8dS8\xb4\"\xc5\xaecF\xa4!\t\x1fxd\xae\xb4\x90\xd3\xe6\xa2\xfbli\xd0\xa6H\xd6\x1dO\"\xbc\xda\x80\xbd\xa2\xdb\xff\x00\x00{\\\xd7\xbc*M\xd6\xe1\xdb\xe4\x00\x1a\xa2\x8a\x01\b\xc5\xe2+\xe2\x1e\xe9$d\xac[Z\x17\xb2\xab\x81\a\xbe\x17\x84\xfd\xadL7\xca\xe5\x8f\xb2\x9fv=L', 0xff09)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010001fff000000200000000000000000bcb23f0db2d5bc120800784517a1ec82a42841cd0be8f077b7d010a6638965ed7ee0e489f03d91a30fb6652fae0131d7d433685e4501598a8fce842ba7cd6c107c8f1c80aeb4cfc484d5141466269fc15eab385e49550902b61fb149174f2ed457207b18767b1ad0362d9bfddbc4fd77dff54f39c9dff82ed10ffada67a2849652c95b075e590319bdd3af5d8f3c2eecb1024af526b858eb4ce958fef280e352de8d816b44407a933c1de7c54817e2cf203a72675ce930bf71089f0197187d18d8f22b91fe265b68f7dbd109c55e7bc3126e6f7574a91b9e711639c43062fce217f33dc9344caa7b4585adaeb62abad434e5ac05bec1765207a9a5aa3dbb6bc090151ec8d35541394afb3b89522eb6d2f0901218134a1a23800fe9d05dafa7707f7eac35d63140773e13d4dfe050e5ee7d211b8a925f1d49a28bcbdc15704219aca792ba2f4eeda4a8a35ba9ba823e36416e95c660017f1ce32a189c5ae66cc5be4c07a52bbed884d4db3c70a35314d1eced4959f1d9ab8700cced4ea0434de1c31d3acc6038e7dcaebad04bcdbe8fd329d439fda32a287a5212d4973e23a5a331f3a41e2f18279d67eaddb1f8fdb9b991acfff4a91e171fab2e1c18aabc03c027b5333c144d70cd2907c5e5f3da164eaecd485ee6", @ANYRES32=0x0, @ANYBLOB="0c00040000000000280012800b0001006272696467650000180002800a0014000180c200000e00000800090000000000"], 0x48}}, 0x4000)

17.180998689s ago: executing program 2 (id=1142):
accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x800)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000100000061115c0000000000850000000200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4e}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3000000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002000800002773001b000000000008000d00010000006684670c34b619807a3191c2d3ee1f6a35a5408f6572e1ebd95bcdce92702892b7a56335f62390ee9d2786b652415fe47935c9f28511c7a8fda0acc634d7e333f39da688fdb2b546e7a388f054d70c2045e84715d0bb00"/122], 0x30}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80), 0x36db40, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="09000000020000006d0500000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c7e178cb110af336550dadd84be33d4f8a2a24686b9f2a3d55fed4d4fb4fda", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r3}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r3}, 0x38)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r4, &(0x7f0000001140)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r4, 0x1)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x4, @empty, 0xc}}, 0x0, 0x2}, &(0x7f0000000340)=0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000004000000000000000300000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000013000000850000001500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0)
close(r7)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@ipv6_getmulticast={0x14, 0x3a, 0x300, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0xffffffffffffff73}, 0x1, 0x0, 0x0, 0x20084001}, 0x20040040)
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x89b0, &(0x7f0000000040)={'macvlan0\x00'})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=@newqdisc={0x1ac, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xf, 0xffff}, {0xf, 0x8}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x0, [0x0, 0xe, 0x6, 0x2, 0x0, 0x9, 0x9, 0x5, 0x10, 0x7, 0x8, 0x3, 0x2, 0x3, 0xd, 0xd], 0x1, [0x1, 0x2883, 0x85, 0x81, 0x10, 0x0, 0x9, 0x7, 0x7ff, 0xc, 0x4, 0x6, 0x42d, 0x8, 0x200, 0x4], [0x36e, 0xd, 0xeed, 0x5, 0x200, 0x1, 0x32c4, 0x0, 0x6, 0x0, 0x10, 0x7, 0x200, 0x29, 0xffff, 0x3]}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x4}}]}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x99, 0x0, 0xd, 0x1, 0x1, 0x0, 0x3, 0x1}}, {0x6, 0x2, [0xc6d8]}}, {{0x1c, 0x1, {0x6, 0x5, 0x4, 0xf, 0x0, 0x64d2, 0x0, 0x6}}, {0x10, 0x2, [0x0, 0x7ff, 0xf7bc, 0x7, 0x3e, 0x7d5c]}}]}, @TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x4, 0x7, 0x64e, 0x1, 0xd1f9, 0x7fff, 0x6}}, {0x10, 0x2, [0x5, 0x6, 0x2, 0x683, 0xbdc7, 0x1]}}, {{0x1c, 0x1, {0x8, 0x7, 0x6, 0x1, 0x2, 0x6, 0x8, 0x4}}, {0xc, 0x2, [0x5, 0x4, 0x101, 0x8]}}, {{0x1c, 0x1, {0x1, 0x9, 0x7f, 0x9, 0x2, 0x80000001, 0x400, 0x8}}, {0x14, 0x2, [0x0, 0x6, 0x4, 0x5, 0x11c, 0x3, 0x4, 0xfdde]}}, {{0x1c, 0x1, {0x6d, 0x5, 0xfffc, 0x0, 0x2, 0x947, 0xa4f, 0x2}}, {0x8, 0x2, [0x722d, 0x40]}}]}]}, 0x1ac}}, 0x0)

16.44055523s ago: executing program 0 (id=1144):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="da17530080ff", @ANYRES32=0x0, @ANYBLOB="08d10000000000006401128009000100766c616e00000000540102800c0002000e0000000c0000000600050088a800007c0003800c0001007b4b0000000000000c00010005000000090000000c00010002"], 0x198}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x22}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg0\x00', <r1=>0x0})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000200)={@broadcast, @multicast1, <r2=>0x0}, &(0x7f0000000240)=0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)={0x38, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x802}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', <r7=>0x0, 0x2f, 0xa, 0x8, 0xff, 0x8, @local, @empty, 0x40, 0x7, 0x3847, 0xfffffff7}})
r8 = socket(0x10, 0x803, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56741, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0xf}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x21}}]}}]}, 0x48}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', <r11=>0x0})
r12 = socket(0x400000000010, 0x3, 0x0)
r13 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x1, 0xa}, {0xffff, 0xffff}, {0x1, 0xffef}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x5, 0xf, 0xffff, 0x17f32da6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r15 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r17, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001100a7cc4affeeaf541d002007000000", @ANYRES32=r16, @ANYBLOB="00000000100000001c001a80080088000a00", @ANYRES16=r17, @ANYRES32=r17], 0x44}}, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xe, &(0x7f0000000400)={@private2, <r18=>0x0}, &(0x7f0000000440)=0x14)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000480)={'batadv0\x00', <r19=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'erspan0\x00', <r20=>0x0, 0x80, 0x20, 0xfffffff9, 0x5fc, {{0x13, 0x4, 0x2, 0x7, 0x4c, 0x66, 0x0, 0x6, 0x2f, 0x0, @loopback, @broadcast, {[@ssrr={0x89, 0x17, 0xe6, [@empty, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1]}, @timestamp={0x44, 0x10, 0xdf, 0x0, 0x5, [0x3, 0x80000000, 0xd]}, @timestamp={0x44, 0x10, 0x1b, 0x0, 0xb, [0xfffffff9, 0x5, 0xffff]}]}}}}})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)={0x260, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6c8542486707e2fe}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x260}, 0x1, 0x0, 0x0, 0xc0}, 0x24000040)
r21 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r21, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES16=r21, @ANYBLOB='\n\x00:'], 0x74}}, 0x0)

16.379275894s ago: executing program 2 (id=1145):
getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, 0x0, &(0x7f0000000200))
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0x6c, 0x30, 0x100, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0x6c, 0x30, 0x100, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000071000000950000000000000084ae04f97a062ce0c2301afe33f640f5e2c61e2be0873880d420608b47536ec9fe3f901b1479a27ef82fcc67a4ca1a12f18fdfa31db5237f5f835f898a8866800e659c81ceaf10f1f2b4d907f23c4e12064c2a"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0) (async)
listen(r3, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f00000003c0), &(0x7f00000004c0)=@tcp6=r3}, 0x20)
sendmmsg$inet6(r3, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0x1}], 0x1}}], 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x10, 0x3, 0x0) (async)
r6 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', <r7=>0x0})
socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
bind$netlink(r9, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r10, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket(0x1, 0x803, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x44}}, 0x0) (async)
sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44800)

16.276838953s ago: executing program 1 (id=1146):
r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x60, 0x80000)
recvfrom(0xffffffffffffffff, &(0x7f0000000000)=""/220, 0xdc, 0x3, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @rand_addr=0x64010100}, 0x0, 0x3, 0x1, 0x2}}, 0x80)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x2c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xf}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xb4d}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x40}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x7fffffff}, @NL802154_ATTR_SEC_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x48805}, 0x10)
r3 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
ioctl$SIOCGETSGCNT(r3, 0x89e1, &(0x7f0000000400)={@remote, @private=0xa010101})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r3)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r4, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x6a}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x60, 0x5e}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4008044)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000600), r1)
sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r6, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40880)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)={<r7=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x88, r6, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1000}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '\xc8)'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfff}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000010}, 0x4004080)

16.1698941s ago: executing program 1 (id=1147):
r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000080)={0x1ff, {0x4, 0x10001, 0xff, 0x90, 0x6}})
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={<r1=>r0})
ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000100))
unshare(0x20000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x11c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x35}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "97a14730f8627b6e588a759a59f77ab8d232982b3fa98e20"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "64ba30eb547d9ceebd6cb04b3c7ba161d969eb1eb5f5df67"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a59376ddf5c757dd2a87ff2a89a0f837fc22585bddb32c96"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'macvlan1\x00'}]}, 0x11c}}, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000440)={0x1f, 0x0, @none, 0x53c}, 0xe)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NFC_CMD_DISABLE_SE(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x224001}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r6, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x800)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r1)
sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x84, r7, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x4004001}, 0x44818)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000780)=@req={0xffffffff, 0x3ff, 0x0, 0x1}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0))
r8 = accept$netrom(r1, 0x0, &(0x7f0000000800))
recvfrom$netrom(r8, &(0x7f0000000840)=""/154, 0x9a, 0x10000, &(0x7f0000000900)={{0x3, @default, 0x4}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x1940, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f00000009c0)={'pim6reg1\x00', @local})
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000a00)={<r10=>0x0, 0x3, 0x6, [0x4695, 0xb, 0x7, 0x903, 0x8, 0x1]}, &(0x7f0000000a40)=0x14)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000a80)={r10, 0x2, 0x8}, 0x8)
getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000ac0), &(0x7f0000000b00)=0x8)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003e40)=[{{&(0x7f0000000b40)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x6}, 0x1c, &(0x7f0000000d40)=[{&(0x7f0000000b80)="c3c97c38b387af4f3b84703e54a00df98ed56ea4c0f6dca4c092446d1c1aad8fdb510a167fc555b487f8d058f3a284d7a3c04ebfc2583a2458a939fe2d72527e841f8fc7b2551ba199e7db", 0x4b}, {&(0x7f0000000c00)="de98e5b63f9337d45dc1c3747399ceba4795a8bc89f3ac7fba3e6a1a2352742a0a933641c46b404c0dc603b27e5a43e76c526f9ac9573062d520736ed80bee7226ae5593072060ed77936e64cc65beca7609fac8db612612235ed7b8d320130242d28b85707e507949f4f339121a140fc3cca0a272757235edef2e9b9365dde263e0d1d28e535a1c61ee978bbb3898d88650fd857d8303241c92dfca38665440fcd80fb3fc16d9fbc5d1a786aa54d33d9a03ee5bb63951b1ff9ebc", 0xbb}, {&(0x7f0000000cc0)="fb14b6fca4fbb086eaf80f938ab81868d5e4da9da6756cd0956765c8c5ccd1146e55069bea67e75374942bb847444f743b5941d453c337739a1f9afe4ea374c47f79cdbca9a6722c7ac33f08cdb7ff6c51275d09136d3928eaa507bb5ca3", 0x5e}], 0x3, &(0x7f0000000d80)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x33, 0x4, 0x0, 0xa4, 0x0, [@mcast1, @loopback]}}}], 0x38}}, {{&(0x7f0000000dc0)={0xa, 0x4e22, 0xe7, @loopback, 0x98}, 0x1c, &(0x7f0000001000)=[{&(0x7f0000000e00)="f20e6bb878f5ca0235dabcb3f020965e5ac87bd9dcadc2179de1b1a1e0b1d14cc0ccc0322b46e44cd46f9bcb0a2804b31262afb63d025f2bdc391aedae482362b15a0e0275b3810875bd49d3e04fc43733a568d5aedee0401c16968b748ada100b4e21b66d0db25ca89b769c97cc44de5ad26b1656e28470c46c562b61e616622f7fd5b9ab4a18fc07ae0ad088a30a268af98c5cf7a7ac9ef06a08810d27e7931840dd20", 0xa4}, {&(0x7f0000000ec0)}, {&(0x7f0000000f00)="b77b11043eccaf235ab67b9e6ef41f7e72996acd6a137f4e6f6ac4918626de26b329127a8d3df5540d5e21ecdf8112fa1fc749c74da011171346eb302966713d5084b1cab7b7a6f5558241ab0c85923a63b489f13e3e9f07af526fdaac2ec1a37cea7ec2b379159dca4a505eab0a966caf1a75b49509f72883c36f846a4c0b49616be04bcbf59f35f7cbc66287a8b814bca9920edb820d56491c08ac9c28820c9bef0d22b6fc6da0cd34b0ca468828d5abc1664fb3909cf170dfdea8a6bca24328baea4c42ae311f506389f99322dbf914bf908a0556f86ee22fe3f785f6e536a2441a8f81a9c70d61399a7d1da74f61cb6cbf1f2fc65f23d212adf52d2a21", 0xff}], 0x3, &(0x7f0000001040)=[@rthdrdstopts={{0xb8, 0x29, 0x37, {0x0, 0x13, '\x00', [@pad1, @generic={0x8, 0x4c, "b88be9208261f4ba6af9242e702f723727aabd727b632666698c36acc91ec3bd9d33a5a5ca39e7fcc7614b52a762858f0e941eb47f6c1ae1d69811b9e6d27b3cf80f062ce24e9656946f44f9"}, @calipso={0x7, 0x48, {0x3, 0x10, 0x1, 0x1, [0x2, 0xffffffff, 0x7, 0x8, 0xf, 0x7fff, 0xbb, 0x8]}}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x2e, 0x2, 0x1, 0x83, 0x0, [@private0]}}}], 0xe0}}, {{&(0x7f0000001140)={0xa, 0x4e24, 0x6, @private1, 0x7}, 0x1c, &(0x7f00000023c0)=[{&(0x7f0000001180)="bc99037af2527baa6e46679277c41fe8943e18b8a8251f324222612f0023518d3ef23304d50fd7ec1b8592659835abbc8456626cc8f880f08d364a40b88004afeefdfd6e1b24efe7abafb525c7e692489097e5bb8c99b8d73edabe91859c91594e89d93c47340e707f6594", 0x6b}, {&(0x7f0000001200)="a766c7c3bd9f3127308fa96652b65b2870ac77a2ad5f929fb0756f1009107161e4807bc4be2a8699ca35c4898ec36cc6c4cc1deb14017389450e943f5f450e65793780896f08f3c5e61433e5dee052485b7e237169a717d66f08c430526627bdf86ee17f40c2fd1fe0ab2483c83918e602467dd54fbd6f60b67b55d66931cc3b68866f26db47d523aaa3d58463e912fffe517706a536dddb3a", 0x99}, {&(0x7f00000012c0)="cb8dffbec55437b1383871bd18dd3217fe7b4e20562dc3174b6f02c42eccce6aa56ecbf03173433a60d3d109bfa233a4ad6810599bfb7015f354dda7d7289649d88e68736a50f29c2f1dbe7faee87ace8aae3a86761d4ee690549dbb7caf5c35c0f533cab721daf850e79e81ce8c8d26b4f6af2459c6958e23e07144d426bcd3874645803c5d9e979b1ae06b980282f962530bedad9d0b64e5418b7a53342fe9b7fff3dffeeb77da5d8f6499f0ae9bcbeb2864d122176a252f3a41dbc1ae757e388542d7d869124125e91431b846a1d5ea3838a3faf07ee8ac23109475741a687cf5931799dadb30d96f3eec6fcffb7430a598892fb3ff220c420cfd770e6fbbb8e5fac9d4d0a9070935bab57604b220c504d4a3e88dee045ad5d770d4151231cc30f4a35eeddd79d759b6a26dd6745dbbf7578facdd3aed45392c17333a6faf0892f1ad3b98a97e6e0b202a3479e8dae72b7371de27e9f516216f3a291d2ee1600173596f0b5b669f387abdedbfd2bd64c0188557f5130efc25f6756dea11208b4c2b5be0dd1df8fbebd9f234625c071340c74a2f2b5b9c05b63fd05343b1381e29399e363d34f11f71db4351920fed7a3d9c84384d745016a5c4730a70132fb0a2c20b37eada27c56161726a6a14c83493aeb284500bbfa1b889c4a62757aae65b991d2475b53d1232bcdaca3afda92ce9bc57e3b6c6ef314cf983fb040e5bb93f0b12c0af3d6f2a0007f311aaf34d9b0a2d5647f84112af210c2abd3a350486edc2cc12ca0d2fc757f5b71bf899da6be517f7eadcc32d3646ba6c1ec3acdd8e8732bf151b0316341a5dd6bb09bfd3981a91f0feb39f4eb44be75afc2c67b368e6e939c616d9222d88de87175b352d5cae21ca873322a7d5a1fda88abc29782b2fb04af89b2f73e1ce2fb617a18fbe889ca6c65750f2114dd893b01acbac34957cb3329b21c88ab9c435eeb8cd113be759b0b0bb8424c446bd2c57f3aec7cfe2ae0853a51245c538b42792ff9796c82560c61cd2cd79fe0837a53698273e9c0e7a13eb0f23e7a7da822321c62921b9fdf24947ba2fda9a7f9ead100ff923b5a81fc8ba435a91247f95e5ea3296cff9831e102e292ad56ca96bdbc9a187292cd3dde206c0593a67fcc352c4705e0f1f3dbf90bdbd90b2b952d8ec6a2c366116d0fefcb1d2c60c9c9c7433293b1a37dd8227106173153d10594017d5e52bc477b893e465c0a7bba8846f015d5faf4c2cb83c89d2c6b51b33f805f9b39d2a8d015e515280b764acfa018b446b7ffe19e46f83bf5c28338974ad0ee663f0875197507a49e25f00ce611c6d03c82903a6935f08ee92598417dfac29fe5f0be7af723d5ab31fbc17ebc3fdc07b1a17c66b2b90fb335f48b82142eb2e2a947d10b8221450bca7f9f0c674e9e129da98f52f51ddd6c543176abfed5e1a527765786140e237907f84ee21fa0c5ae2ffa21ee79ef244a30007b7aba7ca4309f05a46c57f9c4629481804529acd0bde4634b54f5ebf828f6657cb19db1f8587f9ebc709f67ad6dcb43272cdc5eb0fb2b6a52adf8dff8c56e06898b63de996f82e2d4975f01c8d39d111b084671161332980d8786082e6ea2b5e02ba6ac99099be9794b3d21a7a089c9cd3e4e28bedbd14ac3605f9e775483d5c7b92e241bbf8632e2bdca86ca242d4772c49bd8f0be5a16cb05aeab2e16b4896fe4f82ad03c800f490b60e7a4941b4a832a745678ab116bb40150b215f243a52debec165fb6905d6403e975b40462cfb782c03111ae442360dcf41bebb1713f7ec01134d7d9244a54429c4cd90086064dff579b194080b4477b4499993e74c04a8b368b738b2d6ad6aeeca4dfb9849134d7de35cf1d60887f00eeae06362fc1692025ad27341776e72525ed9d26d9f893e73f45d43a64e230c8006e8c31d96e40d0d4c639820c2b0c9df88adc747993af9bd35d3cf802ac4fc43f90e2dbc63fbe61d2ed3ed2ad5b0a9044c3d64edaa859869b62e1c550a1da7b4f192ab37c52c4f8c37ba7758e94b0d4dd5f8e3271b0368172f5774e4337d65095ecf7d04b6eab43ca3fea6e0cacd3027137e96472bf051a7d3f2ae6027af41bd6e4a041b0869c3659f4a603d4e414842735c73dfdc9fffd9bf4caa66e804f025ae1a1a9d6e5f84edd912f77dd5c987a420bb089e7613c54e1e815146bb474cd889cdbb2261e57cbea1a3b0f413f2f3e9f1a44cb3a363ef6cb0293253c99c18957ec6805ae001348f6812868654194013233b9c0b5ceddc07ec3cfb4dd96c9dc42f349e15840a492bd20eb0ba0cc7854c633d7943a285060719a64697c3e19767d2cc50c84e51e6a18779dcbfda718a7ce03f3876d5674e80eb39b2335f8bff07c4cecdcb44769e73883bb51641d2269d2ec86e606a38fa1478476d2efd142a9b4c624ec38fb4baa600c550a3127cf25626ec094f15666f1c4d0432d060a34590aaf968c1a52dabbc71648b6df8bc6313d8e853a0b8db4da5f08c0875e985464129e9a5b13b5731e21a7a440d9514e09892505def149ba9417ce5f799e98524715701275134746248fb2249513a4cfd5a52d30f70cb938cc1252c54c6af5407ff0a51c986058222b0d1ac9238290adbb0f1be0cac56592e37a083f6c8bc61e981d2de52af0248eef0546ace40f31d966292bf3cfe7a63ffc2dd6716bbff837bcee6f725c5474b386ebf52591c452dcf61b5cd6599db9bcec9fe784fe546cb7f755c44a1358c676aa9525e7a29a2d1dd5de1973c6c5582e992d1cce204394d532d85f2e605457745467811672fdfc6f4b24814a9e8fe8871ef79d0457b680fc0eb6553a86d4afb849df03a2e078009a892ce0fe612473d9761ea8db9968b9f7054a6832019cd0768856068e5f2c0f7d21c390d10c0b5a46f603a8f5f788afb1d3e68105413d9c9d84c4023c5c2661aac37f0ed495341851b363baa8370007b0a6ca557ef17da8ff92b0c8669a307f7967b5c7e30a626055be1fd7c127a3c1a3089ca0c5c7b0cda4608499800cb924405093dda7cc8c3c8960c71a6b08a883ff5202f4de29ee3f722a1668d5b29aef36d6d7232aac82936b7e997f2a522b85ec34e273528459b102b37db84ffa3ff86dea2b0f94ffe22696e56e54eab539540960c927fadc0769eaebca18187efcbbe9ab66aff35888a4b7f5fedbea92b11772ec77f99dcf839e42af968568f20ecf28ba02b9eca7dd5997c6fd6a26e8d927f116d609bda2a88e5b1209da0a4fa68b23d9f1c14e38b51c71be0cccd97e206ea931f7e88d19f746f4a70268a3271f57d52442b725f6a7a48e6255072f32566acab573158afef81ec428c9ac6177b2d648fe255f8f7a7f32835e9b815fb53284e39bf64012f6cfd58e7765c4289a78f1cb2c3d927fb7016b61cc3ed4131ea50b6b65d0b642cb13d2511922fbaf7ead6869a48f33ebeae3270b947cdba540a7db6f378be3cb9b04b4be788952a2acf2d930eb50d34e27e9fca48ccbad24dbb05e808b08103a851461059c3c0b48f9f712ca228cccf7e272476618b23b73c8673468d81ad8fc47dd3c2ba3eb146daee58e0d9e395e433b79408ae2872b83cd6eb6b68e8e5cdd356e53f42cfcd50cb115f70ddf3049d0830ad727882ec80a4dd48bbdfc292021a2803970d94f134fd76a9fa9ddc332870cf28e65ec4406c059b80b568b798d4dfaa65fee5d6607f7a732f0f3e7a66186af72d184e2d1a545da31b9db936657512c4ae5bad95529d07bb4bfb6b73cc74c2e4116db92106bbba14a3ac5b1bd32e3bd53aee025ce7b2049705fdeea64b55b76e36595b4c3db22bf866e0f23f9fe255983d2b9cc6cd375d5b0214314ff6efe2dfb5a72de404a8a466e95d1dd9c169afef59e6d29264bb9ee0000bf2458bfecb6b1add1dcb69713e17de674cd275af6d621f4617c7197ee1ea7ae0b400b35858eeb48aac51305669934c1c2e0119bd2acfc7bf408aad715c3c5dca0e18e134cbf6c05496281e79a46151f57d7072b15e7ecf5c2e1a037370709ce37249c2c88ba47382f7fb529a5f0eedd8c11c760f20aab452dfc71bcf8cf28e0c5693556252b444e26dbc78cf0d0df3417c9f154143f3dcde39eccebf4ec555583dd64b4801648cca3c7a63e9800da6de1be9fb9d1436545cdedfab382db091f5f1878d3398b51e201453cfdad86b43b15520fefb44385b79e6f613552e585cf6c34738978a49c0731554dbc98a86aa3cd39550265be0379c1e89278e5034839c20f600bdd9c5a575a9bfd395a6ef97b668fda9b7af09912b704d86615c159e78af3f11345da0d2d88ee4826d895fa16d58733c6d08a4399b13417c5a2697275ad13b35fc3cc999108bfa5dfa2d6125657b8f1c8a8611071a1757ddad18158df41e493ff0d982f530e852d140fae3b6296420d986455f672ec1a8422d89b8eec6bc5601a9c7b4b3637a518058a5785df6f53b6129b837f487b13b0d43e16d7ed134803c1e71f0655561256d739d9780341bcfd9657105fb995e2eae605f2a0843ba4e126c6d3c1cb3211f4bb1d4ae65faac895b6cdefeb404f675d34a4e077a822bbb3869f27151aaa7014a70f849f6162c28bd4a5c38a46d0868f2e285d58215afa00a130b6d4ef0bd2445e1a3f3e1dfb7f4253c9314b4a8d29072d82cabec855cb3526126e662ed78aeffb259c2f690b84e2266cc9bcc6e9e5c1bdfc98c73d2bc4f621f4cbd4c678018e920c10ff4443393a4e4eb95af6ba2efb6fbdb2d6c17aa068ee7f5a0ef24e581c81cc5f77cd9c794f9ad52f8c90cf801d1b32b74c46b2a18783274fae9137ff1ffacc0d5d41dc7d5142b798f73f3ee27c2dc9503436c0fd66f2c1f798b8ab0cfb4b1a43363fb41a7329a9d404d946f6599dde3397af27edd986409e487f395b1c90e6e4d02ca60305e3216218efb7a3cefd8a362babc8e02ebad2122e021c06f44e0584249f62141fc7b5ccf508a9675c099364da134ec7771bfaee803e1e76b5172f02bb49dffaa3e1e495fc92cd0695d739134e8d2664528bdf1b134c8fba26b4a43705c41a55bae9799816048e38b032d0bb6b9b9d8f0e6acb08c0ee2c27925a66573c847680d75beff84596af1a8a73a5545ac153b34507eaa910a592b76855cea72e3d51553be3df187cc60716ce2243163702c19d8c8574d24d157f17b6f5a13cce11dde668580d7ae96fd55fc4c2543e730a659fdd250f5129fffee4b22ef3eba68befc2b60f63e2693a3e18d7dccc73227814581970b1d927135e641a593c19a63df125864dec37013499bd7de52c65d14be2161da25e6ca85084dfb9595510159aff8ef2ca4e515a9915ccdb2264ed6147e775e5f6d6cc124b1b004e85d31b682bd04c5dde2c4aa82610f96cbb19cf96f6eec1116ab5a6612ea4b1c1a3121f72f955bc2b107bba6b52b3dceedba52bef287fddec4a108eb2b07492efcfc7601cce6e2953b42e555fa174ab55cab7ce88977e87220812b4d75178e36894a2d3624640a6071e3925e39ddea9d4eb208d7f8408967b5e4245374440e711e3ce728f4287a3b3f94f21a936fb40d5a38e7879f9e6d4085d23d231516153f1c0e34372c6439fee2bde6a57e41efa446fd1cabd112c58a1356962d4b7824aaa942c3440bef153e2eea04e69f6a36b7f5d10886058df88a8ad8d8ad84933b9a839f289b7adb94368c53b55abd733010d82a98946e6886681b4b1d719f5a61117f5759b1d15625aaf9fcaeb955941749e2cc97aca9009a9c29e6c74c9d1713d8a43afe9fc3cf9f4a432dcde9628d273af4be94dcb4bd984670", 0x1000}, {&(0x7f00000022c0)="c7769a82af45fc9bb514c8f95920705975c27c09c832491836b85e5354e92ae936e2829b284cd63085882126906ae0f47a4580ebaa1b7f16088ba9331e6395c727347f55e7922264199d9b38fe4f65849c58d0119e29f3a1e1cc1961e8ef2101fc56e9dab4c0acafcf07ace2ff8557978d06bebd797253e14d6798897c8c4ef1feaab77400306f0080e76683c804dd628ebde507cfdba6337024c7de", 0x9c}, {&(0x7f0000002380)="d53e90e5a512089eeaa3e4f47e0b62", 0xf}], 0x5, &(0x7f0000002440)=[@dstopts_2292={{0x20, 0x29, 0x4, {0x62, 0x0, '\x00', [@pad1]}}}, @dstopts={{0x78, 0x29, 0x37, {0x1d, 0xb, '\x00', [@pad1, @ra={0x5, 0x2, 0x7fff}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x6}, @generic={0x7, 0x46, "89813316d7bdb5168f1fee3bd6bcdda466fa8cbc59fe7aed57da9539eef12b6b97135ee5317a7029f752f1af88bccf46c0ed8bacacc4eb55e7d32e24444da8fe1b101a2c7328"}, @enc_lim]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x80000000}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0x32, 0x5, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x0, 0x4, [0x8, 0x2, 0x2, 0x1]}}, @ra={0x5, 0x2, 0x5}]}}}, @dstopts_2292={{0x170, 0x29, 0x4, {0x3c, 0x2a, '\x00', [@generic={0xf, 0xcc, "0d152bc087c36254a3ce441c18460b458530a83526b779cc642ad2ccae1c3d4807a6a8784557c80a6d0feb88cee947062708076840094e1b68ec5851a79c2e0344b6039a5ceb6006728897a244f29d3fdef9903d8910257a5049859d85c019ac96f5feb3bc7ad2bb246c27e595485004501cc2b61217f4a73df487be29392c9121a28a9570485506a8b9fd2e8925f3cb8ee62a6c888447e3d7529adb6dd0d37291530712eff21bbecd2583b5c522bf61e667da2e561214c81008c6872d8f36c3a402afed663fd66c25157f38"}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @calipso={0x7, 0x58, {0x0, 0x14, 0xc, 0x4, [0x71, 0x6, 0x1a33, 0x4, 0x8, 0x6, 0xfffffffffffffff9, 0xffffffffffff8000, 0x200, 0x7ff]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x28, 0x29, 0x39, {0x87, 0x2, 0x1, 0x4, 0x0, [@local]}}}, @dontfrag={{0x14}}], 0x2a8}}, {{&(0x7f0000002700)={0xa, 0x4e23, 0x8, @local, 0x4}, 0x1c, &(0x7f0000002840)=[{&(0x7f0000002740)="aa77aecd2d3857e567754c49f5948a93f82ecc51008aa85f4435f32400a7e012a3447d921eead64b1b55044f48735d268f4dbd5035c01d439d799bbdac1b57157b0e41fb6dc8d6fbba3726eb83b78e3bbe6fcb05d42cd1ce507d0252465ec145b5fc58943918ab48e6c859a2403479dd618475bf78cb672d98eaf9722283b8da09156e140a2e83e2033efd8c82b4356e74ffdf4d4d98f8324e256e509479d7fa6bb3504989205fc2ef47b92c075df1c6e209c3d09c199f3374180895121537a4f506d990b1cd1def329dde779b63de6cd6196e564ae823039bf7214dd0d27a03c077ea2ff9d8a2019f5781aff60738fe1273c925", 0xf4}], 0x1}}, {{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000002880)="c5c0764ec978c0bb4f69e8605a37813c1b54a55ffcd93144bce258f8dfa8cacaef173ab1a2da04745182a8c0cf16be02574ed3748e2ee18d8539c6621ba3e35f715e34fb2c10d753e5", 0x49}, {&(0x7f0000002900)="5d4cec9504a9046dfeb2aa1285b2706332e61a3e99741a5ad32e5cafaaff646a5adf75f8539bcbfb", 0x28}, {&(0x7f0000002940)="a8ef8937cc68c3b8837e0f68190f26b188c5dc3a827a458d923767a941e21435a690b695c4f42b5945a54680e2bf9467cb6d34770481b7950945a32f5545cb3f25e19d90324eb50a0587518b12b7e8a26baa377747f54689e0199dd99d65342cca7e9261ba842f0909038c1a9b088e46c2a054f07bf073729e434a35053f61df95727b5de2b8415b35e74eca3ab90513c922d65c40a0acbe0d7729374710565f746d5b3eee8a0f4757bc64b656b204c981431410ba71c5c08108bdd0b5af3ebc3806aee4d67d18f4c9399c6e2086", 0xce}, {&(0x7f0000002a40)}, {&(0x7f0000002a80)="76660a2ecacc743547b87a4f06eb2fc75d2e398e39ffd21af9177660773fbd0955cba83363342efeae5302fbadaf34a8c3ae8fd29af8fb7cdd9f8b8461c7d95f83e7bec807cbf26d8ea95ce402be86f97d20f4e14a3f52bfbfbdf0553014598d907e2b5245c85dd4bca02e606d9f9a054655ffb9e84fa464740b4223d35efa49d919160ead45bbcb68733b5d62e3759fa5dfe03ffc039c56b4a67aa240d4ad1544bec22c958cb7c28810086e9410384d23c916e1c333bc223070f2b2291e93da20d100fa883c443f911dc2c8e3663b7590b5b8b553208d60db3d162fef253b792e2027edbef22043222ccc731fcb2b38145569e70d", 0xf5}, {&(0x7f0000002b80)="d3752728eb31df50e676d59aa3bf41d46d32fa865b7d6a405e8bb754f38a43c3febf79369e6fd48f2194b075a98ea53216d348ba1d5a98b6", 0x38}], 0x6, &(0x7f0000002c40)=[@pktinfo={{0x24, 0x29, 0x32, {@local}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xc}}, @dstopts_2292={{0xc8, 0x29, 0x4, {0x3b, 0x15, '\x00', [@padn={0x1, 0x1, [0x0]}, @pad1, @generic={0xb0, 0x66, "ffee999e80b0c95bfaae57ca0c89e5f444bfbe716703dbe284bcbf77996aecb9e3b7a8eafcdd0a6c04045f25caf70d841ba0ab7adaeb125c96c6b29cd2998dbcadd5da8e24c4233e1df81aeb6d727664adde38c8db2133f7697109701807d2db0c99811d78d3"}, @jumbo={0xc2, 0x4, 0x80000000}, @generic={0x2, 0x18, "93c6aec628d5dc0582dac757f67abf2d721bde836bd63e99"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r2}}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x73, 0xe, 0x6, 0x2, 0x0, [@dev={0xfe, 0x80, '\x00', 0x18}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @dev={0xfe, 0x80, '\x00', 0xf}, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @rthdrdstopts={{0x1020, 0x29, 0x37, {0x33, 0x200, '\x00', [@generic={0x3, 0x1000, "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"}]}}}], 0x11f0}}], 0x5, 0xc0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003fc0)=@raw={'raw\x00', 0x9, 0x3, 0x320, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, &(0x7f0000003f80), {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5, 0x4, 0x1}}}, {{@ipv6={@mcast2, @mcast2, [0xff000000, 0xffff00, 0xff, 0xffffff00], [0xff000000, 0xffffffff, 0xffffffff, 0xffffffff], 'syzkaller1\x00', 'veth1_virt_wifi\x00', {}, {}, 0xc8fcd497eb091e40, 0x9, 0x7, 0x6}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@srh={{0x30}, {0x3a, 0x88, 0x0, 0x2, 0x200, 0x1200, 0x902}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x5, 0x1}, {0x0, 0x1, 0x2}, 0x6, 0xb}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000004380), r5)
sendmsg$NLBL_MGMT_C_VERSION(r11, &(0x7f0000004480)={&(0x7f0000004340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000004440)={&(0x7f00000043c0)={0x50, r12, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x16}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}]}, 0x50}, 0x1, 0x0, 0x0, 0x40044}, 0x48010)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000045c0)={&(0x7f00000044c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004580)={&(0x7f0000004500)={0x44, r3, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x6d}, @void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f16f2737fbc25b2cca62830270ac6b2ae22250fd6cb5b80d"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20004011)

16.086857565s ago: executing program 2 (id=1148):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x2}, 0x20)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1008068, 0x4) (async)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r2=>0x0})
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r2, 0x200000}, 0x10)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r4=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) (async)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000053000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r5 = socket(0x2, 0x80805, 0x0) (async)
close(0x3) (async)
r6 = socket(0x2, 0x80805, 0x0) (async)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0) (async)
close(0x3) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={<r8=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x20044050}], 0x1, 0x14) (async)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x1}, 0x8)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)

16.08630182s ago: executing program 1 (id=1149):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x100c3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r2, 0x0)
ioctl$int_in(r2, 0x5421, &(0x7f0000000240)=0xfffffffffffffe01)
accept(r2, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}]}}}]}, 0x3c}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4)
sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840)
write(r3, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)={0x2c, r8, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048814}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x3, 0x8, 0x18, @mcast1, @empty, 0x8000, 0x80, 0x8000, 0x4a91fb1}})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e86c0d85ff9783763a0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)

16.084131683s ago: executing program 0 (id=1150):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$key(0xf, 0x3, 0x2)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000400)=[{&(0x7f0000000180)='\r', 0x1}], 0x1, 0x6)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
socket(0x28, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind(r1, &(0x7f00000001c0)=@l2={0x1f, 0x5, @none, 0x649}, 0x80)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async)
pipe(&(0x7f0000000080)) (async)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
socket(0x10, 0x3, 0x0) (async)
socket$packet(0x11, 0x2, 0x300) (async)
socket$key(0xf, 0x3, 0x2) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) (async)
vmsplice(r0, &(0x7f0000000400)=[{&(0x7f0000000180)='\r', 0x1}], 0x1, 0x6) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async)
socket(0x28, 0x5, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bind(r1, &(0x7f00000001c0)=@l2={0x1f, 0x5, @none, 0x649}, 0x80) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async)

15.940390952s ago: executing program 0 (id=1151):
r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x60, 0x80000)
recvfrom(0xffffffffffffffff, &(0x7f0000000000)=""/220, 0xdc, 0x3, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @rand_addr=0x64010100}, 0x0, 0x3, 0x1, 0x2}}, 0x80)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x2c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xf}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xb4d}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x40}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x7fffffff}, @NL802154_ATTR_SEC_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x48805}, 0x10)
r3 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
ioctl$SIOCGETSGCNT(r3, 0x89e1, &(0x7f0000000400)={@remote, @private=0xa010101})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r3)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r4, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x6a}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x60, 0x5e}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4008044)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000600), r1)
sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r6, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40880)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)={<r7=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x88, r6, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1000}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '\xc8)'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfff}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000010}, 0x4004080)

15.939876639s ago: executing program 1 (id=1152):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e21, @broadcast}, 0x1, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)='team0\x00', 0x7f, 0x32, 0xfff})
pipe(&(0x7f0000000480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00'})
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x1b, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0xf}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x800, 0x0, 0x2, 0x1, 0x773c}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'macsec0\x00', &(0x7f00000006c0)=@ethtool_ts_info})
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x4c8d0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
bind$bt_l2cap(r1, &(0x7f0000000640)={0x1f, 0x1000, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xdb, 0x2}, 0xe)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0xfc, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{0x0}], 0x1}}], 0x1, 0x0)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$sock_int(r5, 0x1, 0x12, 0x0, &(0x7f0000000600))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x60}}, 0x0)

15.938909924s ago: executing program 2 (id=1153):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x786ba9af, @mcast1, 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000580)="69b1cd1aa3b6b202915f0c2951725031cb90f8c0c68e6a62e5c9fe7f7b7f2d81acf1e3faaa1fccb4f3746804283c0f71c178f3f2f232c8b5f141f6cdb4607e7e08343a0de825412157fdc9b1ef59aa5126767d5568eefb4c274d539ead6f6f87cd926a6b970176e6e667c36d0dccd243494b01fc37dc56cdf4141d95", 0x7c}], 0x1, &(0x7f0000000a80)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xbf}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x1c}}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffc00}}], 0x70}}], 0x2, 0x2400c044)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r3 = socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
recvmmsg(r3, &(0x7f0000000480), 0x0, 0x0, 0x0)
socket(0x1d, 0x1, 0xba)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x30, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0x0, 0x5}, {0xf, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xa, 0x5}}, @TCA_STAB={0x4}]}, 0x30}}, 0x40000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
recvfrom(r3, 0x0, 0x0, 0x2000, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4, 0x4, 0x3}}, 0x80)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000002040)={0x60, r6, 0x1, 0x200000, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x38, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xd08}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}]}, 0x60}, 0x1, 0x500000000000000, 0x0, 0x4084}, 0x20000010)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r7, 0x0, 0x4010)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)

15.770736872s ago: executing program 1 (id=1154):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket(0x1, 0x803, 0x1)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_buf(r6, 0x29, 0x2, 0x0, &(0x7f0000000240)) (async)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0)

15.620425422s ago: executing program 1 (id=1155):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x2000000, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x903}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}]}}}]}, 0x50}}, 0x4020000)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x80, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa70a}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0xbc, r3, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "bae50af24f75d2fb519e32739ec2e738e8cade311abb2653"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d3f5a6b49d1dfec5bf6cc7888836226433d2c431b9e8f9ca"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1d862db09f8e9ccac62a592492a63b9427f34f703e407177"}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a05da0e481ade82f795cf94590b24bc11111623ec3b457ee"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000)
r5 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', <r6=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000050000ff010000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x90)
r7 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
close(0x3)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00\x00\b', @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800500160002000000"], 0x3c}}, 0x4)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000020601080000000000006f14e90a00001400078008001140000000000500150000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0)
sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x7, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40004)

56.692633ms ago: executing program 32 (id=1151):
r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x60, 0x80000)
recvfrom(0xffffffffffffffff, &(0x7f0000000000)=""/220, 0xdc, 0x3, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @rand_addr=0x64010100}, 0x0, 0x3, 0x1, 0x2}}, 0x80)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x2c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xf}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xb4d}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x40}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x7fffffff}, @NL802154_ATTR_SEC_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x48805}, 0x10)
r3 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
ioctl$SIOCGETSGCNT(r3, 0x89e1, &(0x7f0000000400)={@remote, @private=0xa010101})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r3)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r4, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x6a}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x60, 0x5e}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4008044)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000600), r1)
sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r6, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40880)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)={<r7=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x88, r6, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1000}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '\xc8)'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfff}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000010}, 0x4004080)

394.33µs ago: executing program 33 (id=1155):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x2000000, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x903}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}]}}}]}, 0x50}}, 0x4020000)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x80, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa70a}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0xbc, r3, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "bae50af24f75d2fb519e32739ec2e738e8cade311abb2653"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d3f5a6b49d1dfec5bf6cc7888836226433d2c431b9e8f9ca"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1d862db09f8e9ccac62a592492a63b9427f34f703e407177"}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a05da0e481ade82f795cf94590b24bc11111623ec3b457ee"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000)
r5 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', <r6=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000050000ff010000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x90)
r7 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
close(0x3)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\x00\x00\b', @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800500160002000000"], 0x3c}}, 0x4)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000020601080000000000006f14e90a00001400078008001140000000000500150000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0)
sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x7, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40004)

0s ago: executing program 34 (id=1153):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x786ba9af, @mcast1, 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000580)="69b1cd1aa3b6b202915f0c2951725031cb90f8c0c68e6a62e5c9fe7f7b7f2d81acf1e3faaa1fccb4f3746804283c0f71c178f3f2f232c8b5f141f6cdb4607e7e08343a0de825412157fdc9b1ef59aa5126767d5568eefb4c274d539ead6f6f87cd926a6b970176e6e667c36d0dccd243494b01fc37dc56cdf4141d95", 0x7c}], 0x1, &(0x7f0000000a80)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xbf}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x1c}}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffc00}}], 0x70}}], 0x2, 0x2400c044)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r3 = socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
recvmmsg(r3, &(0x7f0000000480), 0x0, 0x0, 0x0)
socket(0x1d, 0x1, 0xba)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x30, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0x0, 0x5}, {0xf, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xa, 0x5}}, @TCA_STAB={0x4}]}, 0x30}}, 0x40000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
recvfrom(r3, 0x0, 0x0, 0x2000, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4, 0x4, 0x3}}, 0x80)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000002040)={0x60, r6, 0x1, 0x200000, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x38, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xd08}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}]}, 0x60}, 0x1, 0x500000000000000, 0x0, 0x4084}, 0x20000010)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r7, 0x0, 0x4010)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)

kernel console output (not intermixed with test programs):

 promiscuous mode
[   85.345683][ T7417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.387'.
[   85.383486][ T7421] IPv6: sit1: Disabled Multicast RS
[   85.388536][ T7421] lo: entered allmulticast mode
[   85.390556][ T7421] unsupported nlmsg_type 40
[   85.856320][ T7433] netlink: 'syz.2.392': attribute type 13 has an invalid length.
[   85.860130][ T7433] netlink: 'syz.2.392': attribute type 17 has an invalid length.
[   85.891078][ T7433] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   85.898051][ T5851] lo speed is unknown, defaulting to 1000
[   85.929144][ T7432] wg1 speed is unknown, defaulting to 1000
[   85.933500][ T7432] lo speed is unknown, defaulting to 1000
[   85.973062][ T7433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.302442][ T7438] wg1 speed is unknown, defaulting to 1000
[   86.306492][ T7438] lo speed is unknown, defaulting to 1000
[   86.555690][ T7444] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.564594][ T7444] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[   86.567125][ T7444] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[   86.585401][ T7450] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.628203][ T7444] tipc: Resetting bearer <eth:syzkaller0>
[   86.666450][ T7453] pimreg: left allmulticast mode
[   86.781580][ T7455] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   86.820151][ T7459] netlink: 'syz.2.402': attribute type 1 has an invalid length.
[   86.852188][ T7462] caif0: Master is either lo or non-ether device
[   86.865659][ T7459] bond13: (slave bridge4): making interface the new active one
[   86.874080][ T7459] bond13: (slave bridge4): Enslaving as an active interface with an up link
[   86.914415][ T7468] netlink: 'syz.0.403': attribute type 39 has an invalid length.
[   87.078398][ T7478] wg1 speed is unknown, defaulting to 1000
[   87.082843][ T7478] lo speed is unknown, defaulting to 1000
[   87.111283][ T7483] netlink: 'syz.1.407': attribute type 1 has an invalid length.
[   87.161117][ T7483] gretap2: entered allmulticast mode
[   87.168467][ T7483] bond13: (slave gretap2): making interface the new active one
[   87.172108][ T7483] bond13: (slave gretap2): Enslaving as an active interface with an up link
[   87.237998][ T7478] wg1 speed is unknown, defaulting to 1000
[   87.241517][ T7478] lo speed is unknown, defaulting to 1000
[   87.342220][ T7490] netlink: 'syz.2.410': attribute type 13 has an invalid length.
[   87.353311][ T7497] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   87.356318][ T7497] IPv6: NLM_F_CREATE should be set when creating new route
[   87.476814][ T7503] bond0: (slave team0): Releasing backup interface
[   87.605153][ T7508] wg1 speed is unknown, defaulting to 1000
[   87.609259][ T7508] lo speed is unknown, defaulting to 1000
[   87.638061][ T5894] tipc: Node number set to 3758096385
[   87.915997][ T7538] netlink: 'syz.0.421': attribute type 11 has an invalid length.
[   88.226070][ T7552] veth0_to_bond: left allmulticast mode
[   88.228713][ T7552] veth0_to_team: left promiscuous mode
[   88.233596][ T7552] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[   88.238346][ T7552] bond2: left allmulticast mode
[   88.240648][ T7552] vlan2: left promiscuous mode
[   88.242623][ T7552] bond3: left promiscuous mode
[   88.244472][ T7552] gretap1: left promiscuous mode
[   88.246979][ T7552] vlan2: left allmulticast mode
[   88.248958][ T7552] bond3: left allmulticast mode
[   88.250601][ T7552] gretap1: left allmulticast mode
[   88.254436][ T7552] geneve3: left promiscuous mode
[   88.256290][ T7552] geneve3: left allmulticast mode
[   88.265829][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   88.271318][   T12] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 19999 - 0
[   88.275196][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   88.279436][   T12] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 19999 - 0
[   88.283299][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   88.287109][   T12] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 19999 - 0
[   88.291745][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   88.294797][   T12] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 19999 - 0
[   88.340562][ T7557] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   88.619027][ T7561] sctp: [Deprecated]: syz.1.427 (pid 7561) Use of int in maxseg socket option.
[   88.619027][ T7561] Use struct sctp_assoc_value instead
[   88.720918][ T7570] __nla_validate_parse: 22 callbacks suppressed
[   88.720927][ T7570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.429'.
[   88.879154][ T7578] vlan4: entered promiscuous mode
[   88.881427][ T7578] bridge0: entered promiscuous mode
[   88.933001][ T7582] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.965722][ T7582] syzkaller0: entered promiscuous mode
[   88.968633][ T7582] syzkaller0: entered allmulticast mode
[   88.976951][ T7582] tipc: Resetting bearer <eth:syzkaller0>
[   89.018808][ T7581] tipc: Resetting bearer <eth:syzkaller0>
[   89.806912][ T7581] tipc: Disabling bearer <eth:syzkaller0>
[   89.823669][ T7587] tipc: Disabling bearer <eth:syzkaller0>
[   89.833747][ T7594] syzkaller0: entered promiscuous mode
[   89.835702][ T7594] syzkaller0: entered allmulticast mode
[   89.964794][ T7613] validate_nla: 4 callbacks suppressed
[   89.964808][ T7613] netlink: 'syz.2.439': attribute type 1 has an invalid length.
[   89.999722][ T7613] 8021q: adding VLAN 0 to HW filter on device bond14
[   90.002776][ T7610] wg1 speed is unknown, defaulting to 1000
[   90.006189][ T7613] netlink: 36 bytes leftover after parsing attributes in process `syz.2.439'.
[   90.013087][ T7615] netlink: 'syz.1.438': attribute type 5 has an invalid length.
[   90.026950][ T7610] lo speed is unknown, defaulting to 1000
[   90.026993][ T7611] wg1 speed is unknown, defaulting to 1000
[   90.039279][ T7617] netlink: 28 bytes leftover after parsing attributes in process `syz.0.440'.
[   90.053918][ T5313] IPVS: starting estimator thread 0...
[   90.060673][ T7613] veth7: entered promiscuous mode
[   90.067093][ T7613] bond14: (slave veth7): Enslaving as an active interface with a down link
[   90.072565][ T7617] netlink: 28 bytes leftover after parsing attributes in process `syz.0.440'.
[   90.075626][ T7617] netlink: 28 bytes leftover after parsing attributes in process `syz.0.440'.
[   90.079711][ T7611] lo speed is unknown, defaulting to 1000
[   90.101094][ T7617] dummy0: entered promiscuous mode
[   90.103479][ T7617] team0: entered promiscuous mode
[   90.105197][ T7617] geneve0: entered promiscuous mode
[   90.108527][ T7617] debugfs: 'hsr1' already exists in 'hsr'
[   90.110978][ T7617] Cannot create hsr debugfs directory
[   90.112934][ T7617] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network
[   90.116102][ T7617] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network
[   90.131483][ T7613] erspan0: entered allmulticast mode
[   90.137625][ T7618] IPVS: using max 81 ests per chain, 194400 per kthread
[   90.142310][ T7613] bond14: (slave erspan0): making interface the new active one
[   90.146736][ T7613] erspan0: entered promiscuous mode
[   90.149562][ T7613] bond14: (slave erspan0): Enslaving as an active interface with an up link
[   90.270595][ T7626] netlink: 'syz.0.443': attribute type 10 has an invalid length.
[   90.274320][ T7627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.443'.
[   90.524047][ T7634] 8021q: adding VLAN 0 to HW filter on device bond12
[   90.639180][ T7634] bond12 (unregistering): Released all slaves
[   90.730491][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.446'.
[   90.789061][ T7656] netlink: 28 bytes leftover after parsing attributes in process `syz.1.446'.
[   90.821420][ T7643] geneve3: entered promiscuous mode
[   90.823695][ T7643] geneve3: entered allmulticast mode
[   90.828085][ T5908] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.831567][ T5908] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 19999 - 0
[   90.857347][ T5908] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.860194][ T5908] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 19999 - 0
[   90.864918][ T5908] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.869059][ T5908] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 19999 - 0
[   90.872631][ T5908] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.876233][ T5908] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 19999 - 0
[   90.895006][ T7660] netlink: 'syz.1.449': attribute type 2 has an invalid length.
[   90.904734][ T7660] k*: entered promiscuous mode
[   90.931802][ T7660] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.935806][ T7660] 8021q: adding VLAN 0 to HW filter on device team0
[   90.941146][ T7660] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   90.982342][ T7670] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   91.040226][ T7676] netlink: 'syz.2.453': attribute type 10 has an invalid length.
[   91.043330][ T7676] netlink: 2 bytes leftover after parsing attributes in process `syz.2.453'.
[   91.048552][ T7676] 8021q: adding VLAN 0 to HW filter on device team0
[   91.083932][ T7678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.454'.
[   91.143812][ T7682] netlink: 'syz.2.455': attribute type 1 has an invalid length.
[   91.164231][ T7682] 8021q: adding VLAN 0 to HW filter on device bond18
[   91.182728][ T7682] ipvlan2: entered allmulticast mode
[   91.184900][ T7682] bond18: entered allmulticast mode
[   91.201948][ T7682] bond18: (slave gretap2): making interface the new active one
[   91.204524][ T7682] gretap2: entered allmulticast mode
[   91.206901][ T7682] bond18: (slave gretap2): Enslaving as an active interface with an up link
[   91.450675][ T7713] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.482899][ T7713] syzkaller0: entered promiscuous mode
[   91.485304][ T7713] syzkaller0: entered allmulticast mode
[   91.493399][ T7716] openvswitch: netlink: Flow actions attr not present in new flow.
[   91.507653][ T7713] vlan3: entered allmulticast mode
[   91.510090][ T7713] bond0: entered allmulticast mode
[   91.514902][ T7711] tipc: Resetting bearer <eth:syzkaller0>
[   91.528797][ T7711] tipc: Disabling bearer <eth:syzkaller0>
[   92.366429][ T7771] netlink: 'syz.1.476': attribute type 1 has an invalid length.
[   92.390454][ T7770] syzkaller1: entered promiscuous mode
[   92.392826][ T7770] syzkaller1: entered allmulticast mode
[   92.395689][ T7771] netlink: 'syz.1.476': attribute type 1 has an invalid length.
[   92.402516][ T7771] netlink: 'syz.1.476': attribute type 1 has an invalid length.
[   92.406077][ T7771] netlink: 'syz.1.476': attribute type 1 has an invalid length.
[   92.408354][ T7776] lo: Caught tx_queue_len zero misconfig
[   92.658562][ T7788] veth8: entered allmulticast mode
[   92.699365][ T7789] veth8: entered allmulticast mode
[   92.785030][ T7796] 8021q: adding VLAN 0 to HW filter on device team0
[   92.801387][ T7796] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   92.838091][ T7800] ip6tnl2: entered promiscuous mode
[   92.887040][ T7792] wg1 speed is unknown, defaulting to 1000
[   92.899286][ T7792] lo speed is unknown, defaulting to 1000
[   92.974180][ T7814] vxcan2: entered allmulticast mode
[   93.145027][ T7824] siw: device registration error -23
[   93.222931][ T7819] infiniband syz!: set down
[   93.227915][ T7819] infiniband syz!: added team_slave_0
[   93.276345][ T7819] RDS/IB: syz!: added
[   93.278947][ T7819] smc: adding ib device syz! with port count 1
[   93.281582][ T7819] smc:    ib device syz! port 1 has no pnetid
[   94.084413][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   94.088115][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   94.094612][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   94.110603][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   94.291267][ T7843] wg1 speed is unknown, defaulting to 1000
[   94.294086][ T7843] lo speed is unknown, defaulting to 1000
[   94.333931][ T7849] __nla_validate_parse: 10 callbacks suppressed
[   94.333941][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'.
[   94.334365][ T7850] netlink: 40 bytes leftover after parsing attributes in process `syz.1.494'.
[   94.336179][ T7849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.495'.
[   94.417682][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'.
[   94.428344][ T7849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.495'.
[   94.519312][ T7853] netlink: 24 bytes leftover after parsing attributes in process `syz.2.496'.
[   94.589040][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.496'.
[   94.804494][ T7857] erspan0: left allmulticast mode
[   94.829165][ T7857] team0: left promiscuous mode
[   94.831034][ T7857] geneve0: left promiscuous mode
[   94.832822][ T7857] bond11: left promiscuous mode
[   95.012857][ T7857] vlan2: left allmulticast mode
[   95.014538][ T7857] veth1: left allmulticast mode
[   95.018964][ T7857] bridge1: left promiscuous mode
[   95.020846][ T7857] bridge1: left allmulticast mode
[   95.028356][ T7857] gretap1: left promiscuous mode
[   95.040229][ T7857] bond8: left promiscuous mode
[   95.042424][ T7857] ipip0: left promiscuous mode
[   95.064108][ T7857] veth7: left promiscuous mode
[   95.075380][ T7857] ipvlan2: left allmulticast mode
[   95.077614][ T7857] bond18: left allmulticast mode
[   95.079441][ T7857] gretap2: left allmulticast mode
[   95.083664][ T7857] ip6tnl2: left promiscuous mode
[   95.089707][ T5894] lo speed is unknown, defaulting to 1000
[   95.092390][ T5894] syz2: Port: 1 Link DOWN
[   95.102263][ T5851] wg1 speed is unknown, defaulting to 1000
[   95.104547][ T5851] syz0: Port: 1 Link DOWN
[   95.138455][ T7870] veth9: entered promiscuous mode
[   95.141030][   T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   95.144484][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.149674][   T12] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[   95.152741][   T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   95.155869][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.160639][   T12] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[   95.183429][ T7872] 8021q: adding VLAN 0 to HW filter on device macvlan0
[   95.187359][ T7872] bond12: (slave macvlan0): Enslaving as a backup interface with a down link
[   95.191777][ T7874] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   95.198758][   T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   95.201808][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.204820][   T12] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[   95.220057][   T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   95.223356][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.226551][   T12] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[   95.252654][ T7879] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[   95.320307][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.505'.
[   95.326035][ T7882] team0: entered promiscuous mode
[   95.328045][ T7885] netlink: 80 bytes leftover after parsing attributes in process `syz.1.506'.
[   95.332866][ T7882] bridge1: entered promiscuous mode
[   95.335053][ T7882] geneve0: entered promiscuous mode
[   95.339289][ T7882] bond11: entered promiscuous mode
[   95.343144][ T7882] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   95.348228][ T7882] team0: left promiscuous mode
[   95.350063][ T7882] bridge1: left promiscuous mode
[   95.352086][ T7882] geneve0: left promiscuous mode
[   95.354265][ T7882] bond11: left promiscuous mode
[   95.388541][ T7883] validate_nla: 37 callbacks suppressed
[   95.388550][ T7883] netlink: 'syz.0.504': attribute type 1 has an invalid length.
[   95.393361][ T7883] netlink: 128 bytes leftover after parsing attributes in process `syz.0.504'.
[   95.396448][ T7883] netlink: 'syz.0.504': attribute type 2 has an invalid length.
[   95.400578][ T7883] netlink: 'syz.0.504': attribute type 1 has an invalid length.
[   95.466777][ T7889] bridge4: left promiscuous mode
[   95.468833][ T7889] bridge4: left allmulticast mode
[   95.471346][ T7889] gretap1: left promiscuous mode
[   95.473698][ T7889] gtp0: left promiscuous mode
[   95.475284][ T7889] gtp0: left allmulticast mode
[   95.480335][ T7889] bond10: left promiscuous mode
[   95.482267][ T7889] bond11: left promiscuous mode
[   95.484238][ T7889] gretap2: left allmulticast mode
[   95.488565][ T7889] geneve3: left promiscuous mode
[   95.499503][ T7889] geneve3: left allmulticast mode
[   95.504629][ T5722] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 19999 - 0
[   95.511596][ T5722] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 19999 - 0
[   95.522760][ T7893] netlink: 'syz.0.508': attribute type 1 has an invalid length.
[   95.553860][ T7893] bond13: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   95.559249][ T7893] bond13: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   95.563247][ T7893] bond13: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[   95.584254][ T5722] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 19999 - 0
[   95.587040][ T5722] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 19999 - 0
[   95.651317][ T7903] bond14: (slave erspan0): Releasing active interface
[   95.653605][ T7903] erspan0: left promiscuous mode
[   95.656692][ T7903] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   95.702597][ T7908] netlink: 'syz.2.515': attribute type 1 has an invalid length.
[   95.736704][ T7908] bond19: entered promiscuous mode
[   95.739313][ T7908] 8021q: adding VLAN 0 to HW filter on device bond19
[   95.782230][ T7915] wg1 speed is unknown, defaulting to 1000
[   95.784968][ T7915] lo speed is unknown, defaulting to 1000
[   95.840858][ T7925] netlink: 'syz.2.520': attribute type 13 has an invalid length.
[   95.843825][ T7925] netlink: 'syz.2.520': attribute type 17 has an invalid length.
[   95.918616][ T7925] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.926490][ T7925] 8021q: adding VLAN 0 to HW filter on device team0
[   95.934548][ T7925] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   95.943698][ T5851] lo speed is unknown, defaulting to 1000
[   95.946468][ T5851] syz2: Port: 1 Link ACTIVE
[   95.969325][ T7927] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[   95.986955][ T7927] bridge10: entered promiscuous mode
[   95.989703][ T7927] bridge10: entered allmulticast mode
[   95.992570][ T7927] team0: Port device bridge10 added
[   96.022946][ T7931] bridge0: Caught tx_queue_len zero misconfig
[   96.056453][ T7934] xt_l2tp: missing protocol rule (udp|l2tpip)
[   96.074511][ T7934] tun0: tun_chr_ioctl cmd 1074025673
[   96.100194][ T7936] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   96.202272][ T7944] team0: Device ipip2 is of different type
[   96.327874][ T7949] netlink: 'syz.2.528': attribute type 10 has an invalid length.
[   96.330544][ T7949] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   96.493341][ T7957] macvtap0: entered promiscuous mode
[   96.495070][ T7957] batadv0: entered promiscuous mode
[   96.496836][ T7957] macvtap0: entered allmulticast mode
[   96.513075][ T7957] batadv0: entered allmulticast mode
[   96.515635][ T7957] 8021q: adding VLAN 0 to HW filter on device macvtap0
[   96.532290][ T7969] batadv0: left allmulticast mode
[   96.534137][ T7969] batadv0: left promiscuous mode
[   96.608908][ T7970] wg1 speed is unknown, defaulting to 1000
[   96.612869][ T7970] lo speed is unknown, defaulting to 1000
[   96.770525][ T7977] wg1 speed is unknown, defaulting to 1000
[   96.780629][ T7977] lo speed is unknown, defaulting to 1000
[   97.415581][ T8008] 8021q: adding VLAN 0 to HW filter on device bond12
[   97.430519][ T8008] bond12: (slave macvlan2): Error -98 calling set_mac_address
[   97.491128][ T8010] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   97.569894][ T8017] raw_sendmsg: syz.2.542 forgot to set AF_INET. Fix it!
[   97.985270][ T8043] vlan3: entered promiscuous mode
[   97.987053][ T8043] hsr_slave_1: entered promiscuous mode
[   97.991499][ T8043] vlan3: entered allmulticast mode
[   97.993687][ T8043] hsr_slave_1: entered allmulticast mode
[   98.238161][ T8048] wg1 speed is unknown, defaulting to 1000
[   98.242054][ T8048] lo speed is unknown, defaulting to 1000
[   98.791509][ T8073] wg1 speed is unknown, defaulting to 1000
[   98.794352][ T8073] lo speed is unknown, defaulting to 1000
[   98.857647][ T8080] netlink: 'syz.2.558': attribute type 13 has an invalid length.
[   98.862758][ T8080] netlink: 'syz.2.558': attribute type 17 has an invalid length.
[   98.877067][ T8080] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   99.065137][ T8089] bond0: entered promiscuous mode
[   99.070619][ T8089] bond0: left promiscuous mode
[   99.384767][ T8116] tipc: Enabled bearer <eth:batadv0>, priority 10
[   99.403089][ T8116] 8021q: adding VLAN 0 to HW filter on device bond20
[   99.416825][ T8116] ipvlan3: entered allmulticast mode
[   99.423258][ T8116] bond20: entered allmulticast mode
[   99.451847][ T8121] __nla_validate_parse: 23 callbacks suppressed
[   99.451857][ T8121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.569'.
[   99.460679][ T8121] netlink: 20 bytes leftover after parsing attributes in process `syz.2.569'.
[   99.507815][ T8121] geneve4: entered promiscuous mode
[   99.510100][ T8121] geneve4: entered allmulticast mode
[   99.513448][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.516520][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.521129][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.524172][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.601434][ T8130] netlink: 3 bytes leftover after parsing attributes in process `syz.2.572'.
[   99.605051][ T8130] 0X: renamed from caif0
[   99.625210][ T8130] 0X: entered allmulticast mode
[   99.626923][ T8130] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[   99.647826][ T8137] 8021q: adding VLAN 0 to HW filter on device bond15
[   99.736491][ T8143] 8021q: adding VLAN 0 to HW filter on device bond16
[   99.764593][ T8143] veth9: entered promiscuous mode
[   99.780896][ T8143] bond16: (slave veth9): Enslaving as a backup interface with a down link
[   99.796248][ T8143] veth0_to_bond: left allmulticast mode
[   99.804060][ T8143] veth0_to_bond: left promiscuous mode
[   99.808888][ T8143] bridge6: port 2(veth0_to_bond) entered disabled state
[   99.814477][ T8143] bond4: (slave macvlan2): Releasing backup interface
[   99.824859][ T8143] team0: Port device bridge4 removed
[   99.835649][ T8143] bond5: (slave bridge5): Releasing backup interface
[   99.851520][ T8143] bond6: (slave gretap1): Releasing active interface
[   99.855668][ T8143] bond7: (slave veth5): Releasing active interface
[   99.861897][ T8143] veth7: left allmulticast mode
[   99.863658][ T8143] veth7: left promiscuous mode
[   99.865484][ T8143] bridge6: port 1(veth7) entered disabled state
[   99.871208][ T8143] vlan2: left allmulticast mode
[   99.873334][ T8143] veth1: left allmulticast mode
[   99.875248][ T8143] vlan2: left promiscuous mode
[   99.876938][ T8143] veth1: left promiscuous mode
[   99.879769][ T8143] bridge6: port 3(vlan2) entered disabled state
[   99.894692][ T8143] bond8: (slave geneve2): Releasing active interface
[   99.898292][ T8143] bond9: left allmulticast mode
[   99.900012][ T8143] bond9: left promiscuous mode
[   99.908195][ T8143] bridge0: port 1(bond9) entered disabled state
[   99.936754][ T8143] bond13: (slave gretap2): Releasing active interface
[   99.945559][ T8143] team0: Port device bridge10 removed
[   99.950022][ T8143] bond16: (slave veth9): Releasing backup interface
[   99.969810][ T8148] wg1 speed is unknown, defaulting to 1000
[   99.972364][ T8148] lo speed is unknown, defaulting to 1000
[  100.079327][ T8154] syzkaller0: entered allmulticast mode
[  100.092785][ T8161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.581'.
[  100.096799][ T8154] syzkaller0 (unregistering): left allmulticast mode
[  100.181339][ T8162] bond17: (slave vxcan1): The slave device specified does not support setting the MAC address
[  100.185469][ T8162] bond17: (slave vxcan1): Error -95 calling set_mac_address
[  100.259166][ T8165] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  100.393349][ T8176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.586'.
[  100.400958][ T8176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.586'.
[  100.554560][ T8192] validate_nla: 5 callbacks suppressed
[  100.554577][ T8192] netlink: 'syz.1.588': attribute type 1 has an invalid length.
[  100.586020][ T8192] 8021q: adding VLAN 0 to HW filter on device bond18
[  100.599605][ T8192] bond18: (slave ip6gretap2): making interface the new active one
[  100.603315][ T8192] bond18: (slave ip6gretap2): Enslaving as an active interface with an up link
[  100.609913][ T8199] vxcan2: entered allmulticast mode
[  100.614954][ T8195] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  100.615505][ T8194] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  100.622526][ T8195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.590'.
[  100.631684][ T8192] veth11: entered promiscuous mode
[  100.635339][ T8192] bond18: (slave veth11): Enslaving as an active interface with a down link
[  100.643534][ T8194] bridge0: entered promiscuous mode
[  100.645404][ T8194] bridge0: entered allmulticast mode
[  100.652201][ T8194] team0: Port device bridge0 added
[  100.670277][ T8192] erspan0: entered allmulticast mode
[  100.674012][ T8192] bond18: (slave erspan0): Enslaving as an active interface with an up link
[  100.691884][ T8202] netlink: 'syz.2.592': attribute type 10 has an invalid length.
[  100.695148][ T8202] netlink: 40 bytes leftover after parsing attributes in process `syz.2.592'.
[  100.701211][ T8202] netlink: 'syz.2.592': attribute type 10 has an invalid length.
[  100.704673][ T8202] netlink: 40 bytes leftover after parsing attributes in process `syz.2.592'.
[  100.709044][ T8202] netlink: 'syz.2.592': attribute type 10 has an invalid length.
[  100.711973][ T8202] netlink: 40 bytes leftover after parsing attributes in process `syz.2.592'.
[  100.715441][ T8202] netlink: 'syz.2.592': attribute type 10 has an invalid length.
[  100.719916][ T8202] netlink: 'syz.2.592': attribute type 10 has an invalid length.
[  100.722975][ T8202] netlink: 'syz.2.592': attribute type 10 has an invalid length.
[  100.725938][ T8202] netlink: 'syz.2.592': attribute type 10 has an invalid length.
[  100.730753][ T8202] netlink: 'syz.2.592': attribute type 10 has an invalid length.
[  100.735533][ T8202] netlink: 'syz.2.592': attribute type 10 has an invalid length.
[  100.750001][ T8207] erspan0: left allmulticast mode
[  100.761894][ T8207] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.766081][ T8207] 8021q: adding VLAN 0 to HW filter on device team0
[  100.775324][ T8207] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  100.849920][ T8215] pimreg: entered allmulticast mode
[  100.860778][ T8216] dvmrp8: entered allmulticast mode
[  100.873104][ T8214] pimreg: left allmulticast mode
[  100.875363][ T8214] dvmrp8: left allmulticast mode
[  100.915843][ T8220] wg1 speed is unknown, defaulting to 1000
[  100.919746][ T8220] lo speed is unknown, defaulting to 1000
[  100.941553][ T8223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.965940][ T8226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.396121][ T8259] wg1 speed is unknown, defaulting to 1000
[  101.398998][ T8259] lo speed is unknown, defaulting to 1000
[  101.594321][ T8266] wg1 speed is unknown, defaulting to 1000
[  101.607741][ T8266] lo speed is unknown, defaulting to 1000
[  101.720485][ T8275] bond19: (slave bridge11): making interface the new active one
[  101.724678][ T8275] bond19: (slave bridge11): Enslaving as an active interface with an up link
[  101.873745][ T8292] wg1 speed is unknown, defaulting to 1000
[  101.876643][ T8292] lo speed is unknown, defaulting to 1000
[  102.198090][ T8296] wg1 speed is unknown, defaulting to 1000
[  102.203355][ T8296] lo speed is unknown, defaulting to 1000
[  102.444175][ T8311] lo: entered allmulticast mode
[  102.465977][ T8311] lo: left allmulticast mode
[  102.725062][ T8325] wg1 speed is unknown, defaulting to 1000
[  102.733059][ T8325] lo speed is unknown, defaulting to 1000
[  103.043087][ T8334] team0: Port device bridge0 removed
[  103.162369][ T8333] 8021q: adding VLAN 0 to HW filter on device bond14
[  103.457007][ T8348] 8021q: adding VLAN 0 to HW filter on device bond4
[  103.498489][ T8348] bond18: (slave erspan0): Releasing active interface
[  103.501629][ T8348] ip6gretap2: entered promiscuous mode
[  103.530494][ T8348] bond18: (slave ip6gretap2): Releasing active interface
[  103.533137][ T8348] bond18: (slave ip6gretap2): the permanent HWaddr of slave - 62:44:b6:6a:0e:7e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  103.542445][ T8348] ip6gretap2: left promiscuous mode
[  103.550090][ T8348] bond18: (slave veth11): Releasing active interface
[  103.555384][ T8348] bond19: (slave bridge11): Releasing active interface
[  103.680712][ T8362] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  103.702072][ T8362] bond0: (slave lo): refused to change device type
[  103.813135][ T8365] wg1 speed is unknown, defaulting to 1000
[  103.825793][ T8365] lo speed is unknown, defaulting to 1000
[  104.325168][ T8375] 0X: left allmulticast mode
[  104.333196][ T8375] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.398486][ T8376] 8021q: adding VLAN 0 to HW filter on device batadv1
[  104.402401][ T8376] team0: Failed to send port change of device batadv1 via netlink (err -105)
[  104.406355][ T8376] team0: Failed to send options change via netlink (err -105)
[  104.410695][ T8376] team0: Port device batadv1 added
[  104.433778][ T8375] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.480483][ T8375] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.495689][ T8384] wg1 speed is unknown, defaulting to 1000
[  104.498685][ T8384] lo speed is unknown, defaulting to 1000
[  104.530589][ T5311] block nbd0: Possible stuck request ffff888021c70000: control (read@0,1024B). Runtime 30 seconds
[  104.535782][ T5311] block nbd0: Possible stuck request ffff888021c70200: control (read@1024,1024B). Runtime 30 seconds
[  104.540518][ T5311] block nbd0: Possible stuck request ffff888021c70400: control (read@2048,1024B). Runtime 30 seconds
[  104.544972][ T5311] block nbd0: Possible stuck request ffff888021c70600: control (read@3072,1024B). Runtime 30 seconds
[  104.553498][ T8385] __nla_validate_parse: 90 callbacks suppressed
[  104.553509][ T8385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.638'.
[  104.569493][ T8375] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.680113][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.686958][ T8389] netlink: 256 bytes leftover after parsing attributes in process `syz.0.640'.
[  104.700009][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.744423][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.780789][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.837982][ T8396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.643'.
[  104.839751][ T8393] netlink: 24 bytes leftover after parsing attributes in process `syz.0.642'.
[  104.862086][ T8396] netlink: 248 bytes leftover after parsing attributes in process `syz.2.643'.
[  105.085203][ T8407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.646'.
[  105.089019][ T8407] bond0: Device is already in use.
[  105.203534][ T8414] netlink: 3 bytes leftover after parsing attributes in process `syz.0.645'.
[  105.266921][ T8413] tipc: Resetting bearer <eth:batadv0>
[  105.271892][ T8413] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.281063][ T8414] batadv1: entered promiscuous mode
[  105.283160][ T8414] batadv1: entered allmulticast mode
[  105.313743][ T8413] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  105.380897][ T8425] 8021q: adding VLAN 0 to HW filter on device batadv2
[  105.384126][ T8425] team0: Failed to send options change via netlink (err -105)
[  105.386706][ T8425] team0: Port device batadv2 added
[  105.443538][ T8418] syzkaller1: entered promiscuous mode
[  105.445532][ T8418] syzkaller1: entered allmulticast mode
[  105.823616][ T8446] validate_nla: 62 callbacks suppressed
[  105.823650][ T8446] netlink: 'syz.2.653': attribute type 10 has an invalid length.
[  105.879983][ T8449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.653'.
[  106.899726][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.655'.
[  107.087583][ T8474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.660'.
[  107.091252][ T8474] netlink: 'syz.2.660': attribute type 7 has an invalid length.
[  107.094663][ T8476] netlink: 'syz.1.661': attribute type 1 has an invalid length.
[  107.118241][ T8474] netlink: 'syz.2.660': attribute type 7 has an invalid length.
[  107.125817][ T8477] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  107.134531][ T8476] workqueue: Failed to create a rescuer kthread for wq "bond20": -EINTR
[  107.141994][ T5722] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  107.202422][ T8485] netlink: 'syz.1.663': attribute type 10 has an invalid length.
[  107.208818][ T8485] 8021q: adding VLAN 0 to HW filter on device team0
[  107.213233][ T8485] bond0: (slave team0): Enslaving as an active interface with an up link
[  107.217005][ T5722] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  107.221304][ T5722] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  107.228216][ T8485] netlink: 'syz.1.663': attribute type 1 has an invalid length.
[  107.234989][ T5722] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  107.304306][ T8493] netlink: 'syz.1.666': attribute type 1 has an invalid length.
[  107.334125][ T8493] 8021q: adding VLAN 0 to HW filter on device bond20
[  107.350281][ T8493] bond20: (slave geneve4): making interface the new active one
[  107.358254][ T8493] bond20: (slave geneve4): Enslaving as an active interface with an up link
[  107.364179][ T7500] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.365972][ T8493] syz.1.666 (8493) used greatest stack depth: 18664 bytes left
[  107.373501][ T7500] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.383345][ T7500] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.400305][ T7500] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.414194][ T8498] wg1 speed is unknown, defaulting to 1000
[  107.420167][ T8498] lo speed is unknown, defaulting to 1000
[  107.635829][ T8512] bridge12: entered promiscuous mode
[  107.642504][ T8512] bridge12: entered allmulticast mode
[  107.646948][ T8512] team0: Port device bridge12 added
[  107.850168][ T8523] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  107.864742][ T8531] netlink: 'syz.1.673': attribute type 12 has an invalid length.
[  107.980743][ T8541] chnl_net:caif_netlink_parms(): no params data found
[  108.013160][ T8543] netlink: 'syz.0.677': attribute type 10 has an invalid length.
[  108.142769][ T8549] netlink: 'syz.0.679': attribute type 12 has an invalid length.
[  108.199384][ T8555] syzkaller0: entered promiscuous mode
[  108.201363][ T8555] syzkaller0: entered allmulticast mode
[  108.230661][ T8554] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.259807][ T8554] tipc: Resetting bearer <eth:syzkaller0>
[  109.223687][ T8554] tipc: Disabling bearer <eth:syzkaller0>
[  109.379514][ T8573] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  109.385606][ T8572] IPVS: stopping backup sync thread 8573 ...
[  109.422706][ T8572] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  109.457511][ T8578] 8021q: adding VLAN 0 to HW filter on device bond21
[  109.478174][ T8579] bond21: (slave veth11): Enslaving as an active interface with a down link
[  109.500813][ T8584] bridge0: port 1(batadv0) entered blocking state
[  109.503696][ T8584] bridge0: port 1(batadv0) entered disabled state
[  109.506668][ T8584] batadv0: entered allmulticast mode
[  109.511828][ T8584] batadv0: entered promiscuous mode
[  109.660206][ T8588] __nla_validate_parse: 24 callbacks suppressed
[  109.660216][ T8588] netlink: 48 bytes leftover after parsing attributes in process `syz.1.691'.
[  109.712292][ T8595] netlink: 248 bytes leftover after parsing attributes in process `syz.0.694'.
[  109.716248][ T8594] netlink: 36 bytes leftover after parsing attributes in process `syz.1.693'.
[  109.742312][ T8591] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.761134][ T8591] syzkaller0: entered promiscuous mode
[  109.763365][ T8591] syzkaller0: entered allmulticast mode
[  109.809086][ T8600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.696'.
[  109.814320][ T8597] netlink: 28 bytes leftover after parsing attributes in process `syz.1.695'.
[  109.815706][ T8600] netlink: 16 bytes leftover after parsing attributes in process `syz.0.696'.
[  109.825081][ T8600] openvswitch: netlink: EtherType 0 is less than min 600
[  109.829372][ T8591] tipc: Resetting bearer <eth:syzkaller0>
[  109.840311][ T8590] tipc: Resetting bearer <eth:syzkaller0>
[  109.873072][ T8590] tipc: Disabling bearer <eth:syzkaller0>
[  109.906478][ T8597] bond22: (slave bridge13): making interface the new active one
[  109.913413][ T8597] bond22: (slave bridge13): Enslaving as an active interface with an up link
[  109.927285][ T8603] macvlan4: entered promiscuous mode
[  109.929200][ T8603] macvlan4: entered allmulticast mode
[  109.931456][ T8603] bond22: entered promiscuous mode
[  109.933200][ T8603] bridge13: entered promiscuous mode
[  109.935450][ T8603] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  109.941350][ T8603] bond22: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  109.957783][ T8603] bond22: left promiscuous mode
[  109.959830][ T8603] bridge13: left promiscuous mode
[  110.001726][ T7500] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  110.005594][ T7500] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  110.102025][ T8619] 8021q: adding VLAN 0 to HW filter on device bond23
[  110.108355][ T8622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.700'.
[  110.121213][ T8619] bond0: (slave team0): Releasing backup interface
[  110.127946][ T8619] bond20: (slave geneve4): Releasing active interface
[  110.140947][ T8619] team0: Port device bridge12 removed
[  110.142891][ T8619] batadv0: left allmulticast mode
[  110.144919][ T8619] batadv0: left promiscuous mode
[  110.147065][ T8619] bridge0: port 1(batadv0) entered disabled state
[  110.165648][ T8619] bond22: (slave bridge13): Releasing active interface
[  110.212104][ T7500] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.215444][ T7500] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.239836][ T7500] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.243315][ T7500] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.285965][ T8627] vlan0: entered allmulticast mode
[  110.288606][ T8627] bridge0: entered allmulticast mode
[  110.290875][ T8627] bridge8: port 1(vlan0) entered blocking state
[  110.293392][ T8627] bridge8: port 1(vlan0) entered disabled state
[  110.301309][ T8627] vlan0: entered promiscuous mode
[  110.541826][ T8643] bond16: (slave geneve4): making interface the new active one
[  110.545912][ T8643] bond16: (slave geneve4): Enslaving as an active interface with an up link
[  110.550645][ T5722] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  110.566183][ T8643] netlink: 28 bytes leftover after parsing attributes in process `syz.0.705'.
[  110.578029][ T8647] bond22: entered promiscuous mode
[  110.580518][ T8647] 8021q: adding VLAN 0 to HW filter on device bond22
[  110.584018][ T5722] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  110.591106][ T5722] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  110.594482][ T5722] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  110.609404][ T8643] syz.0.705 (8643) used greatest stack depth: 18328 bytes left
[  110.839204][ T8655] validate_nla: 13 callbacks suppressed
[  110.839220][ T8655] netlink: 'syz.1.708': attribute type 1 has an invalid length.
[  111.782207][ T8655] bond24: entered promiscuous mode
[  111.784598][ T8655] bond24: entered allmulticast mode
[  111.788246][ T8655] 8021q: adding VLAN 0 to HW filter on device bond24
[  111.929237][ T8679] netlink: 20 bytes leftover after parsing attributes in process `syz.0.711'.
[  111.932342][ T8679] netlink: 20 bytes leftover after parsing attributes in process `syz.0.711'.
[  111.996343][ T8681] bond23: entered promiscuous mode
[  112.004926][ T8681] 8021q: adding VLAN 0 to HW filter on device bond23
[  112.023826][ T8681] 8021q: adding VLAN 0 to HW filter on device bond23
[  112.026880][ T8681] bond23: (slave wireguard0): The slave device specified does not support setting the MAC address
[  112.032355][ T8681] bond23: (slave wireguard0): Error -95 calling set_mac_address
[  112.077770][ T8695] netlink: 'syz.1.718': attribute type 13 has an invalid length.
[  112.082846][ T8695] netlink: 'syz.1.718': attribute type 17 has an invalid length.
[  112.129706][ T8695] 8021q: adding VLAN 0 to HW filter on device team0
[  112.148955][ T8695] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  112.170298][ T8698] wg1 speed is unknown, defaulting to 1000
[  112.172815][ T8698] lo speed is unknown, defaulting to 1000
[  112.230063][ T8695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  112.307369][ T8695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  112.451092][ T8723] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.630235][ T8738] netlink: 'syz.0.730': attribute type 2 has an invalid length.
[  112.673969][ T8744] netlink: 'syz.2.731': attribute type 1 has an invalid length.
[  112.705978][ T8744] workqueue: Failed to create a rescuer kthread for wq "bond24": -EINTR
[  112.823971][ T8751] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  112.824128][ T5947] IPVS: starting estimator thread 0...
[  112.927547][ T8754] IPVS: using max 81 ests per chain, 194400 per kthread
[  113.185315][ T8769] wg1 speed is unknown, defaulting to 1000
[  113.194070][ T8769] lo speed is unknown, defaulting to 1000
[  113.226091][ T8780] netlink: 'syz.0.741': attribute type 1 has an invalid length.
[  113.309717][ T8780] 8021q: adding VLAN 0 to HW filter on device bond17
[  113.326664][ T8774] wg1 speed is unknown, defaulting to 1000
[  113.333765][ T8774] lo speed is unknown, defaulting to 1000
[  113.364812][ T8784] veth11: entered promiscuous mode
[  113.409489][ T8790] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  113.764945][ T8799] openvswitch: netlink: nsh attr 20 is out of range max 3
[  113.770959][ T8799] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.780734][ T8799] openvswitch: netlink: nsh attr 20 is out of range max 3
[  113.798975][ T8799] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.804745][ T8799] openvswitch: netlink: nsh attr 20 is out of range max 3
[  113.808624][ T8799] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.945200][ T8804] netlink: 'syz.0.746': attribute type 1 has an invalid length.
[  113.985453][ T8804] 8021q: adding VLAN 0 to HW filter on device bond18
[  114.022563][ T8813] netlink: 'syz.2.747': attribute type 19 has an invalid length.
[  114.030700][ T8813] netlink: 'syz.2.747': attribute type 19 has an invalid length.
[  114.041312][ T8804] bond18: (slave veth13): Enslaving as an active interface with a down link
[  114.065067][ T8802] pim6reg99999999: entered allmulticast mode
[  114.147080][ T8819] 8021q: adding VLAN 0 to HW filter on device bond25
[  114.151355][ T8819] bridge0: port 1(bond25) entered blocking state
[  114.156332][ T8819] bridge0: port 1(bond25) entered disabled state
[  114.167087][ T8819] bond25: entered allmulticast mode
[  114.171417][ T8819] bond25: entered promiscuous mode
[  114.370076][ T8840] tun1: tun_chr_ioctl cmd 1074025673
[  114.467990][ T8847] netlink: 'syz.2.753': attribute type 2 has an invalid length.
[  114.740884][ T8878] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  114.863775][ T8878] __nla_validate_parse: 69 callbacks suppressed
[  114.863791][ T8878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.760'.
[  114.876114][ T8887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.759'.
[  114.893026][ T8878] netlink: 428 bytes leftover after parsing attributes in process `syz.0.760'.
[  114.897456][ T8878] netlink: 32 bytes leftover after parsing attributes in process `syz.0.760'.
[  114.936882][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'.
[  115.006027][ T8894] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  115.009234][ T8894] IPv6: NLM_F_CREATE should be set when creating new route
[  115.012246][ T8894] IPv6: NLM_F_CREATE should be set when creating new route
[  115.036185][ T8894] ieee802154 phy1 wpan1: encryption failed: -22
[  115.145347][ T8898] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  115.151761][ T8898] batman_adv: batadv0: Adding interface: gretap3
[  115.154550][ T8898] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.166789][ T8898] batman_adv: batadv0: Interface activated: gretap3
[  115.351256][ T8910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.767'.
[  115.397708][ T8910] bridge9: port 1(veth13) entered blocking state
[  115.399881][ T8910] bridge9: port 1(veth13) entered disabled state
[  115.402161][ T8910] veth13: entered allmulticast mode
[  115.406045][ T8910] veth13: entered promiscuous mode
[  115.420266][ T8910] bridge9: port 2(veth0_to_bond) entered blocking state
[  115.423550][ T8910] bridge9: port 2(veth0_to_bond) entered disabled state
[  115.426737][ T8910] veth0_to_bond: entered allmulticast mode
[  115.434249][ T8910] veth0_to_bond: entered promiscuous mode
[  115.438811][ T8912] netlink: 25744 bytes leftover after parsing attributes in process `syz.0.768'.
[  115.556285][ T8916] wg1 speed is unknown, defaulting to 1000
[  115.594783][ T8916] lo speed is unknown, defaulting to 1000
[  115.671317][ T8925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.772'.
[  115.762710][ T8925] team0 (unregistering): Port device bridge1 removed
[  115.766207][ T8925] team0 (unregistering): Port device geneve0 removed
[  115.775564][ T8925] team0 (unregistering): Port device bond11 removed
[  115.782769][ T8925] team0 (unregistering): Port device batadv1 removed
[  115.791191][ T8925] team0 (unregistering): Port device batadv2 removed
[  115.907861][ T8935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.775'.
[  115.999298][ T8938] validate_nla: 2 callbacks suppressed
[  115.999312][ T8938] netlink: 'syz.0.776': attribute type 1 has an invalid length.
[  116.024005][ T8938] 8021q: adding VLAN 0 to HW filter on device bond19
[  116.026039][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.777'.
[  116.083437][ T8938] bond19: (slave geneve5): making interface the new active one
[  116.092171][ T8938] bond19: (slave geneve5): Enslaving as an active interface with an up link
[  116.095923][   T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  116.103082][   T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  116.130543][   T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  116.147563][   T13] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  116.275119][ T8954] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  116.502503][ T8982] netlink: 'syz.2.788': attribute type 32 has an invalid length.
[  116.505238][ T8982] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  116.535048][ T8985] pimreg: entered allmulticast mode
[  116.558765][ T8985] pimreg: left allmulticast mode
[  116.570966][ T8989] veth0: entered promiscuous mode
[  116.644325][ T8989] veth0: left promiscuous mode
[  116.671108][ T8997] netlink: 'syz.2.794': attribute type 9 has an invalid length.
[  116.862651][ T9014] netlink: 'syz.2.794': attribute type 1 has an invalid length.
[  116.886090][ T9014] 8021q: adding VLAN 0 to HW filter on device bond27
[  116.913182][ T9018] netlink: 'syz.0.797': attribute type 1 has an invalid length.
[  116.931611][ T9018] bond20: entered promiscuous mode
[  116.933986][ T9018] 8021q: adding VLAN 0 to HW filter on device bond20
[  117.188384][ T9018] 8021q: adding VLAN 0 to HW filter on device bond20
[  117.190917][ T9018] bond20: (slave wireguard0): The slave device specified does not support setting the MAC address
[  117.195557][ T9018] bond20: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  117.202327][ T9018] bond20: (slave wireguard0): making interface the new active one
[  117.204962][ T9018] wireguard0: entered promiscuous mode
[  117.207868][ T9018] bond20: (slave wireguard0): Enslaving as an active interface with an up link
[  117.396884][ T9037] wg1 speed is unknown, defaulting to 1000
[  117.401787][ T9037] lo speed is unknown, defaulting to 1000
[  117.413359][ T9034] netlink: 'syz.0.800': attribute type 1 has an invalid length.
[  117.434036][ T9034] 8021q: adding VLAN 0 to HW filter on device bond21
[  117.507513][ T9041] net_ratelimit: 14 callbacks suppressed
[  117.507524][ T9041] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  117.980377][ T9058] netlink: 'syz.1.806': attribute type 10 has an invalid length.
[  117.983747][ T9059] netlink: 'syz.1.806': attribute type 10 has an invalid length.
[  118.010001][ T9065] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  118.168603][ T9070] wg1 speed is unknown, defaulting to 1000
[  118.184338][ T9070] lo speed is unknown, defaulting to 1000
[  118.411475][ T9084] bond0 (unregistering): left promiscuous mode
[  118.421400][ T9084] bond0 (unregistering): Released all slaves
[  118.742840][ T9109] netlink: 'syz.2.819': attribute type 1 has an invalid length.
[  118.823623][ T9109] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.871352][ T9109] bond0: entered promiscuous mode
[  118.929901][ T9118] netlink: 'syz.0.823': attribute type 10 has an invalid length.
[  119.035663][ T9124] 8021q: adding VLAN 0 to HW filter on device bond22
[  119.040837][ T9124] bond22: entered allmulticast mode
[  119.045821][ T9124] bond0: (slave bond22): Enslaving as an active interface with an up link
[  119.121929][ T9130] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  119.140341][ T9135] dvmrp8: entered allmulticast mode
[  119.148792][ T9132] wg1 speed is unknown, defaulting to 1000
[  119.152055][ T9132] lo speed is unknown, defaulting to 1000
[  119.220440][ T9135] wg1 speed is unknown, defaulting to 1000
[  119.224593][ T9135] lo speed is unknown, defaulting to 1000
[  119.224930][ T9142] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  119.295644][ T9138] wg1 speed is unknown, defaulting to 1000
[  119.315294][ T9147] bridge11: entered promiscuous mode
[  119.321076][ T9147] bridge11: entered allmulticast mode
[  119.323701][ T9138] lo speed is unknown, defaulting to 1000
[  119.666182][ T9163] team0: Port device geneve0 added
[  119.682488][ T7833] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.686040][ T7833] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.721160][ T7833] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.734932][ T7833] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.844043][ T9169] bond28: (slave vxcan1): The slave device specified does not support setting the MAC address
[  119.849379][ T9169] bond28: (slave vxcan1): Error -95 calling set_mac_address
[  119.962770][ T9179] __nla_validate_parse: 29 callbacks suppressed
[  119.962831][ T9179] netlink: 104 bytes leftover after parsing attributes in process `syz.1.833'.
[  120.120922][ T9185] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  120.155949][ T9184] wg1 speed is unknown, defaulting to 1000
[  120.159726][ T9184] lo speed is unknown, defaulting to 1000
[  120.344584][ T9182] wg1 speed is unknown, defaulting to 1000
[  120.355160][ T9182] lo speed is unknown, defaulting to 1000
[  120.522369][ T9193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.837'.
[  120.531257][ T9193] xfrm2: entered promiscuous mode
[  120.532967][ T9193] xfrm2: entered allmulticast mode
[  120.633591][ T9195] 8021q: adding VLAN 0 to HW filter on device bond29
[  120.636958][ T9195] bridge0: port 1(bond29) entered blocking state
[  120.642935][ T9195] bridge0: port 1(bond29) entered disabled state
[  120.645726][ T9195] bond29: entered allmulticast mode
[  120.651083][ T9195] bond29: entered promiscuous mode
[  120.815679][ T9135] dvmrp8: left allmulticast mode
[  121.102363][ T9218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.843'.
[  121.115668][ T9216] netlink: 36 bytes leftover after parsing attributes in process `syz.0.842'.
[  121.143271][ T9218] macvlan2: entered promiscuous mode
[  121.145549][ T9218] macvlan2: entered allmulticast mode
[  121.224276][ T9222] validate_nla: 6 callbacks suppressed
[  121.224285][ T9222] netlink: 'syz.1.844': attribute type 1 has an invalid length.
[  121.277621][ T9225] netlink: 'syz.2.845': attribute type 1 has an invalid length.
[  121.363839][ T9226] bond31: (slave bridge12): making interface the new active one
[  121.370840][ T9226] bond31: (slave bridge12): Enslaving as an active interface with an up link
[  121.399173][ T9222] bond27: (slave vxcan1): The slave device specified does not support setting the MAC address
[  121.411677][ T9222] bond27: (slave vxcan1): Error -95 calling set_mac_address
[  121.444997][ T9230] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  121.445114][ T9227] vti0: entered promiscuous mode
[  121.453333][ T9227] vti0: entered allmulticast mode
[  121.516313][ T9232] netlink: 'syz.1.847': attribute type 1 has an invalid length.
[  121.516319][ T9230] netlink: 24 bytes leftover after parsing attributes in process `syz.2.846'.
[  121.563623][ T9232] bond28: entered promiscuous mode
[  121.566313][ T9232] 8021q: adding VLAN 0 to HW filter on device bond28
[  121.586563][ T9234] 8021q: adding VLAN 0 to HW filter on device bond29
[  121.590878][ T9234] bond28: (slave bond29): making interface the new active one
[  121.593777][ T9234] bond29: entered promiscuous mode
[  121.595938][ T9234] bond28: (slave bond29): Enslaving as an active interface with an up link
[  121.634482][ T9232] netlink: 288 bytes leftover after parsing attributes in process `syz.1.847'.
[  121.706790][ T9242] tc_dump_action: action bad kind
[  121.835351][ T9246] netlink: 24 bytes leftover after parsing attributes in process `syz.2.852'.
[  121.875086][ T9248] netlink: 'syz.1.853': attribute type 1 has an invalid length.
[  121.916718][ T9248] 8021q: adding VLAN 0 to HW filter on device bond30
[  121.923993][ T9253] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available
[  121.965064][ T9253] netlink: 'syz.0.855': attribute type 1 has an invalid length.
[  122.054817][ T9253] 8021q: adding VLAN 0 to HW filter on device bond23
[  122.073679][ T9253] bond23: entered promiscuous mode
[  122.140993][ T9259] wg1 speed is unknown, defaulting to 1000
[  122.145468][ T9259] lo speed is unknown, defaulting to 1000
[  122.153306][ T9266] netlink: 'syz.2.857': attribute type 1 has an invalid length.
[  122.156493][ T9266] netlink: 224 bytes leftover after parsing attributes in process `syz.2.857'.
[  122.200057][ T9265] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  122.203225][ T9265] CPU: 0 UID: 0 PID: 9265 Comm: syz.0.859 Not tainted syzkaller #0 PREEMPT(full) 
[  122.203240][ T9265] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  122.203248][ T9265] Call Trace:
[  122.203253][ T9265]  <TASK>
[  122.203259][ T9265]  dump_stack_lvl+0x189/0x250
[  122.203281][ T9265]  ? __pfx_dump_stack_lvl+0x10/0x10
[  122.203297][ T9265]  ? __pfx__printk+0x10/0x10
[  122.203317][ T9265]  ? kernfs_path_from_node+0x2f/0x290
[  122.203332][ T9265]  ? kernfs_path_from_node+0x250/0x290
[  122.203345][ T9265]  ? kernfs_path_from_node+0x2f/0x290
[  122.203362][ T9265]  sysfs_warn_dup+0x8e/0xa0
[  122.203400][ T9265]  sysfs_do_create_link_sd+0xc0/0x110
[  122.203416][ T9265]  device_add_class_symlinks+0x1cf/0x240
[  122.203434][ T9265]  device_add+0x475/0xb50
[  122.203451][ T9265]  wiphy_register+0x1ba6/0x28d0
[  122.203477][ T9265]  ? __pfx_wiphy_register+0x10/0x10
[  122.203489][ T9265]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  122.203513][ T9265]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  122.203532][ T9265]  ieee80211_register_hw+0x3484/0x4100
[  122.203561][ T9265]  ? ieee80211_register_hw+0x1401/0x4100
[  122.203585][ T9265]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  122.203604][ T9265]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  122.203623][ T9265]  ? __hrtimer_setup+0x187/0x210
[  122.203634][ T9265]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  122.203655][ T9265]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  122.203694][ T9265]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  122.203711][ T9265]  ? trace_kmalloc+0x1f/0xd0
[  122.203725][ T9265]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  122.203740][ T9265]  ? kstrndup+0xbf/0x160
[  122.203760][ T9265]  hwsim_new_radio_nl+0xea4/0x1b10
[  122.203777][ T9265]  ? __pfx___nla_validate_parse+0x10/0x10
[  122.203803][ T9265]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  122.203826][ T9265]  ? __nla_parse+0x40/0x60
[  122.203841][ T9265]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  122.203861][ T9265]  genl_family_rcv_msg_doit+0x215/0x300
[  122.203880][ T9265]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  122.203902][ T9265]  ? bpf_lsm_capable+0x9/0x20
[  122.203917][ T9265]  ? security_capable+0x7e/0x2e0
[  122.203935][ T9265]  genl_rcv_msg+0x60e/0x790
[  122.203953][ T9265]  ? __pfx_genl_rcv_msg+0x10/0x10
[  122.203965][ T9265]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  122.203998][ T9265]  netlink_rcv_skb+0x208/0x470
[  122.204010][ T9265]  ? __lock_acquire+0xab9/0xd20
[  122.204027][ T9265]  ? __pfx_genl_rcv_msg+0x10/0x10
[  122.204044][ T9265]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  122.204065][ T9265]  ? down_read+0x1ad/0x2e0
[  122.204078][ T9265]  genl_rcv+0x28/0x40
[  122.204089][ T9265]  netlink_unicast+0x82f/0x9e0
[  122.204107][ T9265]  ? __pfx_netlink_unicast+0x10/0x10
[  122.204121][ T9265]  ? netlink_sendmsg+0x642/0xb30
[  122.204129][ T9265]  ? skb_put+0x11b/0x210
[  122.204141][ T9265]  netlink_sendmsg+0x805/0xb30
[  122.204156][ T9265]  ? __pfx_netlink_sendmsg+0x10/0x10
[  122.204171][ T9265]  ? aa_sock_msg_perm+0xf1/0x1d0
[  122.204185][ T9265]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  122.204198][ T9265]  ? __pfx_netlink_sendmsg+0x10/0x10
[  122.204213][ T9265]  __sock_sendmsg+0x21c/0x270
[  122.204232][ T9265]  ____sys_sendmsg+0x505/0x830
[  122.204249][ T9265]  ? __pfx_____sys_sendmsg+0x10/0x10
[  122.204271][ T9265]  ? import_iovec+0x74/0xa0
[  122.204288][ T9265]  ___sys_sendmsg+0x21f/0x2a0
[  122.204304][ T9265]  ? __pfx____sys_sendmsg+0x10/0x10
[  122.204344][ T9265]  ? __fget_files+0x2a/0x420
[  122.204355][ T9265]  ? __fget_files+0x3a0/0x420
[  122.204404][ T9265]  __x64_sys_sendmsg+0x19b/0x260
[  122.204423][ T9265]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  122.204447][ T9265]  ? rcu_is_watching+0x15/0xb0
[  122.204464][ T9265]  ? do_syscall_64+0xbe/0x3b0
[  122.204482][ T9265]  do_syscall_64+0xfa/0x3b0
[  122.204495][ T9265]  ? lockdep_hardirqs_on+0x9c/0x150
[  122.204508][ T9265]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.204519][ T9265]  ? exc_page_fault+0x9f/0xf0
[  122.204533][ T9265]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.204544][ T9265] RIP: 0033:0x7fd50898eba9
[  122.204556][ T9265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  122.204567][ T9265] RSP: 002b:00007fd50973a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  122.204580][ T9265] RAX: ffffffffffffffda RBX: 00007fd508bd5fa0 RCX: 00007fd50898eba9
[  122.204589][ T9265] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008
[  122.204596][ T9265] RBP: 00007fd508a11e19 R08: 0000000000000000 R09: 0000000000000000
[  122.204604][ T9265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  122.204611][ T9265] R13: 00007fd508bd6038 R14: 00007fd508bd5fa0 R15: 00007ffdf58aaa98
[  122.204632][ T9265]  </TASK>
[  122.685237][ T9296] netlink: 'syz.1.864': attribute type 1 has an invalid length.
[  122.689169][ T9296] netlink: 224 bytes leftover after parsing attributes in process `syz.1.864'.
[  122.697835][ T9299] netlink: 48 bytes leftover after parsing attributes in process `syz.1.864'.
[  122.719751][ T9302] ..0: renamed from hsr0
[  122.744547][ T9302] ..0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  122.759096][ T9302] ..0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  122.763396][ T9302] ..0: entered allmulticast mode
[  122.766695][ T9302] hsr_slave_0: entered allmulticast mode
[  122.771218][ T9302] hsr_slave_1: entered allmulticast mode
[  122.777684][ T9302] 8021q: adding VLAN 0 to HW filter on device ..0
[  122.781908][ T9302] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  122.796065][ T9304] team0: Device gtp0 is of different type
[  122.853899][ T9306] netlink: 'syz.1.868': attribute type 13 has an invalid length.
[  122.874456][ T9313] netlink: 'syz.1.868': attribute type 13 has an invalid length.
[  122.880073][ T9306] netlink: 'syz.1.868': attribute type 17 has an invalid length.
[  122.911577][ T9306] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  122.946584][ T9313] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  122.971821][ T9315] k*: entered promiscuous mode
[  122.983169][ T9318] : entered promiscuous mode
[  123.006542][ T9315] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  123.045553][ T9320] 8021q: adding VLAN 0 to HW filter on device bond31
[  123.063853][ T9320] bond31: (slave veth13): Enslaving as an active interface with a down link
[  123.089160][ T9324] batman_adv: batadv0: Adding interface: ipvlan2
[  123.096936][ T9324] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.106721][ T9324] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[  123.185839][ T9339] erspan0: entered promiscuous mode
[  123.188978][ T9339] batadv0: entered promiscuous mode
[  123.192201][ T9339] batadv0: left promiscuous mode
[  123.194849][ T9339] erspan0: left promiscuous mode
[  123.239561][ T9344] 8021q: adding VLAN 0 to HW filter on device batadv0
[  123.310871][ T9346] Bluetooth: MGMT ver 1.23
[  123.315675][   T33] audit: type=1800 audit(1757943473.268:2): pid=9346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.877" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1603 res=0 errno=0
[  123.325729][   T33] audit: type=1800 audit(1757943473.268:3): pid=9346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.877" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1603 res=0 errno=0
[  123.366073][ T9352] bond12: option mode: unable to set because the bond device has slaves
[  123.381564][ T9352] bond12: (slave macvlan3): Error -98 calling set_mac_address
[  123.426610][ T9361] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  123.497056][ T9364] wg1 speed is unknown, defaulting to 1000
[  123.500490][ T9364] lo speed is unknown, defaulting to 1000
[  123.525867][ T9367] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  123.751589][ T9375] pim6reg: left allmulticast mode
[  124.120831][ T9390] 8021q: adding VLAN 0 to HW filter on device bond24
[  124.341547][ T7833] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.344388][ T7833] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.347938][ T7833] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.351387][ T7833] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.462242][ T9401] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  124.537154][ T9403] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  124.822601][ T9429] bond32: (slave vxcan1): The slave device specified does not support setting the MAC address
[  124.830440][ T9429] bond32: (slave vxcan1): Error -95 calling set_mac_address
[  125.056992][ T9448] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  125.127546][ T9460] bond33: entered promiscuous mode
[  125.129905][ T9460] 8021q: adding VLAN 0 to HW filter on device bond33
[  125.175975][ T9469] 8021q: adding VLAN 0 to HW filter on device bond34
[  125.182476][ T9469] bond33: (slave bond34): making interface the new active one
[  125.185754][ T9469] bond34: entered promiscuous mode
[  125.191526][ T9469] bond33: (slave bond34): Enslaving as an active interface with an up link
[  125.278247][ T9476] wg1 speed is unknown, defaulting to 1000
[  125.282124][ T9476] lo speed is unknown, defaulting to 1000
[  125.442117][ T9495] pim6reg1: entered promiscuous mode
[  125.444517][ T9495] pim6reg1: entered allmulticast mode
[  125.450826][ T9495] __nla_validate_parse: 12 callbacks suppressed
[  125.450838][ T9495] netlink: 71 bytes leftover after parsing attributes in process `syz.0.912'.
[  125.629184][ T9508] wg1 speed is unknown, defaulting to 1000
[  125.632171][ T9508] lo speed is unknown, defaulting to 1000
[  125.666590][ T9513] netlink: 224 bytes leftover after parsing attributes in process `syz.0.914'.
[  125.771933][ T9518] wg1 speed is unknown, defaulting to 1000
[  125.775098][ T9518] lo speed is unknown, defaulting to 1000
[  125.832246][ T9524] bond32: (slave geneve5): making interface the new active one
[  125.836083][ T9524] bond32: (slave geneve5): Enslaving as an active interface with an up link
[  125.850617][ T7833] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  125.860892][ T9527] netlink: 40 bytes leftover after parsing attributes in process `syz.2.917'.
[  125.865896][ T7833] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  125.871541][ T7833] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  125.874985][ T7833] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  125.959811][ T9530] netlink: 163956 bytes leftover after parsing attributes in process `syz.0.920'.
[  126.138117][ T9536] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  126.165826][ T9534] wg1 speed is unknown, defaulting to 1000
[  126.169520][ T9534] lo speed is unknown, defaulting to 1000
[  126.486408][ T9541] syzkaller1: entered promiscuous mode
[  126.504776][ T9541] syzkaller1: entered allmulticast mode
[  126.596725][ T9553] vlan0 (unregistering): left promiscuous mode
[  126.601129][ T9553] bridge8: port 1(vlan0) entered disabled state
[  126.652599][ T9551] netlink: 104 bytes leftover after parsing attributes in process `syz.1.924'.
[  126.658785][ T9551] batadv_slave_1: entered promiscuous mode
[  126.666608][ T9550] batadv_slave_1: left promiscuous mode
[  126.785179][ T9563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.927'.
[  126.868676][ T9568] validate_nla: 14 callbacks suppressed
[  126.868690][ T9568] netlink: 'syz.1.929': attribute type 1 has an invalid length.
[  126.884525][ T9564] netlink: 72 bytes leftover after parsing attributes in process `syz.2.928'.
[  126.951687][ T9572] netlink: 36 bytes leftover after parsing attributes in process `syz.0.931'.
[  127.021660][ T9577] netlink: 'syz.0.934': attribute type 2 has an invalid length.
[  127.028963][ T9574] team0: Port device geneve0 removed
[  127.031647][ T9574] bond25: left allmulticast mode
[  127.033807][ T9574] bond25: left promiscuous mode
[  127.050365][ T9579] sctp: [Deprecated]: syz.2.933 (pid 9579) Use of struct sctp_assoc_value in delayed_ack socket option.
[  127.050365][ T9579] Use struct sctp_sack_info instead
[  127.061657][ T9574] bridge0: port 1(bond25) entered disabled state
[  127.120672][ T9574] bond28: (slave bond29): Releasing backup interface
[  127.123701][ T9574] bond29: left promiscuous mode
[  127.126887][ T9580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.934'.
[  127.142076][ T9574] bond31: (slave veth13): Releasing active interface
[  127.166420][ T9574] bond32: (slave geneve5): Releasing active interface
[  127.220432][ T5722] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  127.229090][ T5722] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  127.232623][ T5722] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  127.246524][ T5722] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  127.253688][ T9585] netlink: 'syz.2.935': attribute type 4 has an invalid length.
[  127.332152][ T9592] netlink: 'syz.1.938': attribute type 1 has an invalid length.
[  127.352449][ T9592] bond33: entered promiscuous mode
[  127.354438][ T9592] 8021q: adding VLAN 0 to HW filter on device bond33
[  127.366199][ T9592] 8021q: adding VLAN 0 to HW filter on device bond33
[  127.377558][ T9592] bond33: (slave wireguard0): The slave device specified does not support setting the MAC address
[  127.390218][ T9592] bond33: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  127.400452][ T9592] bond33: (slave wireguard0): making interface the new active one
[  127.407321][ T9592] wireguard0: entered promiscuous mode
[  127.412359][ T9592] bond33: (slave wireguard0): Enslaving as an active interface with an up link
[  127.433247][ T9597] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  127.436636][ T9597] IPv6: NLM_F_CREATE should be set when creating new route
[  127.439896][ T9597] IPv6: NLM_F_CREATE should be set when creating new route
[  127.444087][ T9597] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  127.495831][ T9603] netlink: 20 bytes leftover after parsing attributes in process `syz.0.941'.
[  127.503247][ T9603] netlink: 'syz.0.941': attribute type 3 has an invalid length.
[  127.508704][ T9603] netlink: 'syz.0.941': attribute type 2 has an invalid length.
[  127.513513][ T9603] netlink: 'syz.0.941': attribute type 2 has an invalid length.
[  127.616041][ T9612] openvswitch: netlink: Flow actions attr not present in new flow.
[  127.647596][ T9623] netlink: 'syz.2.947': attribute type 32 has an invalid length.
[  127.651575][ T9623] netlink: 'syz.2.947': attribute type 1 has an invalid length.
[  127.772898][ T9634] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  127.779828][ T9634] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.829006][ T9641] netlink: 'syz.1.951': attribute type 1 has an invalid length.
[  127.865634][ T9641] bond34: entered promiscuous mode
[  127.868244][ T9641] 8021q: adding VLAN 0 to HW filter on device bond34
[  127.871939][ T9634] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  127.876390][ T9634] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.889940][ T9641] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  127.893886][ T9641] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  127.931081][ T9634] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  127.934475][ T9634] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.940883][ T9650] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  127.961998][ T9634] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  127.965472][ T9634] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.041042][ T5722] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  128.049632][ T5722] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  128.058417][ T5722] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  128.062001][ T5722] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.075586][ T5722] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  128.080491][ T5722] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.090027][ T5722] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  128.093350][ T5722] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.286985][ T9682] 8021q: adding VLAN 0 to HW filter on device bond0
[  128.294881][ T9682] 8021q: adding VLAN 0 to HW filter on device team0
[  128.298710][ T9682] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  128.304929][ T9680] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  128.332602][ T9682] wg1 speed is unknown, defaulting to 1000
[  128.335776][ T9682] lo speed is unknown, defaulting to 1000
[  128.349080][ T9685] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  128.435532][ T9695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  128.500248][ T9703] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  128.686737][ T9710] debugfs: 'netdev:nicvf0' already exists in 'phy5'
[  129.030909][ T9725] wg1 speed is unknown, defaulting to 1000
[  129.034882][ T9725] lo speed is unknown, defaulting to 1000
[  129.645233][ T9736] wg1 speed is unknown, defaulting to 1000
[  129.655898][ T9736] lo speed is unknown, defaulting to 1000
[  129.995148][ T9746] siw: device registration error -23
[  130.057606][ T9748] bond35: (slave vxcan1): The slave device specified does not support setting the MAC address
[  130.063011][ T9748] bond35: (slave vxcan1): Error -95 calling set_mac_address
[  130.182785][ T9748] bond35: (slave bridge14): Enslaving as an active interface with a down link
[  130.489530][ T9754] workqueue: Failed to create a rescuer kthread for wq "bond36": -EINTR
[  130.523545][ T9765] __nla_validate_parse: 20 callbacks suppressed
[  130.523556][ T9765] netlink: 104 bytes leftover after parsing attributes in process `syz.1.980'.
[  130.533835][ T9765] netlink: 28 bytes leftover after parsing attributes in process `syz.1.980'.
[  130.536903][ T9765] netlink: 28 bytes leftover after parsing attributes in process `syz.1.980'.
[  130.554065][ T9765] ip6tnl4: entered promiscuous mode
[  130.862765][ T9783] sctp: [Deprecated]: syz.1.984 (pid 9783) Use of struct sctp_assoc_value in delayed_ack socket option.
[  130.862765][ T9783] Use struct sctp_sack_info instead
[  131.081367][ T9794] netlink: 16 bytes leftover after parsing attributes in process `syz.2.988'.
[  131.096396][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  131.111025][ T9796] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  131.204068][ T9811] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.216906][ T9811] team0: Port device gtp1 added
[  131.275774][ T9818] team0: Device bond36 is of different type
[  131.288340][ T9818] bond36 (unregistering): Released all slaves
[  131.297095][ T9821] tc_dump_action: action bad kind
[  131.505600][ T9843] 8021q: adding VLAN 0 to HW filter on device bond36
[  131.526339][ T9843] veth15: entered promiscuous mode
[  131.530005][ T9843] bond36: (slave veth15): Enslaving as an active interface with a down link
[  131.601871][ T9852] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  131.661161][ T9856] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  131.671437][ T9858] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1001'.
[  131.682675][ T9858] sctp: [Deprecated]: syz.1.1001 (pid 9858) Use of struct sctp_assoc_value in delayed_ack socket option.
[  131.682675][ T9858] Use struct sctp_sack_info instead
[  131.690112][ T9858] sctp: [Deprecated]: syz.1.1001 (pid 9858) Use of struct sctp_assoc_value in delayed_ack socket option.
[  131.690112][ T9858] Use struct sctp_sack_info instead
[  131.742137][ T9867] netlink: 20 bytes leftover after parsing attributes in process `syz.2.998'.
[  131.769682][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803d99ec00: rx timeout, send abort
[  131.774710][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803d99e000: rx timeout, send abort
[  131.778104][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803d99ec00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  131.782989][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803d99e000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  131.838978][   T33] audit: type=1800 audit(1757943481.798:4): pid=9874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1004" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=1816 res=0 errno=0
[  131.952254][ T9879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1005'.
[  131.957010][ T9879] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1005'.
[  131.962423][ T9879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1005'.
[  132.406648][ T9882] 8021q: adding VLAN 0 to HW filter on device bond35
[  132.414030][ T9882] bridge0: port 2(bond35) entered blocking state
[  132.417129][ T9882] bridge0: port 2(bond35) entered disabled state
[  132.420891][ T9882] bond35: entered allmulticast mode
[  132.424982][ T9882] bond35: entered promiscuous mode
[  132.765504][ T9898] veth0_to_team: entered promiscuous mode
[  132.799665][ T9902] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  132.816460][ T9902] bond33: (slave wireguard0): Releasing backup interface
[  132.821275][ T9902] wireguard0: left promiscuous mode
[  132.827025][ T9902] bond35: (slave bridge14): Releasing active interface
[  132.843076][ T9902] team0: Port device gtp1 removed
[  132.853569][ T9902] bond36: (slave veth15): Releasing active interface
[  132.890599][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1015'.
[  132.896784][ T9914] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  132.913495][ T9910] batman_adv: batadv0: Removing interface: ipvlan2
[  132.940397][ T9913] hsr_slave_0: left promiscuous mode
[  132.944299][ T9913] hsr_slave_1: left promiscuous mode
[  132.986742][ T9914] validate_nla: 13 callbacks suppressed
[  132.986756][ T9914] netlink: 'syz.1.1016': attribute type 10 has an invalid length.
[  133.000427][ T9914] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  133.004030][ T9914] bond0: (slave wlan1): refused to change device type
[  133.013785][ T9914] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  133.019038][ T9914] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  133.154665][ T9922] sctp: [Deprecated]: syz.0.1018 (pid 9922) Use of struct sctp_assoc_value in delayed_ack socket option.
[  133.154665][ T9922] Use struct sctp_sack_info instead
[  133.206306][ T9932] vlan0: entered allmulticast mode
[  133.209087][ T9932] gretap0: entered allmulticast mode
[  133.356798][ T9947] netlink: 'syz.0.1023': attribute type 10 has an invalid length.
[  133.368465][ T9949] wg1 speed is unknown, defaulting to 1000
[  133.371790][ T9949] lo speed is unknown, defaulting to 1000
[  133.410503][ T9950] netlink: 'syz.2.1024': attribute type 5 has an invalid length.
[  133.435003][ T9952] netlink: 'syz.0.1025': attribute type 1 has an invalid length.
[  133.504723][ T9952] bond26: (slave vxcan1): The slave device specified does not support setting the MAC address
[  133.511226][ T9952] bond26: (slave vxcan1): Error -95 calling set_mac_address
[  133.554336][ T9954] gretap2: entered promiscuous mode
[  133.560381][ T9954] bond26: (slave gretap2): making interface the new active one
[  133.564687][ T9954] bond26: (slave gretap2): Enslaving as an active interface with an up link
[  133.689949][ T9959] netlink: 'syz.0.1026': attribute type 5 has an invalid length.
[  133.716920][ T9958] wg1 speed is unknown, defaulting to 1000
[  133.726666][ T9958] lo speed is unknown, defaulting to 1000
[  133.794219][ T9964] netlink: 'syz.1.1027': attribute type 1 has an invalid length.
[  133.798171][ T9963] netlink: 'syz.1.1027': attribute type 1 has an invalid length.
[  133.830408][ T9964] 8021q: adding VLAN 0 to HW filter on device bond37
[  133.842640][ T9963] netlink: 'syz.1.1027': attribute type 1 has an invalid length.
[  133.855484][ T9964] bond37: entered promiscuous mode
[  134.002148][ T9968] netlink: 'syz.1.1028': attribute type 13 has an invalid length.
[  134.004928][ T9968] netlink: 'syz.1.1028': attribute type 17 has an invalid length.
[  134.038936][ T9968] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  134.165901][ T9968] wg1 speed is unknown, defaulting to 1000
[  134.169843][ T9968] lo speed is unknown, defaulting to 1000
[  134.403027][ T9979] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  134.431127][ T9979] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  134.433476][ T9979] bond0: (slave wlan1): refused to change device type
[  134.520351][ T9985] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  134.526401][ T9985] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  134.549645][ T9987] syz.1.1033 uses old SIOCAX25GETINFO
[  134.588502][ T9985] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  134.592475][ T9985] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  134.609976][ T5311] block nbd0: Possible stuck request ffff888021c70000: control (read@0,1024B). Runtime 60 seconds
[  134.634071][ T5311] block nbd0: Possible stuck request ffff888021c70200: control (read@1024,1024B). Runtime 60 seconds
[  134.640144][ T5311] block nbd0: Possible stuck request ffff888021c70400: control (read@2048,1024B). Runtime 60 seconds
[  134.644204][ T5311] block nbd0: Possible stuck request ffff888021c70600: control (read@3072,1024B). Runtime 60 seconds
[  134.706830][ T9985] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  134.720630][ T9985] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  134.762523][ T9985] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  134.767306][ T9985] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  134.859103][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  134.863014][   T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  134.874029][ T5722] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  134.877074][ T5722] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  134.886795][ T5722] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  134.890559][ T5722] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  134.903018][ T5722] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  134.906415][ T5722] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  135.002212][T10010] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614)
[  135.217063][T10036] rdma_rxe: rxe_newlink: failed to add veth1_to_hsr
[  135.219452][T10037] rdma_rxe: rxe_newlink: failed to add veth1_to_hsr
[  135.275454][T10039] sctp: [Deprecated]: syz.2.1046 (pid 10039) Use of struct sctp_assoc_value in delayed_ack socket option.
[  135.275454][T10039] Use struct sctp_sack_info instead
[  135.281072][T10036] sctp: [Deprecated]: syz.2.1046 (pid 10036) Use of struct sctp_assoc_value in delayed_ack socket option.
[  135.281072][T10036] Use struct sctp_sack_info instead
[  135.373879][T10046] ip6tnl5: entered promiscuous mode
[  135.414944][T10050] rdma_rxe: rxe_newlink: failed to add bond0
[  135.467040][T10048] tipc: Resetting bearer <eth:batadv0>
[  135.474607][T10048] bond19: left promiscuous mode
[  135.481612][T10048] geneve4: left promiscuous mode
[  135.493447][T10048] bond22: left promiscuous mode
[  135.495968][T10048] batman_adv: batadv0: Interface deactivated: gretap3
[  135.501275][T10055] rdma_rxe: rxe_newlink: failed to add bond0
[  135.506360][T10048] bond0: left promiscuous mode
[  135.508161][T10048] bridge11: left promiscuous mode
[  135.509879][T10048] xfrm2: left promiscuous mode
[  135.516143][T10048] bond33: left promiscuous mode
[  135.519267][T10048] bond34: left promiscuous mode
[  135.530638][   T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  135.535616][ T9399] lo speed is unknown, defaulting to 1000
[  135.535862][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.538545][ T9399] syz2: Port: 1 Link DOWN
[  135.545282][   T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  135.549992][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.553109][   T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  135.555917][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.569714][   T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  135.572864][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.579636][T10059] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  135.606497][T10061] __nla_validate_parse: 15 callbacks suppressed
[  135.606506][T10061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1051'.
[  135.617894][T10059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1050'.
[  135.729142][T10065] 8021q: adding VLAN 0 to HW filter on device bond38
[  135.743548][T10065] ipvlan3: entered allmulticast mode
[  135.745765][T10065] bond38: entered allmulticast mode
[  135.750413][T10065] openvswitch: netlink: Key type 29 is not supported
[  135.762763][T10065] bond38: (slave gretap4): making interface the new active one
[  135.765329][T10065] gretap4: entered allmulticast mode
[  135.768389][T10065] bond38: (slave gretap4): Enslaving as an active interface with an up link
[  135.857075][T10071] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  135.862417][T10070] IPVS: stopping backup sync thread 10071 ...
[  135.869557][T10070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1054'.
[  135.901723][T10073] tipc: Enabled bearer <eth:gre0>, priority 10
[  135.971924][T10074] 8021q: adding VLAN 0 to HW filter on device bond39
[  136.001022][T10077] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1056'.
[  136.136745][T10085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1058'.
[  136.230629][T10096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1059'.
[  136.234966][T10096] bond0: mtu less than device minimum
[  136.397778][T10103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1062'.
[  136.424041][T10103] 8021q: adding VLAN 0 to HW filter on device bond27
[  136.637335][T10112] 8021q: adding VLAN 0 to HW filter on device bond36
[  136.640469][T10112] bridge0: port 3(bond36) entered blocking state
[  136.643341][T10112] bridge0: port 3(bond36) entered disabled state
[  136.646133][T10112] bond36: entered allmulticast mode
[  136.652757][T10112] bond36: entered promiscuous mode
[  136.662022][T10112] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1066'.
[  136.665754][T10112] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1066'.
[  136.740130][T10122] 8021q: adding VLAN 0 to HW filter on device bond28
[  136.752957][T10122] ipvlan2: entered allmulticast mode
[  136.755074][T10122] bond28: entered allmulticast mode
[  136.787930][T10125] wg1 speed is unknown, defaulting to 1000
[  136.791920][T10125] lo speed is unknown, defaulting to 1000
[  136.835619][T10129] netlink: 14212 bytes leftover after parsing attributes in process `syz.2.1070'.
[  137.130648][T10149] wg1 speed is unknown, defaulting to 1000
[  137.133907][T10149] lo speed is unknown, defaulting to 1000
[  137.209275][T10160] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  137.739459][T10200] 8021q: adding VLAN 0 to HW filter on device bond38
[  137.745855][T10200] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  137.936110][T10218] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  138.003272][T10225] dvmrp1: entered allmulticast mode
[  138.011665][T10220] 8021q: adding VLAN 0 to HW filter on device bond39
[  138.023197][T10220] veth17: entered promiscuous mode
[  138.030020][T10220] bond39: (slave veth17): Enslaving as a backup interface with a down link
[  138.033859][T10220] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  138.045320][T10225] dvmrp1: left allmulticast mode
[  138.499333][T10260] validate_nla: 21 callbacks suppressed
[  138.499343][T10260] netlink: 'syz.2.1103': attribute type 10 has an invalid length.
[  138.523241][T10270] wg1 speed is unknown, defaulting to 1000
[  138.525893][T10270] lo speed is unknown, defaulting to 1000
[  138.975738][T10288] block nbd2: not configured, cannot reconfigure
[  139.018632][T10292] sctp: [Deprecated]: syz.2.1115 (pid 10292) Use of int in max_burst socket option deprecated.
[  139.018632][T10292] Use struct sctp_assoc_value instead
[  139.066481][T10295] RDS: rds_bind could not find a transport for fe80::2a, load rds_tcp or rds_rdma?
[  139.072019][T10297] netlink: 'syz.2.1116': attribute type 1 has an invalid length.
[  139.431189][T10320] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  139.434144][T10320] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (21474836613)
[  139.882335][T10355] bond0: entered promiscuous mode
[  139.889324][T10355] bond0: left promiscuous mode
[  139.958514][T10369] bridge14: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  140.016589][T10374] geneve6: entered promiscuous mode
[  140.107462][T10382] netlink: 'syz.2.1129': attribute type 1 has an invalid length.
[  140.124472][T10382] 8021q: adding VLAN 0 to HW filter on device bond41
[  140.129950][T10382] batadv_slave_0: entered promiscuous mode
[  140.136143][T10382] vlan4: entered promiscuous mode
[  140.139043][T10382] bond41: entered promiscuous mode
[  140.141738][T10382] vlan4: entered allmulticast mode
[  140.143856][T10382] bond41: entered allmulticast mode
[  140.174290][T10385] @: renamed from veth0_vlan
[  140.182960][T10385] vlan5: entered promiscuous mode
[  140.234951][T10387] netlink: 'syz.2.1131': attribute type 11 has an invalid length.
[  140.260607][T10389] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  140.263492][T10390] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  140.308372][T10392] wg1 speed is unknown, defaulting to 1000
[  140.311320][T10392] lo speed is unknown, defaulting to 1000
[  140.886808][T10422] wg1 speed is unknown, defaulting to 1000
[  140.889705][T10422] lo speed is unknown, defaulting to 1000
[  140.912704][T10420] __nla_validate_parse: 18 callbacks suppressed
[  140.912713][T10420] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1141'.
[  141.039453][T10428] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1142'.
[  141.625731][T10429] syzkaller0: entered promiscuous mode
[  141.627795][T10429] syzkaller0: entered allmulticast mode
[  141.692981][T10436] netlink: 'syz.1.1143': attribute type 1 has an invalid length.
[  141.716185][T10436] 8021q: adding VLAN 0 to HW filter on device bond41
[  141.732451][T10440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1144'.
[  141.835494][T10444] 8021q: adding VLAN 0 to HW filter on device bond42
[  141.898672][T10444] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  141.932303][T10444] bond42: (slave macvlan0): Enslaving as a backup interface with a down link
[  141.940673][T10453] block nbd1: not configured, cannot reconfigure
[  141.970707][T10445] bond42: (slave macvlan2): Error -98 calling set_mac_address
[  142.013036][T10440] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1144'.
[  142.099971][T10463] tipc: Resetting bearer <eth:gre0>
[  142.161984][T10465] dummy0: Device is already in use.
[  142.265709][T10476] netlink: 'syz.1.1152': attribute type 1 has an invalid length.
[  142.273116][T10476] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1152'.
[  142.282896][T10479] netlink: 'syz.2.1153': attribute type 13 has an invalid length.
[  142.316991][T10479] wg1 speed is unknown, defaulting to 1000
[  142.321105][T10479] lo speed is unknown, defaulting to 1000
[  142.399562][T10485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1154'.
[  142.432433][T10485] 8021q: adding VLAN 0 to HW filter on device bond42
[  142.441613][T10487] macvlan4: entered promiscuous mode
[  142.443948][T10487] macvlan4: entered allmulticast mode
[  142.448162][T10487] bond42: entered promiscuous mode
[  142.450717][T10487] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  142.456125][T10487] bond42: left promiscuous mode
[  146.297436][ T5294] udevd[5294]: worker [5847] /devices/virtual/block/nbd0 is taking a long time
[  158.373765][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  158.377597][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  158.381976][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  158.384553][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  158.390129][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  158.390207][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  158.396397][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  158.399653][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  158.400258][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  158.406685][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  158.431458][ T5853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  158.435553][ T5853] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  158.439044][ T5853] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  158.442152][ T5853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  158.442437][T10499] wg1 speed is unknown, defaulting to 1000
[  158.444998][ T5853] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  158.449440][T10499] lo speed is unknown, defaulting to 1000
[  158.456104][T10501] wg1 speed is unknown, defaulting to 1000
[  158.466543][T10501] lo speed is unknown, defaulting to 1000
[  158.474271][T10503] wg1 speed is unknown, defaulting to 1000
[  158.477649][T10503] lo speed is unknown, defaulting to 1000
[  158.642161][T10499] chnl_net:caif_netlink_parms(): no params data found
[  158.745554][T10499] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.750268][T10499] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.752703][T10499] bridge_slave_0: entered allmulticast mode
[  158.755711][T10499] bridge_slave_0: entered promiscuous mode
[  158.759992][T10499] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.762448][T10499] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.764995][T10499] bridge_slave_1: entered allmulticast mode
[  158.770083][T10499] bridge_slave_1: entered promiscuous mode
[  158.802862][T10499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  158.808151][T10499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  158.843689][T10499] team0: Port device team_slave_0 added
[  158.860054][T10499] team0: Port device team_slave_1 added
[  158.912735][T10499] batman_adv: batadv0: Adding interface: batadv_slave_0
[  158.915668][T10499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.926213][T10499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  158.932206][T10499] batman_adv: batadv0: Adding interface: batadv_slave_1
[  158.935024][T10499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.948206][T10499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  158.959282][T10501] chnl_net:caif_netlink_parms(): no params data found
[  158.993159][T10499] hsr_slave_0: entered promiscuous mode
[  158.995560][T10499] hsr_slave_1: entered promiscuous mode
[  159.117097][T10503] chnl_net:caif_netlink_parms(): no params data found
[  159.126919][T10501] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.130556][T10501] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.133429][T10501] bridge_slave_0: entered allmulticast mode
[  159.136962][T10501] bridge_slave_0: entered promiscuous mode
[  159.159461][T10501] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.162831][T10501] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.165753][T10501] bridge_slave_1: entered allmulticast mode
[  159.169398][T10501] bridge_slave_1: entered promiscuous mode
[  159.209164][T10501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  159.223437][T10501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  159.286017][T10503] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.289694][T10503] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.292896][T10503] bridge_slave_0: entered allmulticast mode
[  159.296909][T10503] bridge_slave_0: entered promiscuous mode
[  159.302549][T10501] team0: Port device team_slave_0 added
[  159.304738][T10503] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.308275][T10503] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.311347][T10503] bridge_slave_1: entered allmulticast mode
[  159.315134][T10503] bridge_slave_1: entered promiscuous mode
[  159.325511][T10501] team0: Port device team_slave_1 added
[  159.371241][T10503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  159.389020][T10503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  159.436014][T10501] batman_adv: batadv0: Adding interface: batadv_slave_0
[  159.439027][T10501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  159.448281][T10501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  159.458716][T10503] team0: Port device team_slave_0 added
[  159.461598][T10501] batman_adv: batadv0: Adding interface: batadv_slave_1
[  159.464259][T10501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  159.474969][T10501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  159.480863][T10503] team0: Port device team_slave_1 added
[  159.511964][T10503] batman_adv: batadv0: Adding interface: batadv_slave_0
[  159.514213][T10503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  159.522627][T10503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  159.527040][T10503] batman_adv: batadv0: Adding interface: batadv_slave_1
[  159.529641][T10503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  159.540645][T10503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  159.565133][T10501] hsr_slave_0: entered promiscuous mode
[  159.567914][T10501] hsr_slave_1: entered promiscuous mode
[  159.570739][T10501] debugfs: 'hsr0' already exists in 'hsr'
[  159.573116][T10501] Cannot create hsr debugfs directory
[  159.605786][T10503] hsr_slave_0: entered promiscuous mode
[  159.608713][T10503] hsr_slave_1: entered promiscuous mode
[  159.611065][T10503] debugfs: 'hsr0' already exists in 'hsr'
[  159.613056][T10503] Cannot create hsr debugfs directory
[  160.437387][ T5853] Bluetooth: hci4: command tx timeout
[  160.447530][ T5853] Bluetooth: hci3: command tx timeout
[  160.517551][ T5853] Bluetooth: hci5: command tx timeout
[  162.517435][ T5853] Bluetooth: hci3: command tx timeout
[  162.517578][ T5849] Bluetooth: hci4: command tx timeout
[  162.597425][ T5853] Bluetooth: hci5: command tx timeout
[  164.597590][ T5853] Bluetooth: hci3: command tx timeout
[  164.599387][ T5853] Bluetooth: hci4: command tx timeout
[  164.677603][ T5853] Bluetooth: hci5: command tx timeout
[  164.687642][ T5311] block nbd0: Possible stuck request ffff888021c70000: control (read@0,1024B). Runtime 90 seconds
[  164.691438][ T5311] block nbd0: Possible stuck request ffff888021c70200: control (read@1024,1024B). Runtime 90 seconds
[  164.695092][ T5311] block nbd0: Possible stuck request ffff888021c70400: control (read@2048,1024B). Runtime 90 seconds
[  164.699488][ T5311] block nbd0: Possible stuck request ffff888021c70600: control (read@3072,1024B). Runtime 90 seconds
[  166.677420][ T5849] Bluetooth: hci4: command tx timeout
[  166.679606][ T5853] Bluetooth: hci3: command tx timeout
[  166.767459][ T5853] Bluetooth: hci5: command tx timeout
[  180.837879][ T5853] Bluetooth: hci1: command 0x0406 tx timeout
[  180.838500][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[  194.777629][ T5311] block nbd0: Possible stuck request ffff888021c70000: control (read@0,1024B). Runtime 120 seconds
[  194.782298][ T5311] block nbd0: Possible stuck request ffff888021c70200: control (read@1024,1024B). Runtime 120 seconds
[  194.786918][ T5311] block nbd0: Possible stuck request ffff888021c70400: control (read@2048,1024B). Runtime 120 seconds
[  194.791683][ T5311] block nbd0: Possible stuck request ffff888021c70600: control (read@3072,1024B). Runtime 120 seconds
[  219.295822][ T5844] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  219.300801][ T5844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  219.304061][ T5844] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  219.307954][ T5844] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  219.310704][ T5844] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  219.343793][T10531] wg1 speed is unknown, defaulting to 1000
[  219.346526][T10531] lo speed is unknown, defaulting to 1000
[  219.386534][ T5844] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  219.389918][ T5844] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  219.393226][ T5844] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  219.401151][ T5844] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  219.405581][ T5844] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  219.414289][   T55] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  219.424372][   T55] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  219.428904][   T55] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  219.432464][   T55] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  219.432700][T10533] wg1 speed is unknown, defaulting to 1000
[  219.436026][   T55] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  219.438613][T10533] lo speed is unknown, defaulting to 1000
[  219.470420][T10535] wg1 speed is unknown, defaulting to 1000
[  219.473373][T10535] lo speed is unknown, defaulting to 1000
[  219.601386][T10531] chnl_net:caif_netlink_parms(): no params data found
[  219.744807][T10531] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.748216][T10531] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.750718][T10531] bridge_slave_0: entered allmulticast mode
[  219.753527][T10531] bridge_slave_0: entered promiscuous mode
[  219.771931][T10531] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.774262][T10531] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.776599][T10531] bridge_slave_1: entered allmulticast mode
[  219.779846][T10531] bridge_slave_1: entered promiscuous mode
[  219.833106][T10531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  219.854126][T10531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  219.888397][T10531] team0: Port device team_slave_0 added
[  219.898951][T10531] team0: Port device team_slave_1 added
[  219.935268][T10533] chnl_net:caif_netlink_parms(): no params data found
[  219.946205][T10531] batman_adv: batadv0: Adding interface: batadv_slave_0
[  219.950006][T10531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.961067][T10531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  219.998989][T10531] batman_adv: batadv0: Adding interface: batadv_slave_1
[  220.002077][T10531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  220.013497][T10531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  220.105017][T10531] hsr_slave_0: entered promiscuous mode
[  220.108259][T10531] hsr_slave_1: entered promiscuous mode
[  220.111020][T10531] debugfs: 'hsr0' already exists in 'hsr'
[  220.113489][T10531] Cannot create hsr debugfs directory
[  220.142977][T10533] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.145473][T10533] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.148218][T10533] bridge_slave_0: entered allmulticast mode
[  220.151055][T10533] bridge_slave_0: entered promiscuous mode
[  220.171639][T10533] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.174732][T10533] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.178301][T10533] bridge_slave_1: entered allmulticast mode
[  220.181724][T10533] bridge_slave_1: entered promiscuous mode
[  220.220295][T10535] chnl_net:caif_netlink_parms(): no params data found
[  220.230793][T10533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  220.238314][T10533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  220.281620][T10533] team0: Port device team_slave_0 added
[  220.297794][T10533] team0: Port device team_slave_1 added
[  220.341109][T10533] batman_adv: batadv0: Adding interface: batadv_slave_0
[  220.343427][T10533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  220.352133][T10533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  220.377410][T10533] batman_adv: batadv0: Adding interface: batadv_slave_1
[  220.379815][T10533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  220.389669][T10533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  220.406988][T10535] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.410324][T10535] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.413050][T10535] bridge_slave_0: entered allmulticast mode
[  220.416228][T10535] bridge_slave_0: entered promiscuous mode
[  220.421701][T10535] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.424941][T10535] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.428339][T10535] bridge_slave_1: entered allmulticast mode
[  220.432280][T10535] bridge_slave_1: entered promiscuous mode
[  220.483712][T10535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  220.490040][T10533] hsr_slave_0: entered promiscuous mode
[  220.492549][T10533] hsr_slave_1: entered promiscuous mode
[  220.494911][T10533] debugfs: 'hsr0' already exists in 'hsr'
[  220.496897][T10533] Cannot create hsr debugfs directory
[  220.502505][T10535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  220.545187][T10535] team0: Port device team_slave_0 added
[  220.550271][T10535] team0: Port device team_slave_1 added
[  220.588958][T10535] batman_adv: batadv0: Adding interface: batadv_slave_0
[  220.591405][T10535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  220.600929][T10535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  220.612257][T10535] batman_adv: batadv0: Adding interface: batadv_slave_1
[  220.614671][T10535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  220.624786][T10535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  220.685153][T10535] hsr_slave_0: entered promiscuous mode
[  220.688882][T10535] hsr_slave_1: entered promiscuous mode
[  220.692038][T10535] debugfs: 'hsr0' already exists in 'hsr'
[  220.694156][T10535] Cannot create hsr debugfs directory
[  221.397708][   T55] Bluetooth: hci6: command tx timeout
[  221.477800][ T5844] Bluetooth: hci8: command tx timeout
[  221.480817][   T55] Bluetooth: hci7: command tx timeout
[  223.477425][   T55] Bluetooth: hci6: command tx timeout
[  223.557988][   T55] Bluetooth: hci7: command tx timeout
[  223.560402][   T55] Bluetooth: hci8: command tx timeout
[  224.853685][ T5311] block nbd0: Possible stuck request ffff888021c70000: control (read@0,1024B). Runtime 150 seconds
[  224.857744][ T5311] block nbd0: Possible stuck request ffff888021c70200: control (read@1024,1024B). Runtime 150 seconds
[  224.861676][ T5311] block nbd0: Possible stuck request ffff888021c70400: control (read@2048,1024B). Runtime 150 seconds
[  224.865928][ T5311] block nbd0: Possible stuck request ffff888021c70600: control (read@3072,1024B). Runtime 150 seconds
[  225.557537][ T5844] Bluetooth: hci6: command tx timeout
[  225.637671][ T5844] Bluetooth: hci8: command tx timeout
[  225.640009][ T5844] Bluetooth: hci7: command tx timeout
[  227.637560][   T55] Bluetooth: hci6: command tx timeout
[  227.717824][   T55] Bluetooth: hci7: command tx timeout
[  227.717854][ T5844] Bluetooth: hci8: command tx timeout
[  254.298576][ T5294] udevd[5294]: worker [5847] /devices/virtual/block/nbd0 timeout; kill it
[  254.301884][ T5294] udevd[5294]: seq 12239 '/devices/virtual/block/nbd0' killed
[  254.927777][ T5311] block nbd0: Possible stuck request ffff888021c70000: control (read@0,1024B). Runtime 180 seconds
[  254.933148][ T5311] block nbd0: Possible stuck request ffff888021c70200: control (read@1024,1024B). Runtime 180 seconds
[  254.938346][ T5311] block nbd0: Possible stuck request ffff888021c70400: control (read@2048,1024B). Runtime 180 seconds
[  254.943000][ T5311] block nbd0: Possible stuck request ffff888021c70600: control (read@3072,1024B). Runtime 180 seconds
[  262.757381][ T5844] Bluetooth: hci2: command 0x0406 tx timeout
[  280.404481][ T5844] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  280.412498][ T5853] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  280.415684][ T5853] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  280.420399][ T5853] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  280.423671][ T5853] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  280.427885][ T5853] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  280.431902][ T5853] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  280.435303][ T5853] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  280.439970][ T5853] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  280.449185][   T55] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  280.475653][T10561] wg1 speed is unknown, defaulting to 1000
[  280.491670][T10561] lo speed is unknown, defaulting to 1000
[  280.494902][   T55] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  280.502574][   T55] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  280.506082][   T55] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  280.511438][   T55] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  280.515192][   T55] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  280.532671][T10563] wg1 speed is unknown, defaulting to 1000
[  280.535663][T10563] lo speed is unknown, defaulting to 1000
[  280.556658][T10565] wg1 speed is unknown, defaulting to 1000
[  280.560263][T10565] lo speed is unknown, defaulting to 1000
[  280.762637][T10561] chnl_net:caif_netlink_parms(): no params data found
[  280.924832][T10561] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.933225][T10561] bridge0: port 1(bridge_slave_0) entered disabled state
[  280.936457][T10561] bridge_slave_0: entered allmulticast mode
[  280.943523][T10561] bridge_slave_0: entered promiscuous mode
[  280.953750][T10561] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.956698][T10561] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.963034][T10561] bridge_slave_1: entered allmulticast mode
[  280.971616][T10561] bridge_slave_1: entered promiscuous mode
[  281.014573][T10561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  281.042143][T10561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  281.108105][T10561] team0: Port device team_slave_0 added
[  281.145414][T10561] team0: Port device team_slave_1 added
[  281.190091][T10561] batman_adv: batadv0: Adding interface: batadv_slave_0
[  281.192466][T10561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  281.204896][T10561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  281.216706][T10563] chnl_net:caif_netlink_parms(): no params data found
[  281.223656][T10561] batman_adv: batadv0: Adding interface: batadv_slave_1
[  281.226433][T10561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  281.235316][T10561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  281.313604][T10561] hsr_slave_0: entered promiscuous mode
[  281.316333][T10561] hsr_slave_1: entered promiscuous mode
[  281.319519][T10561] debugfs: 'hsr0' already exists in 'hsr'
[  281.321430][T10561] Cannot create hsr debugfs directory
[  281.382435][T10563] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.385263][T10563] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.395456][T10563] bridge_slave_0: entered allmulticast mode
[  281.400373][T10563] bridge_slave_0: entered promiscuous mode
[  281.426220][T10563] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.430140][T10563] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.434014][T10563] bridge_slave_1: entered allmulticast mode
[  281.439123][T10563] bridge_slave_1: entered promiscuous mode
[  281.483553][T10565] chnl_net:caif_netlink_parms(): no params data found
[  281.501893][T10563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  281.526689][T10563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  281.589336][T10563] team0: Port device team_slave_0 added
[  281.609338][T10563] team0: Port device team_slave_1 added
[  281.673720][T10565] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.678298][T10565] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.681592][T10565] bridge_slave_0: entered allmulticast mode
[  281.686034][T10565] bridge_slave_0: entered promiscuous mode
[  281.691037][T10565] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.694618][T10565] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.698380][T10565] bridge_slave_1: entered allmulticast mode
[  281.701853][T10565] bridge_slave_1: entered promiscuous mode
[  281.740410][T10563] batman_adv: batadv0: Adding interface: batadv_slave_0
[  281.743570][T10563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  281.754119][T10563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  281.760435][T10563] batman_adv: batadv0: Adding interface: batadv_slave_1
[  281.762921][T10563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  281.773762][T10563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  281.814661][T10565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  281.840779][T10565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  281.884057][T10565] team0: Port device team_slave_0 added
[  281.893057][T10563] hsr_slave_0: entered promiscuous mode
[  281.895674][T10563] hsr_slave_1: entered promiscuous mode
[  281.900445][T10563] debugfs: 'hsr0' already exists in 'hsr'
[  281.902654][T10563] Cannot create hsr debugfs directory
[  281.906005][T10565] team0: Port device team_slave_1 added
[  281.965017][T10565] batman_adv: batadv0: Adding interface: batadv_slave_0
[  281.968104][T10565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  281.977666][T10565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  282.000784][T10565] batman_adv: batadv0: Adding interface: batadv_slave_1
[  282.003526][T10565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  282.014570][T10565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  282.111387][T10565] hsr_slave_0: entered promiscuous mode
[  282.114192][T10565] hsr_slave_1: entered promiscuous mode
[  282.116755][T10565] debugfs: 'hsr0' already exists in 'hsr'
[  282.121276][T10565] Cannot create hsr debugfs directory
[  282.528621][ T5854] Bluetooth: hci10: command tx timeout
[  282.528667][   T55] Bluetooth: hci9: command tx timeout
[  282.597439][   T55] Bluetooth: hci11: command tx timeout
[  283.249691][ T5854] Bluetooth: hci4: command 0x0406 tx timeout
[  283.250660][ T5855] Bluetooth: hci5: command 0x0406 tx timeout
[  283.252505][   T55] Bluetooth: hci3: command 0x0406 tx timeout
[  284.597586][ T5849] Bluetooth: hci9: command tx timeout
[  284.600058][ T5853] Bluetooth: hci10: command tx timeout
[  284.687660][ T5853] Bluetooth: hci11: command tx timeout
[  285.007597][ T5311] block nbd0: Possible stuck request ffff888021c70000: control (read@0,1024B). Runtime 210 seconds
[  285.011783][ T5311] block nbd0: Possible stuck request ffff888021c70200: control (read@1024,1024B). Runtime 210 seconds
[  285.015421][ T5311] block nbd0: Possible stuck request ffff888021c70400: control (read@2048,1024B). Runtime 210 seconds
[  285.020219][ T5311] block nbd0: Possible stuck request ffff888021c70600: control (read@3072,1024B). Runtime 210 seconds
[  286.677561][ T5853] Bluetooth: hci10: command tx timeout
[  286.677633][ T5849] Bluetooth: hci9: command tx timeout
[  286.767670][ T5849] Bluetooth: hci11: command tx timeout
[  288.757540][ T5849] Bluetooth: hci10: command tx timeout
[  288.757600][ T5853] Bluetooth: hci9: command tx timeout
[  288.837586][ T5853] Bluetooth: hci11: command tx timeout
[  294.597961][   T34] INFO: task syz.0.1151:10477 blocked for more than 143 seconds.
[  294.601103][   T34]       Not tainted syzkaller #0
[  294.604956][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  294.612148][   T34] task:syz.0.1151      state:D stack:26024 pid:10477 tgid:10475 ppid:5842   task_flags:0x480140 flags:0x00004004
[  294.616950][   T34] Call Trace:
[  294.618206][   T34]  <TASK>
[  294.619201][   T34]  __schedule+0x1798/0x4cc0
[  294.620725][   T34]  ? __lock_acquire+0xab9/0xd20
[  294.622341][   T34]  ? __lock_acquire+0xab9/0xd20
[  294.624374][   T34]  ? __pfx___schedule+0x10/0x10
[  294.626811][   T34]  ? schedule+0x91/0x360
[  294.629559][   T34]  schedule+0x165/0x360
[  294.631487][   T34]  blk_mq_freeze_queue_wait+0xf4/0x170
[  294.633816][   T34]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[  294.636363][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[  294.639174][   T34]  ? percpu_ref_kill_and_confirm+0xa3/0x130
[  294.642139][   T34]  queue_limits_commit_update_frozen+0x5d/0x3e0
[  294.645191][   T34]  nbd_set_size+0x47e/0x6a0
[  294.648136][   T34]  ? __pfx_nbd_set_size+0x10/0x10
[  294.650276][   T34]  ? nla_memcpy+0x5b/0xc0
[  294.652190][   T34]  nbd_genl_size_set+0x2eb/0x3c0
[  294.654421][   T34]  ? __pfx_nbd_genl_size_set+0x10/0x10
[  294.656950][   T34]  ? __pfx_nbd_get_config_unlocked+0x10/0x10
[  294.686261][   T34]  ? bpf_lsm_capable+0x9/0x20
[  294.689465][   T34]  ? security_capable+0x7e/0x2e0
[  294.691850][   T34]  ? radix_tree_lookup+0x240/0x290
[  294.694779][   T34]  nbd_genl_reconfigure+0x409/0x1870
[  294.697528][   T34]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  294.700202][   T34]  ? __nla_parse+0x40/0x60
[  294.702109][   T34]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  294.704782][   T34]  genl_family_rcv_msg_doit+0x215/0x300
[  294.707386][   T34]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  294.710866][   T34]  ? stack_trace_save+0x9c/0xe0
[  294.713252][   T34]  genl_rcv_msg+0x60e/0x790
[  294.715265][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  294.717575][   T34]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  294.719656][   T34]  netlink_rcv_skb+0x208/0x470
[  294.722986][   T34]  ? __lock_acquire+0xab9/0xd20
[  294.725287][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  294.728080][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  294.730640][   T34]  ? down_read+0x1ad/0x2e0
[  294.732682][   T34]  genl_rcv+0x28/0x40
[  294.734480][   T34]  netlink_unicast+0x82f/0x9e0
[  294.736472][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  294.738359][   T34]  ? netlink_sendmsg+0x642/0xb30
[  294.740220][   T34]  netlink_sendmsg+0x805/0xb30
[  294.742225][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  294.744452][   T34]  ? __lock_acquire+0xab9/0xd20
[  294.746524][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  294.749229][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  294.751119][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  294.752933][   T34]  __sock_sendmsg+0x21c/0x270
[  294.754479][   T34]  ____sys_sendmsg+0x505/0x830
[  294.756416][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  294.759619][   T34]  ? import_iovec+0x74/0xa0
[  294.761652][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  294.763423][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  294.765084][   T34]  ? __fget_files+0x2a/0x420
[  294.766681][   T34]  ? __fget_files+0x3a0/0x420
[  294.768993][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  294.771074][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  294.774080][   T34]  ? __sys_socketpair+0x4a9/0x560
[  294.776565][   T34]  ? do_syscall_64+0xbe/0x3b0
[  294.778904][   T34]  do_syscall_64+0xfa/0x3b0
[  294.780604][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  294.782470][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.784648][   T34]  ? exc_page_fault+0x9f/0xf0
[  294.786613][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.789515][   T34] RIP: 0033:0x7fd50898eba9
[  294.791519][   T34] RSP: 002b:00007fd50973a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  294.795250][   T34] RAX: ffffffffffffffda RBX: 00007fd508bd5fa0 RCX: 00007fd50898eba9
[  294.798731][   T34] RDX: 0000000004004080 RSI: 0000200000000880 RDI: 0000000000000004
[  294.801408][   T34] RBP: 00007fd508a11e19 R08: 0000000000000000 R09: 0000000000000000
[  294.804098][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  294.807672][   T34] R13: 00007fd508bd6038 R14: 00007fd508bd5fa0 R15: 00007ffdf58aaa98
[  294.811355][   T34]  </TASK>
[  294.812436][   T34] INFO: task syz.2.1153:10483 blocked for more than 143 seconds.
[  294.815257][   T34]       Not tainted syzkaller #0
[  294.817056][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  294.820631][   T34] task:syz.2.1153      state:D stack:28616 pid:10483 tgid:10478 ppid:5848   task_flags:0x400040 flags:0x00004004
[  294.825338][   T34] Call Trace:
[  294.826948][   T34]  <TASK>
[  294.828679][   T34]  __schedule+0x1798/0x4cc0
[  294.830627][   T34]  ? __lock_acquire+0xab9/0xd20
[  294.832367][   T34]  ? __lock_acquire+0xab9/0xd20
[  294.834166][   T34]  ? __pfx___schedule+0x10/0x10
[  294.835945][   T34]  ? schedule+0x91/0x360
[  294.837630][   T34]  schedule+0x165/0x360
[  294.839299][   T34]  schedule_preempt_disabled+0x13/0x30
[  294.841734][   T34]  __mutex_lock+0x7e6/0x1350
[  294.843854][   T34]  ? __mutex_lock+0x5bb/0x1350
[  294.846015][   T34]  ? genl_rcv_msg+0x10d/0x790
[  294.847867][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  294.849545][   T34]  ? stack_trace_save+0x9c/0xe0
[  294.851395][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  294.853487][   T34]  ? radix_tree_lookup+0x240/0x290
[  294.855435][   T34]  genl_rcv_msg+0x10d/0x790
[  294.857085][   T34]  ? __lock_acquire+0xab9/0xd20
[  294.859462][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  294.861846][   T34]  netlink_rcv_skb+0x208/0x470
[  294.863776][   T34]  ? __lock_acquire+0xab9/0xd20
[  294.865630][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  294.867391][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  294.869212][   T34]  ? down_read+0x1ad/0x2e0
[  294.870986][   T34]  genl_rcv+0x28/0x40
[  294.872737][   T34]  netlink_unicast+0x82f/0x9e0
[  294.874956][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  294.877847][   T34]  ? netlink_sendmsg+0x642/0xb30
[  294.879730][   T34]  ? skb_put+0x11b/0x210
[  294.881198][   T34]  netlink_sendmsg+0x805/0xb30
[  294.882886][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  294.884810][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  294.886617][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  294.888969][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  294.891273][   T34]  __sock_sendmsg+0x21c/0x270
[  294.893929][   T34]  __sys_sendto+0x3bd/0x520
[  294.895898][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  294.898270][   T34]  ? fd_install+0x97/0x540
[  294.900018][   T34]  ? fd_install+0x30d/0x540
[  294.901744][   T34]  __x64_sys_sendto+0xde/0x100
[  294.903536][   T34]  do_syscall_64+0xfa/0x3b0
[  294.905458][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  294.907897][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.910526][   T34]  ? exc_page_fault+0x9f/0xf0
[  294.912511][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.914647][   T34] RIP: 0033:0x7fdeff790a3c
[  294.916322][   T34] RSP: 002b:00007fdf0063bec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  294.919414][   T34] RAX: ffffffffffffffda RBX: 00007fdf0063bfc0 RCX: 00007fdeff790a3c
[  294.922190][   T34] RDX: 0000000000000020 RSI: 00007fdf0063c010 RDI: 0000000000000009
[  294.924817][   T34] RBP: 0000000000000000 R08: 00007fdf0063bf14 R09: 000000000000000c
[  294.928007][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009
[  294.931327][   T34] R13: 00007fdf0063bf68 R14: 00007fdf0063c010 R15: 0000000000000000
[  294.934661][   T34]  </TASK>
[  294.936003][   T34] INFO: task syz.1.1155:10492 blocked for more than 143 seconds.
[  294.939944][   T34]       Not tainted syzkaller #0
[  294.942362][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  294.945974][   T34] task:syz.1.1155      state:D stack:23048 pid:10492 tgid:10491 ppid:5845   task_flags:0x400140 flags:0x00004004
[  294.950998][   T34] Call Trace:
[  294.952511][   T34]  <TASK>
[  294.953808][   T34]  __schedule+0x1798/0x4cc0
[  294.955660][   T34]  ? __lock_acquire+0xab9/0xd20
[  294.957651][   T34]  ? __lock_acquire+0xab9/0xd20
[  294.959591][   T34]  ? __pfx___schedule+0x10/0x10
[  294.961440][   T34]  ? schedule+0x91/0x360
[  294.962970][   T34]  schedule+0x165/0x360
[  294.964326][   T34]  schedule_preempt_disabled+0x13/0x30
[  294.966263][   T34]  __mutex_lock+0x7e6/0x1350
[  294.968101][   T34]  ? __mutex_lock+0x5bb/0x1350
[  294.969962][   T34]  ? genl_rcv_msg+0x10d/0x790
[  294.971645][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  294.973861][   T34]  ? stack_trace_save+0x9c/0xe0
[  294.975785][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  294.977761][   T34]  ? radix_tree_lookup+0x240/0x290
[  294.979627][   T34]  genl_rcv_msg+0x10d/0x790
[  294.981295][   T34]  ? __lock_acquire+0xab9/0xd20
[  294.983157][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  294.985345][   T34]  netlink_rcv_skb+0x208/0x470
[  294.987648][   T34]  ? __lock_acquire+0xab9/0xd20
[  294.989560][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  294.991567][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  294.993996][   T34]  ? down_read+0x1ad/0x2e0
[  294.995764][   T34]  genl_rcv+0x28/0x40
[  294.997634][   T34]  netlink_unicast+0x82f/0x9e0
[  294.999626][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  295.001718][   T34]  ? netlink_sendmsg+0x642/0xb30
[  295.003563][   T34]  ? skb_put+0x11b/0x210
[  295.005402][   T34]  netlink_sendmsg+0x805/0xb30
[  295.008030][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  295.010640][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  295.012805][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  295.014881][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  295.017080][   T34]  __sock_sendmsg+0x21c/0x270
[  295.019025][   T34]  __sys_sendto+0x3bd/0x520
[  295.020774][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  295.022852][   T34]  ? count_memcg_event_mm+0x21/0x260
[  295.025139][   T34]  ? exc_page_fault+0x76/0xf0
[  295.027090][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  295.029423][   T34]  __x64_sys_sendto+0xde/0x100
[  295.031136][   T34]  do_syscall_64+0xfa/0x3b0
[  295.032968][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  295.035115][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.037449][   T34]  ? exc_page_fault+0x9f/0xf0
[  295.039659][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.042508][   T34] RIP: 0033:0x7fafb4590a3c
[  295.044558][   T34] RSP: 002b:00007fafb27f4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  295.048306][   T34] RAX: ffffffffffffffda RBX: 00007fafb27f4fc0 RCX: 00007fafb4590a3c
[  295.051769][   T34] RDX: 0000000000000020 RSI: 00007fafb27f5010 RDI: 0000000000000004
[  295.055260][   T34] RBP: 0000000000000000 R08: 00007fafb27f4f14 R09: 000000000000000c
[  295.058055][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004
[  295.060940][   T34] R13: 00007fafb27f4f68 R14: 00007fafb27f5010 R15: 0000000000000000
[  295.063976][   T34]  </TASK>
[  295.065480][   T34] 
[  295.065480][   T34] Showing all locks held in the system:
[  295.071067][   T34] 1 lock held by khungtaskd/34:
[  295.073152][   T34]  #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  295.077422][   T34] 2 locks held by getty/5674:
[  295.079774][   T34]  #0: ffff888029e910a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  295.084378][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  295.088821][   T34] 1 lock held by udevd/5847:
[  295.091036][   T34]  #0: ffff8881081b5358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  295.095445][   T34] 6 locks held by syz.0.1151/10477:
[  295.098020][   T34]  #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  295.101676][   T34]  #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  295.105527][   T34]  #2: ffff888021bc9230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x36f/0x1870
[  295.110516][   T34]  #3: ffff888108134bb8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0
[  295.114756][   T34]  #4: ffff888108134558 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0
[  295.120299][   T34]  #5: ffff888108134590 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0
[  295.125565][   T34] 2 locks held by syz.2.1153/10483:
[  295.128177][   T34]  #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  295.131529][   T34]  #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  295.134981][   T34] 2 locks held by syz.1.1155/10492:
[  295.137355][   T34]  #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  295.140340][   T34]  #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  295.143900][   T34] 2 locks held by syz-executor/10499:
[  295.146262][   T34]  #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  295.149248][   T34]  #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  295.152542][   T34] 2 locks held by syz-executor/10501:
[  295.154656][   T34]  #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  295.158055][   T34]  #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  295.161378][   T34] 2 locks held by syz-executor/10503:
[  295.163265][   T34]  #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  295.166084][   T34]  #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  295.169719][   T34] 2 locks held by syz-executor/10531:
[  295.172307][   T34]  #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  295.175521][   T34]  #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  295.179096][   T34] 2 locks held by syz-executor/10533:
[  295.181030][   T34]  #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  295.184000][   T34]  #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  295.188045][   T34] 2 locks held by syz-executor/10535:
[  295.190235][   T34]  #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  295.192833][   T34]  #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  295.195820][   T34] 2 locks held by syz-executor/10561:
[  295.197899][   T34]  #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  295.200999][   T34]  #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  295.204874][   T34] 2 locks held by syz-executor/10563:
[  295.207281][   T34]  #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  295.210118][   T34]  #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  295.213531][   T34] 2 locks held by syz-executor/10565:
[  295.215394][   T34]  #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  295.218557][   T34]  #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  295.221849][   T34] 
[  295.222728][   T34] =============================================
[  295.222728][   T34] 
[  295.225911][   T34] NMI backtrace for cpu 1
[  295.225922][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  295.225930][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  295.225934][   T34] Call Trace:
[  295.225940][   T34]  <TASK>
[  295.225944][   T34]  dump_stack_lvl+0x189/0x250
[  295.225957][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  295.225965][   T34]  ? __pfx__printk+0x10/0x10
[  295.225978][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  295.225990][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  295.226001][   T34]  ? __pfx__printk+0x10/0x10
[  295.226016][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  295.226028][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  295.226039][   T34]  watchdog+0xf93/0xfe0
[  295.226051][   T34]  ? watchdog+0x1de/0xfe0
[  295.226061][   T34]  kthread+0x711/0x8a0
[  295.226071][   T34]  ? __pfx_watchdog+0x10/0x10
[  295.226080][   T34]  ? __pfx_kthread+0x10/0x10
[  295.226089][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  295.226096][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  295.226102][   T34]  ? __pfx_kthread+0x10/0x10
[  295.226111][   T34]  ret_from_fork+0x3fc/0x770
[  295.226119][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  295.226128][   T34]  ? __switch_to_asm+0x39/0x70
[  295.226136][   T34]  ? __switch_to_asm+0x33/0x70
[  295.226144][   T34]  ? __pfx_kthread+0x10/0x10
[  295.226152][   T34]  ret_from_fork_asm+0x1a/0x30
[  295.226165][   T34]  </TASK>
[  295.226168][   T34] Sending NMI from CPU 1 to CPUs 0:
[  295.279594][    C0] NMI backtrace for cpu 0
[  295.279610][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  295.279621][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  295.279627][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  295.279644][    C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 73 97 0d 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  295.279653][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  295.279663][    C0] RAX: a688194d0a821400 RBX: ffffffff819683f8 RCX: a688194d0a821400
[  295.279670][    C0] RDX: 0000000000000001 RSI: ffffffff8d9b9a94 RDI: ffffffff8be33880
[  295.279678][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  295.279711][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa38f30
[  295.279720][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  295.279727][    C0] FS:  0000000000000000(0000) GS:ffff8880b8614000(0000) knlGS:0000000000000000
[  295.279734][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  295.279741][    C0] CR2: 000055559a0d9e68 CR3: 000000000df36000 CR4: 00000000000006f0
[  295.279773][    C0] Call Trace:
[  295.279780][    C0]  <TASK>
[  295.279785][    C0]  default_idle+0x13/0x20
[  295.279796][    C0]  default_idle_call+0x74/0xb0
[  295.279807][    C0]  do_idle+0x1e8/0x510
[  295.279819][    C0]  ? asm_sysvec_call_function_single+0x1a/0x20
[  295.279829][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  295.279838][    C0]  ? __pfx_do_idle+0x10/0x10
[  295.279852][    C0]  ? do_idle+0x4ef/0x510
[  295.279862][    C0]  cpu_startup_entry+0x44/0x60
[  295.279871][    C0]  rest_init+0x2de/0x300
[  295.279885][    C0]  start_kernel+0x3a9/0x410
[  295.279897][    C0]  x86_64_start_reservations+0x24/0x30
[  295.279912][    C0]  x86_64_start_kernel+0x143/0x1c0
[  295.279923][    C0]  common_startup_64+0x13e/0x147
[  295.279942][    C0]  </TASK>
[  295.280635][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  295.354516][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  295.357784][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  295.361307][   T34] Call Trace:
[  295.362463][   T34]  <TASK>
[  295.363625][   T34]  dump_stack_lvl+0x99/0x250
[  295.365511][   T34]  ? __asan_memcpy+0x40/0x70
[  295.367277][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  295.369265][   T34]  ? __pfx__printk+0x10/0x10
[  295.370907][   T34]  vpanic+0x281/0x750
[  295.372299][   T34]  ? __pfx_vpanic+0x10/0x10
[  295.373817][   T34]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  295.375721][   T34]  ? preempt_schedule+0xae/0xc0
[  295.377508][   T34]  ? preempt_schedule_common+0x83/0xd0
[  295.379520][   T34]  panic+0xb9/0xc0
[  295.380923][   T34]  ? __pfx_panic+0x10/0x10
[  295.382659][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  295.384883][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  295.387297][   T34]  watchdog+0xfd2/0xfe0
[  295.388788][   T34]  ? watchdog+0x1de/0xfe0
[  295.390354][   T34]  kthread+0x711/0x8a0
[  295.391886][   T34]  ? __pfx_watchdog+0x10/0x10
[  295.393559][   T34]  ? __pfx_kthread+0x10/0x10
[  295.395316][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  295.397314][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  295.399255][   T34]  ? __pfx_kthread+0x10/0x10
[  295.401051][   T34]  ret_from_fork+0x3fc/0x770
[  295.402608][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  295.404290][   T34]  ? __switch_to_asm+0x39/0x70
[  295.405975][   T34]  ? __switch_to_asm+0x33/0x70
[  295.407763][   T34]  ? __pfx_kthread+0x10/0x10
[  295.409726][   T34]  ret_from_fork_asm+0x1a/0x30
[  295.412082][   T34]  </TASK>
[  295.413983][   T34] Kernel Offset: disabled
[  295.415448][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:40:44  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000202 RBX=0000000000000201 RCX=0000000000000000 RDX=0000000000000000
RSI=0000000000000201 RDI=ffffffff8b488f08 RBP=ffffc9000333f978 RSP=ffffc9000333f8e0
R8 =ffff888041081603 R9 =1ffff110082102c0 R10=dffffc0000000000 R11=ffffed10082102c1
R12=ffff88803c9952c0 R13=dffffc0000000000 R14=dffffc0000000000 R15=1ffff92000667f1c
RIP=ffffffff8184e7be RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005563261e5c58 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000020c40dcc 0000000000000020 XMM01=7a79730000000000 000000000b1311bf
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffff00 0000000000000000 XMM05=000000003ab348ec 00000000000000d6
XMM06=1600000000000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000005b RBX=000000000000005b RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff888020a20237 R9 =1ffff11004144046 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=ffffffff99b018cf R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffdb794f178 CR3=0000000028cb6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
