last executing test programs:

22.666941117s ago: executing program 0 (id=1005):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1000}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x5}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1000}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x5}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4) (async)
close(0x4)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000380)=0x200, 0x26) (async)
setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000380)=0x200, 0x26)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "db57cda808852139", "252432e72844858a068b92a5a810f4dc", "11802ff5", "08e48ff0bf597edc"}, 0x28)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000) (async)
unshare(0x6a040000)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000085000000000000000000000000000000000000000000000000000000003e7dfffff08300008a00000000000000010000000000000049060000000000000400000000000000000000000000000000000000000000000000000000000000b5ca000000ffffff070000000000000000000000000000000700000000000000fd0300"/192])
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x1c, r3, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=@setlink={0x9c, 0x13, 0x10, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2004, 0x2910a}, [@IFLA_PHYS_SWITCH_ID={0x22, 0x24, "a7b08e2b90e1eacd51a7b73daad109a3f10456190c879daf3203e2312bd8"}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_to_hsr\x00'}, @IFLA_IFALIASn={0x4}, @IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'bridge_slave_0\x00'}, {0x14, 0x35, 'vxcan1\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) (async)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094)

19.719214922s ago: executing program 3 (id=1026):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x2000000}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "0587a06a93f2aad4", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x8)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x5000, 0x4)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r0, 0x20, &(0x7f0000000100)={&(0x7f0000000240)=""/221, 0xdd, <r2=>0x0, &(0x7f0000000340)=""/177, 0xb1}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000006b0000006a0a00ff000000002600000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="100000b9b99fce2505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000440)=0x4, 0x1)

19.681222041s ago: executing program 2 (id=1027):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
unshare(0x68040200)
r1 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x14)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, 0x0, 0x0, 0x0)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000340)=0x4)
syz_emit_ethernet(0xb8, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60f7d8ff00823c01fe8000000000000000000000000200aafe8000000000000000000000000000270004000000000000c910fe8000000000000000000000000000aac910fc0000000000000000000000000000010000000000000000005290784200000080000000a41c00d4ea244737f5ae2d5b655e372fcd819a9c1b9c1e6d9a3265d52a3fd0e8f4b787ae76dcfe1b9e1eb6aa551a183302ac00000000f96e1386d37cb212082baad4"], 0x0)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x18)
socket$kcm(0x10, 0x2, 0x0)
mmap(&(0x7f0000feb000/0x14000)=nil, 0x14000, 0x3000004, 0x40010, r4, 0x3f38e000)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000170000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000680)='tlb_flush\x00', r5, 0x0, 0x6b8}, 0x18)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg$sock(r6, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)

19.621878112s ago: executing program 3 (id=1028):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)={0x98, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x18000}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40800}, 0x4000)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0xf8, 0x10, 0x1, 0xfffffff8, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x38}, 0x1, 0x714, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x3a}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0x6c}, @in=@private=0xa010100, {0x0, 0x194, 0x6, 0xffff, 0x8251c, 0x2, 0x80000001, 0x100}, {0xffffffffffffffff, 0x0, 0x1e, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x24}, [@tfcpad={0x8, 0x16, 0xffff}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20008801}, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10)
sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000000f060101000004000000000002000003050001000700000006000b0000000000060300000000000000000b00ffff000006000b00010000000500010007000000"], 0x44}}, 0x20)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x7f3b7029c440d436, 0x803, 0xffffffff)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3f9}, [], {0x14, 0x3ec}}, 0x28}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6], 0x3c}}, 0x0)
r7 = syz_init_net_socket$llc(0x1a, 0x3, 0x0)
setsockopt$sock_int(r7, 0x1, 0x3e, &(0x7f00000000c0)=0x4, 0x4)
bind$llc(r7, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x54, r10, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x28, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}]}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
connect$unix(r11, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r12, &(0x7f00000bd000), 0x318, 0x0)
bind$l2tp(r0, 0x0, 0xfffffffffffffc4d)

19.435960978s ago: executing program 0 (id=1030):
ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000040)={0x7, 0x8d, 0x0, 0x8, 0x3, [0x6, 0x3, 0x2, 0x1]})
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x1, 0x2, 0x28, 0x68, 0x0, 0xff, 0x6, 0x0, @empty, @empty}, {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0006"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
socket$inet6(0xa, 0x3, 0x7)

19.422182971s ago: executing program 0 (id=1031):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002640)=@newtaction={0x1a4c, 0x30, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [{0x140, 0x1, [@m_vlan={0x94, 0xa, 0x0, 0x0, {{0x9}, {0x68, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x8, 0x0, 0x10, 0x81}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xffff9e08, 0xa, 0xe5c90e6ec01ee3e2, 0x6, 0x4}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x3, 0xffffffffffffffff, 0xfffffffe, 0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0xa8, 0x1d, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}]}, {0x61, 0x6, "14f996f6c512e936caf632e822cbe17318a8f5bb80cc29f2661ad479615a747f605d124baa80e2c0405ff59b675cceecb7679403c1605a8248ea65ce00ed72ff18cd469228eb0a3aa171f8adbccf309ae91c690ab8f98e9c316531ef3c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, {0x12b4, 0x1, [@m_skbmod={0xec, 0x1f, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1000}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x432f, 0x4, 0x3, 0x2}, 0x3}}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3ff}]}, {0x5d, 0x6, "11535adcf43e38a3410171a4c55b2c33c7de7260c5bc16e75834b28d7eb51ded55b65a343ff8917658f3648a72b6e876a742127a572f31d03ec3c57508c78dfe12dacbb8a8fae1867e81b29177bcf8979a234bd6eaeab35332"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_csum={0x1148, 0x3, 0x0, 0x0, {{0x9}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xe0, 0x7, 0x10000000, 0xf6d, 0x3ff}, 0x6e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0xc, 0x20000000, 0x3, 0x8}, 0x7b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x5, 0x1, 0x892c, 0x80000001}, 0x3b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x5, 0x8, 0x488, 0xffffffff}, 0x2b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x5cc, 0x10000007, 0x2, 0xfffffffa}, 0x7}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xd, 0x80, 0x2, 0x74, 0x1}, 0x46}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x5, 0x0, 0x2, 0x2}, 0x5b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xf0ce, 0x3, 0x2, 0x8001}, 0x3a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x4, 0x7, 0x2}, 0x3}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x1ff, 0x4, 0x6, 0x4}, 0x6d}}]}, {0x1001, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0x7c, 0x2, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x10, 0x20000000, 0x7, 0x2}, 0x2}}]}, {0x1d, 0x6, "4a1f5628d6fbd95d426692cb50310182971863791c20d110d2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, {0x644, 0x1, [@m_vlan={0x48, 0x5, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_vlan={0x5f8, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x5ca, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x1a4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000084) (async, rerun: 64)
shutdown(r0, 0x0) (rerun: 64)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
r2 = socket$netlink(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000100)='vm_unmapped_area\x00', r3}, 0x18) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000100)='vm_unmapped_area\x00', r4}, 0x18) (async, rerun: 64)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) (async, rerun: 64)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100ac1e000108000200e00000010c0002800500010000000000240002800c0001000000000014001180080001000000000008000200e000000208000740000000001c001880080002400000000808000140000000000400034000000000"], 0x80}}, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x2}, 0x94) (async)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async)
connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000), 0x20000328)
setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0x2a, &(0x7f0000000480)={@in6={{0xa, 0x4e20, 0x81, @remote, 0x72ea}}, 0x0, 0x0, 0x4a, 0x0, "042f769c1583509786a1752ef58eefbbf87661ecaaf2bcc41cad50354af04429c8e421c366e225b6346991e3b85c4f4fea1cd596373d8cb077756e8516b1b8b4c7e698232f9b99fc3a902918d935a942"}, 0xd8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='sys_enter\x00', r5, 0x0, 0x6}, 0x18)
recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) (async, rerun: 64)
ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) (async, rerun: 64)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, 0x140f, 0x10, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)

19.340340332s ago: executing program 0 (id=1032):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r3, 0x0, r5, 0x0, 0x1, 0x0)
r6 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000001540)={0x0, @in6={{0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x7ec}}, 0x1, 0x6211}, 0x90)
vmsplice(r5, &(0x7f0000000400)=[{&(0x7f0000000180)='\r', 0x1}, {&(0x7f0000000380)="a673", 0x2}, {&(0x7f0000001100)="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", 0xf01}], 0x3, 0x6)
ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, 0x0)
bind$alg(r5, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx2\x00'}, 0x58)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = epoll_create1(0x0)
unshare(0x22020600)
r8 = socket$netlink(0x10, 0x3, 0x15)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0xf0ffffff, 0x0, 0x20040890}, 0x200080c0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f0000000000)={0xa0000001})
ppoll(&(0x7f0000000200)=[{r7, 0x1}], 0x1, 0x0, 0x0, 0x3)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}]}, 0x44}}, 0x20040084)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6_vti0\x00', <r12=>0x0, 0x29, 0x25, 0x7, 0x3, 0x2, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x7800, 0x6, 0x1}})
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000640)=0x14)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f0000000800)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x11c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x4}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40440d5}, 0xc050)

19.174913145s ago: executing program 1 (id=1034):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {0x2}, {}, {}, {0x1}, {0x0, 0x200}]}, @fwd, @volatile={0xfffffffe}, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x4}]}}, 0x0, 0x96}, 0x28)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x6, &(0x7f00000006c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xffffffff}, 0x10}, 0x94)
close(r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r5, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @local}, 0x1c)
sendto$inet6(r5, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0)
recvmmsg(r5, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c2b01, 0x0)
close(r6)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x8000000, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4795d7a1, 0x4, 0x3, 0x4, 0x401, 0xb2f, 0x800, 0xfffffff9, 0x8001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008050}, 0x10008814)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x32, 0x24, 0x4ee4e6a52ff56441, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x4}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x34, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xa47c}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x9}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x2}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x1}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x5f}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x30004061}, 0x4000000)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

18.795651206s ago: executing program 1 (id=1037):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000380)={{0x3, @null}, [@default, @netrom, @bcast, @remote, @netrom, @remote, @netrom, @netrom]}, &(0x7f0000000040)=0x48, 0x0)
recvfrom$netrom(r0, &(0x7f0000000300)=""/67, 0x43, 0x20, 0x0, 0x0) (async)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, 0x0, 0x0) (async)
close(0xffffffffffffffff) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r3 = socket(0x1d, 0x2, 0x6) (async)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) (async)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) (async)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x800}}}, 0x84)
pselect6(0x40, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x7fffffff, 0xf5, 0x0, 0x0, 0x1000000000000000}, 0x0, &(0x7f00000002c0)={0x3, 0x800, 0x7fffffffffffffff, 0x200000000, 0x1}, 0x0, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000005c0)={'ip6gre0\x00', 0x0, 0x4, 0x7f, 0x6, 0x10, 0x3c, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x80, 0x7800, 0xf0, 0xf7cb}}) (async)
setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000100)=0x9, 0x4)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
ppoll(&(0x7f00000001c0)=[{r7, 0x200}], 0x1, 0x0, 0x0, 0x0) (async)
write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) (async)
write$rfkill(r7, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) (async)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r9, 0x0, 0x0, 0x931766f6319eed40) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
shutdown(r9, 0x1)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8)

18.783067942s ago: executing program 4 (id=1038):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x8db1b}]}}}]}, 0x60}}, 0x0) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000010000004200000040"], 0x48)
close(0x3) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='mm_page_free_batched\x00', r2}, 0x18)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xee776000)

18.729798806s ago: executing program 2 (id=1039):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r1, @ANYBLOB="f5ff1b59ee5355b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0003311b51130000140012800b00010062726964676500000400028008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000000000000ffffffff851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008b19200b703000000000000850000003500000095"], &(0x7f0000000a80)='syzkaller\x00', 0xb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

18.631731096s ago: executing program 3 (id=1040):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="fa", 0x1)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
close(r2)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
r4 = socket$inet(0x2, 0xa, 0x201)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.failcnt\x00', 0x2, 0x0)
pwrite64(r5, &(0x7f0000000380), 0x0, 0xc)
setsockopt$inet_msfilter(r4, 0x0, 0x29, 0x0, 0x1c)
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast1, @local}, 0xfffffffffffffd86)
getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000040)={@initdev, @multicast2}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10)
r6 = socket(0x1e, 0x2, 0x0)
setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10)
recvfrom$l2tp(r6, &(0x7f00000000c0)=""/206, 0xce, 0x2000, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000007c0)={0x240, r7, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff312d, 0x2c}}}}, [@NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="55e7f5230c030f3eb7b42bf6f7c370cd"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="0dfdf0ad6e548fc37c9ea97b78bca90bddba9358d601f0d9"}]}, @NL80211_ATTR_REKEY_DATA={0xd0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="0dc1ee6e6d191d22d250f6309ea434422ed9498d11c7aa4f30a61707ecdc5e4b"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="51740377b4b903046235aa24003b879566d5b1fe0b6d84eec07133bf0a34cd9e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ef8c393d2e13ae6897340bbfc64fd6d3"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f5b12a9ca611a65c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4f0aee59cd9b55fc629bad38c3a58ad2"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="5a4434d58b28fc4429082bb4c6eead55dcf26560b42ca19fc50e26090774fae8"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xff}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="f3cf7cf5a1c0f46ee54ad25f90f51c74"}]}, @NL80211_ATTR_REKEY_DATA={0x84, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="f8283898be5e2edfd7278ee4a8433563"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="6b64291876d2ed950fa51f7cbe8b57e4e06111f37cafaf5c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "edcad37d97de18c3"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c8414400e49bec0c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6ecd07a08bd2677e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "51b136bb7eac6d1b"}]}, @NL80211_ATTR_REKEY_DATA={0x90, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="5c04b6fb25325ed13bb1e6b968be54a86f61de48cd93db82e1f6856b717d2a22"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b5447cadb82e51f992741f408ee502f8"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xd16}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x38f}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7d41011cd8a5a0ef0653a298dbf338390a7053282aaa0f23"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4dd3ba6136e60da919221dc86d5dc810"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="dba3d1dee904640e667b4cdcb77945f3"}]}]}, 0x240}}, 0x4004)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600)
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x10001, 0x0, 0x0)
shutdown(r2, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000cc0)={0x2c, r9, 0x1, 0x70bd24, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080)
recvmmsg(r2, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)
openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)

18.628598279s ago: executing program 1 (id=1041):
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a000000ff0f0000b3000000770000008c300100", @ANYRES32, @ANYBLOB="ff0000000000000020000000d870000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000100000000000000100"/24, @ANYRES32=r0, @ANYBLOB], 0x50)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="54000000020601040000000000000000000000000c000780080008400000009e0500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e65740000000019f7a8f04f3f00777ab369c2a524417f1a6e9f0a42653c1b46ffc0027e2d298450fe190497036d9a3622977445c2cbfa54bfb48142da03cdc0cacb8f89863f9176d67a0ec3d53392d6b09b1d2883606a6407812323ba07d7973fe30f8ac8d60995539cf51ad5582b15dbc19f74942dc87b59bd85229900bfc9ee2149608624c10db883462583e0e32ba4a628d1a49d9a4cc7f8a7d5039b1032bf9b5d5bdc"], 0x54}, 0x1, 0x0, 0x0, 0x24004000}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r4, &(0x7f0000000600)="12df0751087e8e2ce81e19f0cc559a38f4cf5ed097c8d3420200000053c2a54dca62dc094a6eba9e55c3bfdecf2d40dbbf8eb736f5e77231d426a2ded7f9ee4f541b56e43fb0ae2d3f5ff3783f11f14b19df215f9f3fdca551500406489c683544f5d91d95fafc4cc655ec65efdc86206c", 0x71, 0x20000000, &(0x7f0000000400)={0xa, 0x4e20, 0x973f, @private1, 0x6}, 0x1c)
shutdown(r4, 0x1)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x8}}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@empty}}, 0xe8)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, 0x0, 0x0)
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x89f, 0x8, 0x1]}}, 0x5c)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r8)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r8, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000940)=ANY=[@ANYBLOB="b4b9198370ac79d2efd5bf216a590c81d2f70900c9da063b41f3c59c26591b6c7be3dc7283f12e9fc12849dc1c0459793c70df0335cd4fdb75233d6e539db6baf74e977e567980275d2cde86f061b0df89fa5981dbc6ead99fcbc9757c258ef44853", @ANYRES16=r9, @ANYBLOB="0100000000000000000007000000080004000a01010108000500ac1e0101"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x20040040)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r10}, 0x10)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000006000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000963dc34862e108af030000009500000000000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

18.43862537s ago: executing program 4 (id=1042):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000feffffff000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000d602000000000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000feffffff000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000d602000000000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, <r2=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000a7080000000000007b8a20ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b6000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

18.407990104s ago: executing program 2 (id=1043):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @multicast}, 0x10) (async)
setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000040)={r1, 0x1, 0x6, @multicast}, 0x10) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f00000002c0)}, 0x20)
bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r2, 0x0, 0x20000000}, 0x20) (async)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e23, 0x9, @local, 0x1000}, {0xa, 0x4e21, 0x80, @private0={0xfc, 0x0, '\x00', 0x1}, 0x69d}, 0x0, {[0xaf, 0x4, 0x8, 0x100, 0xfff, 0x8, 0x1ff, 0x4]}}, 0x5c) (async)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="1c00000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB="110000004000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000600"/28], 0x50) (async)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x15, 0x3, 'wrr\x00', 0x27, 0x4, 0x8}, 0x2c) (async)
r5 = socket$inet_sctp(0x2, 0x1, 0x84) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x8b}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000084}, 0x40) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
getsockopt$sock_buf(r4, 0x1, 0x19, 0x0, &(0x7f0000003080)) (async)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0xc4, r8, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xcc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24008880}, 0x4000081) (async)
r9 = socket(0x10, 0x803, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4)
setsockopt$inet6_tcp_int(r10, 0x6, 0x18, &(0x7f0000000180)=0xa, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r11=>0x0})
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x2}, {0x0, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xfff1, 0x1}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x45, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850)

18.328004238s ago: executing program 0 (id=1044):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/80, 0x50}}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
accept(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, r3, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)

18.327663852s ago: executing program 1 (id=1045):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = socket(0x22, 0x5, 0x4)
ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000000))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r5)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0700000006000000080000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r7}, 0x20)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xd, 0xfffffffffffffff8, 0x2, 0x8001, 0x8000059, 0x3ff}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0x3, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xfe, '\x00', 0x9, 0xc, 0x8, 0x1}}}}]}, 0x48}}, 0x4008800)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x7)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

18.239017766s ago: executing program 4 (id=1046):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x1405, 0x1, 0x70bd28, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000c80)={0x0, 'hsr0\x00', {0x1}, 0x6}) (async)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000c80)={0x0, 'hsr0\x00', {0x1}, 0x6})

18.128554256s ago: executing program 2 (id=1047):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f000000850000002300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYBLOB='\x00\x00\x00@'], 0x50)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, 0x0, 0x0)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10)
write(r5, &(0x7f0000000240)="240000001a007f0214f9f4070009040803000000000000050000000005000f40fe00000e", 0x24)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811e399", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000062e21c7ae659aee429989b6aa10000000000000095000000fba12a5d"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18)
ppoll(&(0x7f0000000400)=[{r8, 0x104}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$can_raw(0x1d, 0x3, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)

17.979353491s ago: executing program 4 (id=1048):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@bridge_getneigh={0x54, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2002a}, [@IFLA_VF_PORTS={0x34, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "35b09c8913d4e54116b80106a24c0986"}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a86aa2ba3d5b61023bf6361a435c368c"}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044840}, 0x20000800)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x4081)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x18)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = accept4$unix(r3, &(0x7f0000000580)=@abs, &(0x7f0000000600)=0x6e, 0x0)
getsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f0000000640), &(0x7f0000000680)=0x4)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
getsockopt$inet_mreqn(r3, 0x0, 0x0, &(0x7f00000001c0)={@loopback, @multicast1}, &(0x7f0000000500)=0xc)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x8, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, {0xb}, {0xb, 0xffff}, {0xa, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000005ec0)={0x0, 0x0, &(0x7f0000005e80)={&(0x7f0000005e00)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x48010)
bind$xdp(r3, &(0x7f0000000140)={0x2c, 0x4, r8, 0x12}, 0x10)
listen(r4, 0xfffffffd)
r10 = accept4(r4, 0x0, 0x0, 0x0)
recvmmsg(r10, &(0x7f0000001000), 0x581, 0x40000000, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe)
sendmsg$unix(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="4f5f072a0db0e67d613178efcfe3a6054a0ca7f8e4cef47737bbc530093b9307b2828900b1ed8131e71b43e3909b35fa0a1964d2e1739c46bbb5732e95ad8ae39b90c89cb5cf53c25512e3668ede45982f290503f507caad3499871769e7e2827220fa5158dc339619beea2c86a2a170d62d9f5820dcbf21cecf5e9a51ca518d13237fa5d734cd6e23dd8d7cdbf2477f8cb68f0fc0417a10d062b49bebb3a9bf0293987ba25e78a53eb71c450e7dd594ae8635a37ffd177a864bcf517989c49ea7e621e4c67099b64f91a475dcc1de7aae52dfaf5a2e6afc425f6f32a82f720a6e95b8f001b2156a001bcba8e6077d139770ff868541", 0xf6}], 0x1, 0x0, 0x0, 0x20000800}, 0x20040000)

17.854252148s ago: executing program 1 (id=1049):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) (async)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000200)=ANY=[@ANYBLOB="5c08000100c91020010000000000000000000000000000c2040000000304012307200000000306048100830000000000000004000000000000000200"/72], 0x48)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000001c0)=0x5, 0x4)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @empty, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x009'], 0x28}, 0x840)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e000000201139000000000000000000000ab3d8f9ca7058a0c000000f801", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000ac1414aa00000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200"], 0x128}}, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
socketpair(0x11, 0x80000, 0xffffffff, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000000c0), 0x4) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) (async)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xff000000, 0xff000000], 'netpci0\x00', 'bridge0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) (async)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000f967001000210400"/22, @ANYRES32=0x0, @ANYBLOB="00000000200000002c00128009000100626f6e64000000001c0002800500010005000000050006000100000008001c0009000000"], 0x4c}}, 0x0)

17.784522869s ago: executing program 4 (id=1050):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0)
read(r0, &(0x7f0000000000)=""/31, 0x1f)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000040))
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a210200000000000000000a0000050900030073797a30000000000900010073797a3100000000080007006e6174001400048008000140000000030800024054dd5e5414000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
splice(r4, &(0x7f0000000180)=0x200000000009, r3, 0x0, 0x4, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000000a14010025bd7000fedbdf2505000900"], 0x28}, 0x1, 0x0, 0x0, 0x4024}, 0x480c0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0)

17.687860895s ago: executing program 1 (id=1051):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x600, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x42, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004a0000000160a010100000000000000000a0000000900020073797a30000000000900010073795731000000000900020073797a31000000000900020073797a3100000000240003800800024000000003080001400000000008000240000000000800024000007fff0900010073797a310000000008000740000000020c00054000000000000000040900020073797a32000000000900020073797a32000000002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0x138}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close(0x3)
setsockopt$inet6_int(r5, 0x29, 0xb, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
r8 = socket$packet(0x11, 0x2, 0x300)
r9 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r9, 0x29, 0x2d, &(0x7f0000000200)={0x7f, {{0xa, 0x1, 0x0, @mcast2, 0x1000}}, {{0xa, 0x0, 0x0, @empty, 0x2}}}, 0x108)
setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f00000000c0)=@req={0x7, 0xaa7c, 0x2, 0x60000}, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r4, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r7], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000)
r10 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r10, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000440)='\\', 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x4811)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10)
sendto$inet(r10, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8)
close(r10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)

17.588444199s ago: executing program 4 (id=1052):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'batadv_slave_1\x00', <r0=>0x0}) (async)
r1 = socket(0x11, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xff95}}, 0x4)
setsockopt(r1, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a806d8be255", 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x3, 0x5}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4014) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x10, {{@in=@remote, @in=@remote, 0x0, 0x6, 0x4e24, 0xc, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x400, 0x0, 0x9}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@tmpl={0x84, 0x5, [{{@in=@rand_addr=0x64010102, 0x0, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x33}, 0x0, 0x2}, {{@in6=@local, 0x4d4, 0xff}, 0x0, @in=@loopback, 0x3, 0x4}]}]}, 0x13c}}, 0x0) (async)
r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfe}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000021401002bbd7000fddbdf2508004400", @ANYRES32, @ANYBLOB='\b\x00Y\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x4080) (async)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e8, 0x148, 0x1e8, 0x148, 0x148, 0xb0, 0x350, 0x350, 0x350, 0x350, 0x350, 0x6, 0x0, {[{{@ip={@broadcast, @rand_addr=0x64010102, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8001, @ipv4=@local, 0x4e23}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x10, 0x7, @multicast2, 0x4e20}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xb0}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x6]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x2000002, 0x6, 0x0, &(0x7f0000000200)="df33c9f7b9a6", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async)
sendmmsg(r8, &(0x7f0000000740)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @broadcast, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9", 0x7b}, {0x0}, {&(0x7f0000001400)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000f80)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4", 0x2d}, {0x0}], 0x2}}], 0x2, 0x11)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
r9 = accept4(r6, 0x0, 0x0, 0x80000) (async)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r10, &(0x7f0000006940)=[{{&(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10, 0x0}}, {{&(0x7f0000000880)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000002d80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xf56}}], 0x18}}], 0x2, 0x40) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x37, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async)
sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

17.40443428s ago: executing program 0 (id=1053):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
r2 = socket(0xa, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="4400028040000100240001006d6f646500000000000000000000000000000000000000000000000000000000050003000500000010000400"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) (fail_nth: 2)

16.996242459s ago: executing program 2 (id=1054):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r1, 0x29, 0x42, 0x0, &(0x7f0000000180))
setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4)

16.843844316s ago: executing program 2 (id=1055):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r5 = socket(0x10, 0x3, 0x0) (async)
close(r4) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x2000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2b65, 0x4000000000000267, 0x0, 0x25, 0x59dd, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x20048004)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async)
r8 = epoll_create1(0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000100)={0x20000014}) (async)
unshare(0x2c020400)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=@delqdisc={0x28, 0x25, 0x10, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x10008, 0x8}, {0x5, 0x10}, {0xfffa, 0x1}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x4000000) (async)
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', <r12=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f0000005b80)={@loopback={0xfec0ffffffffffff}, 0x32, r12})
setsockopt$inet6_IPV6_PKTINFO(r10, 0x29, 0x32, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r12}, 0x14) (async)
pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) (async)
r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r13, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0)

16.021379561s ago: executing program 3 (id=1056):
pipe(&(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
writev(r1, &(0x7f0000000200)=[{0x0}, {&(0x7f00000006c0)="e6", 0xfdef}], 0x2)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000000)="729804819e25bf1576ffe5c12a5207113f19d58313aba5de68f29cba9eabb7ffc8ffa6ff5e57bb2a1a4db35012bba91acdbe6123e6d1b0e9b009f638c2262aa71fdb6fdca6f5afd31515336efa9d3ac3d1dcb773d177640fa9d940ae528c0de4820b43c5ca5aadd87316a4539842e59b2b62294946b288ccec1b315ad96484c9ce1069450e4b459926691d6e833aa0bc56251cb81bd60c84e5c38f6d84f5e0d7", 0xa0}, {&(0x7f0000000880)="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", 0xf61}], 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010101}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x401, 0x3d3, 0x3, 0x3ff, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
readv(r0, &(0x7f0000000400)=[{&(0x7f0000003600)=""/4096, 0x1000}], 0x1)

15.919357791s ago: executing program 3 (id=1057):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x40000000015, 0x5, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r1)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x59fa4e5a9036f04a, &(0x7f0000000080)={&(0x7f0000000500)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x0, 0x4, {{0x0, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x0, 0x2, @in={0x2, 0x4e20, @private=0xa010102}}}}, @TIPC_NLA_BEARER_DOMAIN={0x0, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x0, 0x4, {{0x0, 0x1, @in={0x2, 0x4e20, @local}}, {0x0, 0x2, @in6={0xa, 0x4e21, 0x34, @remote, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x0, 0x4, {{0x0, 0x1, @in6={0xa, 0x4e24, 0x80ce, @private0, 0x3}}, {0x0, 0x2, @in6={0xa, 0x4e20, 0x9, @empty, 0x40}}}}, @TIPC_NLA_BEARER_PROP={0x0, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x0, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0xe1}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0x0, 0x1, @l2={'eth', 0x3a, 'nicvf0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x0, 0x4, {{0x0, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x0, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x0, 0x3, 0x2}]}]}, 0x54}}, 0x0) (async)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x59fa4e5a9036f04a, &(0x7f0000000080)={&(0x7f0000000500)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x0, 0x4, {{0x0, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x0, 0x2, @in={0x2, 0x4e20, @private=0xa010102}}}}, @TIPC_NLA_BEARER_DOMAIN={0x0, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x0, 0x4, {{0x0, 0x1, @in={0x2, 0x4e20, @local}}, {0x0, 0x2, @in6={0xa, 0x4e21, 0x34, @remote, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x0, 0x4, {{0x0, 0x1, @in6={0xa, 0x4e24, 0x80ce, @private0, 0x3}}, {0x0, 0x2, @in6={0xa, 0x4e20, 0x9, @empty, 0x40}}}}, @TIPC_NLA_BEARER_PROP={0x0, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x0, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0xe1}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0x0, 0x1, @l2={'eth', 0x3a, 'nicvf0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x0, 0x4, {{0x0, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x0, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x0, 0x3, 0x2}]}]}, 0x54}}, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000200)={0x1, [<r5=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x800a, 0xffffd726, 0x6, r5}, &(0x7f0000000180)=0x10) (async)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x800a, 0xffffd726, 0x6, r5}, &(0x7f0000000180)=0x10)
sendto$l2tp6(r1, 0x0, 0x0, 0x4000000, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x20)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000001c0)=""/220, &(0x7f00000002c0)=0xdc)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x104, 0x3e, 0x107, 0x70bd2b, 0x0, {0xfd, 0x7c}, [@nested={0x4, 0x108}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @generic="64a4f9878afd806271826f4a30ce971c9b54bf7c3acd365cf599eeeba81ba0435f959e1189b2b0c5ea033d8f18ea7e6b0d813df5ffc7e21c62d38f0213ad23fd23fc2cdfbe01356a5d24dc507b9389d1759436526729d947eb7c1fbb91f689238c847b59dcf57b58a314228db7e06d192223096fad22a3211903ce093e3bc5dd15431e710a14028ee195b16628b15abb72ec8ab6bc836a6c5cf43cc411fda42f4983d3b1e1611d5898c220de22819e3f1297852981bf45ee3f11829d01578a150f3033f3b53cf28c6623fbf06ccfc2293a117188c37ac45aa9d64139bc30fc5eb728"]}, 0x104}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) (async)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x104, 0x3e, 0x107, 0x70bd2b, 0x0, {0xfd, 0x7c}, [@nested={0x4, 0x108}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @generic="64a4f9878afd806271826f4a30ce971c9b54bf7c3acd365cf599eeeba81ba0435f959e1189b2b0c5ea033d8f18ea7e6b0d813df5ffc7e21c62d38f0213ad23fd23fc2cdfbe01356a5d24dc507b9389d1759436526729d947eb7c1fbb91f689238c847b59dcf57b58a314228db7e06d192223096fad22a3211903ce093e3bc5dd15431e710a14028ee195b16628b15abb72ec8ab6bc836a6c5cf43cc411fda42f4983d3b1e1611d5898c220de22819e3f1297852981bf45ee3f11829d01578a150f3033f3b53cf28c6623fbf06ccfc2293a117188c37ac45aa9d64139bc30fc5eb728"]}, 0x104}, 0x1, 0x0, 0x0, 0x48815}, 0xc020)

15.852003164s ago: executing program 3 (id=1058):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r0, 0x0, 0x14, 0x0, &(0x7f0000000940)="18d26a3d9673399025aae4121e420e3eef774116", 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000ac0)="a2ee"}, 0x50)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r2 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', <r6=>0x0})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @broadcast}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r10=>0x0}, &(0x7f00000010c0)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000300)=@sack_info={r10, 0x1, 0xa}, 0xc)
setsockopt$sock_int(r7, 0x1, 0x8, 0x0, 0x0)
r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$inet(r11, &(0x7f00000017c0)={0x0, 0x53, &(0x7f0000000640)=[{0x0}, {&(0x7f00000005c0)="0fdc22128e", 0x5}], 0x2}, 0x40)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x64, r5, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
socket$nl_generic(0x10, 0x3, 0x10)
r12 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'veth0\x00'})

2.631975108s ago: executing program 32 (id=1051):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x600, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x42, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004a0000000160a010100000000000000000a0000000900020073797a30000000000900010073795731000000000900020073797a31000000000900020073797a3100000000240003800800024000000003080001400000000008000240000000000800024000007fff0900010073797a310000000008000740000000020c00054000000000000000040900020073797a32000000000900020073797a32000000002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0x138}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close(0x3)
setsockopt$inet6_int(r5, 0x29, 0xb, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
r8 = socket$packet(0x11, 0x2, 0x300)
r9 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r9, 0x29, 0x2d, &(0x7f0000000200)={0x7f, {{0xa, 0x1, 0x0, @mcast2, 0x1000}}, {{0xa, 0x0, 0x0, @empty, 0x2}}}, 0x108)
setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f00000000c0)=@req={0x7, 0xaa7c, 0x2, 0x60000}, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r4, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r7], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000)
r10 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r10, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000440)='\\', 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x4811)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10)
sendto$inet(r10, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8)
close(r10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)

2.119943041s ago: executing program 33 (id=1053):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
r2 = socket(0xa, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="4400028040000100240001006d6f646500000000000000000000000000000000000000000000000000000000050003000500000010000400"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) (fail_nth: 2)

2.069990465s ago: executing program 34 (id=1052):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'batadv_slave_1\x00', <r0=>0x0}) (async)
r1 = socket(0x11, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xff95}}, 0x4)
setsockopt(r1, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a806d8be255", 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x3, 0x5}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4014) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x10, {{@in=@remote, @in=@remote, 0x0, 0x6, 0x4e24, 0xc, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x400, 0x0, 0x9}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@tmpl={0x84, 0x5, [{{@in=@rand_addr=0x64010102, 0x0, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x33}, 0x0, 0x2}, {{@in6=@local, 0x4d4, 0xff}, 0x0, @in=@loopback, 0x3, 0x4}]}]}, 0x13c}}, 0x0) (async)
r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfe}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000021401002bbd7000fddbdf2508004400", @ANYRES32, @ANYBLOB='\b\x00Y\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x4080) (async)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e8, 0x148, 0x1e8, 0x148, 0x148, 0xb0, 0x350, 0x350, 0x350, 0x350, 0x350, 0x6, 0x0, {[{{@ip={@broadcast, @rand_addr=0x64010102, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8001, @ipv4=@local, 0x4e23}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x10, 0x7, @multicast2, 0x4e20}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xb0}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x6]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x2000002, 0x6, 0x0, &(0x7f0000000200)="df33c9f7b9a6", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async)
sendmmsg(r8, &(0x7f0000000740)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @broadcast, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9", 0x7b}, {0x0}, {&(0x7f0000001400)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000f80)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4", 0x2d}, {0x0}], 0x2}}], 0x2, 0x11)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
r9 = accept4(r6, 0x0, 0x0, 0x80000) (async)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r10, &(0x7f0000006940)=[{{&(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10, 0x0}}, {{&(0x7f0000000880)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000002d80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xf56}}], 0x18}}], 0x2, 0x40) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x37, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async)
sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

1.033462053s ago: executing program 35 (id=1055):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r5 = socket(0x10, 0x3, 0x0) (async)
close(r4) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x2000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2b65, 0x4000000000000267, 0x0, 0x25, 0x59dd, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x20048004)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async)
r8 = epoll_create1(0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000100)={0x20000014}) (async)
unshare(0x2c020400)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=@delqdisc={0x28, 0x25, 0x10, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x10008, 0x8}, {0x5, 0x10}, {0xfffa, 0x1}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x4000000) (async)
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', <r12=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f0000005b80)={@loopback={0xfec0ffffffffffff}, 0x32, r12})
setsockopt$inet6_IPV6_PKTINFO(r10, 0x29, 0x32, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r12}, 0x14) (async)
pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) (async)
r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r13, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0)

0s ago: executing program 36 (id=1058):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r0, 0x0, 0x14, 0x0, &(0x7f0000000940)="18d26a3d9673399025aae4121e420e3eef774116", 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000ac0)="a2ee"}, 0x50)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r2 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', <r6=>0x0})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @broadcast}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r10=>0x0}, &(0x7f00000010c0)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000300)=@sack_info={r10, 0x1, 0xa}, 0xc)
setsockopt$sock_int(r7, 0x1, 0x8, 0x0, 0x0)
r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$inet(r11, &(0x7f00000017c0)={0x0, 0x53, &(0x7f0000000640)=[{0x0}, {&(0x7f00000005c0)="0fdc22128e", 0x5}], 0x2}, 0x40)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x64, r5, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
socket$nl_generic(0x10, 0x3, 0x10)
r12 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'veth0\x00'})

kernel console output (not intermixed with test programs):

[  100.143794][ T6724] batadv_slave_1: entered promiscuous mode
[  100.160473][ T6727] netlink: 'syz.0.188': attribute type 58 has an invalid length.
[  100.178228][ T6724] batman_adv: batadv0: Adding interface: macvlan2
[  100.185016][ T6724] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  100.215326][ T6724] batman_adv: batadv0: Interface activated: macvlan2
[  100.244261][ T6727] netlink: 20 bytes leftover after parsing attributes in process `syz.0.188'.
[  100.579907][ T6751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.195'.
[  100.591518][ T6750] netlink: 24 bytes leftover after parsing attributes in process `syz.2.194'.
[  100.605366][ T6750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.194'.
[  100.800856][ T6763] pimreg: entered allmulticast mode
[  100.842630][ T6765] netlink: 24 bytes leftover after parsing attributes in process `syz.2.199'.
[  100.859935][ T6757] pimreg: left allmulticast mode
[  101.021999][ T6776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.199'.
[  101.038981][ T6778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.202'.
[  101.530352][ T6796] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  102.206526][ T6833] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  102.567124][ T6849] syzkaller0: entered promiscuous mode
[  102.620474][ T6849] syzkaller0: entered allmulticast mode
[  102.718817][ T6859] netlink: 'syz.1.224': attribute type 1 has an invalid length.
[  103.889736][ T6859] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  103.894913][ T6863] gretap2: entered allmulticast mode
[  104.556161][ T6911] openvswitch: netlink: Missing key (keys=40, expected=100)
[  104.594588][ T6907] tipc: Started in network mode
[  104.624396][ T6907] tipc: Node identity 4e209fb55103, cluster identity 4711
[  104.644530][ T6907] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.684652][ T6912] syzkaller0: entered promiscuous mode
[  104.690171][ T6912] syzkaller0: entered allmulticast mode
[  104.758900][ T6907] tipc: Resetting bearer <eth:syzkaller0>
[  104.767560][ T6906] tipc: Resetting bearer <eth:syzkaller0>
[  104.814935][ T6906] tipc: Disabling bearer <eth:syzkaller0>
[  104.851939][ T6917] netlink: 'syz.2.241': attribute type 6 has an invalid length.
[  104.969585][ T6920] __nla_validate_parse: 4 callbacks suppressed
[  104.969601][ T6920] netlink: 68 bytes leftover after parsing attributes in process `syz.1.242'.
[  104.989094][ T6920] netlink: 28 bytes leftover after parsing attributes in process `syz.1.242'.
[  105.142734][ T6926] FAULT_INJECTION: forcing a failure.
[  105.142734][ T6926] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  105.166764][ T6922] netlink: 364 bytes leftover after parsing attributes in process `syz.2.243'.
[  105.180055][ T6926] CPU: 1 UID: 0 PID: 6926 Comm: syz.1.244 Not tainted syzkaller #0 PREEMPT(full) 
[  105.180080][ T6926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  105.180097][ T6926] Call Trace:
[  105.180105][ T6926]  <TASK>
[  105.180113][ T6926]  dump_stack_lvl+0x189/0x250
[  105.180147][ T6926]  ? __pfx____ratelimit+0x10/0x10
[  105.180170][ T6926]  ? __pfx_dump_stack_lvl+0x10/0x10
[  105.180193][ T6926]  ? __pfx__printk+0x10/0x10
[  105.180213][ T6926]  ? fs_reclaim_acquire+0x7d/0x100
[  105.180247][ T6926]  should_fail_ex+0x414/0x560
[  105.180279][ T6926]  prepare_alloc_pages+0x213/0x610
[  105.180304][ T6926]  __alloc_frozen_pages_noprof+0x123/0x370
[  105.180327][ T6926]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  105.180355][ T6926]  ? policy_nodemask+0x27c/0x720
[  105.180379][ T6926]  alloc_pages_mpol+0x232/0x4a0
[  105.180402][ T6926]  vma_alloc_folio_noprof+0xe4/0x200
[  105.180423][ T6926]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  105.180462][ T6926]  folio_prealloc+0x30/0x180
[  105.180488][ T6926]  do_wp_page+0x1231/0x5800
[  105.180533][ T6926]  ? __pfx_do_wp_page+0x10/0x10
[  105.180552][ T6926]  ? do_raw_spin_lock+0x121/0x290
[  105.180578][ T6926]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  105.180612][ T6926]  __handle_mm_fault+0x1033/0x5400
[  105.180650][ T6926]  ? __pfx___handle_mm_fault+0x10/0x10
[  105.180685][ T6926]  ? follow_page_pte+0xd03/0x13e0
[  105.180715][ T6926]  handle_mm_fault+0x40a/0x8e0
[  105.180747][ T6926]  __get_user_pages+0x165c/0x2a00
[  105.180802][ T6926]  __gup_longterm_locked+0xde4/0x1660
[  105.180838][ T6926]  ? sanity_check_pinned_pages+0x123a/0x1300
[  105.180868][ T6926]  gup_fast_fallback+0x1d65/0x22d0
[  105.180888][ T6926]  ? is_bpf_text_address+0x26/0x2b0
[  105.180944][ T6926]  ? __pfx_gup_fast_fallback+0x10/0x10
[  105.180964][ T6926]  ? stack_trace_save+0x9c/0xe0
[  105.180989][ T6926]  ? stack_depot_save_flags+0x40/0x860
[  105.181021][ T6926]  ? pin_user_pages_fast+0x4d/0xb0
[  105.181046][ T6926]  iov_iter_extract_pages+0x35f/0x5e0
[  105.181077][ T6926]  extract_iter_to_sg+0xe46/0x24e0
[  105.181113][ T6926]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  105.181151][ T6926]  ? __asan_memset+0x22/0x50
[  105.181176][ T6926]  af_alg_get_rsgl+0x436/0x810
[  105.181216][ T6926]  skcipher_recvmsg+0x3d1/0x11d0
[  105.181243][ T6926]  ? aa_sk_perm+0x81e/0x950
[  105.181278][ T6926]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  105.181305][ T6926]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  105.181321][ T6926]  ? security_socket_recvmsg+0x7e/0x2e0
[  105.181339][ T6926]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  105.181362][ T6926]  sock_recvmsg+0x22c/0x270
[  105.181391][ T6926]  ____sys_recvmsg+0x1c9/0x460
[  105.181420][ T6926]  ? __pfx_____sys_recvmsg+0x10/0x10
[  105.181462][ T6926]  ? import_iovec+0x74/0xa0
[  105.181487][ T6926]  ___sys_recvmsg+0x1b5/0x510
[  105.181513][ T6926]  ? __pfx____sys_recvmsg+0x10/0x10
[  105.181579][ T6926]  ? __fget_files+0x3a0/0x420
[  105.181608][ T6926]  __x64_sys_recvmsg+0x198/0x260
[  105.181631][ T6926]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  105.181661][ T6926]  ? __pfx_ksys_write+0x10/0x10
[  105.181688][ T6926]  ? do_syscall_64+0xbe/0xfa0
[  105.181716][ T6926]  do_syscall_64+0xfa/0xfa0
[  105.181736][ T6926]  ? lockdep_hardirqs_on+0x9c/0x150
[  105.181757][ T6926]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.181774][ T6926]  ? clear_bhb_loop+0x60/0xb0
[  105.181793][ T6926]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.181807][ T6926] RIP: 0033:0x7f4e78f8f6c9
[  105.181828][ T6926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  105.181842][ T6926] RSP: 002b:00007f4e79d5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  105.181860][ T6926] RAX: ffffffffffffffda RBX: 00007f4e791e5fa0 RCX: 00007f4e78f8f6c9
[  105.181872][ T6926] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004
[  105.181882][ T6926] RBP: 00007f4e79d5c090 R08: 0000000000000000 R09: 0000000000000000
[  105.181891][ T6926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  105.181901][ T6926] R13: 00007f4e791e6038 R14: 00007f4e791e5fa0 R15: 00007ffc9d6686d8
[  105.181929][ T6926]  </TASK>
[  105.605298][ T6928] netlink: 56 bytes leftover after parsing attributes in process `syz.0.245'.
[  105.615147][ T6928] netlink: 64 bytes leftover after parsing attributes in process `syz.0.245'.
[  105.810669][ T6937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.248'.
[  105.856270][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.248'.
[  105.908270][ T6934] trusted_key: syz.3.249 sent an empty control message without MSG_MORE.
[  106.104686][  T178] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  106.115553][  T178] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  106.127306][  T178] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  106.154130][  T178] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  106.459927][ T6959] netlink: 64 bytes leftover after parsing attributes in process `syz.1.256'.
[  106.779257][ T6965] netlink: 'syz.4.257': attribute type 10 has an invalid length.
[  106.859170][ T6967] FAULT_INJECTION: forcing a failure.
[  106.859170][ T6967] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  106.872671][ T6967] CPU: 0 UID: 0 PID: 6967 Comm: syz.1.259 Not tainted syzkaller #0 PREEMPT(full) 
[  106.872693][ T6967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  106.872703][ T6967] Call Trace:
[  106.872710][ T6967]  <TASK>
[  106.872717][ T6967]  dump_stack_lvl+0x189/0x250
[  106.872745][ T6967]  ? __pfx____ratelimit+0x10/0x10
[  106.872768][ T6967]  ? __pfx_dump_stack_lvl+0x10/0x10
[  106.872790][ T6967]  ? __pfx__printk+0x10/0x10
[  106.872809][ T6967]  ? fs_reclaim_acquire+0x7d/0x100
[  106.872842][ T6967]  should_fail_ex+0x414/0x560
[  106.872870][ T6967]  prepare_alloc_pages+0x213/0x610
[  106.872895][ T6967]  __alloc_frozen_pages_noprof+0x123/0x370
[  106.872914][ T6967]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  106.872941][ T6967]  ? policy_nodemask+0x27c/0x720
[  106.872964][ T6967]  alloc_pages_mpol+0x232/0x4a0
[  106.872987][ T6967]  vma_alloc_folio_noprof+0xe4/0x200
[  106.873007][ T6967]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  106.873037][ T6967]  folio_prealloc+0x30/0x180
[  106.873061][ T6967]  do_wp_page+0x1231/0x5800
[  106.873114][ T6967]  ? __pfx_do_wp_page+0x10/0x10
[  106.873133][ T6967]  ? do_raw_spin_lock+0x121/0x290
[  106.873159][ T6967]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  106.873191][ T6967]  __handle_mm_fault+0x1033/0x5400
[  106.873229][ T6967]  ? __pfx___handle_mm_fault+0x10/0x10
[  106.873264][ T6967]  ? follow_page_pte+0xd03/0x13e0
[  106.873295][ T6967]  handle_mm_fault+0x40a/0x8e0
[  106.873327][ T6967]  __get_user_pages+0x165c/0x2a00
[  106.873381][ T6967]  __gup_longterm_locked+0xde4/0x1660
[  106.873416][ T6967]  ? sanity_check_pinned_pages+0x123a/0x1300
[  106.873445][ T6967]  gup_fast_fallback+0x1d65/0x22d0
[  106.873464][ T6967]  ? is_bpf_text_address+0x26/0x2b0
[  106.873514][ T6967]  ? __pfx_gup_fast_fallback+0x10/0x10
[  106.873534][ T6967]  ? stack_trace_save+0x9c/0xe0
[  106.873558][ T6967]  ? stack_depot_save_flags+0x40/0x860
[  106.873588][ T6967]  ? pin_user_pages_fast+0x4d/0xb0
[  106.873614][ T6967]  iov_iter_extract_pages+0x35f/0x5e0
[  106.873643][ T6967]  extract_iter_to_sg+0xe46/0x24e0
[  106.873678][ T6967]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  106.873713][ T6967]  ? __asan_memset+0x22/0x50
[  106.873738][ T6967]  af_alg_get_rsgl+0x436/0x810
[  106.873779][ T6967]  skcipher_recvmsg+0x3d1/0x11d0
[  106.873806][ T6967]  ? aa_sk_perm+0x81e/0x950
[  106.873840][ T6967]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  106.873865][ T6967]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  106.873881][ T6967]  ? security_socket_recvmsg+0x7e/0x2e0
[  106.873900][ T6967]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  106.873922][ T6967]  sock_recvmsg+0x22c/0x270
[  106.873950][ T6967]  ____sys_recvmsg+0x1c9/0x460
[  106.873978][ T6967]  ? __pfx_____sys_recvmsg+0x10/0x10
[  106.874010][ T6967]  ? import_iovec+0x74/0xa0
[  106.874034][ T6967]  ___sys_recvmsg+0x1b5/0x510
[  106.874057][ T6967]  ? __pfx____sys_recvmsg+0x10/0x10
[  106.874098][ T6967]  ? __fget_files+0x3a0/0x420
[  106.874137][ T6967]  __x64_sys_recvmsg+0x198/0x260
[  106.874160][ T6967]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  106.874190][ T6967]  ? __pfx_ksys_write+0x10/0x10
[  106.874217][ T6967]  ? do_syscall_64+0xbe/0xfa0
[  106.874243][ T6967]  do_syscall_64+0xfa/0xfa0
[  106.874264][ T6967]  ? lockdep_hardirqs_on+0x9c/0x150
[  106.874285][ T6967]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.874302][ T6967]  ? clear_bhb_loop+0x60/0xb0
[  106.874322][ T6967]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.874339][ T6967] RIP: 0033:0x7f4e78f8f6c9
[  106.874355][ T6967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  106.874368][ T6967] RSP: 002b:00007f4e79d5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  106.874387][ T6967] RAX: ffffffffffffffda RBX: 00007f4e791e5fa0 RCX: 00007f4e78f8f6c9
[  106.874399][ T6967] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004
[  106.874410][ T6967] RBP: 00007f4e79d5c090 R08: 0000000000000000 R09: 0000000000000000
[  106.874420][ T6967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  106.874431][ T6967] R13: 00007f4e791e6038 R14: 00007f4e791e5fa0 R15: 00007ffc9d6686d8
[  106.874457][ T6967]  </TASK>
[  107.370363][ T6965] veth1_vlan: entered allmulticast mode
[  107.420633][ T6965] team0: Device veth1_vlan failed to register rx_handler
[  107.462158][ T6969] : entered promiscuous mode
[  107.589992][ T6975] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  107.619926][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.262'.
[  107.729622][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.262'.
[  107.919663][ T6982] netlink: 'syz.1.267': attribute type 13 has an invalid length.
[  108.766520][ T7013] tipc: Started in network mode
[  108.775558][ T7013] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711
[  108.785202][ T7013] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  108.801447][ T7015] delete_channel: no stack
[  109.172095][ T7029] netlink: 'syz.4.280': attribute type 1 has an invalid length.
[  109.254328][ T7033] xt_TPROXY: Can be used only with -p tcp or -p udp
[  109.346109][ T7040] FAULT_INJECTION: forcing a failure.
[  109.346109][ T7040] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  109.369075][ T7040] CPU: 0 UID: 0 PID: 7040 Comm: syz.3.283 Not tainted syzkaller #0 PREEMPT(full) 
[  109.369100][ T7040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  109.369110][ T7040] Call Trace:
[  109.369118][ T7040]  <TASK>
[  109.369126][ T7040]  dump_stack_lvl+0x189/0x250
[  109.369152][ T7040]  ? __pfx____ratelimit+0x10/0x10
[  109.369175][ T7040]  ? __pfx_dump_stack_lvl+0x10/0x10
[  109.369197][ T7040]  ? __pfx__printk+0x10/0x10
[  109.369218][ T7040]  ? fs_reclaim_acquire+0x7d/0x100
[  109.369252][ T7040]  should_fail_ex+0x414/0x560
[  109.369282][ T7040]  prepare_alloc_pages+0x213/0x610
[  109.369307][ T7040]  __alloc_frozen_pages_noprof+0x123/0x370
[  109.369329][ T7040]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  109.369357][ T7040]  ? policy_nodemask+0x27c/0x720
[  109.369380][ T7040]  alloc_pages_mpol+0x232/0x4a0
[  109.369403][ T7040]  vma_alloc_folio_noprof+0xe4/0x200
[  109.369424][ T7040]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  109.369454][ T7040]  folio_prealloc+0x30/0x180
[  109.369480][ T7040]  do_wp_page+0x1231/0x5800
[  109.369524][ T7040]  ? __pfx_do_wp_page+0x10/0x10
[  109.369543][ T7040]  ? do_raw_spin_lock+0x121/0x290
[  109.369568][ T7040]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  109.369601][ T7040]  __handle_mm_fault+0x1033/0x5400
[  109.369641][ T7040]  ? __pfx___handle_mm_fault+0x10/0x10
[  109.369677][ T7040]  ? follow_page_pte+0xd03/0x13e0
[  109.369709][ T7040]  handle_mm_fault+0x40a/0x8e0
[  109.369742][ T7040]  __get_user_pages+0x165c/0x2a00
[  109.369798][ T7040]  __gup_longterm_locked+0xde4/0x1660
[  109.369833][ T7040]  ? sanity_check_pinned_pages+0x123a/0x1300
[  109.369859][ T7040]  gup_fast_fallback+0x1d65/0x22d0
[  109.369886][ T7040]  ? is_bpf_text_address+0x26/0x2b0
[  109.369941][ T7040]  ? __pfx_gup_fast_fallback+0x10/0x10
[  109.369960][ T7040]  ? stack_trace_save+0x9c/0xe0
[  109.369985][ T7040]  ? stack_depot_save_flags+0x40/0x860
[  109.370017][ T7040]  ? pin_user_pages_fast+0x4d/0xb0
[  109.370041][ T7040]  iov_iter_extract_pages+0x35f/0x5e0
[  109.370072][ T7040]  extract_iter_to_sg+0xe46/0x24e0
[  109.370107][ T7040]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  109.370143][ T7040]  ? __asan_memset+0x22/0x50
[  109.370167][ T7040]  af_alg_get_rsgl+0x436/0x810
[  109.370207][ T7040]  skcipher_recvmsg+0x3d1/0x11d0
[  109.370234][ T7040]  ? aa_sk_perm+0x81e/0x950
[  109.370269][ T7040]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  109.370294][ T7040]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  109.370310][ T7040]  ? security_socket_recvmsg+0x7e/0x2e0
[  109.370328][ T7040]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  109.370351][ T7040]  sock_recvmsg+0x22c/0x270
[  109.370379][ T7040]  ____sys_recvmsg+0x1c9/0x460
[  109.370408][ T7040]  ? __pfx_____sys_recvmsg+0x10/0x10
[  109.370443][ T7040]  ? import_iovec+0x74/0xa0
[  109.370468][ T7040]  ___sys_recvmsg+0x1b5/0x510
[  109.370493][ T7040]  ? __pfx____sys_recvmsg+0x10/0x10
[  109.370538][ T7040]  ? __fget_files+0x3a0/0x420
[  109.370566][ T7040]  __x64_sys_recvmsg+0x198/0x260
[  109.370589][ T7040]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  109.370618][ T7040]  ? __pfx_ksys_write+0x10/0x10
[  109.370645][ T7040]  ? do_syscall_64+0xbe/0xfa0
[  109.370671][ T7040]  do_syscall_64+0xfa/0xfa0
[  109.370691][ T7040]  ? lockdep_hardirqs_on+0x9c/0x150
[  109.370713][ T7040]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.370730][ T7040]  ? clear_bhb_loop+0x60/0xb0
[  109.370751][ T7040]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.370768][ T7040] RIP: 0033:0x7f0c0ef8f6c9
[  109.370784][ T7040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  109.370798][ T7040] RSP: 002b:00007f0c0fedb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  109.370817][ T7040] RAX: ffffffffffffffda RBX: 00007f0c0f1e5fa0 RCX: 00007f0c0ef8f6c9
[  109.370830][ T7040] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004
[  109.370840][ T7040] RBP: 00007f0c0fedb090 R08: 0000000000000000 R09: 0000000000000000
[  109.370851][ T7040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  109.370861][ T7040] R13: 00007f0c0f1e6038 R14: 00007f0c0f1e5fa0 R15: 00007ffc184ec278
[  109.370898][ T7040]  </TASK>
[  110.020746][ T7055] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  110.419498][ T7080] bridge_slave_1: left allmulticast mode
[  110.449608][ T7080] bridge_slave_1: left promiscuous mode
[  110.476678][ T7080] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.485154][ T7082] __nla_validate_parse: 3 callbacks suppressed
[  110.485170][ T7082] netlink: 92 bytes leftover after parsing attributes in process `syz.4.295'.
[  110.548683][ T7080] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  110.612566][ T7090] FAULT_INJECTION: forcing a failure.
[  110.612566][ T7090] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  110.661839][ T7090] CPU: 0 UID: 0 PID: 7090 Comm: syz.1.296 Not tainted syzkaller #0 PREEMPT(full) 
[  110.661866][ T7090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  110.661877][ T7090] Call Trace:
[  110.661883][ T7090]  <TASK>
[  110.661890][ T7090]  dump_stack_lvl+0x189/0x250
[  110.661917][ T7090]  ? __pfx____ratelimit+0x10/0x10
[  110.661939][ T7090]  ? __pfx_dump_stack_lvl+0x10/0x10
[  110.661961][ T7090]  ? __pfx__printk+0x10/0x10
[  110.661980][ T7090]  ? fs_reclaim_acquire+0x7d/0x100
[  110.662013][ T7090]  should_fail_ex+0x414/0x560
[  110.662042][ T7090]  prepare_alloc_pages+0x213/0x610
[  110.662073][ T7090]  __alloc_frozen_pages_noprof+0x123/0x370
[  110.662095][ T7090]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  110.662121][ T7090]  ? policy_nodemask+0x27c/0x720
[  110.662143][ T7090]  alloc_pages_mpol+0x232/0x4a0
[  110.662165][ T7090]  vma_alloc_folio_noprof+0xe4/0x200
[  110.662185][ T7090]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  110.662216][ T7090]  folio_prealloc+0x30/0x180
[  110.662242][ T7090]  do_wp_page+0x1231/0x5800
[  110.662286][ T7090]  ? __pfx_do_wp_page+0x10/0x10
[  110.662304][ T7090]  ? do_raw_spin_lock+0x121/0x290
[  110.662330][ T7090]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  110.662362][ T7090]  __handle_mm_fault+0x1033/0x5400
[  110.662401][ T7090]  ? __pfx___handle_mm_fault+0x10/0x10
[  110.662438][ T7090]  ? follow_page_pte+0xd03/0x13e0
[  110.662470][ T7090]  handle_mm_fault+0x40a/0x8e0
[  110.662503][ T7090]  __get_user_pages+0x165c/0x2a00
[  110.662559][ T7090]  __gup_longterm_locked+0xde4/0x1660
[  110.662595][ T7090]  ? sanity_check_pinned_pages+0x123a/0x1300
[  110.662623][ T7090]  gup_fast_fallback+0x1d65/0x22d0
[  110.662644][ T7090]  ? is_bpf_text_address+0x26/0x2b0
[  110.662698][ T7090]  ? __pfx_gup_fast_fallback+0x10/0x10
[  110.662716][ T7090]  ? stack_trace_save+0x9c/0xe0
[  110.662739][ T7090]  ? stack_depot_save_flags+0x40/0x860
[  110.662770][ T7090]  ? pin_user_pages_fast+0x4d/0xb0
[  110.662793][ T7090]  iov_iter_extract_pages+0x35f/0x5e0
[  110.662823][ T7090]  extract_iter_to_sg+0xe46/0x24e0
[  110.662855][ T7090]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  110.662892][ T7090]  ? __asan_memset+0x22/0x50
[  110.662916][ T7090]  af_alg_get_rsgl+0x436/0x810
[  110.662955][ T7090]  skcipher_recvmsg+0x3d1/0x11d0
[  110.662982][ T7090]  ? aa_sk_perm+0x81e/0x950
[  110.663013][ T7090]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  110.663038][ T7090]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  110.663053][ T7090]  ? security_socket_recvmsg+0x7e/0x2e0
[  110.663077][ T7090]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  110.663099][ T7090]  sock_recvmsg+0x22c/0x270
[  110.663126][ T7090]  ____sys_recvmsg+0x1c9/0x460
[  110.663156][ T7090]  ? __pfx_____sys_recvmsg+0x10/0x10
[  110.663190][ T7090]  ? import_iovec+0x74/0xa0
[  110.663215][ T7090]  ___sys_recvmsg+0x1b5/0x510
[  110.663241][ T7090]  ? __pfx____sys_recvmsg+0x10/0x10
[  110.663286][ T7090]  ? __fget_files+0x3a0/0x420
[  110.663315][ T7090]  __x64_sys_recvmsg+0x198/0x260
[  110.663337][ T7090]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  110.663367][ T7090]  ? __pfx_ksys_write+0x10/0x10
[  110.663394][ T7090]  ? do_syscall_64+0xbe/0xfa0
[  110.663419][ T7090]  do_syscall_64+0xfa/0xfa0
[  110.663439][ T7090]  ? lockdep_hardirqs_on+0x9c/0x150
[  110.663460][ T7090]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.663475][ T7090]  ? clear_bhb_loop+0x60/0xb0
[  110.663496][ T7090]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.663513][ T7090] RIP: 0033:0x7f4e78f8f6c9
[  110.663529][ T7090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  110.663543][ T7090] RSP: 002b:00007f4e79d5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  110.663563][ T7090] RAX: ffffffffffffffda RBX: 00007f4e791e5fa0 RCX: 00007f4e78f8f6c9
[  110.663576][ T7090] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004
[  110.663587][ T7090] RBP: 00007f4e79d5c090 R08: 0000000000000000 R09: 0000000000000000
[  110.663597][ T7090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  110.663607][ T7090] R13: 00007f4e791e6038 R14: 00007f4e791e5fa0 R15: 00007ffc9d6686d8
[  110.663637][ T7090]  </TASK>
[  111.194336][ T7101] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0
[  111.194678][ T7099] IPVS: stopping master sync thread 7101 ...
[  111.314483][ T7109] netlink: 'syz.3.303': attribute type 13 has an invalid length.
[  111.322350][ T7109] netlink: 288 bytes leftover after parsing attributes in process `syz.3.303'.
[  111.513388][ T7119] sctp: [Deprecated]: syz.2.306 (pid 7119) Use of int in max_burst socket option.
[  111.513388][ T7119] Use struct sctp_assoc_value instead
[  111.664541][ T7125] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  111.726579][ T7125] bond1 (unregistering): Released all slaves
[  111.857047][ T7136] netlink: 'syz.2.310': attribute type 10 has an invalid length.
[  112.026617][ T7138] netlink: 36 bytes leftover after parsing attributes in process `syz.1.311'.
[  112.154254][ T7149] FAULT_INJECTION: forcing a failure.
[  112.154254][ T7149] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  112.181411][ T7149] CPU: 1 UID: 0 PID: 7149 Comm: syz.2.314 Not tainted syzkaller #0 PREEMPT(full) 
[  112.181434][ T7149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  112.181444][ T7149] Call Trace:
[  112.181451][ T7149]  <TASK>
[  112.181458][ T7149]  dump_stack_lvl+0x189/0x250
[  112.181485][ T7149]  ? __pfx____ratelimit+0x10/0x10
[  112.181507][ T7149]  ? __pfx_dump_stack_lvl+0x10/0x10
[  112.181528][ T7149]  ? __pfx__printk+0x10/0x10
[  112.181547][ T7149]  ? fs_reclaim_acquire+0x7d/0x100
[  112.181582][ T7149]  should_fail_ex+0x414/0x560
[  112.181612][ T7149]  prepare_alloc_pages+0x213/0x610
[  112.181635][ T7149]  __alloc_frozen_pages_noprof+0x123/0x370
[  112.181657][ T7149]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  112.181685][ T7149]  ? policy_nodemask+0x27c/0x720
[  112.181706][ T7149]  alloc_pages_mpol+0x232/0x4a0
[  112.181729][ T7149]  vma_alloc_folio_noprof+0xe4/0x200
[  112.181748][ T7149]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  112.181777][ T7149]  folio_prealloc+0x30/0x180
[  112.181802][ T7149]  do_wp_page+0x1231/0x5800
[  112.181844][ T7149]  ? __pfx_do_wp_page+0x10/0x10
[  112.181862][ T7149]  ? do_raw_spin_lock+0x121/0x290
[  112.181888][ T7149]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  112.181922][ T7149]  __handle_mm_fault+0x1033/0x5400
[  112.181973][ T7149]  ? __pfx___handle_mm_fault+0x10/0x10
[  112.182008][ T7149]  ? follow_page_pte+0xd03/0x13e0
[  112.182040][ T7149]  handle_mm_fault+0x40a/0x8e0
[  112.182074][ T7149]  __get_user_pages+0x165c/0x2a00
[  112.182129][ T7149]  __gup_longterm_locked+0xde4/0x1660
[  112.182165][ T7149]  ? sanity_check_pinned_pages+0x123a/0x1300
[  112.182193][ T7149]  gup_fast_fallback+0x1d65/0x22d0
[  112.182213][ T7149]  ? is_bpf_text_address+0x26/0x2b0
[  112.182266][ T7149]  ? __pfx_gup_fast_fallback+0x10/0x10
[  112.182285][ T7149]  ? stack_trace_save+0x9c/0xe0
[  112.182307][ T7149]  ? stack_depot_save_flags+0x40/0x860
[  112.182338][ T7149]  ? pin_user_pages_fast+0x4d/0xb0
[  112.182360][ T7149]  iov_iter_extract_pages+0x35f/0x5e0
[  112.182389][ T7149]  extract_iter_to_sg+0xe46/0x24e0
[  112.182421][ T7149]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  112.182453][ T7149]  ? __asan_memset+0x22/0x50
[  112.182476][ T7149]  af_alg_get_rsgl+0x436/0x810
[  112.182512][ T7149]  skcipher_recvmsg+0x3d1/0x11d0
[  112.182537][ T7149]  ? aa_sk_perm+0x81e/0x950
[  112.182571][ T7149]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  112.182597][ T7149]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  112.182613][ T7149]  ? security_socket_recvmsg+0x7e/0x2e0
[  112.182631][ T7149]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  112.182651][ T7149]  sock_recvmsg+0x22c/0x270
[  112.182676][ T7149]  ____sys_recvmsg+0x1c9/0x460
[  112.182704][ T7149]  ? __pfx_____sys_recvmsg+0x10/0x10
[  112.182733][ T7149]  ? import_iovec+0x74/0xa0
[  112.182758][ T7149]  ___sys_recvmsg+0x1b5/0x510
[  112.182783][ T7149]  ? __pfx____sys_recvmsg+0x10/0x10
[  112.182828][ T7149]  ? __fget_files+0x3a0/0x420
[  112.182857][ T7149]  __x64_sys_recvmsg+0x198/0x260
[  112.182880][ T7149]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  112.182910][ T7149]  ? __pfx_ksys_write+0x10/0x10
[  112.182938][ T7149]  ? do_syscall_64+0xbe/0xfa0
[  112.182971][ T7149]  do_syscall_64+0xfa/0xfa0
[  112.182992][ T7149]  ? lockdep_hardirqs_on+0x9c/0x150
[  112.183015][ T7149]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.183033][ T7149]  ? clear_bhb_loop+0x60/0xb0
[  112.183054][ T7149]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.183071][ T7149] RIP: 0033:0x7feb4058f6c9
[  112.183088][ T7149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  112.183102][ T7149] RSP: 002b:00007feb4143a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  112.183121][ T7149] RAX: ffffffffffffffda RBX: 00007feb407e5fa0 RCX: 00007feb4058f6c9
[  112.183134][ T7149] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004
[  112.183145][ T7149] RBP: 00007feb4143a090 R08: 0000000000000000 R09: 0000000000000000
[  112.183156][ T7149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  112.183166][ T7149] R13: 00007feb407e6038 R14: 00007feb407e5fa0 R15: 00007fff599876d8
[  112.183198][ T7149]  </TASK>
[  112.741951][ T7160] netlink: 132 bytes leftover after parsing attributes in process `syz.0.315'.
[  113.961162][ T7159] 8021q: VLANs not supported on nlmon0
[  113.972504][ T7175] netlink: 'syz.0.320': attribute type 6 has an invalid length.
[  114.149915][ T7178] sctp: [Deprecated]: syz.4.321 (pid 7178) Use of int in max_burst socket option deprecated.
[  114.149915][ T7178] Use struct sctp_assoc_value instead
[  114.582845][ T7200] netlink: 4308 bytes leftover after parsing attributes in process `syz.3.327'.
[  114.945070][ T7217] sctp: [Deprecated]: syz.1.331 (pid 7217) Use of int in max_burst socket option.
[  114.945070][ T7217] Use struct sctp_assoc_value instead
[  115.063459][ T7219] FAULT_INJECTION: forcing a failure.
[  115.063459][ T7219] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  115.096591][ T7219] CPU: 1 UID: 0 PID: 7219 Comm: syz.4.332 Not tainted syzkaller #0 PREEMPT(full) 
[  115.096614][ T7219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  115.096624][ T7219] Call Trace:
[  115.096631][ T7219]  <TASK>
[  115.096639][ T7219]  dump_stack_lvl+0x189/0x250
[  115.096666][ T7219]  ? __pfx____ratelimit+0x10/0x10
[  115.096689][ T7219]  ? __pfx_dump_stack_lvl+0x10/0x10
[  115.096711][ T7219]  ? __pfx__printk+0x10/0x10
[  115.096729][ T7219]  ? fs_reclaim_acquire+0x7d/0x100
[  115.096764][ T7219]  should_fail_ex+0x414/0x560
[  115.096794][ T7219]  prepare_alloc_pages+0x213/0x610
[  115.096819][ T7219]  __alloc_frozen_pages_noprof+0x123/0x370
[  115.096841][ T7219]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  115.096868][ T7219]  ? policy_nodemask+0x27c/0x720
[  115.096891][ T7219]  alloc_pages_mpol+0x232/0x4a0
[  115.096915][ T7219]  vma_alloc_folio_noprof+0xe4/0x200
[  115.096933][ T7219]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  115.096961][ T7219]  folio_prealloc+0x30/0x180
[  115.096985][ T7219]  do_wp_page+0x1231/0x5800
[  115.097023][ T7219]  ? __pfx_do_wp_page+0x10/0x10
[  115.097041][ T7219]  ? do_raw_spin_lock+0x121/0x290
[  115.097065][ T7219]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  115.097095][ T7219]  __handle_mm_fault+0x1033/0x5400
[  115.097131][ T7219]  ? __pfx___handle_mm_fault+0x10/0x10
[  115.097166][ T7219]  ? follow_page_pte+0xd03/0x13e0
[  115.097194][ T7219]  handle_mm_fault+0x40a/0x8e0
[  115.097226][ T7219]  __get_user_pages+0x165c/0x2a00
[  115.097279][ T7219]  __gup_longterm_locked+0xde4/0x1660
[  115.097314][ T7219]  ? sanity_check_pinned_pages+0x123a/0x1300
[  115.097342][ T7219]  gup_fast_fallback+0x1d65/0x22d0
[  115.097361][ T7219]  ? is_bpf_text_address+0x26/0x2b0
[  115.097415][ T7219]  ? __pfx_gup_fast_fallback+0x10/0x10
[  115.097433][ T7219]  ? stack_trace_save+0x9c/0xe0
[  115.097457][ T7219]  ? stack_depot_save_flags+0x40/0x860
[  115.097496][ T7219]  ? pin_user_pages_fast+0x4d/0xb0
[  115.097518][ T7219]  iov_iter_extract_pages+0x35f/0x5e0
[  115.097546][ T7219]  extract_iter_to_sg+0xe46/0x24e0
[  115.097577][ T7219]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  115.097611][ T7219]  ? __asan_memset+0x22/0x50
[  115.097635][ T7219]  af_alg_get_rsgl+0x436/0x810
[  115.097676][ T7219]  skcipher_recvmsg+0x3d1/0x11d0
[  115.097703][ T7219]  ? aa_sk_perm+0x81e/0x950
[  115.097737][ T7219]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  115.097762][ T7219]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  115.097779][ T7219]  ? security_socket_recvmsg+0x7e/0x2e0
[  115.097796][ T7219]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  115.097819][ T7219]  sock_recvmsg+0x22c/0x270
[  115.097844][ T7219]  ____sys_recvmsg+0x1c9/0x460
[  115.097872][ T7219]  ? __pfx_____sys_recvmsg+0x10/0x10
[  115.097906][ T7219]  ? import_iovec+0x74/0xa0
[  115.097930][ T7219]  ___sys_recvmsg+0x1b5/0x510
[  115.097953][ T7219]  ? __pfx____sys_recvmsg+0x10/0x10
[  115.097999][ T7219]  ? __fget_files+0x3a0/0x420
[  115.098027][ T7219]  __x64_sys_recvmsg+0x198/0x260
[  115.098050][ T7219]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  115.098080][ T7219]  ? __pfx_ksys_write+0x10/0x10
[  115.098107][ T7219]  ? do_syscall_64+0xbe/0xfa0
[  115.098133][ T7219]  do_syscall_64+0xfa/0xfa0
[  115.098154][ T7219]  ? lockdep_hardirqs_on+0x9c/0x150
[  115.098176][ T7219]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.098194][ T7219]  ? clear_bhb_loop+0x60/0xb0
[  115.098215][ T7219]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.098232][ T7219] RIP: 0033:0x7f9fa118f6c9
[  115.098248][ T7219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  115.098262][ T7219] RSP: 002b:00007f9fa1f9e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  115.098281][ T7219] RAX: ffffffffffffffda RBX: 00007f9fa13e5fa0 RCX: 00007f9fa118f6c9
[  115.098294][ T7219] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004
[  115.098304][ T7219] RBP: 00007f9fa1f9e090 R08: 0000000000000000 R09: 0000000000000000
[  115.098314][ T7219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  115.098323][ T7219] R13: 00007f9fa13e6038 R14: 00007f9fa13e5fa0 R15: 00007ffc24aec2d8
[  115.098352][ T7219]  </TASK>
[  115.599322][ T7222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.333'.
[  116.102065][ T7222] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  116.295212][ T7240] netlink: 48 bytes leftover after parsing attributes in process `syz.1.337'.
[  116.335294][ T7240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.337'.
[  116.358228][ T7240] netlink: 5 bytes leftover after parsing attributes in process `syz.1.337'.
[  116.384301][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.337'.
[  116.405198][ T7245] netlink: 76 bytes leftover after parsing attributes in process `syz.4.335'.
[  116.414551][ T7240] netlink: 240 bytes leftover after parsing attributes in process `syz.1.337'.
[  116.434078][ T7240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.337'.
[  116.563578][ T7249] netlink: 20 bytes leftover after parsing attributes in process `syz.3.340'.
[  116.659825][ T5832] Bluetooth: hci4: link tx timeout
[  116.666714][ T5832] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  116.677575][ T5832] Bluetooth: hci4: link tx timeout
[  116.682776][ T5832] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  116.691172][ T5832] Bluetooth: hci4: link tx timeout
[  116.697097][ T5832] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  116.705112][ T5832] Bluetooth: hci4: link tx timeout
[  116.710307][ T5832] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  116.718509][ T5832] Bluetooth: hci4: link tx timeout
[  116.723690][ T5832] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  116.927507][ T7266] FAULT_INJECTION: forcing a failure.
[  116.927507][ T7266] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  116.948994][ T7266] CPU: 1 UID: 0 PID: 7266 Comm: syz.1.345 Not tainted syzkaller #0 PREEMPT(full) 
[  116.949016][ T7266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  116.949025][ T7266] Call Trace:
[  116.949032][ T7266]  <TASK>
[  116.949039][ T7266]  dump_stack_lvl+0x189/0x250
[  116.949066][ T7266]  ? __pfx____ratelimit+0x10/0x10
[  116.949088][ T7266]  ? __pfx_dump_stack_lvl+0x10/0x10
[  116.949110][ T7266]  ? __pfx__printk+0x10/0x10
[  116.949129][ T7266]  ? fs_reclaim_acquire+0x7d/0x100
[  116.949164][ T7266]  should_fail_ex+0x414/0x560
[  116.949194][ T7266]  prepare_alloc_pages+0x213/0x610
[  116.949218][ T7266]  __alloc_frozen_pages_noprof+0x123/0x370
[  116.949240][ T7266]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  116.949268][ T7266]  ? policy_nodemask+0x27c/0x720
[  116.949291][ T7266]  alloc_pages_mpol+0x232/0x4a0
[  116.949314][ T7266]  vma_alloc_folio_noprof+0xe4/0x200
[  116.949335][ T7266]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  116.949365][ T7266]  folio_prealloc+0x30/0x180
[  116.949391][ T7266]  do_wp_page+0x1231/0x5800
[  116.949437][ T7266]  ? __pfx_do_wp_page+0x10/0x10
[  116.949456][ T7266]  ? do_raw_spin_lock+0x121/0x290
[  116.949482][ T7266]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  116.949515][ T7266]  __handle_mm_fault+0x1033/0x5400
[  116.949555][ T7266]  ? __pfx___handle_mm_fault+0x10/0x10
[  116.949593][ T7266]  ? follow_page_pte+0xd03/0x13e0
[  116.949631][ T7266]  handle_mm_fault+0x40a/0x8e0
[  116.949665][ T7266]  __get_user_pages+0x165c/0x2a00
[  116.949723][ T7266]  __gup_longterm_locked+0xde4/0x1660
[  116.949758][ T7266]  ? sanity_check_pinned_pages+0x123a/0x1300
[  116.949789][ T7266]  gup_fast_fallback+0x1d65/0x22d0
[  116.949809][ T7266]  ? is_bpf_text_address+0x26/0x2b0
[  116.949866][ T7266]  ? __pfx_gup_fast_fallback+0x10/0x10
[  116.949885][ T7266]  ? stack_trace_save+0x9c/0xe0
[  116.949910][ T7266]  ? stack_depot_save_flags+0x40/0x860
[  116.949943][ T7266]  ? pin_user_pages_fast+0x4d/0xb0
[  116.949967][ T7266]  iov_iter_extract_pages+0x35f/0x5e0
[  116.950000][ T7266]  extract_iter_to_sg+0xe46/0x24e0
[  116.950035][ T7266]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  116.950074][ T7266]  ? __asan_memset+0x22/0x50
[  116.950098][ T7266]  af_alg_get_rsgl+0x436/0x810
[  116.950140][ T7266]  skcipher_recvmsg+0x3d1/0x11d0
[  116.950167][ T7266]  ? aa_sk_perm+0x81e/0x950
[  116.950202][ T7266]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  116.950228][ T7266]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  116.950245][ T7266]  ? security_socket_recvmsg+0x7e/0x2e0
[  116.950263][ T7266]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  116.950285][ T7266]  sock_recvmsg+0x22c/0x270
[  116.950312][ T7266]  ____sys_recvmsg+0x1c9/0x460
[  116.950340][ T7266]  ? __pfx_____sys_recvmsg+0x10/0x10
[  116.950375][ T7266]  ? import_iovec+0x74/0xa0
[  116.950400][ T7266]  ___sys_recvmsg+0x1b5/0x510
[  116.950426][ T7266]  ? __pfx____sys_recvmsg+0x10/0x10
[  116.950472][ T7266]  ? __fget_files+0x3a0/0x420
[  116.950499][ T7266]  __x64_sys_recvmsg+0x198/0x260
[  116.950522][ T7266]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  116.950552][ T7266]  ? __pfx_ksys_write+0x10/0x10
[  116.950580][ T7266]  ? do_syscall_64+0xbe/0xfa0
[  116.950613][ T7266]  do_syscall_64+0xfa/0xfa0
[  116.950631][ T7266]  ? lockdep_hardirqs_on+0x9c/0x150
[  116.950650][ T7266]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.950667][ T7266]  ? clear_bhb_loop+0x60/0xb0
[  116.950688][ T7266]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.950706][ T7266] RIP: 0033:0x7f4e78f8f6c9
[  116.950722][ T7266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  116.950736][ T7266] RSP: 002b:00007f4e79d5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  116.950756][ T7266] RAX: ffffffffffffffda RBX: 00007f4e791e5fa0 RCX: 00007f4e78f8f6c9
[  116.950769][ T7266] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004
[  116.950779][ T7266] RBP: 00007f4e79d5c090 R08: 0000000000000000 R09: 0000000000000000
[  116.950790][ T7266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  116.950800][ T7266] R13: 00007f4e791e6038 R14: 00007f4e791e5fa0 R15: 00007ffc9d6686d8
[  116.950833][ T7266]  </TASK>
[  117.462299][ T1325] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  117.511202][ T7270] ip6tnl0: Caught tx_queue_len zero misconfig
[  118.084625][ T7285] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) !
[  118.675751][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.355'.
[  118.694867][ T5832] Bluetooth: hci4: command 0x0406 tx timeout
[  119.274668][ T7316] 8021q: adding VLAN 0 to HW filter on device bond2
[  119.307372][ T7318] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.318168][ T7318] bond2: (slave bond0): Enslaving as an active interface with an up link
[  119.546106][ T7319] bond2 (unregistering): (slave bond0): Releasing backup interface
[  119.574516][ T7319] bond2 (unregistering): Released all slaves
[  120.772998][ T7351] __nla_validate_parse: 1 callbacks suppressed
[  120.773017][ T7351] netlink: 12 bytes leftover after parsing attributes in process `syz.4.367'.
[  121.156403][ T7364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.371'.
[  121.226169][ T7364] netlink: 'syz.3.371': attribute type 5 has an invalid length.
[  121.234293][ T7364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.371'.
[  121.254218][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  121.581667][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.377'.
[  121.591086][ T7388] netlink: 260 bytes leftover after parsing attributes in process `syz.4.378'.
[  121.601343][ T7388] netlink: 260 bytes leftover after parsing attributes in process `syz.4.378'.
[  121.615643][ T7384] netlink: 36 bytes leftover after parsing attributes in process `syz.0.377'.
[  121.846362][ T7401] netlink: 40 bytes leftover after parsing attributes in process `syz.1.382'.
[  121.929908][ T7406] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  122.643854][ T7423] raw_sendmsg: syz.1.390 forgot to set AF_INET. Fix it!
[  122.754369][ T7425] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  122.803378][ T7427] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  122.821144][ T7431] netlink: 'syz.0.392': attribute type 4 has an invalid length.
[  122.962420][ T7435] netlink: 'syz.3.393': attribute type 23 has an invalid length.
[  122.996858][ T7415] netlink: 'syz.4.385': attribute type 1 has an invalid length.
[  123.005770][ T7415] netlink: 'syz.4.385': attribute type 4 has an invalid length.
[  123.022857][ T7415] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.385'.
[  123.043815][ T7415] netlink: 'syz.4.385': attribute type 1 has an invalid length.
[  123.051845][ T7415] netlink: 'syz.4.385': attribute type 4 has an invalid length.
[  123.060032][ T7415] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.385'.
[  123.512502][ T7461] netlink: 'syz.1.399': attribute type 1 has an invalid length.
[  123.659729][ T7461] 8021q: adding VLAN 0 to HW filter on device bond2
[  123.780034][ T7461] bond2: (slave dummy0): making interface the new active one
[  123.818424][ T7461] bond2: (slave dummy0): Enslaving as an active interface with an up link
[  123.999737][ T7490] syzkaller1: tun_chr_ioctl cmd 1074025677
[  124.034498][ T7490] syzkaller1: linktype set to 778
[  124.093971][ T7461] bond2: entered promiscuous mode
[  124.125164][ T7461] dummy0: entered promiscuous mode
[  124.190807][ T7460] bond2: left promiscuous mode
[  124.204159][ T7460] dummy0: left promiscuous mode
[  124.683326][ T7512] macvtap1: entered promiscuous mode
[  124.692030][ T7517] netlink: 'syz.3.411': attribute type 1 has an invalid length.
[  124.697386][ T7512] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  124.993254][ T7526] netlink: 'syz.2.415': attribute type 1 has an invalid length.
[  128.934192][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  129.304863][ T7556] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  129.311837][ T7556] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  129.562243][ T7565] __nla_validate_parse: 14 callbacks suppressed
[  129.562261][ T7565] netlink: 68 bytes leftover after parsing attributes in process `syz.4.424'.
[  129.817708][ T7579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.430'.
[  130.064288][   T30] audit: type=1800 audit(1762371104.064:4): pid=7572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.427" name="cgroup.controllers" dev="tmpfs" ino=462 res=0 errno=0
[  130.243637][ T7599] validate_nla: 1 callbacks suppressed
[  130.243653][ T7599] netlink: 'syz.0.433': attribute type 28 has an invalid length.
[  130.684857][ T7618] pim6reg1: entered allmulticast mode
[  130.702563][ T7619] tipc: Can't bind to reserved service type 1
[  130.749606][ T7619] netlink: 'syz.3.438': attribute type 39 has an invalid length.
[  130.886528][ T7622] netlink: 68 bytes leftover after parsing attributes in process `syz.1.439'.
[  130.999421][ T7624] netlink: 44 bytes leftover after parsing attributes in process `syz.3.438'.
[  131.014554][ T7624] netlink: 43 bytes leftover after parsing attributes in process `syz.3.438'.
[  131.033363][ T7624] netlink: 'syz.3.438': attribute type 5 has an invalid length.
[  131.043143][ T7624] netlink: 43 bytes leftover after parsing attributes in process `syz.3.438'.
[  131.082383][ T7626] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  131.218293][ T7619] vlan2: entered allmulticast mode
[  131.243158][ T7628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.441'.
[  131.644845][ T7634] netlink: 288 bytes leftover after parsing attributes in process `syz.3.443'.
[  131.758379][ T5897] hid-generic 0005:0007:0008.0001: unknown main item tag 0x0
[  131.812700][ T5897] hid-generic 0005:0007:0008.0001: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa
[  132.005382][ T7652] netlink: 16 bytes leftover after parsing attributes in process `syz.2.446'.
[  132.061822][ T7652] pim6reg: entered allmulticast mode
[  132.128601][ T7652] pim6reg: left allmulticast mode
[  132.335264][ T7656] sch_tbf: burst 0 is lower than device tunl0 mtu (61406) !
[  132.386796][ T7664] netlink: 68 bytes leftover after parsing attributes in process `syz.4.450'.
[  132.425662][ T7661] bond0: entered promiscuous mode
[  132.430808][ T7661] bond_slave_0: entered promiscuous mode
[  132.436794][ T7661] bond_slave_1: entered promiscuous mode
[  132.444326][ T7661] bond0: left promiscuous mode
[  132.452614][ T7661] bond_slave_0: left promiscuous mode
[  132.469455][ T7661] bond_slave_1: left promiscuous mode
[  132.785746][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  132.792091][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  133.079899][ T7688] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.256904][ T7684] syzkaller0: entered promiscuous mode
[  133.272938][ T7684] syzkaller0: entered allmulticast mode
[  133.305747][ T7693] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  133.355997][ T7684] tipc: Resetting bearer <eth:syzkaller0>
[  133.449496][ T7683] tipc: Disabling bearer <eth:syzkaller0>
[  133.467671][ T7696] xt_CT: You must specify a L4 protocol and not use inversions on it
[  133.564153][ T5945] IPVS: starting estimator thread 0...
[  133.570888][ T7702] veth0_to_bridge: entered promiscuous mode
[  133.664829][ T7701] IPVS: using max 34 ests per chain, 81600 per kthread
[  134.086465][ T7697] veth0_to_bridge: left promiscuous mode
[  134.421916][ T7728] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  134.586936][ T7734] __nla_validate_parse: 7 callbacks suppressed
[  134.586952][ T7734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.474'.
[  134.608131][ T7736] xt_CONNSECMARK: invalid mode: 0
[  134.906801][ T7730] netlink: 132 bytes leftover after parsing attributes in process `syz.0.470'.
[  135.589233][ T7757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.479'.
[  136.262135][ T7762] netlink: 24 bytes leftover after parsing attributes in process `syz.1.481'.
[  136.408053][ T7764] x_tables: ip_tables: CT target: only valid in raw table, not 
[  136.752349][ T7769] netlink: 52 bytes leftover after parsing attributes in process `syz.1.483'.
[  136.802425][ T7769] netlink: 52 bytes leftover after parsing attributes in process `syz.1.483'.
[  136.840337][ T7769] netlink: 52 bytes leftover after parsing attributes in process `syz.1.483'.
[  137.291146][ T7779] netlink: 68 bytes leftover after parsing attributes in process `syz.3.485'.
[  137.689369][ T7793] netlink: 20 bytes leftover after parsing attributes in process `syz.1.489'.
[  137.869146][ T7795] netlink: 20 bytes leftover after parsing attributes in process `syz.0.490'.
[  137.885704][ T7797] netlink: 'syz.1.491': attribute type 1 has an invalid length.
[  137.929555][ T7797] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  138.247899][ T5897] IPVS: starting estimator thread 0...
[  138.394103][ T7810] IPVS: using max 29 ests per chain, 69600 per kthread
[  138.590001][ T7818] vlan2: entered promiscuous mode
[  138.607785][ T7818] vlan2: entered allmulticast mode
[  138.612949][ T7818] hsr_slave_1: entered allmulticast mode
[  139.729662][ T7838] 8021q: VLANs not supported on caif0
[  140.180463][ T7841] netlink: 'syz.3.504': attribute type 12 has an invalid length.
[  141.291331][ T7855] wg1: entered promiscuous mode
[  141.297404][ T7855] wg1: entered allmulticast mode
[  141.889158][ T7744] Set syz1 is full, maxelem 65536 reached
[  142.223476][ T7864] netlink: 'syz.2.510': attribute type 2 has an invalid length.
[  143.585891][ T7905] 8021q: VLANs not supported on caif0
[  143.880420][ T7915] x_tables: duplicate underflow at hook 1
[  143.966229][ T7919] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.376538][ T7937] x_tables: ip_tables: ah match: only valid for protocol 51
[  144.873835][ T7955] __nla_validate_parse: 4 callbacks suppressed
[  144.873851][ T7955] netlink: 165 bytes leftover after parsing attributes in process `syz.4.533'.
[  144.918019][ T7954] syzkaller0: entered promiscuous mode
[  144.934193][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  144.954528][ T7954] syzkaller0: entered allmulticast mode
[  145.785488][ T7995] netlink: 'syz.3.544': attribute type 1 has an invalid length.
[  145.872553][ T7995] bond2: entered promiscuous mode
[  145.878080][ T7995] 8021q: adding VLAN 0 to HW filter on device bond2
[  145.983510][ T8004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.548'.
[  146.053060][ T8009] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  146.091971][ T8006] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  146.511250][ T8023] netlink: 28 bytes leftover after parsing attributes in process `syz.4.549'.
[  146.573050][ T8023] netlink: 16 bytes leftover after parsing attributes in process `syz.4.549'.
[  147.076229][ T8044] netlink: 28 bytes leftover after parsing attributes in process `syz.4.553'.
[  147.085387][ T8044] netlink: 28 bytes leftover after parsing attributes in process `syz.4.553'.
[  147.203418][ T8044] bond0: entered promiscuous mode
[  147.208841][ T8044] bond_slave_0: entered promiscuous mode
[  147.216748][ T8044] bond_slave_1: entered promiscuous mode
[  147.227951][ T8044] bridge0: entered promiscuous mode
[  147.240524][ T8044] bridge0: left promiscuous mode
[  147.254778][ T8044] bond0: left promiscuous mode
[  147.261381][ T8044] bond_slave_0: left promiscuous mode
[  147.267314][ T8044] bond_slave_1: left promiscuous mode
[  148.026676][ T8075] 8021q: VLANs not supported on caif0
[  148.376840][ T8081] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  148.750601][ T8096] netlink: 67 bytes leftover after parsing attributes in process `syz.0.568'.
[  150.216444][ T8118] netlink: 'syz.0.571': attribute type 11 has an invalid length.
[  150.251342][ T8118] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20000
[  150.291737][ T8121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.573'.
[  150.316672][ T8123] netlink: 136 bytes leftover after parsing attributes in process `syz.0.571'.
[  150.333661][ T8123] netlink: 180 bytes leftover after parsing attributes in process `syz.0.571'.
[  150.606670][ T8141] pim6reg1: entered promiscuous mode
[  150.612118][ T8141] pim6reg1: entered allmulticast mode
[  150.795575][ T8154] xt_bpf: check failed: parse error
[  150.918886][ T8157] netlink: 68 bytes leftover after parsing attributes in process `syz.4.584'.
[  151.160099][ T8172] team0: No ports can be present during mode change
[  151.366806][ T8176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.590'.
[  151.536126][ T8181] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  151.555378][ T8181] syzkaller0: entered promiscuous mode
[  151.571142][ T8181] syzkaller0: entered allmulticast mode
[  151.617836][ T8181] tipc: Resetting bearer <eth:syzkaller0>
[  151.688757][ T8180] tipc: Resetting bearer <eth:syzkaller0>
[  151.726781][ T8180] tipc: Disabling bearer <eth:syzkaller0>
[  151.860696][ T8193] 8021q: VLANs not supported on caif0
[  152.039255][ T8207] team0: No ports can be present during mode change
[  152.387966][ T8216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.601'.
[  152.602449][ T8216] bridge1: entered promiscuous mode
[  152.613463][ T8222] af_packet: tpacket_rcv: packet too big, clamped from 144 to 4294967272. macoff=96
[  152.835022][ T8236] netlink: 'syz.0.609': attribute type 3 has an invalid length.
[  152.909499][ T8240] team0: No ports can be present during mode change
[  153.152523][ T8248] delete_channel: no stack
[  153.180739][ T8249] syzkaller1: entered promiscuous mode
[  153.188241][ T8249] syzkaller1: entered allmulticast mode
[  153.504651][ T8255] netlink: 28 bytes leftover after parsing attributes in process `syz.2.617'.
[  153.983431][ T8284] netlink: 152 bytes leftover after parsing attributes in process `syz.4.622'.
[  154.340749][ T8278] netlink: 92 bytes leftover after parsing attributes in process `syz.0.620'.
[  154.803024][ T8306] syzkaller0: entered promiscuous mode
[  154.817305][ T8306] syzkaller0: entered allmulticast mode
[  154.905498][ T8312] netlink: 36 bytes leftover after parsing attributes in process `syz.0.629'.
[  155.259670][ T8324] 0: reclassify loop, rule prio 0, protocol 800
[  155.274973][ T8324] netlink: 'syz.2.628': attribute type 4 has an invalid length.
[  155.296509][ T8324] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  155.478107][ T8330] __nla_validate_parse: 1 callbacks suppressed
[  155.478124][ T8330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.633'.
[  155.503358][ T8330] bridge_slave_1: left allmulticast mode
[  155.509086][ T8330] bridge_slave_1: left promiscuous mode
[  155.515165][ T8330] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.532006][ T8330] bridge_slave_0: left allmulticast mode
[  155.537753][ T8330] bridge_slave_0: left promiscuous mode
[  155.543531][ T8330] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.585850][ T8332] netlink: 'syz.1.632': attribute type 10 has an invalid length.
[  155.598318][ T8332] netlink: 40 bytes leftover after parsing attributes in process `syz.1.632'.
[  155.700032][ T8332] team0: Port device geneve0 added
[  155.739123][ T8334] bond2: option min_links: invalid value (18446744073709551612)
[  155.747153][ T8334] bond2: option min_links: allowed values 0 - 2147483647
[  155.780389][ T8334] bond2 (unregistering): Released all slaves
[  155.865512][ T8343] netlink: 67 bytes leftover after parsing attributes in process `syz.4.636'.
[  155.972090][ T8347] netlink: 16 bytes leftover after parsing attributes in process `syz.1.637'.
[  156.030299][ T8349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.638'.
[  156.299176][ T8361] netlink: 52 bytes leftover after parsing attributes in process `syz.1.641'.
[  156.346239][ T8363] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  156.377960][ T8363] syzkaller0: entered promiscuous mode
[  156.393445][ T8363] syzkaller0: entered allmulticast mode
[  156.676090][ T8363] tipc: Resetting bearer <eth:syzkaller0>
[  156.810157][ T8360] tipc: Resetting bearer <eth:syzkaller0>
[  156.842166][ T8360] tipc: Disabling bearer <eth:syzkaller0>
[  157.188476][ T8373] netlink: 32 bytes leftover after parsing attributes in process `syz.2.644'.
[  158.017513][ T8400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.652'.
[  158.273612][ T8402] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.301017][ T8402] syzkaller0: entered promiscuous mode
[  158.317173][ T8402] syzkaller0: entered allmulticast mode
[  158.342211][ T8402] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  158.438242][ T8402] tipc: Resetting bearer <eth:syzkaller0>
[  158.480786][ T8410] netlink: 44 bytes leftover after parsing attributes in process `syz.3.655'.
[  158.496057][ T8401] tipc: Resetting bearer <eth:syzkaller0>
[  158.562370][ T8401] tipc: Disabling bearer <eth:syzkaller0>
[  158.598770][ T8410] netlink: 44 bytes leftover after parsing attributes in process `syz.3.655'.
[  158.696663][ T8407] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  158.715537][ T8407] macvtap1: entered allmulticast mode
[  158.738552][ T8408] netlink: 'syz.0.654': attribute type 58 has an invalid length.
[  158.757109][ T8407] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  158.822412][ T8407] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  158.850889][ T8407] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  159.222868][ T8418] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.230768][ T8418] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.423545][ T8418] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.445731][ T8418] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.599502][ T8422] syzkaller0: entered promiscuous mode
[  159.607004][ T8422] syzkaller0: entered allmulticast mode
[  159.623103][   T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.632501][   T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.648208][   T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.662727][ T8427] syz.3.659 (8427) used greatest stack depth: 17832 bytes left
[  159.743487][   T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  160.352226][ T8456] block nbd0: not configured, cannot reconfigure
[  160.538606][ T8459] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  160.669347][ T8467] netlink: 'syz.3.669': attribute type 1 has an invalid length.
[  160.685503][ T8468] bond0: (slave bond_slave_0): Releasing backup interface
[  160.711000][ T8468] bond0: (slave bond_slave_1): Releasing backup interface
[  160.751192][ T8468] team0: Port device team_slave_0 removed
[  160.776721][ T8468] team0: Port device team_slave_1 removed
[  160.783403][ T8468] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  160.796835][ T8468] batman_adv: batadv0: Removing interface: batadv_slave_0
[  160.807905][ T8468] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  160.816077][ T8468] batman_adv: batadv0: Removing interface: batadv_slave_1
[  160.825100][ T8468] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  161.052044][ T5890] IPVS: starting estimator thread 0...
[  161.144238][ T8495] IPVS: using max 34 ests per chain, 81600 per kthread
[  161.503632][   T30] audit: type=1800 audit(1762371135.494:5): pid=8496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.672" name="cgroup.controllers" dev="tmpfs" ino=689 res=0 errno=0
[  162.055805][ T8519] __nla_validate_parse: 3 callbacks suppressed
[  162.055822][ T8519] netlink: 6 bytes leftover after parsing attributes in process `syz.2.680'.
[  162.100949][ T8532] syzkaller0: entered promiscuous mode
[  162.116815][ T8532] syzkaller0: entered allmulticast mode
[  162.144177][ T8530] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  162.157908][ T8521] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  162.187078][ T8536] netlink: 'syz.0.683': attribute type 1 has an invalid length.
[  162.206697][ T8535] netlink: 'syz.0.683': attribute type 1 has an invalid length.
[  162.210866][ T8536] netlink: 'syz.0.683': attribute type 2 has an invalid length.
[  162.239665][ T8521] tipc: Resetting bearer <eth:syzkaller0>
[  162.254145][ T8535] netlink: 'syz.0.683': attribute type 2 has an invalid length.
[  162.262567][ T8520] tipc: Resetting bearer <eth:syzkaller0>
[  162.271503][ T8505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  162.290743][ T8520] tipc: Disabling bearer <eth:syzkaller0>
[  162.491508][ T8542] IPv6: sit1: Disabled Multicast RS
[  162.507792][ T8542] netlink: 60 bytes leftover after parsing attributes in process `syz.0.685'.
[  162.584951][ T8547] netlink: 'syz.0.688': attribute type 10 has an invalid length.
[  162.597759][ T8547] veth0_virt_wifi: entered allmulticast mode
[  162.658831][ T8547] team0: Port device veth0_virt_wifi added
[  162.675049][ T8551] syz.2.689 (8551) used obsolete PPPIOCDETACH ioctl
[  162.733795][ T8556] netlink: 'syz.0.690': attribute type 1 has an invalid length.
[  162.884707][ T8564] netlink: 76 bytes leftover after parsing attributes in process `syz.0.692'.
[  162.999783][ T8568] syzkaller1: entered promiscuous mode
[  163.005601][ T8568] syzkaller1: entered allmulticast mode
[  163.140155][ T8573] netlink: 36 bytes leftover after parsing attributes in process `syz.0.695'.
[  163.315956][ T8579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  163.355823][ T8584] netlink: 'syz.4.700': attribute type 6 has an invalid length.
[  163.677534][ T8592] netlink: 820 bytes leftover after parsing attributes in process `syz.4.702'.
[  163.693798][ T8592] netlink: 820 bytes leftover after parsing attributes in process `syz.4.702'.
[  163.707492][ T8595] syzkaller0: entered promiscuous mode
[  163.712992][ T8595] syzkaller0: entered allmulticast mode
[  163.730206][ T8602] netlink: 'syz.1.704': attribute type 1 has an invalid length.
[  163.740608][ T8602] netlink: 224 bytes leftover after parsing attributes in process `syz.1.704'.
[  163.960584][ T8611] netlink: 240 bytes leftover after parsing attributes in process `syz.0.707'.
[  163.980575][ T8608] netlink: 76 bytes leftover after parsing attributes in process `syz.4.705'.
[  164.007858][ T8611] netlink: 'syz.0.707': attribute type 13 has an invalid length.
[  164.636628][ T8611] batman_adv: batadv0: Interface deactivated: macvlan2
[  164.726393][ T8623] macvtap1: entered promiscuous mode
[  164.740789][ T8623] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  164.757767][ T6160] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.804519][ T6160] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.836979][  T981] IPVS: starting estimator thread 0...
[  164.879086][  T981] IPVS: starting estimator thread 0...
[  164.909597][ T6160] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.943602][ T6160] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.944218][ T8652] IPVS: using max 26 ests per chain, 62400 per kthread
[  165.014664][ T8653] IPVS: using max 27 ests per chain, 64800 per kthread
[  165.042311][ T8658] Bluetooth: hci0: Opcode 0x080f failed: -22
[  165.218303][ T8669] wg1: entered promiscuous mode
[  165.223212][ T8669] wg1: entered allmulticast mode
[  165.300981][ T3599] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[  165.982140][ T8690] netlink: 'syz.0.724': attribute type 27 has an invalid length.
[  165.993744][ T8690] wg1: left promiscuous mode
[  165.998823][ T8690] wg1: left allmulticast mode
[  166.006824][ T8671] netlink: 76 bytes leftover after parsing attributes in process `syz.1.721'.
[  166.031581][ T8690] veth0_virt_wifi: left allmulticast mode
[  166.057916][ T8690] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  166.073131][ T8690] bridge1: left promiscuous mode
[  166.267465][ T8696] netlink: 'syz.0.727': attribute type 4 has an invalid length.
[  166.304462][ T8699] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode
[  166.530990][ T8701] netlink: 'syz.3.730': attribute type 2 has an invalid length.
[  167.054293][ T8730] nbd0: detected capacity change from 0 to 127
[  167.076949][ T5832] block nbd0: Receive control failed (result -104)
[  167.081140][ T5845] block nbd0: Send control failed (result -32)
[  167.096765][   T52] Bluetooth: hci0: command tx timeout
[  167.126926][ T5845] block nbd0: Request send failed, requeueing
[  167.153801][ T5845] block nbd0: Dead connection, failed to find a fallback
[  167.165959][ T1112] block nbd0: Dead connection, failed to find a fallback
[  167.183868][ T1112] block nbd0: shutting down sockets
[  167.191340][ T1112] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  167.201859][ T1112] Buffer I/O error on dev nbd0, logical block 1, async page read
[  167.234578][ T5845] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  167.245175][ T5845] Buffer I/O error on dev nbd0, logical block 2, async page read
[  167.253246][ T5845] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  167.262769][ T8750] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  167.262909][ T5845] Buffer I/O error on dev nbd0, logical block 3, async page read
[  167.281155][ T8750] bridge3: entered promiscuous mode
[  167.301131][ T8750] bridge3: entered allmulticast mode
[  167.322960][ T8750] team0: Port device bridge3 added
[  167.377764][ T8752] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  167.488162][ T8752] __nla_validate_parse: 5 callbacks suppressed
[  167.488181][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.748'.
[  167.508267][ T8752] netlink: 24 bytes leftover after parsing attributes in process `syz.1.748'.
[  167.731112][ T8765] xfrm1: entered allmulticast mode
[  167.745099][ T8765] bond0: Caught tx_queue_len zero misconfig
[  167.912500][ T8772] netlink: 60 bytes leftover after parsing attributes in process `syz.1.753'.
[  168.632842][ T8794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.758'.
[  168.737274][ T8794] bridge3: entered allmulticast mode
[  168.986782][ T8811] netlink: 60 bytes leftover after parsing attributes in process `syz.4.764'.
[  169.469404][ T8822] netlink: 'syz.0.767': attribute type 12 has an invalid length.
[  170.109503][ T8859] netlink: 68 bytes leftover after parsing attributes in process `syz.3.776'.
[  170.431879][ T8875] 8021q: adding VLAN 0 to HW filter on device bond0
[  170.440349][ T8875] bond0: (slave gre0): The slave device specified does not support setting the MAC address
[  170.460471][ T8875] bond0: (slave gre0): Error -95 calling set_mac_address
[  170.698661][ T8885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.787'.
[  170.924674][ T8899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.791'.
[  170.937935][ T8900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.791'.
[  171.562152][ T8919] team0: Caught tx_queue_len zero misconfig
[  171.706147][ T8923] netlink: 228 bytes leftover after parsing attributes in process `syz.4.800'.
[  172.551407][ T8952] Cannot find del_set index 3 as target
[  172.887677][ T8960] netlink: 80 bytes leftover after parsing attributes in process `syz.1.813'.
[  173.020658][ T8956] bond1: option ad_select: invalid value (34)
[  173.076305][ T8956] bond1 (unregistering): Released all slaves
[  173.401085][ T8970] xt_CT: No such helper "netbios-ns"
[  173.891308][ T9006] batadv_slave_0: entered promiscuous mode
[  173.911368][ T9004] batadv_slave_0: left promiscuous mode
[  174.078252][ T9016] netlink: 36 bytes leftover after parsing attributes in process `syz.0.828'.
[  174.118773][ T9015] 8021q: VLANs not supported on caif0
[  174.146955][ T9013] tap0: tun_chr_ioctl cmd 35108
[  174.386948][ T9010] bond1: option packets_per_slave: invalid value (1802723700)
[  174.396063][ T9010] bond1: option packets_per_slave: allowed values 0 - 65535
[  174.609186][ T9010] bond1 (unregistering): Released all slaves
[  174.954884][ T9050] netlink: 24 bytes leftover after parsing attributes in process `syz.2.835'.
[  175.120018][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.835'.
[  175.129244][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.835'.
[  175.236394][ T9069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.840'.
[  175.268155][ T9069] 8021q: adding VLAN 0 to HW filter on device bond3
[  175.350399][ T9076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.841'.
[  175.446709][ T9078] rdma_op ffff88804f2161f0 conn xmit_rdma 0000000000000000
[  175.654168][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  175.675691][ T9087] netlink: 84 bytes leftover after parsing attributes in process `syz.1.845'.
[  175.718582][ T9084] netlink: 16 bytes leftover after parsing attributes in process `syz.1.845'.
[  175.778235][ T9084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.845'.
[  176.205169][ T9099] netlink: 'syz.1.847': attribute type 13 has an invalid length.
[  176.244218][ T9099] netlink: 'syz.1.847': attribute type 17 has an invalid length.
[  176.513261][ T9104] openvswitch: netlink: Flow key attribute not present in set flow.
[  177.583626][ T9127] vlan3: entered allmulticast mode
[  177.592410][ T9127] macvtap0: entered allmulticast mode
[  177.817122][ T9129] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20000
[  177.903682][ T9143] syzkaller0: entered promiscuous mode
[  177.909466][ T9143] syzkaller0: entered allmulticast mode
[  178.047987][ T9157] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  178.100527][ T9162] __nla_validate_parse: 4 callbacks suppressed
[  178.100545][ T9162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.864'.
[  178.128951][ T9157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.864'.
[  178.160412][ T9163] netlink: 28 bytes leftover after parsing attributes in process `syz.0.863'.
[  178.160668][ T9157] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  178.176621][ T9157] IPv6: NLM_F_CREATE should be set when creating new route
[  178.202902][ T9163] netlink: 32 bytes leftover after parsing attributes in process `syz.0.863'.
[  178.252112][ T9157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.864'.
[  178.270262][ T9166] netlink: 132 bytes leftover after parsing attributes in process `syz.0.863'.
[  178.272694][ T9163] netlink: 28 bytes leftover after parsing attributes in process `syz.0.863'.
[  178.332690][ T9163] netlink: 32 bytes leftover after parsing attributes in process `syz.0.863'.
[  178.363635][ T9170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.865'.
[  178.621910][ T9181] tipc: Enabled bearer <eth:ipvlan1>, priority 10
[  178.650522][ T9181] geneve3: entered promiscuous mode
[  178.659316][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  178.670910][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  178.692364][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  178.722954][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  178.769729][ T9181] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.956904][ T9181] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.018875][ T9189] netlink: 40 bytes leftover after parsing attributes in process `syz.2.872'.
[  179.099281][ T9181] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.237625][ T9181] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.410208][ T9195] veth0: entered promiscuous mode
[  179.491401][   T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.554457][   T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.627680][   T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.714783][   T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.735975][ T5945] tipc: Node number set to 1196546533
[  180.086539][ T9193] veth0: left promiscuous mode
[  181.444250][ T9244] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  181.452613][ T9244] syzkaller0: entered promiscuous mode
[  181.458793][ T9244] syzkaller0: entered allmulticast mode
[  181.466983][ T9245] veth0: entered promiscuous mode
[  181.500843][ T9243] tipc: Resetting bearer <eth:syzkaller0>
[  181.636499][ T9243] tipc: Disabling bearer <eth:syzkaller0>
[  181.653366][ T9246] 8021q: VLANs not supported on caif0
[  181.674447][ T9248] veth0: left promiscuous mode
[  182.171193][ T9265] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0
[  182.471774][ T9271] bond1: option mode: unable to set because the bond device has slaves
[  182.700388][ T9293] veth0: entered promiscuous mode
[  182.858488][ T9293] netlink: 'syz.1.901': attribute type 16 has an invalid length.
[  182.875392][ T9293] netlink: 'syz.1.901': attribute type 17 has an invalid length.
[  182.891988][ T3599] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  182.933552][ T9293] gretap0: refused to change device tx_queue_len
[  182.941953][ T9293] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  182.984264][ T3599] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  183.001707][ T3599] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  183.103467][ T3599] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  183.521805][ T9293] veth0: left promiscuous mode
[  185.468196][ T9396] __nla_validate_parse: 4 callbacks suppressed
[  185.468213][ T9396] netlink: 88 bytes leftover after parsing attributes in process `syz.3.936'.
[  186.565357][ T9441] 8021q: VLANs not supported on caif0
[  186.778400][ T9446] netlink: 40 bytes leftover after parsing attributes in process `syz.2.950'.
[  186.992830][ T9452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.952'.
[  187.013013][ T9454] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  187.122946][ T9454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.953'.
[  187.421978][ T9466] netlink: 40 bytes leftover after parsing attributes in process `syz.0.956'.
[  187.492064][ T9467] netlink: 'syz.2.957': attribute type 14 has an invalid length.
[  187.788036][ T9484] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  187.828389][ T9484] syzkaller0: entered promiscuous mode
[  187.840669][ T9484] syzkaller0: entered allmulticast mode
[  187.922136][ T9484] tipc: Resetting bearer <eth:syzkaller0>
[  187.931922][ T9481] tipc: Resetting bearer <eth:syzkaller0>
[  187.977488][ T9481] tipc: Disabling bearer <eth:syzkaller0>
[  188.002247][ T9492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.966'.
[  188.014806][ T9492] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.966'.
[  188.170848][ T9497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.969'.
[  188.216838][ T9501] netlink: 'syz.2.968': attribute type 11 has an invalid length.
[  188.234606][ T9501] netlink: 224 bytes leftover after parsing attributes in process `syz.2.968'.
[  188.250482][ T9497] batman_adv: batadv0: Removing interface: batadv_slave_0
[  188.266306][ T9497] batman_adv: batadv0: Removing interface: batadv_slave_1
[  188.472408][ T9506] netlink: 'syz.2.972': attribute type 10 has an invalid length.
[  188.565523][ T9506] team0: Device veth0_vlan is up. Set it down before adding it as a team port
[  188.625223][ T9511] vlan0: entered promiscuous mode
[  188.653340][ T9511] vlan0: entered allmulticast mode
[  188.726560][ T9511] hsr_slave_1: entered allmulticast mode
[  188.805455][ T9516] netlink: 52 bytes leftover after parsing attributes in process `syz.1.975'.
[  188.830963][ T9516] netlink: 'syz.1.975': attribute type 1 has an invalid length.
[  188.846486][ T9515] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.981862][ T9515] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.049728][ T9533] xt_CT: You must specify a L4 protocol and not use inversions on it
[  189.121945][ T9515] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.203013][ T9515] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.367320][   T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  189.424536][   T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  189.445769][   T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  189.478701][   T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  189.528180][ T9557] rdma_op ffff888031d489f0 conn xmit_rdma 0000000000000000
[  189.686983][ T9570] netlink: 'syz.1.990': attribute type 3 has an invalid length.
[  189.784648][ T9576] netlink: 'syz.1.993': attribute type 6 has an invalid length.
[  190.004503][ T9582] gtp0: entered promiscuous mode
[  190.009500][ T9582] gtp0: entered allmulticast mode
[  190.345221][ T9607] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  190.661514][ T9617] __nla_validate_parse: 8 callbacks suppressed
[  190.661531][ T9617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1003'.
[  190.718664][ T9619] netlink: 71 bytes leftover after parsing attributes in process `syz.3.1004'.
[  191.122111][ T9638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1008'.
[  191.146569][ T9638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1008'.
[  191.176373][ T5827] Bluetooth: hci2: command 0x0406 tx timeout
[  191.183193][ T5833] Bluetooth: hci3: command 0x0406 tx timeout
[  191.183202][ T5837] Bluetooth: hci1: command 0x0406 tx timeout
[  191.196976][ T9643] gtp0: entered promiscuous mode
[  191.254593][ T9643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1009'.
[  191.308966][ T9652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1009'.
[  191.383880][ T9638] "syz.2.1008" (9638) uses obsolete ecb(arc4) skcipher
[  191.857054][ T9673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1015'.
[  191.920694][ T9679] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1016'.
[  191.980669][ T9679] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  192.088753][ T9682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1017'.
[  192.099016][ T9682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1017'.
[  192.466737][ T9696] Cannot find add_set index 1 as target
[  192.504482][ T9694] syzkaller0: entered promiscuous mode
[  192.510113][ T9694] syzkaller0: entered allmulticast mode
[  192.633566][ T9694] netlink: 'syz.2.1020': attribute type 5 has an invalid length.
[  193.940243][ T9719] veth4: entered allmulticast mode
[  194.012529][ T9721] veth4: entered allmulticast mode
[  194.123534][ T9735] netlink: 'syz.4.1033': attribute type 1 has an invalid length.
[  194.222294][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  194.272341][ T9743] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  194.342180][ T9743] syzkaller0: entered promiscuous mode
[  194.354407][ T9743] syzkaller0: entered allmulticast mode
[  194.437758][ T9743] tipc: Resetting bearer <eth:syzkaller0>
[  194.453897][ T9741] tipc: Resetting bearer <eth:syzkaller0>
[  194.487407][ T9741] tipc: Disabling bearer <eth:syzkaller0>
[  194.692253][ T9764] netlink: 'syz.4.1038': attribute type 5 has an invalid length.
[  194.749299][ T9768] bridge5: entered promiscuous mode
[  194.758655][ T9768] bridge5: entered allmulticast mode
[  194.846014][ T9764] ip6erspan0: entered promiscuous mode
[  195.109029][ T9782] veth0_to_bridge: entered promiscuous mode
[  195.151973][ T9785] veth0_to_bridge: left promiscuous mode
[  195.222192][ T9781] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  195.236866][ T9791] syzkaller0: entered promiscuous mode
[  195.246348][ T9791] syzkaller0: entered allmulticast mode
[  195.281733][ T9794] netlink: 'syz.2.1047': attribute type 15 has an invalid length.
[  195.349500][ T9781] tipc: Resetting bearer <eth:syzkaller0>
[  195.377674][ T9779] tipc: Resetting bearer <eth:syzkaller0>
[  195.405492][ T9779] tipc: Disabling bearer <eth:syzkaller0>
[  195.692546][ T9808] netlink: 'syz.1.1051': attribute type 3 has an invalid length.
[  195.710875][ T9808] __nla_validate_parse: 10 callbacks suppressed
[  195.710893][ T9808] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1051'.
[  195.826348][ T9813] dummy0: entered allmulticast mode
[  196.045256][ T9819] FAULT_INJECTION: forcing a failure.
[  196.045256][ T9819] name failslab, interval 1, probability 0, space 0, times 1
[  196.058623][ T9819] CPU: 1 UID: 0 PID: 9819 Comm: syz.0.1053 Not tainted syzkaller #0 PREEMPT(full) 
[  196.058646][ T9819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  196.058656][ T9819] Call Trace:
[  196.058663][ T9819]  <TASK>
[  196.058671][ T9819]  dump_stack_lvl+0x189/0x250
[  196.058710][ T9819]  ? __pfx____ratelimit+0x10/0x10
[  196.058731][ T9819]  ? __pfx_dump_stack_lvl+0x10/0x10
[  196.058754][ T9819]  ? __pfx__printk+0x10/0x10
[  196.058776][ T9819]  ? __pfx___might_resched+0x10/0x10
[  196.058794][ T9819]  ? fs_reclaim_acquire+0x7d/0x100
[  196.058824][ T9819]  should_fail_ex+0x414/0x560
[  196.058854][ T9819]  should_failslab+0xa8/0x100
[  196.058874][ T9819]  kmem_cache_alloc_node_noprof+0x77/0x710
[  196.058897][ T9819]  ? __alloc_skb+0x112/0x2d0
[  196.058912][ T9819]  ? netlink_autobind+0xdb/0x300
[  196.058935][ T9819]  __alloc_skb+0x112/0x2d0
[  196.058955][ T9819]  netlink_sendmsg+0x5c6/0xb30
[  196.058983][ T9819]  ? __pfx_netlink_sendmsg+0x10/0x10
[  196.059004][ T9819]  ? aa_sock_msg_perm+0xf1/0x1d0
[  196.059030][ T9819]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  196.059047][ T9819]  ? __pfx_netlink_sendmsg+0x10/0x10
[  196.059066][ T9819]  __sock_sendmsg+0x21c/0x270
[  196.059092][ T9819]  ____sys_sendmsg+0x505/0x830
[  196.059117][ T9819]  ? __pfx_____sys_sendmsg+0x10/0x10
[  196.059145][ T9819]  ? import_iovec+0x74/0xa0
[  196.059169][ T9819]  ___sys_sendmsg+0x21f/0x2a0
[  196.059190][ T9819]  ? __pfx____sys_sendmsg+0x10/0x10
[  196.059238][ T9819]  ? __fget_files+0x2a/0x420
[  196.059254][ T9819]  ? __fget_files+0x3a0/0x420
[  196.059280][ T9819]  __x64_sys_sendmsg+0x19b/0x260
[  196.059301][ T9819]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  196.059330][ T9819]  ? __pfx_ksys_write+0x10/0x10
[  196.059357][ T9819]  ? do_syscall_64+0xbe/0xfa0
[  196.059402][ T9819]  do_syscall_64+0xfa/0xfa0
[  196.059423][ T9819]  ? lockdep_hardirqs_on+0x9c/0x150
[  196.059445][ T9819]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.059462][ T9819]  ? clear_bhb_loop+0x60/0xb0
[  196.059482][ T9819]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.059498][ T9819] RIP: 0033:0x7f199df8f6c9
[  196.059528][ T9819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  196.059543][ T9819] RSP: 002b:00007f199ed49038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  196.059569][ T9819] RAX: ffffffffffffffda RBX: 00007f199e1e6090 RCX: 00007f199df8f6c9
[  196.059582][ T9819] RDX: 0000000004040084 RSI: 0000200000004bc0 RDI: 0000000000000003
[  196.059594][ T9819] RBP: 00007f199ed49090 R08: 0000000000000000 R09: 0000000000000000
[  196.059605][ T9819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  196.059615][ T9819] R13: 00007f199e1e6128 R14: 00007f199e1e6090 R15: 00007ffe8cea3918
[  196.059646][ T9819]  </TASK>
[  196.570289][ T9824] syzkaller0: entered promiscuous mode
[  196.576208][ T9824] syzkaller0: entered allmulticast mode
[  197.424342][ T1112] block nbd0: Possible stuck request ffff888024e25080: control (read@0,1024B). Runtime 30 seconds
[  197.512710][ T9834] bridge_slave_0: left promiscuous mode
[  197.520027][ T9834] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.529141][ T9834] bridge_slave_1: left allmulticast mode
[  197.535025][ T9834] bridge_slave_1: left promiscuous mode
[  197.540820][ T9834] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.552741][ T9834] bond0: (slave bond_slave_0): Releasing backup interface
[  197.562926][ T9834] bond0: (slave bond_slave_1): Releasing backup interface
[  197.572994][ T9834] team0: Port device team_slave_0 removed
[  197.580369][ T9834] team0: Port device team_slave_1 removed
[  197.586561][ T9834] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  210.893314][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  210.901346][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  210.909210][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  210.919109][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  210.926864][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  211.152603][ T9838] chnl_net:caif_netlink_parms(): no params data found
[  211.220726][ T9838] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.228250][ T9838] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.235894][ T9838] bridge_slave_0: entered allmulticast mode
[  211.245977][ T9838] bridge_slave_0: entered promiscuous mode
[  211.265722][ T9838] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.272889][ T9838] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.304762][ T9838] bridge_slave_1: entered allmulticast mode
[  211.313294][ T9838] bridge_slave_1: entered promiscuous mode
[  211.404969][ T9838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  211.438184][ T9838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  211.519425][ T9838] team0: Port device team_slave_0 added
[  211.537891][ T9838] team0: Port device team_slave_1 added
[  211.619370][ T9838] batman_adv: batadv0: Adding interface: batadv_slave_0
[  211.628477][ T9838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  211.656369][ T5832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  211.667519][ T5832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  211.670438][ T9838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  211.679945][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  211.689286][ T9838] batman_adv: batadv0: Adding interface: batadv_slave_1
[  211.693400][ T5833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  211.699919][ T9838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  211.712591][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  211.740400][ T5833] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  211.747656][ T9838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  211.750247][ T5841] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  211.767192][ T5833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  211.776287][ T5841] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  211.783931][ T5841] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  211.826257][ T9838] hsr_slave_0: entered promiscuous mode
[  211.832594][ T9838] hsr_slave_1: entered promiscuous mode
[  211.838947][ T9838] debugfs: 'hsr0' already exists in 'hsr'
[  211.844789][ T9838] Cannot create hsr debugfs directory
[  212.287788][ T9848] chnl_net:caif_netlink_parms(): no params data found
[  212.448020][ T9848] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.456292][ T9848] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.463563][ T9848] bridge_slave_0: entered allmulticast mode
[  212.471589][ T9848] bridge_slave_0: entered promiscuous mode
[  212.502848][ T9848] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.510563][ T9848] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.518313][ T9848] bridge_slave_1: entered allmulticast mode
[  212.527824][ T9848] bridge_slave_1: entered promiscuous mode
[  212.635769][ T9848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  212.648964][ T9848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  212.704511][ T5832] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  212.712969][ T5832] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  212.721637][ T5832] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  212.725584][ T9848] team0: Port device team_slave_0 added
[  212.734953][ T9850] chnl_net:caif_netlink_parms(): no params data found
[  212.735330][ T5832] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  212.750070][ T9848] team0: Port device team_slave_1 added
[  212.751015][ T5832] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  212.818757][ T9848] batman_adv: batadv0: Adding interface: batadv_slave_0
[  212.826215][ T9848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  212.852568][ T9848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  212.865473][ T9848] batman_adv: batadv0: Adding interface: batadv_slave_1
[  212.872421][ T9848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  212.898963][ T9848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  212.958892][ T9850] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.966194][ T9850] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.973393][ T9850] bridge_slave_0: entered allmulticast mode
[  212.980749][ T9850] bridge_slave_0: entered promiscuous mode
[  212.993170][ T9850] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.000407][ T9850] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.007862][ T9850] bridge_slave_1: entered allmulticast mode
[  213.014979][ T5841] Bluetooth: hci5: command tx timeout
[  213.022095][ T9850] bridge_slave_1: entered promiscuous mode
[  213.107693][ T9848] hsr_slave_0: entered promiscuous mode
[  213.116986][ T9848] hsr_slave_1: entered promiscuous mode
[  213.123480][ T9848] debugfs: 'hsr0' already exists in 'hsr'
[  213.130178][ T9848] Cannot create hsr debugfs directory
[  213.139140][ T9850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  213.171210][ T9850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  213.258805][ T9850] team0: Port device team_slave_0 added
[  213.283911][ T9850] team0: Port device team_slave_1 added
[  213.343242][ T9850] batman_adv: batadv0: Adding interface: batadv_slave_0
[  213.350633][ T9850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  213.378936][ T9850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  213.391739][ T9850] batman_adv: batadv0: Adding interface: batadv_slave_1
[  213.399062][ T9850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  213.425753][ T9850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  213.626828][ T9850] hsr_slave_0: entered promiscuous mode
[  213.633612][ T9850] hsr_slave_1: entered promiscuous mode
[  213.640675][ T9850] debugfs: 'hsr0' already exists in 'hsr'
[  213.647171][ T9850] Cannot create hsr debugfs directory
[  213.681987][   T52] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  213.701963][   T52] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  213.710551][   T52] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  213.719495][   T52] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  213.728142][   T52] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  213.805275][ T9862] chnl_net:caif_netlink_parms(): no params data found
[  213.815696][ T5841] Bluetooth: hci7: command tx timeout
[  213.822823][   T52] Bluetooth: hci6: command tx timeout
[  213.986388][ T9862] bridge0: port 1(bridge_slave_0) entered blocking state
[  213.993552][ T9862] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.002453][ T9862] bridge_slave_0: entered allmulticast mode
[  214.011874][ T9862] bridge_slave_0: entered promiscuous mode
[  214.027594][ T9862] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.035265][ T9862] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.042522][ T9862] bridge_slave_1: entered allmulticast mode
[  214.050879][ T9862] bridge_slave_1: entered promiscuous mode
[  214.119092][ T9862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  214.138720][ T9862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  214.207268][ T9862] team0: Port device team_slave_0 added
[  214.230810][ T9862] team0: Port device team_slave_1 added
[  214.300385][ T9862] batman_adv: batadv0: Adding interface: batadv_slave_0
[  214.307990][ T9862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  214.334812][ T9862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  214.351695][ T9862] batman_adv: batadv0: Adding interface: batadv_slave_1
[  214.358725][ T9862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  214.385137][ T9862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  214.437370][ T9862] hsr_slave_0: entered promiscuous mode
[  214.443664][ T9862] hsr_slave_1: entered promiscuous mode
[  214.450043][ T9862] debugfs: 'hsr0' already exists in 'hsr'
[  214.456048][ T9862] Cannot create hsr debugfs directory
[  214.613225][ T9870] chnl_net:caif_netlink_parms(): no params data found
[  214.743455][ T9870] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.751042][ T9870] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.758885][ T9870] bridge_slave_0: entered allmulticast mode
[  214.765964][ T9870] bridge_slave_0: entered promiscuous mode
[  214.774422][   T52] Bluetooth: hci8: command tx timeout
[  214.784638][ T9870] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.791781][ T9870] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.799450][ T9870] bridge_slave_1: entered allmulticast mode
[  214.806674][ T9870] bridge_slave_1: entered promiscuous mode
[  214.853100][ T9870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  214.865122][ T9870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  214.897163][ T9870] team0: Port device team_slave_0 added
[  214.905654][ T9870] team0: Port device team_slave_1 added
[  214.930828][ T9870] batman_adv: batadv0: Adding interface: batadv_slave_0
[  214.938197][ T9870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  214.964951][ T9870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  214.976922][ T9870] batman_adv: batadv0: Adding interface: batadv_slave_1
[  214.983862][ T9870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  215.010072][ T9870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  215.051716][ T9870] hsr_slave_0: entered promiscuous mode
[  215.058322][ T9870] hsr_slave_1: entered promiscuous mode
[  215.064509][ T9870] debugfs: 'hsr0' already exists in 'hsr'
[  215.070229][ T9870] Cannot create hsr debugfs directory
[  215.094074][   T52] Bluetooth: hci5: command tx timeout
[  215.814511][   T52] Bluetooth: hci9: command tx timeout
[  215.894263][   T52] Bluetooth: hci6: command tx timeout
[  215.894317][ T5841] Bluetooth: hci7: command tx timeout
[  216.854166][ T5841] Bluetooth: hci8: command tx timeout
[  217.174911][ T5841] Bluetooth: hci5: command tx timeout
[  217.894119][ T5841] Bluetooth: hci9: command tx timeout
[  217.974296][ T5841] Bluetooth: hci6: command tx timeout
[  217.974306][   T52] Bluetooth: hci7: command tx timeout
[  218.934180][ T5841] Bluetooth: hci8: command tx timeout
[  219.254294][ T5841] Bluetooth: hci5: command tx timeout
[  219.974233][ T5841] Bluetooth: hci9: command tx timeout
[  220.054250][ T5841] Bluetooth: hci7: command tx timeout
[  220.064161][ T5841] Bluetooth: hci6: command tx timeout
[  221.024196][ T5841] Bluetooth: hci8: command tx timeout
[  222.054124][ T5841] Bluetooth: hci9: command tx timeout
[  227.504563][ T1112] block nbd0: Possible stuck request ffff888024e25080: control (read@0,1024B). Runtime 60 seconds
[  240.295569][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  255.657931][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  257.575798][ T1112] block nbd0: Possible stuck request ffff888024e25080: control (read@0,1024B). Runtime 90 seconds
[  270.957510][   T52] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  270.965634][   T52] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  270.973560][   T52] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  270.981732][   T52] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  270.990368][   T52] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  271.235259][ T9883] chnl_net:caif_netlink_parms(): no params data found
[  271.301282][ T9883] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.308675][ T9883] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.315937][ T9883] bridge_slave_0: entered allmulticast mode
[  271.322905][ T9883] bridge_slave_0: entered promiscuous mode
[  271.330960][ T9883] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.338391][ T9883] bridge0: port 2(bridge_slave_1) entered disabled state
[  271.345708][ T9883] bridge_slave_1: entered allmulticast mode
[  271.352690][ T9883] bridge_slave_1: entered promiscuous mode
[  271.382665][ T9883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  271.395091][ T9883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  271.425201][ T9883] team0: Port device team_slave_0 added
[  271.432861][ T9883] team0: Port device team_slave_1 added
[  271.458424][ T9883] batman_adv: batadv0: Adding interface: batadv_slave_0
[  271.465629][ T9883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  271.491899][ T9883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  271.505218][ T9883] batman_adv: batadv0: Adding interface: batadv_slave_1
[  271.512166][ T9883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  271.538371][ T9883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  271.578166][ T9883] hsr_slave_0: entered promiscuous mode
[  271.584812][ T9883] hsr_slave_1: entered promiscuous mode
[  271.591107][ T9883] debugfs: 'hsr0' already exists in 'hsr'
[  271.597072][ T9883] Cannot create hsr debugfs directory
[  272.121541][   T52] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  272.131861][   T52] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  272.140125][   T52] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  272.148317][   T52] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  272.156608][   T52] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  272.179031][ T5841] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  272.188912][ T5841] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  272.197740][ T5841] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  272.207980][ T5841] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  272.216104][ T5841] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  272.530322][ T9893] chnl_net:caif_netlink_parms(): no params data found
[  272.653312][ T9893] bridge0: port 1(bridge_slave_0) entered blocking state
[  272.660803][ T9893] bridge0: port 1(bridge_slave_0) entered disabled state
[  272.668616][ T9893] bridge_slave_0: entered allmulticast mode
[  272.676821][ T9893] bridge_slave_0: entered promiscuous mode
[  272.684729][ T9893] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.691852][ T9893] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.700315][ T9893] bridge_slave_1: entered allmulticast mode
[  272.708088][ T9893] bridge_slave_1: entered promiscuous mode
[  272.746774][ T9893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  272.764580][ T9893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  272.821369][ T9893] team0: Port device team_slave_0 added
[  272.850570][ T9893] team0: Port device team_slave_1 added
[  272.929658][ T9895] chnl_net:caif_netlink_parms(): no params data found
[  272.947428][ T9893] batman_adv: batadv0: Adding interface: batadv_slave_0
[  272.955234][ T9893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  272.982785][ T9893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  273.014305][ T5841] Bluetooth: hci10: command tx timeout
[  273.016136][ T9893] batman_adv: batadv0: Adding interface: batadv_slave_1
[  273.027283][ T9893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  273.055231][ T9893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  273.136478][   T52] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  273.146186][   T52] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  273.161089][   T52] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  273.170609][   T52] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  273.179359][   T52] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  273.193812][ T9893] hsr_slave_0: entered promiscuous mode
[  273.202342][ T9893] hsr_slave_1: entered promiscuous mode
[  273.208795][ T9893] debugfs: 'hsr0' already exists in 'hsr'
[  273.214886][ T9893] Cannot create hsr debugfs directory
[  273.232017][ T9895] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.239652][ T9895] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.246996][ T9895] bridge_slave_0: entered allmulticast mode
[  273.255035][ T9895] bridge_slave_0: entered promiscuous mode
[  273.272167][ T9895] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.280733][ T9895] bridge0: port 2(bridge_slave_1) entered disabled state
[  273.288778][ T9895] bridge_slave_1: entered allmulticast mode
[  273.295980][ T9895] bridge_slave_1: entered promiscuous mode
[  273.370478][ T9895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  273.403861][ T9895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  273.501313][ T9895] team0: Port device team_slave_0 added
[  273.530924][ T9895] team0: Port device team_slave_1 added
[  273.581158][ T9895] batman_adv: batadv0: Adding interface: batadv_slave_0
[  273.588271][ T9895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  273.614981][ T9895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  273.644974][ T9895] batman_adv: batadv0: Adding interface: batadv_slave_1
[  273.651948][ T9895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  273.678497][ T9895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  273.779863][ T9895] hsr_slave_0: entered promiscuous mode
[  273.787017][ T9895] hsr_slave_1: entered promiscuous mode
[  273.793480][ T9895] debugfs: 'hsr0' already exists in 'hsr'
[  273.799405][ T9895] Cannot create hsr debugfs directory
[  273.990119][ T9910] chnl_net:caif_netlink_parms(): no params data found
[  274.118086][ T9910] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.125380][ T9910] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.132793][ T9910] bridge_slave_0: entered allmulticast mode
[  274.140896][ T9910] bridge_slave_0: entered promiscuous mode
[  274.148976][ T9910] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.156277][ T9910] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.163515][ T9910] bridge_slave_1: entered allmulticast mode
[  274.171628][ T9910] bridge_slave_1: entered promiscuous mode
[  274.210599][ T9910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  274.214736][   T52] Bluetooth: hci11: command tx timeout
[  274.223428][ T9910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  274.266687][ T9910] team0: Port device team_slave_0 added
[  274.275796][ T9910] team0: Port device team_slave_1 added
[  274.294268][   T52] Bluetooth: hci12: command tx timeout
[  274.343669][ T9910] batman_adv: batadv0: Adding interface: batadv_slave_0
[  274.357546][ T9910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  274.385781][ T9910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  274.399296][ T9910] batman_adv: batadv0: Adding interface: batadv_slave_1
[  274.407198][ T9910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  274.435716][ T9910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  274.519014][ T9910] hsr_slave_0: entered promiscuous mode
[  274.526113][ T9910] hsr_slave_1: entered promiscuous mode
[  274.532677][ T9910] debugfs: 'hsr0' already exists in 'hsr'
[  274.540687][ T9910] Cannot create hsr debugfs directory
[  274.583455][ T5841] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  274.593058][ T5841] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  274.601198][ T5841] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  274.609557][ T5841] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  274.619168][ T5841] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  274.999881][ T9919] chnl_net:caif_netlink_parms(): no params data found
[  275.071078][ T9919] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.079522][ T9919] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.087567][ T9919] bridge_slave_0: entered allmulticast mode
[  275.095493][   T52] Bluetooth: hci10: command tx timeout
[  275.095680][ T9919] bridge_slave_0: entered promiscuous mode
[  275.111961][ T9919] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.119481][ T9919] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.126860][ T9919] bridge_slave_1: entered allmulticast mode
[  275.133898][ T9919] bridge_slave_1: entered promiscuous mode
[  275.171545][ T9919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  275.193037][ T9919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  275.239926][ T9919] team0: Port device team_slave_0 added
[  275.254594][   T52] Bluetooth: hci13: command tx timeout
[  275.256608][ T9919] team0: Port device team_slave_1 added
[  275.300937][ T9919] batman_adv: batadv0: Adding interface: batadv_slave_0
[  275.308401][ T9919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  275.334967][ T9919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  275.354560][ T9919] batman_adv: batadv0: Adding interface: batadv_slave_1
[  275.361503][ T9919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  275.387619][ T9919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  275.430001][ T9919] hsr_slave_0: entered promiscuous mode
[  275.436455][ T9919] hsr_slave_1: entered promiscuous mode
[  275.442673][ T9919] debugfs: 'hsr0' already exists in 'hsr'
[  275.448665][ T9919] Cannot create hsr debugfs directory
[  276.294139][   T52] Bluetooth: hci11: command tx timeout
[  276.374443][   T52] Bluetooth: hci12: command tx timeout
[  276.694180][   T52] Bluetooth: hci14: command tx timeout
[  277.174336][   T52] Bluetooth: hci10: command tx timeout
[  277.334145][   T52] Bluetooth: hci13: command tx timeout
[  278.374128][   T52] Bluetooth: hci11: command tx timeout
[  278.454212][   T52] Bluetooth: hci12: command tx timeout
[  278.774201][   T52] Bluetooth: hci14: command tx timeout
[  279.254267][   T52] Bluetooth: hci10: command tx timeout
[  279.414186][   T52] Bluetooth: hci13: command tx timeout
[  280.454114][   T52] Bluetooth: hci11: command tx timeout
[  280.534274][   T52] Bluetooth: hci12: command tx timeout
[  280.854143][   T52] Bluetooth: hci14: command tx timeout
[  281.494185][   T52] Bluetooth: hci13: command tx timeout
[  282.934238][   T52] Bluetooth: hci14: command tx timeout
[  287.656692][ T1112] block nbd0: Possible stuck request ffff888024e25080: control (read@0,1024B). Runtime 120 seconds
[  317.099073][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  317.739278][ T1112] block nbd0: Possible stuck request ffff888024e25080: control (read@0,1024B). Runtime 150 seconds
[  319.175759][   T52] Bluetooth: hci4: command 0x0406 tx timeout
[  331.024232][   T52] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  331.032352][   T52] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  331.040903][   T52] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  331.050475][   T52] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  331.058228][   T52] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  331.292487][ T9928] chnl_net:caif_netlink_parms(): no params data found
[  331.360623][ T9928] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.368398][ T9928] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.376244][ T9928] bridge_slave_0: entered allmulticast mode
[  331.383290][ T9928] bridge_slave_0: entered promiscuous mode
[  331.391381][ T9928] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.398702][ T9928] bridge0: port 2(bridge_slave_1) entered disabled state
[  331.406699][ T9928] bridge_slave_1: entered allmulticast mode
[  331.414186][ T9928] bridge_slave_1: entered promiscuous mode
[  331.443653][ T9928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  331.455702][ T9928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  331.487558][ T9928] team0: Port device team_slave_0 added
[  331.495289][ T9928] team0: Port device team_slave_1 added
[  331.523356][ T9928] batman_adv: batadv0: Adding interface: batadv_slave_0
[  331.530713][ T9928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  331.557245][ T9928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  331.569504][ T9928] batman_adv: batadv0: Adding interface: batadv_slave_1
[  331.577096][ T9928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  331.603422][ T9928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  331.644340][ T9928] hsr_slave_0: entered promiscuous mode
[  331.650704][ T9928] hsr_slave_1: entered promiscuous mode
[  331.657500][ T9928] debugfs: 'hsr0' already exists in 'hsr'
[  331.663217][ T9928] Cannot create hsr debugfs directory
[  332.192960][   T52] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  332.202955][   T52] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  332.211362][   T52] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  332.220333][   T52] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  332.229153][   T52] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  332.245313][ T5832] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  332.256498][ T5832] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  332.267733][ T5832] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  332.275890][ T5832] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  332.283652][ T5832] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  332.620993][ T9938] chnl_net:caif_netlink_parms(): no params data found
[  332.747554][ T9938] bridge0: port 1(bridge_slave_0) entered blocking state
[  332.754818][ T9938] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.762193][ T9938] bridge_slave_0: entered allmulticast mode
[  332.769380][ T9938] bridge_slave_0: entered promiscuous mode
[  332.778199][ T9938] bridge0: port 2(bridge_slave_1) entered blocking state
[  332.785824][ T9938] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.793066][ T9938] bridge_slave_1: entered allmulticast mode
[  332.800273][ T9938] bridge_slave_1: entered promiscuous mode
[  332.850623][ T9938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  332.867865][ T9938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  332.968702][ T9938] team0: Port device team_slave_0 added
[  332.981376][ T9938] team0: Port device team_slave_1 added
[  333.016038][ T9940] chnl_net:caif_netlink_parms(): no params data found
[  333.067487][ T9938] batman_adv: batadv0: Adding interface: batadv_slave_0
[  333.074807][ T9938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  333.101246][ T5827] Bluetooth: hci15: command tx timeout
[  333.107025][ T9938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  333.135740][ T9938] batman_adv: batadv0: Adding interface: batadv_slave_1
[  333.142746][ T9938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  333.169344][ T9938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  333.245813][ T5833] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  333.255508][ T5833] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  333.263620][ T5833] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  333.278403][ T5833] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  333.287305][ T5833] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  333.314749][ T9940] bridge0: port 1(bridge_slave_0) entered blocking state
[  333.321939][ T9940] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.329469][ T9940] bridge_slave_0: entered allmulticast mode
[  333.337798][ T9940] bridge_slave_0: entered promiscuous mode
[  333.351450][ T9938] hsr_slave_0: entered promiscuous mode
[  333.358104][ T9938] hsr_slave_1: entered promiscuous mode
[  333.364322][ T9938] debugfs: 'hsr0' already exists in 'hsr'
[  333.370035][ T9938] Cannot create hsr debugfs directory
[  333.398221][ T9940] bridge0: port 2(bridge_slave_1) entered blocking state
[  333.405675][ T9940] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.412891][ T9940] bridge_slave_1: entered allmulticast mode
[  333.421109][ T9940] bridge_slave_1: entered promiscuous mode
[  333.481819][ T9940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  333.509493][ T9940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  333.573838][ T9940] team0: Port device team_slave_0 added
[  333.601135][ T9940] team0: Port device team_slave_1 added
[  333.690194][ T9940] batman_adv: batadv0: Adding interface: batadv_slave_0
[  333.697585][ T9940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  333.723871][ T9940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  333.753537][ T9940] batman_adv: batadv0: Adding interface: batadv_slave_1
[  333.760832][ T9940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  333.786931][ T9940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  333.881335][ T9940] hsr_slave_0: entered promiscuous mode
[  333.888295][ T9940] hsr_slave_1: entered promiscuous mode
[  333.895127][ T9940] debugfs: 'hsr0' already exists in 'hsr'
[  333.900862][ T9940] Cannot create hsr debugfs directory
[  334.112958][ T9955] chnl_net:caif_netlink_parms(): no params data found
[  334.231190][ T9955] bridge0: port 1(bridge_slave_0) entered blocking state
[  334.238682][ T9955] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.246618][ T9955] bridge_slave_0: entered allmulticast mode
[  334.253722][ T9955] bridge_slave_0: entered promiscuous mode
[  334.268417][ T9955] bridge0: port 2(bridge_slave_1) entered blocking state
[  334.275713][ T9955] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.282946][ T9955] bridge_slave_1: entered allmulticast mode
[  334.291030][ T9955] bridge_slave_1: entered promiscuous mode
[  334.295068][ T5827] Bluetooth: hci16: command tx timeout
[  334.332095][ T9955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  334.345113][ T9955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  334.374446][ T5827] Bluetooth: hci17: command tx timeout
[  334.409089][ T9955] team0: Port device team_slave_0 added
[  334.419624][ T9955] team0: Port device team_slave_1 added
[  334.486216][ T9955] batman_adv: batadv0: Adding interface: batadv_slave_0
[  334.493209][ T9955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  334.521132][ T9955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  334.536324][ T5833] Bluetooth: hci7: command 0x0406 tx timeout
[  334.537045][ T5837] Bluetooth: hci6: command 0x0406 tx timeout
[  334.542396][ T5827] Bluetooth: hci5: command 0x0406 tx timeout
[  334.569721][ T9955] batman_adv: batadv0: Adding interface: batadv_slave_1
[  334.584448][ T9955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  334.610992][ T9955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  334.715818][ T5841] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1
[  334.718557][ T9955] hsr_slave_0: entered promiscuous mode
[  334.724838][ T5841] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9
[  334.730163][ T9955] hsr_slave_1: entered promiscuous mode
[  334.737656][ T5841] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9
[  334.743463][ T9955] debugfs: 'hsr0' already exists in 'hsr'
[  334.751661][ T5841] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4
[  334.755344][ T9955] Cannot create hsr debugfs directory
[  334.762773][ T5841] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2
[  335.174106][ T5841] Bluetooth: hci15: command tx timeout
[  335.213382][ T9964] chnl_net:caif_netlink_parms(): no params data found
[  335.312109][ T9964] bridge0: port 1(bridge_slave_0) entered blocking state
[  335.319558][ T9964] bridge0: port 1(bridge_slave_0) entered disabled state
[  335.327305][ T9964] bridge_slave_0: entered allmulticast mode
[  335.334233][ T5841] Bluetooth: hci18: command tx timeout
[  335.334608][ T9964] bridge_slave_0: entered promiscuous mode
[  335.348879][ T9964] bridge0: port 2(bridge_slave_1) entered blocking state
[  335.356241][ T9964] bridge0: port 2(bridge_slave_1) entered disabled state
[  335.363483][ T9964] bridge_slave_1: entered allmulticast mode
[  335.370674][ T9964] bridge_slave_1: entered promiscuous mode
[  335.421029][ T9964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  335.434681][ T9964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  335.473962][ T9964] team0: Port device team_slave_0 added
[  335.482302][ T9964] team0: Port device team_slave_1 added
[  335.513552][ T9964] batman_adv: batadv0: Adding interface: batadv_slave_0
[  335.520946][ T9964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  335.547447][ T9964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  335.560051][ T9964] batman_adv: batadv0: Adding interface: batadv_slave_1
[  335.567138][ T9964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  335.593385][ T9964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  335.634222][ T9964] hsr_slave_0: entered promiscuous mode
[  335.640611][ T9964] hsr_slave_1: entered promiscuous mode
[  335.646886][ T9964] debugfs: 'hsr0' already exists in 'hsr'
[  335.652602][ T9964] Cannot create hsr debugfs directory
[  336.374211][ T5841] Bluetooth: hci16: command tx timeout
[  336.454190][ T5841] Bluetooth: hci17: command tx timeout
[  336.854207][ T5841] Bluetooth: hci19: command tx timeout
[  337.254347][ T5841] Bluetooth: hci15: command tx timeout
[  337.414158][ T5841] Bluetooth: hci18: command tx timeout
[  338.454226][ T5841] Bluetooth: hci16: command tx timeout
[  338.534253][ T5841] Bluetooth: hci17: command tx timeout
[  338.934126][ T5841] Bluetooth: hci19: command tx timeout
[  339.334122][ T5841] Bluetooth: hci15: command tx timeout
[  339.494412][ T5841] Bluetooth: hci18: command tx timeout
[  339.656638][ T5841] Bluetooth: hci9: command 0x0406 tx timeout
[  339.656648][ T5827] Bluetooth: hci8: command 0x0406 tx timeout
[  340.534433][ T5832] Bluetooth: hci16: command tx timeout
[  340.614254][ T5832] Bluetooth: hci17: command tx timeout
[  341.014187][ T5832] Bluetooth: hci19: command tx timeout
[  341.574087][ T5832] Bluetooth: hci18: command tx timeout
[  343.094109][ T5832] Bluetooth: hci19: command tx timeout
[  347.819288][ T1112] block nbd0: Possible stuck request ffff888024e25080: control (read@0,1024B). Runtime 180 seconds
[  350.374623][   T31] INFO: task syz.1.1051:9808 blocked for more than 143 seconds.
[  350.382351][   T31]       Not tainted syzkaller #0
[  350.387338][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  350.396053][   T31] task:syz.1.1051      state:D stack:24824 pid:9808  tgid:9807  ppid:5828   task_flags:0x480140 flags:0x00080002
[  350.408215][   T31] Call Trace:
[  350.411497][   T31]  <TASK>
[  350.414453][   T31]  __schedule+0x1798/0x4cc0
[  350.418957][   T31]  ? __lock_acquire+0xab9/0xd20
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  350.423798][   T31]  ? __lock_acquire+0xab9/0xd20
[  350.428800][   T31]  ? __pfx___schedule+0x10/0x10
[  350.433680][   T31]  ? schedule+0x91/0x360
[  350.438579][   T31]  schedule+0x165/0x360
[  350.442763][   T31]  blk_mq_freeze_queue_wait+0xf4/0x170
[  350.448322][   T31]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[  350.483962][   T31]  ? __pfx_autoremove_wake_function+0x10/0x10
[  350.490095][   T31]  ? percpu_ref_kill_and_confirm+0xa3/0x130
[  350.523386][   T31]  queue_limits_commit_update_frozen+0x5d/0x3e0
[  350.529819][   T31]  nbd_set_size+0x47e/0x6a0
[  350.534513][   T31]  ? __pfx_nbd_set_size+0x10/0x10
[  350.539561][   T31]  ? nla_memcpy+0x5b/0xc0
[  350.544504][   T31]  nbd_genl_size_set+0x2eb/0x3c0
[  350.549457][   T31]  ? __pfx_nbd_genl_size_set+0x10/0x10
[  350.555118][   T31]  ? __pfx_nbd_get_config_unlocked+0x10/0x10
[  350.561103][   T31]  ? bpf_lsm_capable+0x9/0x20
[  350.565886][   T31]  ? security_capable+0x7e/0x2e0
[  350.570839][   T31]  ? radix_tree_lookup+0x240/0x290
[  350.576075][   T31]  nbd_genl_reconfigure+0x414/0x1a50
[  350.581355][   T31]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  350.587262][   T31]  ? rcu_is_watching+0x15/0xb0
[  350.592024][   T31]  ? __nla_parse+0x40/0x60
[  350.596507][   T31]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  350.602846][   T31]  genl_family_rcv_msg_doit+0x215/0x300
[  350.608768][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  350.615686][   T31]  ? stack_trace_save+0x9c/0xe0
[  350.620572][   T31]  genl_rcv_msg+0x60e/0x790
[  350.625117][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  350.630132][   T31]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  350.635912][   T31]  netlink_rcv_skb+0x208/0x470
[  350.640680][   T31]  ? __lock_acquire+0xab9/0xd20
[  350.645763][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  350.650780][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  350.656146][   T31]  ? down_read+0x1ad/0x2e0
[  350.660561][   T31]  genl_rcv+0x28/0x40
[  350.664553][   T31]  netlink_unicast+0x82f/0x9e0
[  350.669312][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  350.674895][   T31]  ? netlink_sendmsg+0x642/0xb30
[  350.679843][   T31]  ? skb_put+0x11b/0x210
[  350.684109][   T31]  netlink_sendmsg+0x805/0xb30
[  350.688865][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  350.694509][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[  350.699466][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  350.704915][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  350.710184][   T31]  __sock_sendmsg+0x21c/0x270
[  350.714913][   T31]  ____sys_sendmsg+0x505/0x830
[  350.719686][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  350.725025][   T31]  ? import_iovec+0x74/0xa0
[  350.729539][   T31]  ___sys_sendmsg+0x21f/0x2a0
[  350.734402][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  350.739626][   T31]  ? __fget_files+0x2a/0x420
[  350.744260][   T31]  ? __fget_files+0x3a0/0x420
[  350.748940][   T31]  __x64_sys_sendmsg+0x19b/0x260
[  350.753864][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  350.759366][   T31]  ? do_syscall_64+0xbe/0xfa0
[  350.764247][   T31]  do_syscall_64+0xfa/0xfa0
[  350.768744][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  350.774063][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.780144][   T31]  ? clear_bhb_loop+0x60/0xb0
[  350.784865][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.790765][   T31] RIP: 0033:0x7f4e78f8f6c9
[  350.795343][   T31] RSP: 002b:00007f4e79d5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  350.803751][   T31] RAX: ffffffffffffffda RBX: 00007f4e791e5fa0 RCX: 00007f4e78f8f6c9
[  350.811746][   T31] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000007
[  350.819749][   T31] RBP: 00007f4e79011f91 R08: 0000000000000000 R09: 0000000000000000
[  350.827907][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  350.835925][   T31] R13: 00007f4e791e6038 R14: 00007f4e791e5fa0 R15: 00007ffc9d6686d8
[  350.843934][   T31]  </TASK>
[  350.846969][   T31] INFO: task syz.4.1052:9814 blocked for more than 143 seconds.
[  350.855056][   T31]       Not tainted syzkaller #0
[  350.859999][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  350.868725][   T31] task:syz.4.1052      state:D stack:27872 pid:9814  tgid:9812  ppid:5839   task_flags:0x400140 flags:0x00080002
[  350.880655][   T31] Call Trace:
[  350.884200][   T31]  <TASK>
[  350.887126][   T31]  __schedule+0x1798/0x4cc0
[  350.891624][   T31]  ? __lock_acquire+0xab9/0xd20
[  350.896527][   T31]  ? __lock_acquire+0xab9/0xd20
[  350.901388][   T31]  ? __pfx___schedule+0x10/0x10
[  350.906310][   T31]  ? schedule+0x91/0x360
[  350.910562][   T31]  schedule+0x165/0x360
[  350.914951][   T31]  schedule_preempt_disabled+0x13/0x30
[  350.920397][   T31]  __mutex_lock+0x7e6/0x1350
[  350.925013][   T31]  ? __mutex_lock+0x5bb/0x1350
[  350.929769][   T31]  ? genl_rcv_msg+0x10d/0x790
[  350.934518][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  350.939568][   T31]  ? stack_trace_save+0x9c/0xe0
[  350.944619][   T31]  ? radix_tree_lookup+0x240/0x290
[  350.949725][   T31]  genl_rcv_msg+0x10d/0x790
[  350.954251][   T31]  ? __lock_acquire+0xab9/0xd20
[  350.959088][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  350.964139][   T31]  netlink_rcv_skb+0x208/0x470
[  350.968889][   T31]  ? __lock_acquire+0xab9/0xd20
[  350.973745][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  350.978936][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  350.984257][   T31]  ? down_read+0x1ad/0x2e0
[  350.988657][   T31]  genl_rcv+0x28/0x40
[  350.992619][   T31]  netlink_unicast+0x82f/0x9e0
[  350.997428][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  351.002702][   T31]  ? netlink_sendmsg+0x642/0xb30
[  351.007783][   T31]  ? skb_put+0x11b/0x210
[  351.012016][   T31]  netlink_sendmsg+0x805/0xb30
[  351.017055][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  351.022474][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[  351.027694][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  351.032997][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  351.038324][   T31]  __sock_sendmsg+0x21c/0x270
[  351.043027][   T31]  __sys_sendto+0x3bd/0x520
[  351.047879][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  351.052911][   T31]  ? count_memcg_event_mm+0x21/0x260
[  351.058515][   T31]  ? exc_page_fault+0x82/0x100
[  351.063284][   T31]  ? do_user_addr_fault+0xc85/0x1380
[  351.068789][   T31]  __x64_sys_sendto+0xde/0x100
[  351.073545][   T31]  do_syscall_64+0xfa/0xfa0
[  351.078104][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  351.083301][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.089492][   T31]  ? clear_bhb_loop+0x60/0xb0
[  351.094756][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.100662][   T31] RIP: 0033:0x7f9fa119155c
[  351.105102][   T31] RSP: 002b:00007f9fa1f7bec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  351.113501][   T31] RAX: ffffffffffffffda RBX: 00007f9fa1f7bfc0 RCX: 00007f9fa119155c
[  351.121504][   T31] RDX: 0000000000000020 RSI: 00007f9fa1f7c010 RDI: 0000000000000008
[  351.129737][   T31] RBP: 0000000000000000 R08: 00007f9fa1f7bf14 R09: 000000000000000c
[  351.137845][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008
[  351.145910][   T31] R13: 00007f9fa1f7bf68 R14: 00007f9fa1f7c010 R15: 0000000000000000
[  351.154153][   T31]  </TASK>
[  351.157234][   T31] INFO: task syz.0.1053:9818 blocked for more than 144 seconds.
[  351.169839][   T31]       Not tainted syzkaller #0
[  351.175058][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  351.183725][   T31] task:syz.0.1053      state:D stack:28712 pid:9818  tgid:9817  ppid:5824   task_flags:0x400040 flags:0x00080002
[  351.195748][   T31] Call Trace:
[  351.199019][   T31]  <TASK>
[  351.201933][   T31]  __schedule+0x1798/0x4cc0
[  351.206478][   T31]  ? __lock_acquire+0xab9/0xd20
[  351.211316][   T31]  ? __lock_acquire+0xab9/0xd20
[  351.216352][   T31]  ? __pfx___schedule+0x10/0x10
[  351.221373][   T31]  ? schedule+0x91/0x360
[  351.225714][   T31]  schedule+0x165/0x360
[  351.229880][   T31]  schedule_preempt_disabled+0x13/0x30
[  351.235438][   T31]  __mutex_lock+0x7e6/0x1350
[  351.240020][   T31]  ? __mutex_lock+0x5bb/0x1350
[  351.244913][   T31]  ? genl_rcv_msg+0x10d/0x790
[  351.249589][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  351.254929][   T31]  ? stack_trace_save+0x9c/0xe0
[  351.259791][   T31]  ? radix_tree_lookup+0x240/0x290
[  351.264943][   T31]  genl_rcv_msg+0x10d/0x790
[  351.269436][   T31]  ? __lock_acquire+0xab9/0xd20
[  351.274663][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  351.279720][   T31]  netlink_rcv_skb+0x208/0x470
[  351.284548][   T31]  ? __lock_acquire+0xab9/0xd20
[  351.289397][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  351.294519][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  351.299799][   T31]  ? down_read+0x1ad/0x2e0
[  351.304228][   T31]  genl_rcv+0x28/0x40
[  351.308199][   T31]  netlink_unicast+0x82f/0x9e0
[  351.312950][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  351.318312][   T31]  ? netlink_sendmsg+0x642/0xb30
[  351.323232][   T31]  ? skb_put+0x11b/0x210
[  351.327504][   T31]  netlink_sendmsg+0x805/0xb30
[  351.332257][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  351.337848][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[  351.342807][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  351.348196][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  351.353484][   T31]  __sock_sendmsg+0x21c/0x270
[  351.358321][   T31]  __sys_sendto+0x3bd/0x520
[  351.362811][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  351.367852][   T31]  ? count_memcg_event_mm+0x21/0x260
[  351.373134][   T31]  ? exc_page_fault+0x82/0x100
[  351.377992][   T31]  ? do_user_addr_fault+0xc85/0x1380
[  351.383262][   T31]  __x64_sys_sendto+0xde/0x100
[  351.388218][   T31]  do_syscall_64+0xfa/0xfa0
[  351.392707][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  351.397996][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.404157][   T31]  ? clear_bhb_loop+0x60/0xb0
[  351.408847][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.414948][   T31] RIP: 0033:0x7f199df9155c
[  351.419367][   T31] RSP: 002b:00007f199ed68ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  351.427805][   T31] RAX: ffffffffffffffda RBX: 00007f199ed68fc0 RCX: 00007f199df9155c
[  351.435897][   T31] RDX: 0000000000000020 RSI: 00007f199ed69010 RDI: 0000000000000004
[  351.443936][   T31] RBP: 0000000000000000 R08: 00007f199ed68f14 R09: 000000000000000c
[  351.451912][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004
[  351.459980][   T31] R13: 00007f199ed68f68 R14: 00007f199ed69010 R15: 0000000000000000
[  351.468165][   T31]  </TASK>
[  351.471225][   T31] INFO: task syz.2.1055:9823 blocked for more than 144 seconds.
[  351.479021][   T31]       Not tainted syzkaller #0
[  351.484027][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  351.492695][   T31] task:syz.2.1055      state:D stack:26120 pid:9823  tgid:9822  ppid:5831   task_flags:0x400140 flags:0x00080002
[  351.504993][   T31] Call Trace:
[  351.508274][   T31]  <TASK>
[  351.511194][   T31]  __schedule+0x1798/0x4cc0
[  351.515923][   T31]  ? __lock_acquire+0xab9/0xd20
[  351.520786][   T31]  ? __lock_acquire+0xab9/0xd20
[  351.525748][   T31]  ? __pfx___schedule+0x10/0x10
[  351.530596][   T31]  ? schedule+0x91/0x360
[  351.534860][   T31]  schedule+0x165/0x360
[  351.539005][   T31]  schedule_preempt_disabled+0x13/0x30
[  351.544550][   T31]  __mutex_lock+0x7e6/0x1350
[  351.549134][   T31]  ? __mutex_lock+0x5bb/0x1350
[  351.553960][   T31]  ? genl_rcv_msg+0x10d/0x790
[  351.558642][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  351.563662][   T31]  ? __pfx___dev_queue_xmit+0x10/0x10
[  351.569163][   T31]  ? radix_tree_lookup+0x240/0x290
[  351.574541][   T31]  genl_rcv_msg+0x10d/0x790
[  351.579062][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  351.584210][   T31]  ? ref_tracker_free+0x63a/0x7d0
[  351.589246][   T31]  ? __asan_memcpy+0x40/0x70
[  351.593828][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  351.599289][   T31]  netlink_rcv_skb+0x208/0x470
[  351.604201][   T31]  ? __lock_acquire+0xab9/0xd20
[  351.609063][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  351.614313][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  351.619594][   T31]  ? down_read+0x1ad/0x2e0
[  351.624164][   T31]  genl_rcv+0x28/0x40
[  351.628164][   T31]  netlink_unicast+0x82f/0x9e0
[  351.632956][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  351.638303][   T31]  ? netlink_sendmsg+0x642/0xb30
[  351.643229][   T31]  ? skb_put+0x11b/0x210
[  351.647552][   T31]  netlink_sendmsg+0x805/0xb30
[  351.652307][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  351.657946][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[  351.662900][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  351.668301][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  351.673574][   T31]  __sock_sendmsg+0x21c/0x270
[  351.678292][   T31]  __sys_sendto+0x3bd/0x520
[  351.682781][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  351.687942][   T31]  ? count_memcg_event_mm+0x21/0x260
[  351.693227][   T31]  ? exc_page_fault+0x82/0x100
[  351.698046][   T31]  ? do_user_addr_fault+0xc85/0x1380
[  351.703317][   T31]  __x64_sys_sendto+0xde/0x100
[  351.708186][   T31]  do_syscall_64+0xfa/0xfa0
[  351.712681][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  351.717902][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.724329][   T31]  ? clear_bhb_loop+0x60/0xb0
[  351.729015][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.735144][   T31] RIP: 0033:0x7feb4059155c
[  351.739570][   T31] RSP: 002b:00007feb41438ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  351.748124][   T31] RAX: ffffffffffffffda RBX: 00007feb41438fc0 RCX: 00007feb4059155c
[  351.756194][   T31] RDX: 0000000000000020 RSI: 00007feb41439010 RDI: 0000000000000004
[  351.764320][   T31] RBP: 0000000000000000 R08: 00007feb41438f14 R09: 000000000000000c
[  351.772298][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004
[  351.780377][   T31] R13: 00007feb41438f68 R14: 00007feb41439010 R15: 0000000000000000
[  351.788463][   T31]  </TASK>
[  351.791492][   T31] INFO: task syz.3.1058:9836 blocked for more than 144 seconds.
[  351.799298][   T31]       Not tainted syzkaller #0
[  351.804277][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  351.812922][   T31] task:syz.3.1058      state:D stack:28712 pid:9836  tgid:9833  ppid:5829   task_flags:0x400040 flags:0x00080002
[  351.825218][   T31] Call Trace:
[  351.828509][   T31]  <TASK>
[  351.831432][   T31]  __schedule+0x1798/0x4cc0
[  351.836127][   T31]  ? __lock_acquire+0xab9/0xd20
[  351.840974][   T31]  ? __lock_acquire+0xab9/0xd20
[  351.845899][   T31]  ? __pfx___schedule+0x10/0x10
[  351.850745][   T31]  ? schedule+0x91/0x360
[  351.855021][   T31]  schedule+0x165/0x360
[  351.859168][   T31]  schedule_preempt_disabled+0x13/0x30
[  351.864787][   T31]  __mutex_lock+0x7e6/0x1350
[  351.869393][   T31]  ? __mutex_lock+0x5bb/0x1350
[  351.874190][   T31]  ? genl_rcv_msg+0x10d/0x790
[  351.878853][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  351.883864][   T31]  ? stack_trace_save+0x9c/0xe0
[  351.888897][   T31]  ? radix_tree_lookup+0x240/0x290
[  351.896270][   T31]  genl_rcv_msg+0x10d/0x790
[  351.900798][   T31]  ? __lock_acquire+0xab9/0xd20
[  351.906107][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  351.911167][   T31]  netlink_rcv_skb+0x208/0x470
[  351.916279][   T31]  ? __lock_acquire+0xab9/0xd20
[  351.921140][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  351.926244][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  351.931533][   T31]  ? down_read+0x1ad/0x2e0
[  351.936031][   T31]  genl_rcv+0x28/0x40
[  351.940008][   T31]  netlink_unicast+0x82f/0x9e0
[  351.945074][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  351.950372][   T31]  ? netlink_sendmsg+0x642/0xb30
[  351.955325][   T31]  ? skb_put+0x11b/0x210
[  351.959554][   T31]  netlink_sendmsg+0x805/0xb30
[  351.964472][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  351.969761][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[  351.974888][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  351.980180][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  351.985577][   T31]  __sock_sendmsg+0x21c/0x270
[  351.990249][   T31]  __sys_sendto+0x3bd/0x520
[  351.994874][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  351.999900][   T31]  ? count_memcg_event_mm+0x21/0x260
[  352.005764][   T31]  ? exc_page_fault+0x82/0x100
[  352.010553][   T31]  ? do_user_addr_fault+0xc85/0x1380
[  352.015972][   T31]  __x64_sys_sendto+0xde/0x100
[  352.020744][   T31]  do_syscall_64+0xfa/0xfa0
[  352.025414][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  352.030627][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.036941][   T31]  ? clear_bhb_loop+0x60/0xb0
[  352.041627][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.047618][   T31] RIP: 0033:0x7f0c0ef9155c
[  352.052039][   T31] RSP: 002b:00007f0c0feb8ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  352.060973][   T31] RAX: ffffffffffffffda RBX: 00007f0c0feb8fc0 RCX: 00007f0c0ef9155c
[  352.069063][   T31] RDX: 0000000000000020 RSI: 00007f0c0feb9010 RDI: 000000000000000b
[  352.077224][   T31] RBP: 0000000000000000 R08: 00007f0c0feb8f14 R09: 000000000000000c
[  352.085493][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000b
[  352.093470][   T31] R13: 00007f0c0feb8f68 R14: 00007f0c0feb9010 R15: 0000000000000000
[  352.101758][   T31]  </TASK>
[  352.104968][   T31] 
[  352.104968][   T31] Showing all locks held in the system:
[  352.112687][   T31] 1 lock held by khungtaskd/31:
[  352.118062][   T31]  #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  352.128180][   T31] 2 locks held by getty/5589:
[  352.132851][   T31]  #0: ffff88814ceac0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  352.142791][   T31]  #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  352.152987][   T31] 1 lock held by udevd/5845:
[  352.157731][   T31]  #0: ffff888024cfa358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  352.167100][   T31] 6 locks held by syz.1.1051/9808:
[  352.172202][   T31]  #0: ffffffff8f3314f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  352.180492][   T31]  #1: ffffffff8f331308 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  352.189748][   T31]  #2: ffff888024cf1a70 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x375/0x1a50
[  352.200193][   T31]  #3: ffff888142f05f58 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0
[  352.209661][   T31]  #4: ffff888142f058f8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0
[  352.222291][   T31]  #5: ffff888142f05930 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0
[  352.234878][   T31] 2 locks held by syz.4.1052/9814:
[  352.239984][   T31]  #0: ffffffff8f3314f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  352.248473][   T31]  #1: ffffffff8f331308 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  352.257515][   T31] 2 locks held by syz.0.1053/9818:
[  352.262627][   T31]  #0: ffffffff8f3314f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  352.270865][   T31]  #1: ffffffff8f331308 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  352.280005][   T31] 2 locks held by syz.2.1055/9823:
[  352.285149][   T31]  #0: ffffffff8f3314f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  352.293313][   T31]  #1: ffffffff8f331308 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  352.302579][   T31] 2 locks held by syz.3.1058/9836:
[  352.307893][   T31]  #0: ffffffff8f3314f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  352.316133][   T31]  #1: ffffffff8f331308 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  352.325128][   T31] 2 locks held by syz-executor/9838:
[  352.330391][   T31]  #0: ffffffff8f3314f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  352.338730][   T31]  #1: ffffffff8f331308 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  352.347729][   T31] 2 locks held by syz-executor/9848:
[  352.352993][   T31]  #0: ffffffff8f3314f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  352.361225][   T31]  #1: ffffffff8f331308 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  352.370407][   T31] 2 locks held by syz-executor/9850:
[  352.376107][   T31]  #0: ffffffff8f3314f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  352.384358][   T31]  #1: ffffffff8f331308 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  352.393358][   T31] 2 locks held by syz-executor/9862:
[  352.398818][   T31]  #0: ffffffff8f3314f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  352.407026][   T31]  #1: ffffffff8f331308 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  352.416085][   T31] 2 locks held by syz-executor/9870:
[  352.421353][   T31]  #0: ffffffff8f3314f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  352.429696][   T31]  #1: ffffffff8f331308 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  352.438700][   T31] 2 locks held by syz-executor/9883:
[  352.443999][   T31]  #0: ffffffff8f3314f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  352.452285][   T31]  #1: ffffffff8f331308 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  352.461724][   T31] 2 locks held by syz-executor/9893:
[  352.467050][   T31]  #0: ffffffff8f3314f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  352.475295][   T31]  #1: ffffffff8f331308 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  352.484447][   T31] 2 locks held by syz-executor/9895:
[  352.489723][   T31]  #0: ffffffff8f3314f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  352.497927][   T31]  #1: ffffffff8f331308 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  352.506962][   T31] 2 locks held by syz-executor/9910:
[  352.512224][   T31]  #0: ffffffff8f3314f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  352.520570][   T31]  #1: ffffffff8f331308 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  352.529619][   T31] 2 locks held by syz-executor/9919:
[  352.535077][   T31]  #0: ffffffff8f3314f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  352.543291][   T31]  #1: ffffffff8f331308 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  352.552421][   T31] 2 locks held by syz-executor/9928:
[  352.557761][   T31]  #0: ffffffff8f3314f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  352.566005][   T31]  #1: ffffffff8f331308 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  352.575262][   T31] 2 locks held by syz-executor/9938:
[  352.580534][   T31]  #0: ffffffff8f3314f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  352.588727][   T31]  #1: ffffffff8f331308 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  352.597740][   T31] 2 locks held by syz-executor/9940:
[  352.603003][   T31]  #0: ffffffff8f3314f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  352.611352][   T31]  #1: ffffffff8f331308 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  352.620409][   T31] 2 locks held by syz-executor/9955:
[  352.625727][   T31]  #0: ffffffff8f3314f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  352.633926][   T31]  #1: ffffffff8f331308 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  352.642905][   T31] 2 locks held by syz-executor/9964:
[  352.648485][   T31]  #0: ffffffff8f3314f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  352.656788][   T31]  #1: ffffffff8f331308 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  352.665836][   T31] 
[  352.668157][   T31] =============================================
[  352.668157][   T31] 
[  352.676726][   T31] NMI backtrace for cpu 1
[  352.676740][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  352.676752][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  352.676759][   T31] Call Trace:
[  352.676764][   T31]  <TASK>
[  352.676768][   T31]  dump_stack_lvl+0x189/0x250
[  352.676788][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  352.676801][   T31]  ? __pfx__printk+0x10/0x10
[  352.676817][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  352.676830][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  352.676842][   T31]  ? __pfx__printk+0x10/0x10
[  352.676853][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  352.676870][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  352.676882][   T31]  watchdog+0xf60/0xfa0
[  352.676895][   T31]  ? watchdog+0x1e2/0xfa0
[  352.676907][   T31]  kthread+0x711/0x8a0
[  352.676922][   T31]  ? __pfx_watchdog+0x10/0x10
[  352.676931][   T31]  ? __pfx_kthread+0x10/0x10
[  352.676944][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  352.676957][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  352.676968][   T31]  ? __pfx_kthread+0x10/0x10
[  352.676981][   T31]  ret_from_fork+0x4bc/0x870
[  352.676992][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  352.677005][   T31]  ? __switch_to_asm+0x39/0x70
[  352.677013][   T31]  ? __switch_to_asm+0x33/0x70
[  352.677022][   T31]  ? __pfx_kthread+0x10/0x10
[  352.677036][   T31]  ret_from_fork_asm+0x1a/0x30
[  352.677052][   T31]  </TASK>
[  352.677061][   T31] Sending NMI from CPU 1 to CPUs 0:
[  352.822659][    C0] NMI backtrace for cpu 0
[  352.822676][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  352.822694][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  352.822703][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  352.822728][    C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 e1 21 00 f3 0f 1e fa fb f4 <e9> c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  352.822742][    C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6
[  352.822757][    C0] RAX: 6d51aca299840d00 RBX: ffffffff81967be7 RCX: 6d51aca299840d00
[  352.822770][    C0] RDX: 0000000000000001 RSI: ffffffff8d70da3a RDI: ffffffff8bbf05e0
[  352.822782][    C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb
[  352.822794][    C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7cd770
[  352.822806][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40
[  352.822817][    C0] FS:  0000000000000000(0000) GS:ffff88812613d000(0000) knlGS:0000000000000000
[  352.822830][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  352.822841][    C0] CR2: 000056335a4ee000 CR3: 000000000dd38000 CR4: 00000000003526f0
[  352.822856][    C0] Call Trace:
[  352.822863][    C0]  <TASK>
[  352.822870][    C0]  default_idle+0x13/0x20
[  352.822885][    C0]  default_idle_call+0x73/0xb0
[  352.822900][    C0]  do_idle+0x1e7/0x510
[  352.822920][    C0]  ? __pfx_do_idle+0x10/0x10
[  352.822942][    C0]  cpu_startup_entry+0x44/0x60
[  352.822959][    C0]  rest_init+0x2de/0x300
[  352.822975][    C0]  start_kernel+0x3ae/0x410
[  352.822998][    C0]  x86_64_start_reservations+0x24/0x30
[  352.823016][    C0]  x86_64_start_kernel+0x143/0x1c0
[  352.823033][    C0]  common_startup_64+0x13e/0x147
[  352.823061][    C0]  </TASK>