last executing test programs:

18.269030321s ago: executing program 2 (id=4866):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @private=0xa010101}, 0xc)
r5 = socket(0x10, 0x803, 0x4)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000380)={@multicast2, @local, 0x1, 0x2, [@local, @loopback]}, 0x18)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}}}, 0x24}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) (async)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) (async)
socket$inet(0x2, 0x3, 0x2) (async)
setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @private=0xa010101}, 0xc) (async)
socket(0x10, 0x803, 0x4) (async)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) (async)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async)
setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000380)={@multicast2, @local, 0x1, 0x2, [@local, @loopback]}, 0x18) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}}}, 0x24}}, 0x0) (async)

17.916307577s ago: executing program 1 (id=4873):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r1 = socket(0x2, 0x80805, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000810000108411b75b9d700000002dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="490002000000000014002b80080003000300000008000100", @ANYRES32=r3, @ANYBLOB="08001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r4=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000200)={r4}, &(0x7f0000000340)=0x8)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) (async)
setsockopt$inet6_udp_encap(r6, 0x11, 0x68, &(0x7f0000000000)=0x5, 0x4) (async)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x34, r7, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x60c5}, 0x80)
r9 = socket$nl_crypto(0x10, 0x3, 0x15)
getsockopt$IP_VS_SO_GET_TIMEOUT(r9, 0x0, 0x486, 0x0, 0x0) (async)
bind$bt_l2cap(r5, &(0x7f0000000980), 0xe) (async)
setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, 0x4)
socket(0x1, 0x801, 0x5) (async)
r10 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001800090400000000000000000a000000000000000000000008001e80"], 0x2c}}, 0x11)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r11, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async)
r12 = socket$nl_sock_diag(0x10, 0x3, 0x4)
getsockopt$netlink(r12, 0x10e, 0x6, &(0x7f0000000300)=""/206, &(0x7f0000000240)=0xfffffffffffffe2e) (async)
getsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000000080), 0x10)

17.799934954s ago: executing program 2 (id=4875):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) (async)
close(0x3)

17.694053247s ago: executing program 1 (id=4878):
socket$kcm(0xa, 0x3, 0x87) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, 0x0, 0x0)
r2 = socket$kcm(0x2, 0xa, 0x2) (async)
pselect6(0x40, &(0x7f0000000040)={0x7fffffffa, 0x0, 0x103, 0xfffefffffffffffb, 0x4, 0x1, 0x2880040000000009, 0x2}, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000080)={'erspan0\x00', <r4=>0x0, 0x10, 0x7800, 0x5, 0x9, {{0x2c, 0x4, 0x1, 0x10, 0xb0, 0x65, 0x0, 0x8, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x3a}, {[@end, @timestamp_prespec={0x44, 0x2c, 0x99, 0x3, 0x2, [{@remote}, {@loopback}, {@loopback, 0x8}, {@local, 0x7}, {@private=0xa010101, 0x6}]}, @lsrr={0x83, 0x1f, 0x6e, [@local, @broadcast, @remote, @multicast2, @multicast2, @private=0xa010101, @remote]}, @generic={0x89, 0xb, "41da3f2d79098e3a40"}, @ssrr={0x89, 0xf, 0xe6, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x2e}, @multicast2]}, @rr={0x7, 0x1f, 0xc1, [@remote, @private=0xa010100, @remote, @remote, @rand_addr=0x64010101, @loopback, @broadcast]}, @noop, @rr={0x7, 0x13, 0x48, [@multicast2, @dev={0xac, 0x14, 0x14, 0x35}, @empty, @multicast1]}]}}}}})
ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000240)={@local, 0x27, r4}) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)

17.686273651s ago: executing program 3 (id=4879):
syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x2a, 0x65, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xff, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x7}}}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x140f, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x11, 0x45, 'ib_multicast\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x200000c0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="000000fe0000000071101a00000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYBLOB='z'], 0x1c}}, 0x0)

17.628235786s ago: executing program 2 (id=4880):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x0, "0002000000753904030405a024f0dd00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a14a1d8c6900"}}}}}}}, 0x0)
sendmsg$key(r1, 0x0, 0x800)
close(0x3)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'veth1_to_bridge\x00', 0x20})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000040)={@empty, @local, @void, {@canfd={0xd, {{}, 0x1b, 0x2, 0x0, 0x0, "0203068e06dfecc4c558041cc69766976fe97869b714b23598c12a81f165f2be4c0cb7f19c03bd12c41204d99f5fe551fea8c656e7a0b6e4f6836e4d6a8e6a03"}}}}, &(0x7f00000000c0)={0x1, 0x4, [0xb7b, 0xcee, 0xd06, 0xfc5]})
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="9b4307000001aaaaaaaaaa0008004500e9e40000000000019078fffffffeac1414aae0009078fffd0000"], 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
r4 = socket$rxrpc(0x21, 0x2, 0xa)
shutdown(r4, 0x0)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x4000, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x4}, 0x4, 0x6e6bb1, 0x0, 0x0, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x32}, 0x2, @in=@private=0xa010101, 0x0, 0x0, 0x3, 0xb7, 0x0, 0x8000000, 0xfffffffe}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x18, 0x800, 0x0, 0xf4, 0x8000, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4}, 0x50)
ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000700)={<r7=>r1, &(0x7f0000000440)='\xaa\xaa\xaa\xaa\xaa', 0x400000, &(0x7f0000000640)={@align=0x101, {0x3f0, 0x9, 0x8bd3, 0x6}}, 0xdf7, &(0x7f0000000680), &(0x7f00000006c0)=0x7f})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000780)={0x401, <r8=>0x0}, 0x8)
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r11 = accept4(r10, 0x0, 0x0, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000e740)=ANY=[], 0x6ae8}, 0x1, 0x0, 0x0, 0x1}, 0x10)
recvmsg$can_bcm(r11, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x20)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x11, &(0x7f0000001640)=ANY=[@ANYBLOB="1800000009000000000000000700000085100000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018210000", @ANYRES32=r6, @ANYBLOB="00000000030000001801002020d008f8000000000007010000f8ffffffb702000008000000aa030000060000008500000006000000e06119000e350000950000000000bb5984fe2000000000000000000000000000cf9cd761108d1e1f3e8b01d8071de4709bdc3499a7138d93307994d4bf310184f3be4e2a67cac1e80f0bc481ddac580c0b34b5c44c1634b146ab9be83226119a18256059455eb603a1cabd4416727150ffef6f4c0f8fc0d362d2f5c496e7b03cf6f64c55939beda522a9233dd6d913a0510fcf57a44cb29ca5f6aa83c8478be8a249dac4c2e0bc12916b60bf1e89fd3610f4d02cc33e046a26cfec"], &(0x7f0000000100)='syzkaller\x00', 0x5, 0x92, &(0x7f0000000580)=""/146, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, r7, 0x8, &(0x7f0000000740)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, r8, r9, 0x1, &(0x7f00000007c0), &(0x7f0000000800)=[{0x0, 0x3, 0x4, 0x7}], 0x10, 0x4}, 0x94)

17.618157072s ago: executing program 0 (id=4882):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000006110000000000000620002000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x5}, 0x90)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)={0x20, 0x1e, 0xa01, 0x0, 0x0, {0x7}, [@typed={0x8, 0x26, 0x0, 0x0, @u32}, @nested={0x4, 0x44}]}, 0x20}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00'})
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4)

17.489492506s ago: executing program 3 (id=4884):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="b80b000000050104000000000000000003000007540201000100000080000000900106000100120073797a3100000000000000000000000000000000000000000000000000000000fe32d70077d33539e2e572df8ecbf451c22e93c1ff9d272d97adc13fe6be2561cf4eafe4275004f38edad05381b662ecc460b2a34f61bc2c1b9fa4fbc53ac9e4ff0f070003000000050000008eaf0000030000000200000001000500020000000100008004000d000300000005000000060005000300000022000000070006000000000008000000aa00df00000000000400000002000400000000000900000010000c0000000000030000000900610003000000254800000004080001000000020000000100080003000000851f00000300ff0003000000fffffeff0300020000000000050000000080f11c020000000100000087ce000003000000000000000700020002000000f8ffffff02004f000000000001000000fcff080002000000020000000100070000000000ff010000bf03260002000000dd010000680001800100000009000000ff07110001000000000000000400070003000000020000002401ffff0100000009000000030008000100000008000000fdffa55100000000f7ffffff0300000000000000010000000800070002000000080000000600ae0502000000070000002106060001000000018000000600000801000000010000000400400003000000030000002dba56e701000000080000005a0c0080020000000c0000000300030003000000010000000d001001020000000c0000000500008001000000030000005000800001000000ff0300000700ff7f03000000f8ffffff5402010000000000501c00000006000800f0110073797a3000000000000000000000000000000000000000000000000000000000355fa9f4772884129526127e87d6d7a0004ec63540f5a7d63fcb27c18ad30a7e228621ac7c53f8873cff08418fb2651b489db87874a271ba6337355195f93c6a1000030001000000060000000000040001000000ff010000ffff06000000000001000000ff030000030000000c0000001902020003000000010000000200ff0702000000000100008600092602000000100000000100300001000000020000000800917903000000040000000500010002000000040000000100090001000000000000000000040002000000040000001a00070003000000010000000800080000000000030000000000030003000000060000000100050000000000c0dd02000900040001000000070000000000800000000000020000000300ac23000000008000000028200900010000000600000009000008742eb5de0081be5a0100050003000000090000000008f9ff01000000b1050000bb0a060001000000a1a600000004090003000000b80000000100050001000000010000000800080000000000ce0400000180040003000000ffffff7f0c00810003000000a0000000090006000200000000000080aa1e780001000000040a0000040001010300000009000000fcff2493010000006533941a0040018001000000030000000500c4cd000000000000000000c403000100000080000000b677090002000000069100000100dd0601000000010000000c000500010000000400000009000001020000000300000054020100010000003bad0000030601040e00050073797a3000000000000000000000000000000000000000000000000000000000ac95cf82de459e773dbc15c9288d38c1dcdc3ee31b09ab512590460e6b7a05e283b7a378d851a11014d289c0fe237e2683cd2a3ef4e0d6b554d5a884a24bf2a60400fb8c0000000001000100050089f400000000800000000001dd0000000000010001000400010003000000030000000400761c02000000010000000600f7ff02000000050000005d0bfeff0100000005000000002800000300000080000000b600320100000000010400000700b70e010000000500000080000500020000000500000007000800030000005c0500000100070002000000080000000400060000000000070000007f00ffff03000000e3000000ff03020001000000020000000100f800030000000b0000000000060002000000080000000100800000000000090000000000010100000000080000000500ef000200000008000000ff03010000000000999300000100010003000000090000000300010000000000090000003205ff0f0200000009000000fe0002000200000007000000ff070200020000000500000003000000020000000800000004000900030000000800000003000600030000000e0000008e0b030003000000080000000180ff01020000000800d2ba29d17dcdbdd640a83f9dce00000700030002000000020000000800010002000000ff7f00000500040002000000ff01000001000900010000000d000000bd83000001000000100000000300030000000000ff010000080001000200000004000000c145010003000000020000005402010003000000e726491507050300b100230073797a3100000000000000000000000000000000000000000000000000000000c85638c3004a781f0c44e7c0ff7161fcb15287117dc9390e64f737b8e561c26f9f17dbab03267afdcc56e28d99f59d9a0a99e6189b27c468b0b89aef23a4822bf601ff00e9fe44d8010000000100070003000000ff7f0000ffff090001000000018000000e00060002000000ffffff7f0400040003000000c56800000200fb4c0200000007000000100004000000000003000000000404000100000003000000020005000200000007000000ff01000000000000070000000700010001000000010400009b0000000000000007000000ffff090003000000aca6d77f070010000300000007000000beab000801000000070000000100030003000000c10d00000080090001000000060000007c0008000000000009000000340a00c000000000090000000100010000000000090000000600030000000000040000000500ff03030000000b000000cb1f00000100000005000000040081000200000000080000ffff07000000000008000000050002000200000016a4000005000a000100000068020000e418070001000000880e000000000c000100000003000000800000c003000000000000000300ff070000000001000000020000000100000075b900000400090001000000b20700000700010100000000f9ffffff0600060000000000090000000008000003000000050000000000090002000000040000000800030000000000fbffffff07000600010000000800000008000a0002000000800000005402010000000000fcfffffff40605000500090073797a3100000000000000000000000000000000000000000000000000000000b4ecae8edc65895dd509e00f05bafb11e059fbd87e712122e6ef6204532ea025cf1c8c471aca860c5acd18b7ca28115bf6c11b5661797123bc5bcfdfefb810820600fdff030000000002000002000100000000007f0000000200070001000000ff0f0000ee06a027000000000700000004000600b4f11bfc03000000ff0fb12103000000e80000009a86feff0300000003000000f7fffd060300000000100000080003000200000004000000040000040200000007000000f8ff0600020000000f0000004d0203000300000056000000010004000100000040000000000004000300000005000000ffff09000100000002000000ff0102000100000005000000c9d90800000000000200000000040000020000003e0900004200070005000000000400008100070001000000000000000c0045910100000004000000a202060003000000000100000500008000000000020000004642030003000000040000007dcb030001000000090000001d07050002000000050000000300192700000000030000000500070000000000ff0000000900ff000100000001000000ff0102000100000023da0000000007000200000004000000ff7fff7f010000000100000080026df30000000009000000f9ff070003000000ffffff7f0d00000002000000010000000700000000000000050000008e1affff0300000004000000ff010a000300000009000000ffff002002000000000800"], 0xbb8}, 0x1, 0x0, 0x0, 0x240400d0}, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000003, 0x44010, r1, 0x1c614000)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000050000000030a01020000000000000000010000000900010073797a30000000001c0008800c00024000000000000004000c000140000000000000000408000a40000000040900030073797a30000000002c000000030a01040000000000000000010000010900010073797a30000000000900030073797a30"], 0xbadc}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800010280000000fcdbdf250a148000ff01fd07"], 0x1c}}, 0x0) (async)
sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) (async)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="cc0000002e00010000000000fbdbdf25b900178008001600040000000400eb0008003d0005000000f811fecc53ffec0ff0cb5235fda5697f26d4a84c917d02d0a12742b9624fe49010758c239d0d63f222c5b91502c0103ea2968c5f9f538330233dfbd0a09581a688537c9c167b7d0c5b7e28e1e7502cff83cb9ae0113937723211fbafcc3da0359ca4bbe0432dae5e47164e45bc00a007f352dbb746cc0a35ad5c7e407843fc979724d1d9df1983a843825f7bded3f47a22de01f51d7d11745a066d6f8767ffd40e000000"], 0xcc}], 0x1, 0x0, 0x0, 0x40400c1}, 0x0) (async)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
r5 = socket(0x1e, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) (async)
connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async, rerun: 32)
r6 = socket(0x2a, 0x2, 0x2) (rerun: 32)
getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
connect$can_bcm(r4, &(0x7f0000000380)={0x1d, r7}, 0x10)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x6bf1c2d5adba8c32}) (async)
syz_emit_ethernet(0xdb, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa88a8020081002e00884800000000000000000000000000000e0000000000ee6b318a6268f9c5d292152a4af90aa3f52f87999347a2bffc462cd11fd609979fc857d358f9737c6fa9260a4def6112a11f47d2ec9618bc4aa6c768a4847f1dfedc1fe28f37720c7552edc2426765f0a51c8d264c9dbd175fa2805cebdf3ed39f559862adf9327ce099a846d83d7b5a47b1e8a3756dc54190126c47cf88dd98ff382f4b03000000e3e11123ba6321313af30883305236b2aecf02e3f85179aecce50f09d86d923711f11919e359260171"], &(0x7f0000000080)={0x0, 0x3, [0x17a, 0xac4, 0x3d, 0x776]})

17.316341218s ago: executing program 0 (id=4885):
unshare(0x20000400)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000240)={{<r0=>0xffffffffffffffff, &(0x7f0000000040)='&^\'\xd8@6\x00', 0x4400, &(0x7f0000000080)={@align=0x5, {0x8000, 0x972, 0x2, 0x9}}, 0x80000000, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x5}, 0x1, &(0x7f0000000200)=[{0x2, 0x9c, &(0x7f0000000180)='GPL\x00', &(0x7f00000001c0)='ye', 0x2, 0x10}]})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4)
r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)=@generic={&(0x7f0000000600)='./file0\x00', 0x0, 0x8}, 0x18)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x6, 0x8}, 0xc)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0x2, &(0x7f00000002c0)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1}], &(0x7f00000003c0)='GPL\x00', 0x73, 0x4f, &(0x7f0000000400)=""/79, 0x40f00, 0x40, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000540)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x5, 0x3, 0x80000000}, 0x10, 0x24c31, r3, 0x3, &(0x7f00000006c0)=[r4, r5, r6], &(0x7f0000000700)=[{0x2, 0x4, 0xb, 0x6}, {0x0, 0x4, 0x1, 0x5}, {0x0, 0x2, 0x10, 0xc}], 0x10, 0x7}, 0x94)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={0x0, r7}, 0x18)

17.315339042s ago: executing program 1 (id=4887):
socket$can_bcm(0x1d, 0x2, 0x2)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffca4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f00000004c0)="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", 0x3f1}, {&(0x7f0000000000)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3, 0x0, 0x0, 0x4800}, 0x4004)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x400000000000c2f9)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x20000020, 0x0)

17.223408988s ago: executing program 0 (id=4888):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x48, 0x30, 0xffff, 0x1, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c080}, 0x40000)
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xd4, 0x0, 0x4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008110000b7030000020000008500000017"], 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$igmp6(0xa, 0x3, 0x3a)
getsockopt$MRT6(r3, 0x3a, 0x1, 0x0, &(0x7f0000000080)=0xfffffffffffffdfe)
preadv(r3, &(0x7f0000000700)=[{&(0x7f0000000600)=""/62, 0x3e}, {&(0x7f0000000640)=""/13, 0xd}, {&(0x7f0000000680)=""/19, 0x13}, {&(0x7f00000006c0)=""/59, 0x3b}], 0x4, 0xd652, 0x8)
r4 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r4, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2, @local}}, 0x24)
setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000540)={<r6=>0x0, 0x4, 0xffffffff, 0x6}, &(0x7f0000000580)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={<r7=>r6, 0x4, 0x10}, &(0x7f0000000100)=0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={r7, @in={{0x2, 0x4e22, @multicast2}}, 0x7, 0x9, 0x4, 0x2, 0xb1, 0x6, 0x8}, 0x9c)
write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000432ad2de28f718b74c3570a2b9486d630879bf45b653de1d2445050300884c04aaaaaaaaaa00000000e2f9127b3f854e0a1bcb12248500000066f30754cede70e2aa6fcbba2adcf7fb7787383d2e1e8d5374c390c976b977782f990e825889ca227732d48d5c51bfe31ba88eb3294152f55161639ca2b15572c9f08a7b000000000000b0c83a810018f76cf9d422e6dd0815537e46c37b98285f2fe15275ea3a115886267c3e208fee94fc2617365f83eb09fad9cfedbeaed3b23fd23c08ef10dc"], 0x1d)
r8 = socket$packet(0x11, 0x3, 0x300)
r9 = socket(0x10, 0x803, 0x0)
r10 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0xfc, 0x6}}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r11, {0x300, 0x3}, {}, {0xf, 0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x40, 0xfc, 0x4, 0x1}]}}]}}]}, 0x44}}, 0x0)
bind$packet(r8, &(0x7f0000000340)={0x11, 0x15, r11, 0x1, 0x3, 0x6, @multicast}, 0x14)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYRESDEC=0x0], 0xcc}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040)

17.202828404s ago: executing program 3 (id=4889):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4c, &(0x7f0000000000)=0x205, 0x4)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
r3 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000040)={r5}, &(0x7f0000001080)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000180)={r5, 0x9, 0x1, '\x00'}, 0x9)
sendto$inet6(r2, &(0x7f0000000100)='\a', 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fed3df2502000000", @ANYRES32=r0, @ANYBLOB="1000a204080001000000000008000f0004"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0)

17.000403514s ago: executing program 3 (id=4890):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="adaa000000000000711014000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
r0 = socket(0x10, 0x803, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r1)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRESHEX, @ANYBLOB="030b2abd5400ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20040880)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x20040054)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
recvmmsg(r4, &(0x7f0000004300), 0x0, 0x0, 0x0)
r5 = socket$inet6(0xa, 0xe, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e1d, 0xfffffffe, @empty, 0x3}, 0x1c)
recvmmsg(r5, &(0x7f0000004080)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x820b, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r6, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000140)={0xa, 0x4e20, 0x1, @mcast1}, 0x1c)
sendto$inet6(r6, &(0x7f0000000e80)="0d0ad7", 0x3, 0x6d91fb6102d8910c, 0x0, 0x0)
sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="68d3dfd5fa5a66304f1a99aaf7d1e48bd6b77bce9e1315bf65729b3ffe6994eab7e90f6a72e386255e55ba355f53", @ANYRES16, @ANYBLOB="00ff"], 0x20}, 0x1, 0x0, 0x0, 0x48084}, 0x4008000)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x168, 0x6c, 0x0, 0x168, 0x0, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x0, 0x0, 0x48}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'lo\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x378)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write(0xffffffffffffffff, 0x0, 0x0)
ioctl(r8, 0x8b32, &(0x7f0000000040))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

16.987148587s ago: executing program 2 (id=4892):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)=ANY=[], 0x190)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="7d0000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xa9, &(0x7f0000000180)=""/169}, 0x80)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000deff00001b20000008009a00"], 0x1c}}, 0x0)
syz_emit_ethernet(0x14d5, &(0x7f0000000440)={@link_local, @broadcast, @val={@val={0x88a8, 0x7, 0x0, 0x2}, {0x8100, 0x6, 0x0, 0x3}}, {@ipv6={0x86dd, @tipc_packet={0x5, 0x6, "aef72c", 0x1497, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x42}, @rand_addr=' \x01\x00', {[@srh={0x8, 0x6, 0x4, 0x3, 0x3, 0x70, 0x3ff, [@private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2]}, @dstopts={0x84, 0x29, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0xc, 0x40, "08f51474d696a9149713aedfb6f1c9c1c38195c906e10f217c88d794326b2efc2b1fccbce0ec02150d4f00846f7b2dff561403789822a4a8e65d0109cd8f21ba"}, @pad1, @pad1, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @generic={0x3, 0xe9, "c810dca1c492d7afd962db1a08b205889d54d88e889571540cb5b477ad6c8da1c802a74ea4c61c6d7acad046f1af1328e0ffa4829f6edf9d2173e8a8b1136afc6051a062bfe5b4ed19ab3e88221058b6e95de34ac83860627c88e4ee3eb05fec3b6e75e8ca2e268a1055f1a313ddaf340f8f7f64ce265e65c29441e335e0d13009c3bf8a1033ec8ee56d2ed55b010c7f64045295703bd867eec716a0d995e6e0c4fe00d16efb1bd6259ae19b035fda614f18485df283b20838577c255376ea5970900982d72db567d3c261777627478deba5860591c7653ccbde351ccff23c485c20251a66ec0d9fee"}]}, @dstopts={0x88, 0xf, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x2, 0xee, [0x401, 0x0]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x9}, @generic={0x4, 0x4c, "505e2f489be65b032386a78e94fa3a894b6703d4b569c9415e4034d0263d2e768075db5f654b20c279d680b32dda8e3c5801ea4aec14e7e2c32a276d225e834c6e90be612b9450852f903679"}, @ra={0x5, 0x2, 0xeeaf}, @pad1]}, @routing={0x2c, 0xc, 0x1, 0x8, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local]}, @srh={0x32, 0x8, 0x4, 0x4, 0xb2, 0x40, 0xfff, [@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @mcast2]}, @dstopts={0x11, 0x209, '\x00', [@hao={0xc9, 0x10, @remote}, @pad1, @pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x9, 0x1000, "62628a1f6673a9f71244b751ca5cac9063e588142cbb8d7b8b8e1e9439eea2425d17be364083b44d9ce49143bbf9eaa049e52164d7b18d5c95944cae0a4f541622361f40ea5b05457f364eef6b1c1b0f359efb6852240a160ac1fa909d4edf9cf65911af9e6049026047f7e8884f3e82c26b4e993ba068eea5eed64026bc0fd412fcf188a75602d747843a9e55209547ff806ddf0ec5028a860144dcac99285af9b890e98934112c52c74fd71cdfc7f060224f21bf3090879b36366f487b1a3a30f1d4c2afa2423694410e9b941e3c011cdfb9fb7a1050835cfb977d3f3daa8803dc5abc2a6fb693001fbff5f430bb643f3d12c3fe64f706dd43f764bf32b83863c58df153658d276fa68651d1e6aa2f4c67b42090a24b10e5d95b582a5f428d5462e65a8328d663a1266fb99899c9049276601b29c435bd85f361b79732e44411d9eea33b0467f42f58f5c4243296e201c7bc24d2b2c141105d6c6abe5d59636b55c416ce3e31a9055f3acc99a2d132196953c511bda4e9539a0ddd5d5202798f8f2f5147e0443279907790cb35fd36d2d75f75f9ba6a0a290ad08afc8469312e5a839165b5539785c08b8f44b06eddc4c2faee29be05376a813ed04cf73e2d3c81e4c8f840e3bd6129728f7133c5064e17d497ecd7106495178e7c2c528068966d65e98cb08a9c13c1fac418f86e60719ec1c7b0e947b413914aeea9bcb1de0fde5ed473e8ddba54a4d95f13fd02596dc3b54a7e9ce024f7821894351c182c04fd198d10b182bfc275dae8a2c727b07228c227eb8c18a030f306c3c5c8c97797f0a59db5c9dfe473067eb39e9f8be611771d2045d48fa04cabcdda61d41af9458be722987ba9d485c8af36c76aedbd48f469f0d15cbabc3823f374bb3ce52f4ad8a09449c60a40cee5dec9d648f34b5eb1f30603d53cd9c6c63f82df1f4c206df21749d1feffe94078f93ca717949ed029c3d6b56fcb5d597f5028de234c6537d672984e73c1657f6169c7208a7901988b1a2069602f89ac386a994c8108d8033fa07cedefae57e9cfb5e49cc29a7fe8034c73ae8f3a109e589ea75d4053671902874bfcc116997c636966cd70ad12005e001e04037079f08b1422da2e38324a418564edc1d27465061eadb3721d350cbef9939d6034debb5af31a264c502a8ccce4ed96a12019bfefe9fbf4802d09b5a9b3a301add0bd276a6a3ee656d8efac9e687085d2fcfe47d3fd9fc00c036760faac77c5e48b8faee120d99509f8421f2e4fec19a7bf5ce2a8dc8c0e844077a5aaf4ca597f838f342f9c75fcbb8c04254d552e0b6ac96c32bc8a64b476024de72917e9fb933f0f47ace3b89a017bfff4943f9214e619d0bc944beacab05566ce8b9c8355f35c14008d3ec71922040991c8dc6201ae92a81923c835cf49b8dbaf62b5993658f9d862ba5ab26905f4c8da6c94b1280127c0d129e7e258cb1e182913f0b00a01f9801aba33b55e0c9de993e427f85fe8c1d2a3631a8556a034864a1fd9723bfd26688cf4824aff34dab3a271a7864427fd48a0b51e0b1294acc2c94e9495d6de5633ab0ade92b8a55e3de7137e278cdf68256201ca7e3be8b046b261e8e70c66f6f481606832bbd93808657987bc2947a34d0488c9c3a1bcb96a6be2563a793247f050e96ba254d7fbd8684b47aa943963f696b2e33a1588a29e7b426e9a039a0b1617ff97ec38cf6f47d8ce4caf64a567c5d8f6e2aa2387bec4f35d8511eecfa351f4b0090627afdf9f3f6f20e54a5f342bf9de57150f0c6e62ba84cfdf373d88596e59a5a8551b6925cdc6ac869735423a505cf602cafda4c4f29e424921f45f803f2151c506a53055ee9bab3f23cc6678e284825440d70e3674ae0490588e716d0a0dfc67065e7837c6ea9cc761ea550f3742d91f0c9ab4c3b7efe456167f389ca03f5d7c4b66fcc6c4509a9057ed78d2961570ac0265b75e9be832832afc5859b07623a4ac741bfb8737c6d6a9dfda5cfa9f0d1ba5d90f44c75e0d251c5d265ea7f7a2f00ff1e7463650cfecdb994c07e039e5602282e1b0821cee495764f78a6100f1ca91ee774e3ce4b3f46cff9953e9149e58f83c36d04285461193f03415a6f8d078b31bcadef3424a9eb8ae2c86f9d13c178b6827854a343a7964cdef685a955353d19b1194b00fb3da4a01aaba16f9bd5a1e5768514ee4b0a81ad74589e63414900345fd9859323157303bc51c148b0c1c755c0cffe08a1f003280e06705214b9c7744e09ffe5110053eeb378b90d342cbb0bf3a279a7b83d21f5bc3b8c991f4422501628f304ba00c583d3f09c58821b6486a7e26d9b501a592506e928dcacbceb9a04f4b43c3e1916cebcffbbccbfc7a44e1fb651a61a902d4cf4767517cea0d50808cb2b66ee5514d1aa6c714c603b585bcb3b095cbe6a6cb32ccf811bfcc9d0681bfc9c400437a28c089598b2b7f2cb2413429b025cbc05a63f31bb351475a3131459b49c9416f59373d389e70bc71346d8635c0497cc3d1009f7c6f657391ef86408fd092deceb2c7c4861b3ed069db73398cd71ea9b6755618c1b9ade5f6298e9f41209b93154d819c1e80c9de3718c10af0f6de432027d48cb9cd1d9233cb55fc4b6f016f6a6066abd9455c375aa9e5a79b23cd314743c644a6e4367c98e61ae407ee46021b0862951414c093be40c9c6542d7395c200b7bd7e2b174e285b79bf6cc284f42471f9c851160f1e0ba6c7d6c3f947533a20de58d908b93203d8bc19c14fb6280bec2adf7fa92a9cf7a7044444a19ac5fbd085b6460672434f1b81827801305b3d944305630d826cce03bee05bb1f6846d7780193ad0afd02ba1ce3cbc6176fb74a034c0edbbc16ded3341760cfa57ee5ecd7f95e5304160cb621cb4bd869036585d1d087fb655c69613d037c2acbfdb3632a95226860c08625752c276708a1216b50fa901d65805dd325f5fe1c667ad27058197431751419253e29ffd33417dfbce535a868a0a351d9bf2db467fa97ad43850cf066f99b008f6ba7a58aad7a87c49ed805b9fa2919bef4f6c33eb9eee1df24eeb7c48295196043d621f865fcbc5fdc5d4d20a3733c4846779a0f7e28526a55260ce7262ac96508767d515094d9225576ae9ad4b84e3c212e4b33dd2894866afe2a8119d6dc1f80a93748f41a61d390f8e7cce28288cb999a75c2d02d6ee8d02d6922dd851256f5209231e9388f059467cd506cc29150c9c33571d0b78d044e89c116aa5cfbd6dc0f32c7be0a83c787346aaac34f7e58816cc49886c36018b2915193e82f3cc17d299fbc3ef3a03f6bc03de520639bba48b7c729c3c4b6c7aa92a5d531eb2370f77fba9ab07d6065e43ba36b3d3c27600da186046b0054efc6dcfc9ecfd9b24a4dc82acd85d772d9bfcd6ea4440028b7b30465176548d1ed261af3a088498ba2a8f908cce7fb43b9f8f6c6c45276169580e2e58fec97ff2998a7ea1f09c6bff1980b2e9a1674ce68d512ba52ba9bc557bf8228aa3465191596afd4f202ae36bfea61ad2f940ee91aafcc3f769a45cad8abe5ec1e82504a7d5f78eb9931d50830578066ae0212747e75653eda24ce3f7ed4516026b72cda8cfb120858f39d002d2255d830e461665fa2367453c069d76c2b10494c640db79c12eba4d1cef8312670b8ece79e4a9ca44908d229caa51f68af72e4bf2475db1840ff7d38e2231da89e147dee998b1eba13a96e51ec10be5788583f5009a65a486f429eb78149f2592b4979ef17c09626c04ed861fb293aff4db9e2e6cb494aad7ee235df74ca35ade3da6b7db896a432d7b6385930e62cb1a897157f37ba7babd36d383bd86b9b54cf80b61997cc54d46f41009ab25ba07f1f5c632921c3b84375c579b3fdbb1b30ff550cc624bc29a7edac59df1b1c5d3bb6ada0670e75de1df96780c21ba3b60eaeddee520b3eb016da9ca99f1c7e1d4eb7f19fd4c6648cc994724c64f4ee2347e541b2b0cb804f300399bced0141c9215b6d99b56988f7d15dccc79e2a9c89581562694d66d5d158950ab8975447c3cac0f67bbd050d237cd1a23bafaedd0c049931b4cde7a38b6f701e5fda0b8383e76bd3965e96268f5d43d4c018bed7f79a56cb2ffd5a9d6de17cd9ed51f6ff9273c5ffd200b277e948b811e2c08127eaa828ed7611ea6b88a67dbcc7563300747e55bb043f427f6e5ec57d8b6a44546714316321c5eca8205fd776d865680fcb98f645952129ecac2bb15befd06464a5ee374a29f900a4ad7810d479cdc42672de35647c721ef6994fc2d15ce218a6cef624bf7a8862523fc714c03bd338223946f1845dcaf9fa6858bec4aba365dc6fb549d68bb65984dd51dc5ec506f0ca35e2ca1dfbe725e4a5e5dfe88bbf8b37f1a393088d2db442a3a7ad8d4351e3f565354df170eb9da14320c170a3ea6c6c782b5b27948ddf797b98d2108c507dee5bd065f9686beab2307681886743670ba0a64d44047ab00c762193c8288072964412ba900783fb122970dd21abac5a2826133ca2d7704b4f2c22518a4bad7590909a2b0d9c9a87b573c9a5eae5a98950b91292d3999dba612971f833df778b02bbef7c70c32b7c46e08fa2662e69bf5a58f6d27034ace1c0137c6a99cddaf9af53f3a82a30e5324b521c5a46a3ee97f9c466a8a0d23508b3397105fb3a8dd84558779d4a2eb242ddfe03344cfc043ec376f8c7b7adf5874edec799cf5f5e0f065b8f01bd0fbd7a01d843175612c2c21bfb3547d6e410a35f8c838239b796dbd873b851336f9ba382509d1f2e5f5ef5aa0414032c537c2a4dc82dbd6b1fc05879ab201cfb0c5af25c33100b2e75714ea126412218ba33fc39e234003e656885302d0c03d6f96e03a7ddc3fe5b56531d0bfe597513dd7e69dc7abe8b85b90ff41df2e709a86fdc7d7ebc0dd48d39fa8a71a529dbdfcb744e0324f3e7f5c4e12d0d3824e629222fb439be6d56b84c9e4f729d02aa9c6e2db8da286d598fc8255951de1ee6b470e724cb18cb8e4d5a4ef2e4578cd11e3c1b40bae1cfd911ace6ff0c782a11acd024a46701feee91658ee23f5989dabf101b6a633dd58a1cb264140a6c7d4e6cd8d7e2336a9023799fb3c2a4f492c92ba600622779e9179113d6e934ea3099b448f3174caf5f64ef2bd03d9adea867dbcbd1edd359755d4af187813ee0f5a850f74d76829676e2691e759cb82ef506a8a155efcfbe1f7ed025763b8493f05f1e0fe018921fc21c8bede0a086e3c0149104bda0a75f7b5131bd3a4882313c5ae60f7b2fbcfd3c3f2f60156c6c395e1eae363f55f9179e1e50edb7d8d6520b23444bb6367e79a67c4f492becddb38578eaa3d22c3a5b52258f48cf24938547a2b220593fd25af58f053c125d7f650ac1ce24cc3650fd6a55d9facfef838e728a7da8c3d0c48497babebb3637a82f0afdab4a8a85cde90a22ce08e0819e2ec60a9dea8c525af2d03bb87661be6cf14eed7309caa7f5afd529e144996326989cbd0a10e84bc443d43fcb7fabc0ad9b92d17be941b640bda54aaf6cf41596026be2968e1eafebe68db2595f305b0837b8bd56567e8c554a303631b71d8bf83730a216562b67b802d5659192e79236b9dbc7332ea33fa525a20bc412b9c9143f3503842ca84001446ea9a090a2d45ca63468ae6229c8e7dabaa74eefc88f179c56492b09289b991912bc93d22c690f277423ed7847e018a289e4d1b7de6c19e9c76c7258a78a0a0e59ad7be255cb12ed0a6b80208a35ba90d67b4805203040666eb321aaa23af25ed1e79fc4753184bd5a5245e1f"}, @calipso={0x7, 0x18, {0x1, 0x4, 0xf, 0x101, [0x4, 0x1]}}, @hao={0xc9, 0x10, @private2}]}, @srh={0x67, 0x4, 0x4, 0x2, 0x2, 0xf8, 0x2, [@private1={0xfc, 0x1, '\x00', 0x1}, @remote]}, @routing={0x33, 0xe, 0x2, 0x7c, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x1b}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @local, @private2]}, @routing={0x32, 0x14, 0x1, 0x6, 0x0, [@mcast2, @mcast1, @remote, @local, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}]}], @payload_mcast={{{{{{0x2f, 0x0, 0x0, 0x1, 0x1, 0xb, 0x1, 0x2, 0x2, 0x0, 0x1, 0x6, 0x1, 0x1, 0xa, 0xfff5, 0x2, 0x4e23, 0x4e21}, 0x3, 0x4}, 0x2, 0x3}, 0x2}}, [0x0, 0x0, 0x0]}}}}}}, 0x0)

16.802982081s ago: executing program 0 (id=4893):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0xd04f, 0xa59}}}}]}, 0x44}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newrule={0x2c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0)

16.748539338s ago: executing program 2 (id=4894):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010100000000010000000000000005000100070000000900020073797a30000000000c00078008000b000000000011000300686173683a69702c6d61726b000000000500050002000000050004"], 0x58}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}}, 0x0)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r3, &(0x7f0000000400)={&(0x7f0000000000)=@un=@abs, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/44, 0x2c}, {&(0x7f00000000c0)=""/91, 0x5b}, {&(0x7f0000000140)=""/22, 0x16}, {&(0x7f0000000180)=""/108, 0x6c}, {&(0x7f0000000200)=""/167, 0xa7}], 0x5, &(0x7f0000000340)=""/190, 0xbe}, 0x10000)
socket$phonet_pipe(0x23, 0x5, 0x2) (async)
setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, 0x0, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010100000000010000000000000005000100070000000900020073797a30000000000c00078008000b000000000011000300686173683a69702c6d61726b000000000500050002000000050004"], 0x58}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}}, 0x0) (async)
socket$can_raw(0x1d, 0x3, 0x1) (async)
recvmsg$can_raw(r3, &(0x7f0000000400)={&(0x7f0000000000)=@un=@abs, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/44, 0x2c}, {&(0x7f00000000c0)=""/91, 0x5b}, {&(0x7f0000000140)=""/22, 0x16}, {&(0x7f0000000180)=""/108, 0x6c}, {&(0x7f0000000200)=""/167, 0xa7}], 0x5, &(0x7f0000000340)=""/190, 0xbe}, 0x10000) (async)

16.658883435s ago: executing program 3 (id=4895):
ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)=0x4)
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0xc63d}]}}]}, 0x3c}}, 0x0)
r3 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000002900)=0xfffffffc, 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)

16.637847422s ago: executing program 0 (id=4896):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) (async)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x400c044}, 0x0)

16.558809031s ago: executing program 2 (id=4898):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x3c, r2, 0x221, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8e}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '#\''}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0)

16.518856214s ago: executing program 3 (id=4899):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x3}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x8000)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'gretap0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x0)
r5 = socket$packet(0x11, 0x4000000000002, 0x300)
setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'ip6_vti0\x00', <r6=>0x0})
sendto$packet(r5, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x11, 0xd, r6, 0x1, 0xda, 0x6, @remote}, 0x14)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x3, r6, 0x1, 0x1, 0x6, @remote}, 0x14)
syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r1)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r7, 0xb6c91f939c8321d, 0x0, 0x0, {0x10}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0xf, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x8}]}, 0x30}}, 0x0)
r8 = socket(0x6, 0x3, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c9000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
syz_emit_ethernet(0x7e, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb8100000086dd60fec00000443a00fc000000000000000000000000000000ff02000000000000000000000000000102009078000000006018b0880000000000000000000000000000000000000000fc010000000000000000000000000001110019eb4e53f618730d7de8ed8f6ec5402a1859"], 0x0)
connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
sendmsg$nl_route_sched(r8, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x3, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000140081044e81f782db46b904021d000025000000040000a118000200ff02000100000e1208000f0100810401a80316ea1f000b40032a5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc0000000000000080bb9ad809d5e1cace81b341139fe3cd4032ecedb12d1d2eb0c0ed0bffa29954e5413f017fe491", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

16.505820967s ago: executing program 0 (id=4900):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x1c, 0x12, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}}, 0x20050800)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0000110000000000000060ec97000f982c00fe8000000000000000000000000000aaff02000000000000000000000000000189"], 0xfce)

16.416692346s ago: executing program 4 (id=4901):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
mmap(&(0x7f0000c61000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0xdfdddf82bb4cc70c, 0x28011, r1, 0x0)
mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100, 0xffffffffffffff4d)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2300000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000ac0)=@gcm_128={{0x304}, "629f2ad1e25e04f2", "850100", "daf9af4a", "747aaaaf941f267e"}, 0x28)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x4, &(0x7f0000000280)=@gcm_128={{0x304}, "41c000", "0cfcb67ecace717eb34a87013860510f", "15f4807f", "d4c27feb98ae71cc"}, 0x28)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x2689e000)

16.413479335s ago: executing program 1 (id=4902):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840)
r1 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f0000000280)=""/45, &(0x7f0000000340)=0x2d)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6, 0x1b}}}}, [@NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x6}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7f}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0xf}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4814}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xa, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
r5 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r5, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r5, 0xffffffff)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c40)={0x2, 0x6, 0x2, 0x2, 0x5, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_address={0x3, 0x17, 0x2b, 0x80, 0x0, @in={0x2, 0x4e22, @loopback}}]}, 0x28}}, 0x40c0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
r7 = accept4(r5, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000)
listen(r7, 0x3ff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff0f316844268cb89e14f008004ce0050000000000001177fbac141416e000030a89079f03b180004408050300845013f2325f009409050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c)

16.322961659s ago: executing program 1 (id=4903):
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}, 0x1, 0x0, 0x0, 0x4884}, 0x20000000)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x14, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0x3e)

16.116525579s ago: executing program 1 (id=4904):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000100fffc0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c00048028000180080001006e6174001c000280080002400000dd0a080001400000000108000340000000000900010073797a30"], 0xc8}}, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000040000901fffffffffddbdf25020000000c005e800800b280040000001462eb1b51f033e627ed2da94b4457e41e547358a7b2755ecfc975f4f00b81c9e299de417a741f5c2854b14d25381ba5245e9f7373ea64c1410f6a65562897c5d4d87292a9578ed33dac27a84cfe08e2a90b838272113c7f427bd24fa5f19cafd5b60c9f292da3cc404a1c94575e370c59cf4a1f735d7922e2ba8a6af2e473a2fe7a7c145205008da095b202f0152d3fdc86af314d69c448f6a19e61f32d2094f377d9297b4584ffaa6c6f12f74aef32a0adde3051"], 0x20}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000224bd7000fbdbdf250200000005003d000600008008000b01"], 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x20040000)
r10 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r8, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @void}}}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x24, r8, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xe}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c014}, 0x40001)
sendmsg$IPSET_CMD_SWAP(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x6, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000000}, 0x44010)
sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000100)={0x0, 0xfc1e, &(0x7f0000000140)={&(0x7f00000004c0)={0x28, 0x14, 0x119, 0x0, 0x25dfdbfb, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "115aa5e9d0c8e22babc259d2ac"}]}, 0x28}}, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010000000000b745c9af8bbdaa"], 0x14}}, 0x2004c004)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x50, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x16, 0xb}, {0x5, 0x12, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x240080c0)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x20008811}, 0x20008011)

15.567827464s ago: executing program 4 (id=4905):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x14, 0xf}, {0x0, 0x7}, {0xa, 0x5}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0xfffff800}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140014002600010026bdf000fcdbdf2804000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x4c080)

15.528920314s ago: executing program 4 (id=4906):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0008cb211616d19cd400"/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1a, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x17}, 0x94)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'})
setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c)

15.38073812s ago: executing program 4 (id=4907):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x3c, 0x32, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
write$cgroup_subtree(r1, &(0x7f0000000040), 0xfffffc3f)
r2 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0xb4, r3, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x5}]}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0xfffffffffffffe67, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_MON={0x24}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40}, 0x24000001)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

15.377716568s ago: executing program 4 (id=4908):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x402, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local})
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r6=>0x0})
sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x13, r7, 0xc252d000)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28)
setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000040), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x0, 0x8400, 0xc5, 0x114, 0xffffffffffffffff, 0x0, '\x00', r6, r7, 0x0, 0x1}, 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x20040010)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FD_FRAMES(r8, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', <r9=>0x0})
sendmsg$can_raw(r8, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r9}, 0x10, &(0x7f00000003c0)={&(0x7f0000000140)=@canfd={{0x1, 0x1, 0x0, 0x1}, 0x75, 0x0, 0x0, 0x0, "fa77068e9ba7f60291c0c2883b46271c1679c3c0cf5101a328bb3fbd261e7eba5594caf70eec1c694f644e13312db4bda5b524b6e151c1deaf3e9edb7a56adcb"}, 0x48}, 0x2, 0x0, 0x0, 0x20008004}, 0x10048808)
socket$netlink(0x10, 0x3, 0x0)
socket$rds(0x15, 0x5, 0x0)

15.240274271s ago: executing program 4 (id=4909):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x19, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x3, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @empty}}}}]}]}, 0x60}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000000f06010400000000000000000700000405000100"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000810)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x1c, r5, 0xf81, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r5, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r6, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000010}, 0x840)
sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x3c, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc1}, 0x8010)
ioctl$XFS_IOC_GETBMAPX(r6, 0xc0205838, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000017c0)={@private0, <r7=>0x0}, &(0x7f0000001800)=0x14)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002c00), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000003f00)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003ec0)={&(0x7f0000002c40)={0x1240, r8, 0x1, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1034, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x2c, 0x4, "4c82f6f3b340681ed8b81977ef093655a618f392bed502f47eca98e14a1fc1ebb8d9923035ebccbd"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x17c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x8c, 0x4, "9c325424d0e77f875bf85adb9b228d3dc8d8203f242c0801aadf134624e772f469bb0fa5952b5e797e1b6a27caee82833ee62ebd55ce00dc543e394ee1b49a837644f32116b4fb572efa295cf839433abf3d2c173a8286e7a0eb4e59da04380720aaa8cd3c9d816f98a8f0d95f070e84a261b10403df385c1374fe774612c759cc672bc2c887c5f2"}, @ETHTOOL_A_BITSET_BITS={0xe0, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'erspan0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ' \x01\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '/$=/($!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ' \x01\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x1240}, 0x1, 0x0, 0x0, 0x2}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r11=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r11}]}, 0x20}}, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000280)={@private2, <r12=>0x0}, &(0x7f0000000340)=0x14)
r13 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r14=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r15=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001d00010000000000ffdbdf2507000000", @ANYRES32=r15, @ANYBLOB="800007000a0002000180c200000300f505000500"], 0x30}}, 0x48080)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0xcc, r8, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x2400408c)

1.207657014s ago: executing program 32 (id=4900):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x1c, 0x12, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}}, 0x20050800)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0000110000000000000060ec97000f982c00fe8000000000000000000000000000aaff02000000000000000000000000000189"], 0xfce)

1.17098063s ago: executing program 33 (id=4898):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x3c, r2, 0x221, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8e}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '#\''}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0)

1.124359732s ago: executing program 34 (id=4899):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x3}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x8000)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'gretap0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x0)
r5 = socket$packet(0x11, 0x4000000000002, 0x300)
setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'ip6_vti0\x00', <r6=>0x0})
sendto$packet(r5, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x11, 0xd, r6, 0x1, 0xda, 0x6, @remote}, 0x14)
bind$packet(r2, &(0x7f00000002c0)={0x11, 0x3, r6, 0x1, 0x1, 0x6, @remote}, 0x14)
syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r1)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r7, 0xb6c91f939c8321d, 0x0, 0x0, {0x10}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0xf, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x8}]}, 0x30}}, 0x0)
r8 = socket(0x6, 0x3, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c9000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
syz_emit_ethernet(0x7e, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb8100000086dd60fec00000443a00fc000000000000000000000000000000ff02000000000000000000000000000102009078000000006018b0880000000000000000000000000000000000000000fc010000000000000000000000000001110019eb4e53f618730d7de8ed8f6ec5402a1859"], 0x0)
connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
sendmsg$nl_route_sched(r8, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x3, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000140081044e81f782db46b904021d000025000000040000a118000200ff02000100000e1208000f0100810401a80316ea1f000b40032a5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc0000000000000080bb9ad809d5e1cace81b341139fe3cd4032ecedb12d1d2eb0c0ed0bffa29954e5413f017fe491", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

80.126622ms ago: executing program 35 (id=4904):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000100fffc0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c00048028000180080001006e6174001c000280080002400000dd0a080001400000000108000340000000000900010073797a30"], 0xc8}}, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000040000901fffffffffddbdf25020000000c005e800800b280040000001462eb1b51f033e627ed2da94b4457e41e547358a7b2755ecfc975f4f00b81c9e299de417a741f5c2854b14d25381ba5245e9f7373ea64c1410f6a65562897c5d4d87292a9578ed33dac27a84cfe08e2a90b838272113c7f427bd24fa5f19cafd5b60c9f292da3cc404a1c94575e370c59cf4a1f735d7922e2ba8a6af2e473a2fe7a7c145205008da095b202f0152d3fdc86af314d69c448f6a19e61f32d2094f377d9297b4584ffaa6c6f12f74aef32a0adde3051"], 0x20}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000224bd7000fbdbdf250200000005003d000600008008000b01"], 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x20040000)
r10 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r8, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @void}}}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x24, r8, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xe}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c014}, 0x40001)
sendmsg$IPSET_CMD_SWAP(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x6, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000000}, 0x44010)
sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000100)={0x0, 0xfc1e, &(0x7f0000000140)={&(0x7f00000004c0)={0x28, 0x14, 0x119, 0x0, 0x25dfdbfb, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "115aa5e9d0c8e22babc259d2ac"}]}, 0x28}}, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010000000000b745c9af8bbdaa"], 0x14}}, 0x2004c004)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x50, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x16, 0xb}, {0x5, 0x12, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x240080c0)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x20008811}, 0x20008011)

0s ago: executing program 36 (id=4909):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x19, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x3, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @empty}}}}]}]}, 0x60}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000000f06010400000000000000000700000405000100"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000810)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x1c, r5, 0xf81, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r5, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r6, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000010}, 0x840)
sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x3c, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc1}, 0x8010)
ioctl$XFS_IOC_GETBMAPX(r6, 0xc0205838, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000017c0)={@private0, <r7=>0x0}, &(0x7f0000001800)=0x14)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002c00), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000003f00)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003ec0)={&(0x7f0000002c40)={0x1240, r8, 0x1, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1034, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x2c, 0x4, "4c82f6f3b340681ed8b81977ef093655a618f392bed502f47eca98e14a1fc1ebb8d9923035ebccbd"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x17c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x8c, 0x4, "9c325424d0e77f875bf85adb9b228d3dc8d8203f242c0801aadf134624e772f469bb0fa5952b5e797e1b6a27caee82833ee62ebd55ce00dc543e394ee1b49a837644f32116b4fb572efa295cf839433abf3d2c173a8286e7a0eb4e59da04380720aaa8cd3c9d816f98a8f0d95f070e84a261b10403df385c1374fe774612c759cc672bc2c887c5f2"}, @ETHTOOL_A_BITSET_BITS={0xe0, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'erspan0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ' \x01\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '/$=/($!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ' \x01\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x1240}, 0x1, 0x0, 0x0, 0x2}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r11=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r11}]}, 0x20}}, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000280)={@private2, <r12=>0x0}, &(0x7f0000000340)=0x14)
r13 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r14=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r15=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001d00010000000000ffdbdf2507000000", @ANYRES32=r15, @ANYBLOB="800007000a0002000180c200000300f505000500"], 0x30}}, 0x48080)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0xcc, r8, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x2400408c)

kernel console output (not intermixed with test programs):

] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3538'.
[  545.581290][T19214] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  545.596543][T19217] syz_tun: entered allmulticast mode
[  545.614726][T19217] gretap0: left allmulticast mode
[  545.634846][T19217] gretap0: left promiscuous mode
[  545.655390][T19217] bridge0: port 3(gretap0) entered disabled state
[  545.717586][T19217] bridge_slave_0: left allmulticast mode
[  545.723942][T19217] bridge_slave_0: left promiscuous mode
[  545.740630][T19217] bridge0: port 1(bridge_slave_0) entered disabled state
[  545.781398][T19217] bridge_slave_1: left allmulticast mode
[  545.788677][T19217] bridge_slave_1: left promiscuous mode
[  545.794776][T19217] bridge0: port 2(bridge_slave_1) entered disabled state
[  545.817811][T19217] bond0: (slave bond_slave_0): Releasing backup interface
[  545.842118][T19217] bond0: (slave bond_slave_1): Releasing backup interface
[  545.863081][T19217] team0: Port device team_slave_0 removed
[  545.879799][T19217] team0: Port device team_slave_1 removed
[  545.889498][T19217] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  545.898562][T19217] batman_adv: batadv0: Removing interface: batadv_slave_0
[  545.912252][T19217] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  545.923355][T19217] batman_adv: batadv0: Removing interface: batadv_slave_1
[  545.934126][T19217] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  546.428143][T19254] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3551'.
[  546.675968][T19272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3554'.
[  546.686487][T19272] openvswitch: netlink: Flow actions attr not present in new flow.
[  546.748633][T19272] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  546.839971][T19278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3556'.
[  546.849376][T19278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3556'.
[  546.884621][T19282] rdma_rxe: rxe_newlink: failed to add lo
[  546.940289][T19287] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3559'.
[  547.313218][T19263] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  547.451314][T19306] netlink: 'syz.2.3565': attribute type 21 has an invalid length.
[  547.466452][T19306] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3565'.
[  547.508585][T19309] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3566'.
[  547.567099][T19308] IPv6: sit2: Disabled Multicast RS
[  547.702943][T19317] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  547.762221][T19321] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32)
[  547.775245][T19322] tipc: Started in network mode
[  547.780933][T19322] tipc: Node identity bab2a352f06e, cluster identity 4711
[  547.790426][T19322] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  547.799411][T19322] syzkaller0: entered promiscuous mode
[  547.808192][T19322] syzkaller0: entered allmulticast mode
[  547.826580][T19322] tipc: Resetting bearer <eth:syzkaller0>
[  547.934311][T19315] tipc: Resetting bearer <eth:syzkaller0>
[  547.998044][T19315] tipc: Disabling bearer <eth:syzkaller0>
[  548.230973][T19345] netlink: 'syz.2.3580': attribute type 1 has an invalid length.
[  548.267140][T19348] xt_TPROXY: Can be used only with -p tcp or -p udp
[  548.291838][T19345] 8021q: adding VLAN 0 to HW filter on device bond2
[  548.306374][T19349] xt_TPROXY: Can be used only with -p tcp or -p udp
[  548.323227][T19348] siw: device registration error -23
[  548.326330][T19351] bond2: (slave bridge3): making interface the new active one
[  548.338855][T19351] bond2: (slave bridge3): Enslaving as an active interface with an up link
[  548.490707][T19362] openvswitch: netlink: Unknown nsh attribute 0
[  549.228225][T19410] netlink: 'syz.2.3600': attribute type 2 has an invalid length.
[  549.237153][T19411] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  549.311799][T19416] macvlan1: entered allmulticast mode
[  549.410844][T19411] veth1_vlan: entered allmulticast mode
[  549.416677][T19411] macvlan1: entered promiscuous mode
[  549.686146][T19437] bridge0: port 3(batadv1) entered blocking state
[  549.718157][T19437] bridge0: port 3(batadv1) entered disabled state
[  549.740336][T19437] batadv1: entered allmulticast mode
[  549.772673][T19437] batadv1: entered promiscuous mode
[  549.905759][T17575] IPVS: starting estimator thread 0...
[  549.995780][T19453] IPVS: using max 29 ests per chain, 69600 per kthread
[  550.144437][T19462] netlink: 'syz.0.3616': attribute type 3 has an invalid length.
[  550.169934][ T9184] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  550.181065][ T9184] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  550.209491][T19462] gre0: entered promiscuous mode
[  550.289678][T19462] gre0: entered allmulticast mode
[  551.451090][T19540] netlink: 'syz.4.3632': attribute type 3 has an invalid length.
[  551.501886][T19543] x_tables: unsorted underflow at hook 2
[  551.573699][T19545] __nla_validate_parse: 9 callbacks suppressed
[  551.573719][T19545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3633'.
[  551.598362][ T7938] hid-generic 0005:16C0:5508.0002: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa
[  551.660646][T19551] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3635'.
[  551.891518][T19561] IPv6: addrconf: prefix option has invalid lifetime
[  551.939696][T19563] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3639'.
[  551.997829][T19571] x_tables: unsorted entry at hook 3
[  552.011261][T19573] netlink: 212204 bytes leftover after parsing attributes in process `syz.4.3643'.
[  552.241237][T19589] sctp: [Deprecated]: syz.2.3648 (pid 19589) Use of int in max_burst socket option.
[  552.241237][T19589] Use struct sctp_assoc_value instead
[  552.432666][T19598] x_tables: unsorted underflow at hook 1
[  552.439635][T19595] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3650'.
[  552.456238][T19598] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3652'.
[  552.566745][T19596] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3651'.
[  552.598418][T19596] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3651'.
[  552.623035][T19596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3651'.
[  552.941016][T19634] netlink: 'syz.4.3660': attribute type 14 has an invalid length.
[  552.972166][T19634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3660'.
[  553.001108][T19525] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  553.022763][T19525] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  553.042268][T19525] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  553.056073][ T5147] Bluetooth: hci1: command 0x0405 tx timeout
[  553.089784][T19525] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  553.249642][T19648] netlink: 'syz.2.3666': attribute type 1 has an invalid length.
[  553.258300][T19648] netlink: 'syz.2.3666': attribute type 2 has an invalid length.
[  553.753407][T19673] netlink: 'syz.4.3673': attribute type 1 has an invalid length.
[  553.847564][T19677] Cannot find set identified by id 4 to match
[  553.854885][T19677] netlink: 'syz.1.3674': attribute type 1 has an invalid length.
[  554.034260][T19684] netlink: 'syz.2.3676': attribute type 4 has an invalid length.
[  554.045818][T19687] netlink: 'syz.0.3678': attribute type 10 has an invalid length.
[  554.069432][T19687] team0: Device vxcan1 is of different type
[  554.155828][T19693] netlink: 'syz.4.3680': attribute type 11 has an invalid length.
[  554.392682][T19701] veth1_vlan (unregistering): left allmulticast mode
[  554.496602][T19712] netlink: 'syz.2.3687': attribute type 4 has an invalid length.
[  554.610248][T19716] netlink: 'syz.0.3686': attribute type 4 has an invalid length.
[  554.824959][T19729] syzkaller0: entered promiscuous mode
[  554.832200][T19729] syzkaller0: entered allmulticast mode
[  554.861618][T19731] erspan0: entered promiscuous mode
[  555.230127][T19749] netlink: 'syz.4.3696': attribute type 1 has an invalid length.
[  556.945385][T19749] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  557.371202][T19769] __nla_validate_parse: 9 callbacks suppressed
[  557.371226][T19769] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3701'.
[  557.424340][T19769] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3701'.
[  557.464385][T19769] bridge0: port 2(bridge_slave_1) entered blocking state
[  557.471699][T19769] bridge0: port 2(bridge_slave_1) entered listening state
[  557.479221][T19769] bridge0: port 1(bridge_slave_0) entered blocking state
[  557.486445][T19769] bridge0: port 1(bridge_slave_0) entered listening state
[  557.498843][T19777] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3705'.
[  557.562635][T19769] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3701'.
[  557.607105][T19769] bridge0: port 2(bridge_slave_1) entered disabled state
[  557.614424][T19769] bridge0: port 1(bridge_slave_0) entered disabled state
[  557.651151][T19787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3708'.
[  557.793705][T19793] netlink: 9422 bytes leftover after parsing attributes in process `syz.1.3710'.
[  557.994601][T19808] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3715'.
[  558.181185][T19818] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3718'.
[  558.339300][T19827] validate_nla: 5 callbacks suppressed
[  558.339322][T19827] netlink: 'syz.4.3722': attribute type 33 has an invalid length.
[  558.468861][T19827] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  558.504644][T19827] bond4 (unregistering): Released all slaves
[  558.953936][T19858] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3730'.
[  558.986512][T19852] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3730'.
[  559.015426][T19852] erspan0: entered promiscuous mode
[  559.632067][T19900] openvswitch: netlink: Flow key attr not present in new flow.
[  559.921079][T19911] block nbd2: not configured, cannot reconfigure
[  560.013105][T19917] xt_socket: unknown flags 0xe4
[  560.293522][T19934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  560.373778][T19934] syzkaller0: entered promiscuous mode
[  560.423612][T19934] syzkaller0: entered allmulticast mode
[  560.707574][T19958] netlink: 'syz.0.3759': attribute type 1 has an invalid length.
[  561.040878][T19928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  561.352730][T19947] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  561.541872][T20000] syzkaller0: entered promiscuous mode
[  561.547538][T20000] syzkaller0: entered allmulticast mode
[  561.599975][T19998] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  561.635352][T20004] syzkaller0: entered promiscuous mode
[  561.641406][T20004] syzkaller0: entered allmulticast mode
[  562.140493][T20038] netlink: 'syz.0.3783': attribute type 62 has an invalid length.
[  562.160190][T20038] xt_ecn: cannot match TCP bits for non-tcp packets
[  562.237011][T20037] can: request_module (can-proto-0) failed.
[  562.451325][T20053] : entered promiscuous mode
[  562.575934][ T5147] Bluetooth: hci0: command 0x0c20 tx timeout
[  562.584728][ T5839] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  562.656559][T20068] __nla_validate_parse: 14 callbacks suppressed
[  562.656581][T20068] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3793'.
[  562.803536][T20079] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  562.942121][T20082] bond0: entered promiscuous mode
[  563.063452][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  563.198395][T20098] netlink: 206800 bytes leftover after parsing attributes in process `syz.3.3804'.
[  563.230698][T20101] netlink: 206800 bytes leftover after parsing attributes in process `syz.3.3804'.
[  563.311747][T20108] FAULT_INJECTION: forcing a failure.
[  563.311747][T20108] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  563.350264][T20108] CPU: 0 UID: 0 PID: 20108 Comm: syz.0.3807 Not tainted syzkaller #0 PREEMPT(full) 
[  563.350305][T20108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  563.350319][T20108] Call Trace:
[  563.350328][T20108]  <TASK>
[  563.350337][T20108]  dump_stack_lvl+0xe8/0x150
[  563.350376][T20108]  should_fail_ex+0x412/0x560
[  563.350408][T20108]  _copy_from_user+0x2d/0xb0
[  563.350550][T20108]  ___sys_sendmsg+0x1c6/0x360
[  563.350593][T20108]  ? __pfx____sys_sendmsg+0x10/0x10
[  563.350664][T20108]  ? __fget_files+0x2a/0x420
[  563.350696][T20108]  ? __fget_files+0x3a0/0x420
[  563.350739][T20108]  __x64_sys_sendmsg+0x1bd/0x2a0
[  563.350776][T20108]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  563.350821][T20108]  ? __pfx_ksys_write+0x10/0x10
[  563.350856][T20108]  do_syscall_64+0x14d/0xf80
[  563.350890][T20108]  ? trace_irq_disable+0x3b/0x150
[  563.350924][T20108]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  563.350947][T20108]  ? clear_bhb_loop+0x40/0x90
[  563.350974][T20108]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  563.350996][T20108] RIP: 0033:0x7fb45119c799
[  563.351018][T20108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  563.351037][T20108] RSP: 002b:00007fb451fcc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  563.351062][T20108] RAX: ffffffffffffffda RBX: 00007fb451415fa0 RCX: 00007fb45119c799
[  563.351078][T20108] RDX: 0000000000004880 RSI: 0000200000000b80 RDI: 0000000000000004
[  563.351092][T20108] RBP: 00007fb451fcc090 R08: 0000000000000000 R09: 0000000000000000
[  563.351106][T20108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  563.351119][T20108] R13: 00007fb451416038 R14: 00007fb451415fa0 R15: 00007ffc2ababb98
[  563.351153][T20108]  </TASK>
[  563.450644][T20113] netlink: 4192 bytes leftover after parsing attributes in process `syz.4.3809'.
[  563.588543][T20117] tipc: New replicast peer: 255.255.255.255
[  563.595331][T20117] tipc: Enabled bearer <udp:syz2>, priority 10
[  563.674199][T20120] syzkaller0: entered promiscuous mode
[  563.680921][T20120] syzkaller0: entered allmulticast mode
[  563.710966][T20131] netlink: 'syz.0.3811': attribute type 1 has an invalid length.
[  563.748719][T20131] 8021q: adding VLAN 0 to HW filter on device bond2
[  563.803067][T20131] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3811'.
[  563.923290][T20143] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3813'.
[  563.983471][T20148] netlink: 'syz.1.3813': attribute type 83 has an invalid length.
[  564.659887][ T5839] Bluetooth: hci0: command 0x0c20 tx timeout
[  565.694058][T20131] 8021q: adding VLAN 0 to HW filter on device batadv1
[  565.703055][T20131] bond2: (slave batadv1): making interface the new active one
[  565.712012][T20131] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  565.746052][ T7995] tipc: Node number set to 3758096385
[  565.912978][T20158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3818'.
[  566.057945][T20171] lo speed is unknown, defaulting to 1000
[  566.065365][T16921] IPVS: starting estimator thread 0...
[  566.109802][T20170] xt_TCPMSS: Only works on TCP SYN packets
[  566.120203][T20170] x_tables: duplicate underflow at hook 2
[  566.156694][T20175] FAULT_INJECTION: forcing a failure.
[  566.156694][T20175] name failslab, interval 1, probability 0, space 0, times 1
[  566.178489][T20172] IPVS: using max 27 ests per chain, 64800 per kthread
[  566.179798][T20175] CPU: 0 UID: 0 PID: 20175 Comm: syz.3.3821 Not tainted syzkaller #0 PREEMPT(full) 
[  566.179869][T20175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  566.179904][T20175] Call Trace:
[  566.179926][T20175]  <TASK>
[  566.179948][T20175]  dump_stack_lvl+0xe8/0x150
[  566.180086][T20175]  should_fail_ex+0x412/0x560
[  566.180189][T20175]  should_failslab+0xa8/0x100
[  566.180319][T20175]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  566.180416][T20175]  ? __alloc_skb+0x186/0x7d0
[  566.180500][T20175]  ? __alloc_skb+0x1d0/0x7d0
[  566.180580][T20175]  ? __local_bh_enable_ip+0xd0/0x130
[  566.180682][T20175]  __alloc_skb+0x1d0/0x7d0
[  566.180768][T20175]  netlink_sendmsg+0x5d4/0xb40
[  566.180871][T20175]  ? __pfx_netlink_sendmsg+0x10/0x10
[  566.180952][T20175]  ? aa_sock_msg_perm+0xf1/0x1b0
[  566.181035][T20175]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  566.181111][T20175]  ____sys_sendmsg+0x972/0x9f0
[  566.181223][T20175]  ? __pfx_____sys_sendmsg+0x10/0x10
[  566.181335][T20175]  ? import_iovec+0x73/0xa0
[  566.181443][T20175]  ___sys_sendmsg+0x2a5/0x360
[  566.181572][T20175]  ? __pfx____sys_sendmsg+0x10/0x10
[  566.181756][T20175]  ? __fget_files+0x2a/0x420
[  566.181830][T20175]  ? __fget_files+0x3a0/0x420
[  566.181936][T20175]  __x64_sys_sendmsg+0x1bd/0x2a0
[  566.182031][T20175]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  566.182138][T20175]  ? __pfx_ksys_write+0x10/0x10
[  566.182231][T20175]  do_syscall_64+0x14d/0xf80
[  566.182324][T20175]  ? trace_irq_disable+0x3b/0x150
[  566.182407][T20175]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  566.182469][T20175]  ? clear_bhb_loop+0x40/0x90
[  566.182535][T20175]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  566.182626][T20175] RIP: 0033:0x7f45b959c799
[  566.182680][T20175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  566.182733][T20175] RSP: 002b:00007f45b77f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  566.182796][T20175] RAX: ffffffffffffffda RBX: 00007f45b9815fa0 RCX: 00007f45b959c799
[  566.182850][T20175] RDX: 0000000000004880 RSI: 0000200000000b80 RDI: 0000000000000004
[  566.182903][T20175] RBP: 00007f45b77f6090 R08: 0000000000000000 R09: 0000000000000000
[  566.182941][T20175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  566.182981][T20175] R13: 00007f45b9816038 R14: 00007f45b9815fa0 R15: 00007fff19c1ec48
[  566.183068][T20175]  </TASK>
[  566.503849][T20187] netlink: 'syz.0.3824': attribute type 10 has an invalid length.
[  566.514097][T20179] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3823'.
[  566.523738][T20189] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3825'.
[  566.526590][T20179] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3823'.
[  566.545051][T20187] dummy0: entered promiscuous mode
[  566.555256][T20189] nftables ruleset with unbound set
[  566.568757][T20187] bridge0: port 3(dummy0) entered blocking state
[  566.595092][T20187] bridge0: port 3(dummy0) entered disabled state
[  566.640986][T20187] dummy0: entered allmulticast mode
[  566.723473][T20194] netlink: 'syz.1.3827': attribute type 7 has an invalid length.
[  566.926642][T20202] netlink: 'syz.1.3830': attribute type 8 has an invalid length.
[  566.957431][T20205] netlink: 'syz.0.3831': attribute type 3 has an invalid length.
[  567.046157][T20171] wg1 speed is unknown, defaulting to 1000
[  567.134262][T20213] sctp: [Deprecated]: syz.0.3834 (pid 20213) Use of struct sctp_assoc_value in delayed_ack socket option.
[  567.134262][T20213] Use struct sctp_sack_info instead
[  567.159330][T20213] sctp: [Deprecated]: syz.0.3834 (pid 20213) Use of struct sctp_assoc_value in delayed_ack socket option.
[  567.159330][T20213] Use struct sctp_sack_info instead
[  567.273997][T20210] syzkaller1: entered promiscuous mode
[  567.280024][T20210] syzkaller1: entered allmulticast mode
[  567.322931][T20222] openvswitch: netlink: VXLAN extension 78 out of range max 1
[  567.463679][T20224] netdevsim netdevsim0 
: renamed from netdevsim0 (while UP)
[  567.624355][T20227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  567.966416][T20246] IPVS: length: 8 != 1152
[  567.998514][T20253] netlink: 'syz.3.3845': attribute type 1 has an invalid length.
[  568.006743][T20253] __nla_validate_parse: 4 callbacks suppressed
[  568.006764][T20253] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3845'.
[  568.025020][T20253] NCSI netlink: No device for ifindex 0
[  568.095238][T20254] lo speed is unknown, defaulting to 1000
[  568.106861][T20250] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3843'.
[  568.134924][T20250] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3843'.
[  568.151126][T20250] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22)
[  568.194560][T20258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3847'.
[  568.212348][T20258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3847'.
[  568.243787][T20260] FAULT_INJECTION: forcing a failure.
[  568.243787][T20260] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  568.259804][T20260] CPU: 1 UID: 0 PID: 20260 Comm: syz.1.3848 Not tainted syzkaller #0 PREEMPT(full) 
[  568.259839][T20260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  568.259855][T20260] Call Trace:
[  568.259865][T20260]  <TASK>
[  568.259875][T20260]  dump_stack_lvl+0xe8/0x150
[  568.259919][T20260]  should_fail_ex+0x412/0x560
[  568.259955][T20260]  _copy_from_iter+0x1d3/0x1670
[  568.259994][T20260]  ? rcu_is_watching+0x15/0xb0
[  568.260039][T20260]  ? __pfx__copy_from_iter+0x10/0x10
[  568.260082][T20260]  ? netlink_sendmsg+0x650/0xb40
[  568.260111][T20260]  ? skb_put+0x11b/0x210
[  568.260149][T20260]  netlink_sendmsg+0x6c0/0xb40
[  568.260193][T20260]  ? __pfx_netlink_sendmsg+0x10/0x10
[  568.260230][T20260]  ? aa_sock_msg_perm+0xf1/0x1b0
[  568.260263][T20260]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  568.260294][T20260]  ____sys_sendmsg+0x972/0x9f0
[  568.260354][T20260]  ? __pfx_____sys_sendmsg+0x10/0x10
[  568.260403][T20260]  ? import_iovec+0x73/0xa0
[  568.260444][T20260]  ___sys_sendmsg+0x2a5/0x360
[  568.260490][T20260]  ? __pfx____sys_sendmsg+0x10/0x10
[  568.260582][T20260]  ? __fget_files+0x2a/0x420
[  568.260621][T20260]  ? __fget_files+0x3a0/0x420
[  568.260667][T20260]  __x64_sys_sendmsg+0x1bd/0x2a0
[  568.260744][T20260]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  568.260794][T20260]  ? __pfx_ksys_write+0x10/0x10
[  568.260832][T20260]  do_syscall_64+0x14d/0xf80
[  568.260870][T20260]  ? trace_irq_disable+0x3b/0x150
[  568.260905][T20260]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  568.260930][T20260]  ? clear_bhb_loop+0x40/0x90
[  568.260960][T20260]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  568.260983][T20260] RIP: 0033:0x7fa5c459c799
[  568.261006][T20260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  568.261028][T20260] RSP: 002b:00007fa5c53f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  568.261053][T20260] RAX: ffffffffffffffda RBX: 00007fa5c4815fa0 RCX: 00007fa5c459c799
[  568.261071][T20260] RDX: 0000000000004880 RSI: 0000200000000b80 RDI: 0000000000000004
[  568.261086][T20260] RBP: 00007fa5c53f5090 R08: 0000000000000000 R09: 0000000000000000
[  568.261101][T20260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  568.261115][T20260] R13: 00007fa5c4816038 R14: 00007fa5c4815fa0 R15: 00007fffeb7ceda8
[  568.261152][T20260]  </TASK>
[  568.810467][T20269] netlink: 'syz.1.3851': attribute type 1 has an invalid length.
[  568.828930][T20271] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3852'.
[  568.860304][T20269] netlink: 'syz.1.3851': attribute type 1 has an invalid length.
[  568.877207][T20272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3851'.
[  568.968058][T20254] wg1 speed is unknown, defaulting to 1000
[  569.117815][T20277] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3855'.
[  569.471298][T20294] Bluetooth: MGMT ver 1.23
[  569.668029][T20305] netlink: 'syz.3.3862': attribute type 83 has an invalid length.
[  569.678332][T20306] netlink: 'syz.3.3862': attribute type 83 has an invalid length.
[  569.691378][T20306] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3862'.
[  569.704019][T20308] FAULT_INJECTION: forcing a failure.
[  569.704019][T20308] name failslab, interval 1, probability 0, space 0, times 0
[  569.727548][T20308] CPU: 0 UID: 0 PID: 20308 Comm: syz.0.3863 Not tainted syzkaller #0 PREEMPT(full) 
[  569.727574][T20308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  569.727585][T20308] Call Trace:
[  569.727592][T20308]  <TASK>
[  569.727600][T20308]  dump_stack_lvl+0xe8/0x150
[  569.727632][T20308]  should_fail_ex+0x412/0x560
[  569.727658][T20308]  should_failslab+0xa8/0x100
[  569.727682][T20308]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  569.727716][T20308]  ? __alloc_skb+0x1d0/0x7d0
[  569.727740][T20308]  ? __local_bh_enable_ip+0xd0/0x130
[  569.727769][T20308]  __alloc_skb+0x1d0/0x7d0
[  569.727794][T20308]  ? netlink_ack_tlv_len+0x6c/0x210
[  569.727819][T20308]  netlink_ack+0x146/0xa50
[  569.727839][T20308]  ? __pfx_genl_rcv_msg+0x10/0x10
[  569.727876][T20308]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  569.728053][T20308]  ? __pfx_nl80211_post_doit+0x10/0x10
[  569.728096][T20308]  ? __lock_acquire+0x6b5/0x2cf0
[  569.728146][T20308]  netlink_rcv_skb+0x2b6/0x4b0
[  569.728176][T20308]  ? __pfx_genl_rcv_msg+0x10/0x10
[  569.728213][T20308]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  569.728260][T20308]  ? down_read+0x272/0x2e0
[  569.728309][T20308]  ? genl_rcv+0xd/0x40
[  569.728345][T20308]  genl_rcv+0x28/0x40
[  569.728375][T20308]  netlink_unicast+0x80f/0x9b0
[  569.728410][T20308]  ? __pfx_netlink_unicast+0x10/0x10
[  569.728437][T20308]  ? netlink_sendmsg+0x650/0xb40
[  569.728462][T20308]  ? skb_put+0x11b/0x210
[  569.728497][T20308]  netlink_sendmsg+0x813/0xb40
[  569.728535][T20308]  ? __pfx_netlink_sendmsg+0x10/0x10
[  569.728568][T20308]  ? aa_sock_msg_perm+0xf1/0x1b0
[  569.728597][T20308]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  569.728624][T20308]  ____sys_sendmsg+0x972/0x9f0
[  569.728668][T20308]  ? __pfx_____sys_sendmsg+0x10/0x10
[  569.728711][T20308]  ? import_iovec+0x73/0xa0
[  569.728748][T20308]  ___sys_sendmsg+0x2a5/0x360
[  569.728787][T20308]  ? __pfx____sys_sendmsg+0x10/0x10
[  569.728859][T20308]  ? __fget_files+0x2a/0x420
[  569.728890][T20308]  ? __fget_files+0x3a0/0x420
[  569.728933][T20308]  __x64_sys_sendmsg+0x1bd/0x2a0
[  569.728969][T20308]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  569.729015][T20308]  ? __pfx_ksys_write+0x10/0x10
[  569.729051][T20308]  do_syscall_64+0x14d/0xf80
[  569.729092][T20308]  ? trace_irq_disable+0x3b/0x150
[  569.729126][T20308]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.729148][T20308]  ? clear_bhb_loop+0x40/0x90
[  569.729177][T20308]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.729200][T20308] RIP: 0033:0x7fb45119c799
[  569.729222][T20308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  569.729242][T20308] RSP: 002b:00007fb451fcc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  569.729266][T20308] RAX: ffffffffffffffda RBX: 00007fb451415fa0 RCX: 00007fb45119c799
[  569.729283][T20308] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 0000000000000003
[  569.729296][T20308] RBP: 00007fb451fcc090 R08: 0000000000000000 R09: 0000000000000000
[  569.729310][T20308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  569.729323][T20308] R13: 00007fb451416038 R14: 00007fb451415fa0 R15: 00007ffc2ababb98
[  569.729358][T20308]  </TASK>
[  570.132916][T20315] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3866'.
[  570.187929][T20317] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  570.382584][T20330] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD
[  570.608128][T20347] netlink: 'syz.1.3876': attribute type 1 has an invalid length.
[  571.328521][T20396] veth3: entered promiscuous mode
[  571.333776][T20396] veth3: entered allmulticast mode
[  571.360893][T20397] veth5: entered promiscuous mode
[  571.366280][T20397] veth5: entered allmulticast mode
[  571.515506][T20405] veth0_to_team: entered promiscuous mode
[  571.523343][T20405] veth1_to_hsr: entered promiscuous mode
[  571.534991][T20405] debugfs: 'hsr0' already exists in 'hsr'
[  571.543882][T20405] Cannot create hsr debugfs directory
[  571.549855][T20405] hsr0: entered promiscuous mode
[  571.676734][T20414] netlink: 'syz.2.3896': attribute type 39 has an invalid length.
[  571.781197][T20417] netlink: 'syz.1.3897': attribute type 7 has an invalid length.
[  572.540729][T20475] netlink: 'syz.4.3912': attribute type 10 has an invalid length.
[  572.640339][T20477] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  572.833969][T20433] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  573.028260][T20484] __nla_validate_parse: 18 callbacks suppressed
[  573.028281][T20484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3915'.
[  573.049710][T20485] netlink: 'syz.4.3916': attribute type 1 has an invalid length.
[  573.080644][T20491] netlink: 'syz.3.3918': attribute type 1 has an invalid length.
[  573.169911][T20485] 8021q: adding VLAN 0 to HW filter on device bond4
[  573.189241][T20497] xt_CT: You must specify a L4 protocol and not use inversions on it
[  573.464994][T20519] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3922'.
[  573.790286][T20535] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6
[  573.922006][T20542] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  573.933159][T20542] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  573.942946][T20542] gretap2: entered promiscuous mode
[  573.948345][T20542] gretap2: entered allmulticast mode
[  574.470592][T20547] sctp: [Deprecated]: syz.1.3928 (pid 20547) Use of int in max_burst socket option.
[  574.470592][T20547] Use struct sctp_assoc_value instead
[  576.022756][T20495] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  576.187269][T20549] gtp0: entered promiscuous mode
[  576.194235][T20549] gtp0: entered allmulticast mode
[  576.269199][T20555] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3932'.
[  576.460726][T20563] gretap0: entered promiscuous mode
[  576.479866][T20563] gretap0: entered allmulticast mode
[  576.662844][T20576] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  576.714458][T20581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3939'.
[  576.826831][T20585] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes.
[  577.706158][T20636] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3953'.
[  577.736238][T20636] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3953'.
[  577.866371][T20640] xt_CT: You must specify a L4 protocol and not use inversions on it
[  577.950710][T20654] : renamed from hsr0 (while UP)
[  578.043565][T20654] netlink: set zone limit has 4 unknown bytes
[  578.137875][T20666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3961'.
[  578.190184][T20671] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3960'.
[  578.199814][T20671] netlink: 'syz.3.3960': attribute type 1 has an invalid length.
[  578.293019][T20671] netlink: 'syz.3.3960': attribute type 13 has an invalid length.
[  578.362652][T20677] netlink: 'syz.0.3965': attribute type 4 has an invalid length.
[  578.399327][T20680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3966'.
[  578.439342][T20671] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  579.021792][T20705] ieee802154 phy1 wpan1: encryption failed: -22
[  579.076971][T20706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3972'.
[  579.173237][T20708] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  579.443836][T20723] netlink: 'syz.0.3981': attribute type 21 has an invalid length.
[  579.452195][T20723] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3981'.
[  579.486791][T20723] nbd: must specify a device to reconfigure
[  579.681988][T20739] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  579.746997][T20739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3987'.
[  579.787536][T20749] IPv6: sit1: Disabled Multicast RS
[  579.938934][T20754] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3992'.
[  579.972696][T20758] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  580.077290][T20763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3995'.
[  580.194825][T20763] bridge_slave_0: left allmulticast mode
[  580.203547][T20763] bridge_slave_0: left promiscuous mode
[  580.217272][T20763] bridge0: port 1(bridge_slave_0) entered disabled state
[  580.240848][T20763] bridge_slave_1: left allmulticast mode
[  580.250837][T20763] bridge_slave_1: left promiscuous mode
[  580.257681][T20763] bridge0: port 2(bridge_slave_1) entered disabled state
[  580.279766][T20763] bond0: (slave bond_slave_0): Releasing backup interface
[  580.317491][T20763] bond0: (slave bond_slave_1): Releasing backup interface
[  580.338609][T20763] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check.
[  580.357523][T20778] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3998'.
[  580.389233][T20775] dvmrp6: entered allmulticast mode
[  580.548942][T20785] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4002'.
[  580.645107][T20788] nbd: device at index 64 is going down
[  580.868362][T19964] udevd[19964]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  580.901019][T19962] udevd[19962]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  580.965423][T20808] netlink: 'syz.4.4004': attribute type 16 has an invalid length.
[  581.011467][T20808] netlink: 'syz.4.4004': attribute type 17 has an invalid length.
[  581.053360][T20807] bridge0: port 1(bridge_slave_0) entered disabled state
[  581.074630][T20813] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  581.096420][T20807] bridge0: port 2(bridge_slave_1) entered disabled state
[  581.200303][T20808] erspan0: left promiscuous mode
[  581.295291][T20808] bridge0: port 1(bridge_slave_0) entered blocking state
[  581.302603][T20808] bridge0: port 1(bridge_slave_0) entered forwarding state
[  581.315923][T20808] bridge0: port 2(bridge_slave_1) entered blocking state
[  581.323167][T20808] bridge0: port 2(bridge_slave_1) entered forwarding state
[  581.423428][T20808] bond1: left promiscuous mode
[  581.429923][T20808] bond1: left allmulticast mode
[  581.443095][T20808] gretap1: left promiscuous mode
[  581.452756][T20808] gretap1: left allmulticast mode
[  581.479245][T20808] 8021q: adding VLAN 0 to HW filter on device bond2
[  581.489842][T20808] 8021q: adding VLAN 0 to HW filter on device bond3
[  581.503616][T20808] veth3: left promiscuous mode
[  581.509608][T20808] veth3: left allmulticast mode
[  581.542068][T20808] veth5: left promiscuous mode
[  581.549943][T20808] veth5: left allmulticast mode
[  581.591748][T20834] IPVS: length: 64 != 24
[  582.024491][T20818] bond0: left promiscuous mode
[  582.066251][T20818] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  582.113922][T20840] ip6_vti0: mtu less than device minimum
[  582.904291][T16921] IPVS: starting estimator thread 0...
[  583.025850][T20894] IPVS: using max 28 ests per chain, 67200 per kthread
[  583.269389][T20922] __nla_validate_parse: 6 callbacks suppressed
[  583.269410][T20922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4037'.
[  583.287358][T20921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4037'.
[  583.306060][T20917] netlink: 'syz.3.4035': attribute type 4 has an invalid length.
[  583.396450][T20921] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4037'.
[  583.417149][T20922] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4037'.
[  583.558682][T20931] sit0: entered promiscuous mode
[  583.583387][T20931] netlink: 'syz.0.4038': attribute type 1 has an invalid length.
[  583.604048][T20934] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4040'.
[  583.613852][T20931] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4038'.
[  583.680735][T20935] gtp0: entered promiscuous mode
[  583.755643][T20935] gtp0: entered allmulticast mode
[  583.802281][T20950] netlink: 184 bytes leftover after parsing attributes in process `syz.1.4044'.
[  584.058827][T20958] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4045'.
[  584.795856][T20950] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  584.845931][T20950] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  585.624434][ T5491] veth0_macvtap: left promiscuous mode
[  585.687479][T20973] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4048'.
[  585.810622][T20981] syzkaller0: entered promiscuous mode
[  585.817846][T20981] syzkaller0: entered allmulticast mode
[  585.825250][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  585.839012][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  586.183739][T21012] netlink: 'syz.0.4054': attribute type 1 has an invalid length.
[  586.193765][T21012] netlink: 216 bytes leftover after parsing attributes in process `syz.0.4054'.
[  587.884659][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  587.895428][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  587.953235][T21017] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  588.189163][T21027] ip6tnl0: Caught tx_queue_len zero misconfig
[  588.382156][T21042] __nla_validate_parse: 1 callbacks suppressed
[  588.382178][T21042] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4061'.
[  588.457961][T21045] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4063'.
[  588.614330][T21056] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.4065'.
[  588.669744][T21060] netlink: 'syz.2.4067': attribute type 29 has an invalid length.
[  588.705902][T21060] netlink: 'syz.2.4067': attribute type 29 has an invalid length.
[  588.874976][T21066] vti0: entered promiscuous mode
[  588.908654][T21066] vti0: entered allmulticast mode
[  588.927114][T21066] team0: Device vti0 is of different type
[  589.198523][T21086] siw: device registration error -23
[  589.638049][T21111] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2
[  589.845930][T21119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4082'.
[  590.036678][T21125] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4084'.
[  590.071882][T21128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  590.089847][T21127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  590.487288][T21154] 8021q: VLANs not supported on ip_vti0
[  590.671260][T21165] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4093'.
[  590.809637][T21161] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4093'.
[  590.841925][T21161] netlink: 'syz.1.4093': attribute type 1 has an invalid length.
[  590.890721][T21177] netlink: 184 bytes leftover after parsing attributes in process `syz.0.4097'.
[  591.672547][T21213] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  591.861999][T21215] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4101'.
[  592.232554][T21236] netlink: 'syz.0.4111': attribute type 1 has an invalid length.
[  592.242434][T21236] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4111'.
[  592.484021][T21251] Unsupported ieee802154 address type: 0
[  592.576923][T21255] netlink: 'syz.2.4120': attribute type 2 has an invalid length.
[  592.614468][T21255] �9: entered promiscuous mode
[  592.762054][T21260] netlink: 'syz.0.4121': attribute type 1 has an invalid length.
[  592.826754][T21260] 8021q: adding VLAN 0 to HW filter on device bond3
[  592.929563][T21270] bond3: (slave gretap3): making interface the new active one
[  592.938984][T21270] bond3: (slave gretap3): Enslaving as an active interface with an up link
[  593.143110][T21281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  593.227847][T21274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  593.254719][T21287] syzkaller0: entered promiscuous mode
[  593.267916][T21287] syzkaller0: entered allmulticast mode
[  593.614025][T21310] __nla_validate_parse: 6 callbacks suppressed
[  593.614040][T21310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4134'.
[  593.754195][T21315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4137'.
[  593.832409][T21318] siw: device registration error -23
[  594.176989][   T51] Bluetooth: hci1: command 0x0405 tx timeout
[  594.589762][T21352] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4145'.
[  595.379352][T21396] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4156'.
[  595.486832][T21399] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4158'.
[  595.518091][T21401] netlink: 'syz.0.4154': attribute type 4 has an invalid length.
[  595.526632][T21401] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4154'.
[  595.551387][T21401] .`: renamed from bond0 (while UP)
[  595.585202][T21403] ip6gre2: entered promiscuous mode
[  595.598979][T21401] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4154'.
[  595.857977][ T5839] Bluetooth: hci5: command 0x0406 tx timeout
[  595.923271][T21412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4163'.
[  596.164304][T21428] syzkaller0: entered promiscuous mode
[  596.184236][T21428] syzkaller0: entered allmulticast mode
[  596.228697][T21429] FAULT_INJECTION: forcing a failure.
[  596.228697][T21429] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  596.276976][T21429] CPU: 0 UID: 0 PID: 21429 Comm: syz.0.4168 Not tainted syzkaller #0 PREEMPT(full) 
[  596.277015][T21429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  596.277029][T21429] Call Trace:
[  596.277036][T21429]  <TASK>
[  596.277044][T21429]  dump_stack_lvl+0xe8/0x150
[  596.277080][T21429]  should_fail_ex+0x412/0x560
[  596.277108][T21429]  _copy_from_iter+0x1d3/0x1670
[  596.277133][T21429]  ? unwind_next_frame+0xa5/0x23c0
[  596.277213][T21429]  ? __lock_acquire+0x6b5/0x2cf0
[  596.277248][T21429]  ? __pfx__copy_from_iter+0x10/0x10
[  596.277293][T21429]  tun_get_user+0x275/0x3dd0
[  596.277433][T21429]  ? aa_file_perm+0x192/0x15e0
[  596.277468][T21429]  ? aa_file_perm+0x50e/0x15e0
[  596.277496][T21429]  ? __pfx_tun_get_user+0x10/0x10
[  596.277523][T21429]  ? aa_file_perm+0x192/0x15e0
[  596.277557][T21429]  ? __lock_acquire+0x6b5/0x2cf0
[  596.277598][T21429]  ? ref_tracker_alloc+0x35c/0x4c0
[  596.277672][T21429]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  596.277706][T21429]  ? tun_get+0x1c/0x2f0
[  596.277742][T21429]  ? tun_get+0x1c/0x2f0
[  596.277770][T21429]  ? tun_get+0x1c/0x2f0
[  596.277805][T21429]  tun_chr_write_iter+0x113/0x200
[  596.277839][T21429]  vfs_write+0x61d/0xb90
[  596.277867][T21429]  ? __pfx_vfs_write+0x10/0x10
[  596.277895][T21429]  ? __fget_files+0x2a/0x420
[  596.277930][T21429]  ksys_write+0x150/0x270
[  596.277951][T21429]  ? __pfx_ksys_write+0x10/0x10
[  596.277980][T21429]  do_syscall_64+0x14d/0xf80
[  596.278020][T21429]  ? trace_irq_disable+0x3b/0x150
[  596.278049][T21429]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  596.278068][T21429]  ? clear_bhb_loop+0x40/0x90
[  596.278091][T21429]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  596.278110][T21429] RIP: 0033:0x7fb45119c799
[  596.278129][T21429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  596.278145][T21429] RSP: 002b:00007fb451fcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  596.278165][T21429] RAX: ffffffffffffffda RBX: 00007fb451415fa0 RCX: 00007fb45119c799
[  596.278178][T21429] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 000000000000000e
[  596.278190][T21429] RBP: 00007fb451fcc090 R08: 0000000000000000 R09: 0000000000000000
[  596.278201][T21429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  596.278215][T21429] R13: 00007fb451416038 R14: 00007fb451415fa0 R15: 00007ffc2ababb98
[  596.278245][T21429]  </TASK>
[  596.814633][T21455] netlink: 'syz.2.4176': attribute type 1 has an invalid length.
[  596.876464][T21458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4175'.
[  596.910914][T21460] netlink: 'syz.2.4178': attribute type 4 has an invalid length.
[  596.919852][T21460] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4178'.
[  597.192098][T21471] syzkaller0: entered promiscuous mode
[  597.198181][T21471] syzkaller0: entered allmulticast mode
[  597.815340][T21487] sctp: [Deprecated]: syz.2.4185 (pid 21487) Use of int in max_burst socket option deprecated.
[  597.815340][T21487] Use struct sctp_assoc_value instead
[  599.142613][T21499] netlink: 'syz.1.4188': attribute type 3 has an invalid length.
[  599.329638][T21508] bond0: (slave rose0): Error: Device can not be enslaved while up
[  599.362573][T21508] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4191'.
[  599.452240][   T29] audit: type=1107 audit(1772706880.801:6): pid=21520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹�5ž÷Œ•%èÍUýAÊ�ÃËÙ ë0ä�™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›'
[  599.542017][T21528] netlink: 'syz.4.4197': attribute type 21 has an invalid length.
[  599.618386][T21530] tipc: Enabling of bearer <u˩:s> rejected, media not registered
[  599.680286][T21533] netlink: 'syz.3.4201': attribute type 4 has an invalid length.
[  599.757082][T21538] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4202'.
[  599.833600][T21543] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4204'.
[  599.842926][T21543] netlink: 51 bytes leftover after parsing attributes in process `syz.3.4204'.
[  599.863909][T21543] netlink: 51 bytes leftover after parsing attributes in process `syz.3.4204'.
[  599.935106][T21547] syzkaller1: entered promiscuous mode
[  599.946738][T21547] syzkaller1: entered allmulticast mode
[  600.073081][T21555] delete_channel: no stack
[  600.147962][T21559] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4211'.
[  600.197216][T21559] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4211'.
[  600.424554][T21579] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4217'.
[  600.685383][T21598] netlink: 'syz.4.4221': attribute type 1 has an invalid length.
[  601.106353][T21613] syzkaller1: entered promiscuous mode
[  601.134603][T21613] syzkaller1: entered allmulticast mode
[  601.191477][T21613] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4225'.
[  601.330702][T21613] netlink: 'syz.4.4225': attribute type 7 has an invalid length.
[  601.387411][T21613] netlink: 'syz.4.4225': attribute type 8 has an invalid length.
[  601.517123][T21626] netlink: 'syz.2.4227': attribute type 2 has an invalid length.
[  601.524922][T21626] netlink: 'syz.2.4227': attribute type 11 has an invalid length.
[  601.552473][T21626] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4227'.
[  601.948999][T21636] syzkaller0: entered promiscuous mode
[  601.961560][T21636] syzkaller0: entered allmulticast mode
[  602.097307][T21658] netlink: 'syz.2.4234': attribute type 1 has an invalid length.
[  604.386994][T21690] syzkaller0: entered allmulticast mode
[  604.511815][T21698] __nla_validate_parse: 2 callbacks suppressed
[  604.511839][T21698] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.4244'.
[  604.545129][T21695] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4241'.
[  604.567576][T21705] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4244'.
[  604.687123][T21714] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4247'.
[  604.794103][T17595] IPVS: starting estimator thread 0...
[  604.907642][T21722] IPVS: using max 28 ests per chain, 67200 per kthread
[  604.967753][T21730] syzkaller0: entered promiscuous mode
[  604.973307][T21730] syzkaller0: entered allmulticast mode
[  605.045467][T21739] netlink: 'syz.3.4255': attribute type 1 has an invalid length.
[  605.142956][T21741] bond0: Unable to set up delay as MII monitoring is disabled
[  605.159189][T21741] bond0 (unregistering): Released all slaves
[  605.211028][T21748] netlink: 'syz.1.4258': attribute type 1 has an invalid length.
[  605.322463][T21752] netdevsim netdevsim0 netdevsim3: entered allmulticast mode
[  605.378248][T21748] bond4: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  605.418895][T21748] bond4: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  605.430377][T21748] bond4: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode
[  605.514027][T21752] dvmrp8: entered allmulticast mode
[  605.552142][T21750] bond4: (slave vcan1): The slave device specified does not support setting the MAC address
[  605.593761][T21750] bond4: (slave vcan1): making interface the new active one
[  605.618179][T21750] bond4: (slave vcan1): Enslaving as an active interface with an up link
[  605.649213][T21756] dvmrp6: left allmulticast mode
[  605.654483][T21756] dvmrp8: left allmulticast mode
[  605.819279][T21782] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4264'.
[  606.101669][ T5839] Bluetooth: hci3: command 0x0406 tx timeout
[  606.223879][T21763] syzkaller0: entered promiscuous mode
[  606.253814][T21763] syzkaller0: entered allmulticast mode
[  606.295106][T21751] netdevsim netdevsim0 netdevsim3: left allmulticast mode
[  606.675560][T21800] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4269'.
[  606.758411][T21809] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4270'.
[  606.959618][T21828] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4279'.
[  607.072581][T21834] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4280'.
[  607.112966][T21834] openvswitch: netlink: Flow key attr not present in new flow.
[  607.127368][T21834] netlink: 'syz.4.4280': attribute type 13 has an invalid length.
[  607.177087][T21834] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4280'.
[  607.187221][T21834] syz_tun: refused to change device tx_queue_len
[  607.390554][T21853] dvmrp6: entered allmulticast mode
[  607.696731][T21881] netlink: 'syz.1.4295': attribute type 21 has an invalid length.
[  607.704711][T21881] netlink: 'syz.1.4295': attribute type 4 has an invalid length.
[  607.713590][T21881] netlink: 'syz.1.4295': attribute type 5 has an invalid length.
[  607.722367][T21881] netlink: 'syz.1.4295': attribute type 21 has an invalid length.
[  607.732143][T21881] netlink: 'syz.1.4295': attribute type 4 has an invalid length.
[  607.740501][T21881] netlink: 'syz.1.4295': attribute type 5 has an invalid length.
[  607.863610][T21885] netlink: 'syz.2.4297': attribute type 4 has an invalid length.
[  608.086802][T21900] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  608.094338][T21900] batman_adv: batadv0: Removing interface: batadv_slave_0
[  608.103739][T21900] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  608.115876][T21900] batman_adv: batadv0: Removing interface: batadv_slave_1
[  608.413995][T21916] netlink: 'syz.1.4305': attribute type 2 has an invalid length.
[  608.506726][T21922] netlink: 'syz.4.4306': attribute type 10 has an invalid length.
[  608.543683][T21922] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  608.888646][T21937] syzkaller0: entered promiscuous mode
[  608.894206][T21937] syzkaller0: entered allmulticast mode
[  609.369224][T21974] team0: Device vxcan1 is of different type
[  609.500596][T21971] can: request_module (can-proto-4) failed.
[  609.587255][T21986] __nla_validate_parse: 18 callbacks suppressed
[  609.587277][T21986] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4326'.
[  609.933977][T22006] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4331'.
[  609.977566][T22009] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4330'.
[  610.052497][T22011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4331'.
[  610.074858][T22006] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) !
[  610.154984][T22016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4333'.
[  610.195720][T22016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4333'.
[  610.334732][T22026] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.4336'.
[  610.458359][T22026] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4336'.
[  610.468904][T22036] xt_CT: You must specify a L4 protocol and not use inversions on it
[  610.565014][T22036] xt_CT: You must specify a L4 protocol and not use inversions on it
[  610.586798][T22043] sit0: Caught tx_queue_len zero misconfig
[  611.023149][T22067] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4349'.
[  611.151844][T22079] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4347'.
[  613.099349][T22105] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  613.994746][T22063] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  614.277123][T22135] hsr_slave_0 (unregistering): left promiscuous mode
[  614.503768][T22153] syzkaller0: entered promiscuous mode
[  614.544562][T22153] syzkaller0: entered allmulticast mode
[  614.679319][T22170] bond5: option arp_all_targets: invalid value (18446744073709551613)
[  614.709714][T22170] bond5 (unregistering): Released all slaves
[  615.115867][T22199] __nla_validate_parse: 5 callbacks suppressed
[  615.115891][T22199] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4387'.
[  615.489583][T22217] validate_nla: 5 callbacks suppressed
[  615.489603][T22217] netlink: 'syz.4.4392': attribute type 1 has an invalid length.
[  615.519633][T22220] tipc: Failed to obtain node identity
[  615.525211][T22220] tipc: Enabling of bearer <ib:sit0> rejected, failed to enable media
[  615.622835][T22227] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.4396'.
[  615.633503][T22224] lo speed is unknown, defaulting to 1000
[  615.680076][T22223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  615.901426][T22239] netlink: 276 bytes leftover after parsing attributes in process `syz.3.4401'.
[  615.939871][T22241] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4400'.
[  616.003135][T22224] wg1 speed is unknown, defaulting to 1000
[  616.034103][T22242] netlink: 'syz.4.4402': attribute type 2 has an invalid length.
[  616.426437][T22266] unsupported nla_type 33542
[  616.928510][T22287] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4415'.
[  616.967344][T22292] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4415'.
[  616.983763][T22291] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  617.123439][T22299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4418'.
[  617.158907][T22301] bridge4: entered promiscuous mode
[  617.164282][T22301] bridge4: entered allmulticast mode
[  617.192616][ T9186] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0
[  617.207601][ T9186] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0
[  617.229352][ T9186] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0
[  617.252357][T22304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4420'.
[  617.296906][ T9186] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0
[  617.354349][T22314] netlink: 'syz.0.4423': attribute type 1 has an invalid length.
[  617.373029][T22314] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4423'.
[  617.460951][T22323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4423'.
[  618.024141][T22343] Bluetooth: MGMT ver 1.23
[  618.040241][T22343] netlink: 'syz.3.4432': attribute type 6 has an invalid length.
[  618.296752][T22356] netlink: 'syz.0.4437': attribute type 29 has an invalid length.
[  618.318427][T22355] netlink: 'syz.0.4437': attribute type 29 has an invalid length.
[  618.376257][T22356] netlink: 'syz.0.4437': attribute type 29 has an invalid length.
[  618.451831][T22367] netlink: 'syz.3.4441': attribute type 10 has an invalid length.
[  618.463000][T22367] bridge0: port 2(bridge_slave_1) entered disabled state
[  618.470799][T22367] bridge0: port 1(bridge_slave_0) entered disabled state
[  618.485059][T22367] bridge0: port 2(bridge_slave_1) entered blocking state
[  618.492476][T22367] bridge0: port 2(bridge_slave_1) entered listening state
[  618.499978][T22367] bridge0: port 1(bridge_slave_0) entered blocking state
[  618.507231][T22367] bridge0: port 1(bridge_slave_0) entered listening state
[  618.529574][T22367] bond0: (slave bridge0): Enslaving as an active interface with a down link
[  618.653507][T22376] netdevsim netdevsim3 
: renamed from netdevsim0 (while UP)
[  618.692622][T22376] lo: Caught tx_queue_len zero misconfig
[  618.758661][T22383] syzkaller0: entered promiscuous mode
[  618.775040][T22383] syzkaller0: entered allmulticast mode
[  618.865245][T22387] syzkaller0: entered promiscuous mode
[  618.871625][T22387] syzkaller0: entered allmulticast mode
[  619.083456][T22397] netlink: 'syz.1.4453': attribute type 9 has an invalid length.
[  619.261200][T22399] netlink: 'syz.3.4452': attribute type 2 has an invalid length.
[  619.280612][T22411] IPVS: sh: FWM 3 0x00000003 - no destination available
[  619.388380][T22410] bond5: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  619.401697][T22410] bond5 (unregistering): Released all slaves
[  619.567033][T22409] lo speed is unknown, defaulting to 1000
[  619.604955][T22413] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  619.666331][T22419] lo speed is unknown, defaulting to 1000
[  620.044460][T22409] wg1 speed is unknown, defaulting to 1000
[  620.130424][T22437] syzkaller0: entered promiscuous mode
[  620.137293][T22437] syzkaller0: entered allmulticast mode
[  620.318282][T22419] wg1 speed is unknown, defaulting to 1000
[  620.986828][T22454] __nla_validate_parse: 16 callbacks suppressed
[  620.986853][T22454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4468'.
[  621.022290][T22458] nbd2: detected capacity change from 0 to 127
[  621.062043][ T5147] block nbd2: Receive control failed (result -104)
[  621.509378][T22492] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4474'.
[  621.525319][T22492] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4474'.
[  621.540552][T22492] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4474'.
[  621.818126][T22499] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4476'.
[  621.827796][T22499] unsupported nlmsg_type 40
[  621.965529][T22506] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  621.987485][T22506] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  621.999200][T22506] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  622.010199][T22506] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  622.023792][T22506] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  622.035799][T22506] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  622.042323][T22513] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4477'.
[  622.045865][T22506] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  622.046001][T22506] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  622.046173][T22506] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  622.171220][T22508] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  622.215508][T22514] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  623.128762][T22557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4484'.
[  623.348831][T22555] syzkaller0: entered promiscuous mode
[  623.363408][T22555] syzkaller0: entered allmulticast mode
[  623.532458][T22578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4488'.
[  623.650200][T22583] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4488'.
[  623.683868][T22548] block nbd4: not configured, cannot reconfigure
[  625.401539][T22596] gtp1: entered promiscuous mode
[  625.417619][T22596] gtp1: entered allmulticast mode
[  625.457003][T22598] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4492'.
[  625.861457][T22621] bond4: option arp_all_targets: invalid value (18446744073709551613)
[  625.928674][T22621] bond4 (unregistering): Released all slaves
[  626.023789][T22639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4501'.
[  626.197891][T22647] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4502'.
[  626.700716][T22666] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4507'.
[  626.918678][T22672] netlink: 'syz.3.4509': attribute type 1 has an invalid length.
[  627.019166][T22672] 8021q: adding VLAN 0 to HW filter on device bond4
[  627.163116][T22685] netlink: 'syz.2.4511': attribute type 21 has an invalid length.
[  627.175221][T22680] bond4: (slave gretap1): making interface the new active one
[  627.185939][T22685] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4511'.
[  627.211599][T22680] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  627.341127][T22679] bond6 (unregistering): Released all slaves
[  627.615360][T22701] nbd: must specify at least one socket
[  627.922544][T22717] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4523'.
[  627.966186][T22717] bridge_slave_1: default FDB implementation only supports local addresses
[  628.561671][T22755] net_ratelimit: 4757 callbacks suppressed
[  628.561695][T22755] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  628.968940][T22779] ip6t_srh: unknown srh match flags  5F28
[  629.475062][T22803] xt_recent: Unsupported userspace flags (000000b1)
[  630.688676][T22863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4563'.
[  630.907195][T22874] netlink: 'syz.4.4567': attribute type 1 has an invalid length.
[  630.948988][T22874] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4567'.
[  630.963733][T22877] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  630.987792][T22880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4568'.
[  631.060522][T22882] netlink: 'syz.3.4569': attribute type 3 has an invalid length.
[  631.152783][   T29] audit: type=1804 audit(1772706912.501:7): pid=22884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4569" name="/newroot/275/cgroup.controllers" dev="tmpfs" ino=1420 res=1 errno=0
[  631.227637][   T29] audit: type=1800 audit(1772706912.501:8): pid=22884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4569" name="cgroup.controllers" dev="tmpfs" ino=1420 res=0 errno=0
[  631.433091][T22905] IPv6: NLM_F_CREATE should be specified when creating new route
[  631.553733][T22908] netlink: 252 bytes leftover after parsing attributes in process `syz.1.4576'.
[  631.678160][T22913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4579'.
[  631.689775][T22918] netlink: 208 bytes leftover after parsing attributes in process `syz.2.4578'.
[  631.706275][ T5839] Bluetooth: hci2: command 0x0405 tx timeout
[  631.940203][T22929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4583'.
[  631.974755][T22929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4583'.
[  632.194265][T22946] netlink: 1432 bytes leftover after parsing attributes in process `syz.2.4587'.
[  632.526412][T22958] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  632.611392][T22968] geneve2: entered promiscuous mode
[  632.647377][  T150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  632.674404][  T150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  632.714104][  T150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  632.744943][  T150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  632.802602][T22975] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4595'.
[  632.820386][T22975] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4595'.
[  632.839797][T22975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4595'.
[  632.972836][T22982] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4598'.
[  633.013156][T22982] netem: invalid attributes len -24
[  633.031973][T22982] netem: change failed
[  633.389883][T23008] netlink: 'syz.1.4605': attribute type 29 has an invalid length.
[  633.400088][T23008] netlink: 'syz.1.4605': attribute type 29 has an invalid length.
[  633.446688][T23008] netlink: 'syz.1.4605': attribute type 29 has an invalid length.
[  633.458973][T23008] netlink: 'syz.1.4605': attribute type 29 has an invalid length.
[  633.477406][T23008] netlink: 'syz.1.4605': attribute type 29 has an invalid length.
[  633.545130][T23008] netlink: 'syz.1.4605': attribute type 29 has an invalid length.
[  633.578611][T23008] netlink: 'syz.1.4605': attribute type 29 has an invalid length.
[  633.587425][T23011] netlink: 'syz.0.4606': attribute type 83 has an invalid length.
[  633.604113][T23011] dummy0: left allmulticast mode
[  633.611357][T23011] bridge0: port 3(dummy0) entered disabled state
[  633.683183][T23011] bridge_slave_0: left allmulticast mode
[  633.689880][T23011] bridge_slave_0: left promiscuous mode
[  633.696888][T23011] bridge0: port 1(bridge_slave_0) entered disabled state
[  633.727126][T23011] bridge_slave_1: left allmulticast mode
[  633.733075][T23011] bridge_slave_1: left promiscuous mode
[  633.743404][T23011] bridge0: port 2(bridge_slave_1) entered disabled state
[  633.807125][T23011] .`: (slave bond_slave_0): Releasing backup interface
[  633.834554][T23011] .`: (slave bond_slave_1): Releasing backup interface
[  633.920576][T23011] team0: Port device team_slave_0 removed
[  633.953480][T23011] team0: Port device team_slave_1 removed
[  633.980820][T23011] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  634.097363][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  634.105777][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[  634.320906][T23050] netlink: 'syz.2.4616': attribute type 4 has an invalid length.
[  634.531234][T23056] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  634.770981][T23068] netlink: 'syz.2.4622': attribute type 32 has an invalid length.
[  634.899075][T23068] bond6: option coupled_control: invalid value (52)
[  634.934488][T23068] bond6 (unregistering): Released all slaves
[  634.986216][T23080] xt_ecn: cannot match TCP bits for non-tcp packets
[  635.209812][T23095] tipc: Started in network mode
[  635.224487][T23095] tipc: Node identity fa506c010591, cluster identity 4711
[  635.253375][T23095] tipc: Enabled bearer <eth:xfrm0>, priority 11
[  635.268466][T23098] syzkaller1: entered promiscuous mode
[  635.274467][T23098] syzkaller1: entered allmulticast mode
[  636.366779][T17587] tipc: Node number set to 4290866177
[  636.682718][T23203] x_tables: duplicate underflow at hook 1
[  636.970201][T23220] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  637.088468][T23228] __nla_validate_parse: 12 callbacks suppressed
[  637.088488][T23228] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4665'.
[  637.094487][T23225] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4664'.
[  637.209693][T23233] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4666'.
[  637.570236][T23258] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4673'.
[  637.688965][T23270] vlan5: entered promiscuous mode
[  637.694086][T23270] bridge0: entered promiscuous mode
[  637.748342][T23269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4676'.
[  637.769899][T23275] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4677'.
[  637.799363][T23269] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4676'.
[  637.824545][T23270] netlink: 'syz.3.4673': attribute type 11 has an invalid length.
[  637.888292][T23281] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4677'.
[  638.187079][T23294] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4682'.
[  638.222799][T23297] team0: Port device vxcan1 added
[  638.326767][T23306] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) !
[  638.362545][T23306] syzkaller0: entered promiscuous mode
[  638.378458][T23306] syzkaller0: entered allmulticast mode
[  638.535376][T23316] debugfs: 'KŠŸu™crµ±K:‘£ÿˆÌ¥ÝB�ßÝ£|“¼ÚÞlS·œ-!' already exists in 'ieee80211'
[  639.159166][T23354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4694'.
[  639.213728][T23357] validate_nla: 3 callbacks suppressed
[  639.213747][T23357] netlink: 'syz.1.4696': attribute type 32 has an invalid length.
[  639.318202][T23357] bond5: option coupled_control: invalid value (52)
[  639.327472][T23357] bond5 (unregistering): Released all slaves
[  639.404373][T23359] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  639.417872][T23354] bridge0: port 1(bridge_slave_0) entered forwarding state
[  639.929215][T23382] netlink: 'syz.0.4702': attribute type 1 has an invalid length.
[  640.712211][T23428] Cannot find add_set index 46338 as target
[  640.719374][T23430] ksmbd: Unknown IPC event: 3, ignore.
[  641.467715][T23485] netlink: Unknown conntrack attr (type=2304, max=9)
[  641.917245][T23511] netlink: 'syz.4.4740': attribute type 2 has an invalid length.
[  642.240235][T23525] pim6reg: entered allmulticast mode
[  642.256382][T23525] pim6reg: left allmulticast mode
[  642.836720][T23533] netlink: 'syz.3.4742': attribute type 1 has an invalid length.
[  642.846904][T23533] __nla_validate_parse: 10 callbacks suppressed
[  642.846925][T23533] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4742'.
[  642.985141][T23540] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.4745'.
[  643.005724][T23533] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4742'.
[  643.170807][T23544] netlink: 'syz.2.4749': attribute type 3 has an invalid length.
[  643.182210][T23543] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4747'.
[  643.204089][T23551] netlink: 'syz.1.4750': attribute type 1 has an invalid length.
[  643.213854][T23544] netlink: 766 bytes leftover after parsing attributes in process `syz.2.4749'.
[  643.261825][T23547] xt_CT: No such helper "snmp_trap"
[  643.351339][T23562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4748'.
[  643.408774][T23552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4748'.
[  643.473077][T23557] bridge0: port 2(bridge_slave_1) entered disabled state
[  643.480992][T23557] bridge0: port 1(bridge_slave_0) entered disabled state
[  643.521543][T23567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4753'.
[  643.920938][T23595] netlink: 'syz.2.4763': attribute type 14 has an invalid length.
[  644.005307][T23599] netlink: 'syz.3.4764': attribute type 1 has an invalid length.
[  644.021647][T23599] netlink: 216 bytes leftover after parsing attributes in process `syz.3.4764'.
[  644.114518][T23607] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4766'.
[  644.141910][T23610] netlink: 'syz.3.4768': attribute type 8 has an invalid length.
[  645.488406][T23637] sch_tbf: burst 0 is lower than device lo mtu (81) !
[  647.059597][T23602] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  647.200110][T23651] netlink: 'syz.1.4779': attribute type 1 has an invalid length.
[  647.279056][T23657] 8021q: VLANs not supported on ip6tnl0
[  647.340637][T23664] netlink: 'syz.1.4784': attribute type 6 has an invalid length.
[  647.626732][T23680] delete_channel: no stack
[  647.646674][T23684] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  648.061964][T23691] netlink: 'syz.2.4789': attribute type 1 has an invalid length.
[  648.214195][T23697] __nla_validate_parse: 9 callbacks suppressed
[  648.214216][T23697] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4790'.
[  648.426193][T23708] macvtap1: entered promiscuous mode
[  648.431528][T23708] syz_tun: entered promiscuous mode
[  648.441047][T23708] syz_tun: left promiscuous mode
[  649.455852][    C0] bridge0: port 2(bridge_slave_1) entered forwarding state
[  649.463199][    C0] bridge0: topology change detected, propagating
[  649.470019][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[  649.477287][    C0] bridge0: topology change detected, propagating
[  649.486594][ T9811] bond0: (slave bridge0): link status definitely up, 0 Mbps full duplex
[  650.271725][T23657] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  650.487879][T23721] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4795'.
[  650.520941][T23724] netlink: 'syz.1.4798': attribute type 4 has an invalid length.
[  650.869067][T23744] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4805'.
[  651.089910][T23758] ip6t_rpfilter: unknown options
[  651.385279][ T1171] block nbd2: Possible stuck request ffff8880267a0000: control (read@0,4096B). Runtime 30 seconds
[  651.606758][T23791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4818'.
[  651.816683][T23816] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4823'.
[  651.866324][T23816] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4823'.
[  651.919019][T23816] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4823'.
[  651.985406][T23816] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4823'.
[  652.008213][T23816] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4823'.
[  652.042566][T23816] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4823'.
[  652.462482][T23845] syzkaller0: entered promiscuous mode
[  652.477705][T23845] syzkaller0: entered allmulticast mode
[  652.664652][T23848] syzkaller0: entered promiscuous mode
[  652.677571][T23848] syzkaller0: entered allmulticast mode
[  652.709219][T23853] bond0: (slave bridge0): Releasing backup interface
[  652.724382][T23853] bridge0: port 2(bridge_slave_1) entered disabled state
[  652.731767][T23853] bridge0: port 1(bridge_slave_0) entered disabled state
[  652.754992][T23853] bridge_slave_0: left allmulticast mode
[  652.762357][T23853] bridge_slave_0: left promiscuous mode
[  652.769113][T23853] bridge0: port 1(bridge_slave_0) entered disabled state
[  652.824682][T23853] bridge_slave_1: left allmulticast mode
[  652.833621][T23853] bridge_slave_1: left promiscuous mode
[  652.851231][T23853] bridge0: port 2(bridge_slave_1) entered disabled state
[  652.872541][T23853] bond0: (slave bond_slave_0): Releasing backup interface
[  652.887823][T23853] bond0: (slave bond_slave_1): Releasing backup interface
[  652.909241][T23853] team0: Port device team_slave_0 removed
[  652.922511][T23853] team0: Port device team_slave_1 removed
[  652.932687][T23853] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  652.941185][T23853] batman_adv: batadv0: Removing interface: batadv_slave_0
[  652.951533][T23853] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  652.960090][T23853] batman_adv: batadv0: Removing interface: batadv_slave_1
[  652.970250][T23853] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  654.757281][T23873] __nla_validate_parse: 28 callbacks suppressed
[  654.757303][T23873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4839'.
[  654.901863][T23894] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4846'.
[  654.971918][T23896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4847'.
[  655.051146][T23896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4847'.
[  655.188273][T23914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  655.299814][T23924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4856'.
[  655.310522][T23926] netlink: 184 bytes leftover after parsing attributes in process `syz.1.4857'.
[  655.322455][T23928] netlink: 184 bytes leftover after parsing attributes in process `syz.1.4857'.
[  655.342266][T23924] bridge_slave_1: left allmulticast mode
[  655.360064][T23924] bridge_slave_1: left promiscuous mode
[  655.386037][T23924] bridge0: port 2(bridge_slave_1) entered disabled state
[  655.413759][T23924] bridge_slave_0: left allmulticast mode
[  655.425145][T23924] bridge_slave_0: left promiscuous mode
[  655.432775][T23924] bridge0: port 1(bridge_slave_0) entered disabled state
[  655.603155][T23943] vlan2: entered allmulticast mode
[  655.611300][T23943] bond0: entered allmulticast mode
[  655.656126][T23945] nbd: must specify a device to reconfigure
[  655.673687][T23943] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4863'.
[  655.840651][T23964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4866'.
[  655.862328][T23943] bond0 (unregistering): Released all slaves
[  655.956499][T23964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4866'.
[  656.316489][T23996] netlink: 'syz.4.4874': attribute type 1 has an invalid length.
[  656.623015][T24019] netlink: get zone limit has 4 unknown bytes
[  656.658518][T24021] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  656.666217][T24021] IPv6: NLM_F_CREATE should be set when creating new route
[  656.673498][T24021] IPv6: NLM_F_CREATE should be set when creating new route
[  656.680807][T24021] IPv6: NLM_F_CREATE should be set when creating new route
[  656.688186][T24022] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  656.830736][T24028] syzkaller1: entered promiscuous mode
[  656.849543][T24028] syzkaller1: entered allmulticast mode
[  657.124641][T24043] xt_CT: You must specify a L4 protocol and not use inversions on it
[  657.492094][T24065] bond0: Caught tx_queue_len zero misconfig
[  657.769496][T24087] netlink: 'syz.3.4899': attribute type 2 has an invalid length.
[  657.781646][T24087] netlink: 'syz.3.4899': attribute type 11 has an invalid length.
[  657.812709][T24089] syzkaller1: entered promiscuous mode
[  657.818422][T24089] syzkaller1: entered allmulticast mode
[  673.073230][ T5147] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  673.088021][ T5147] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  673.098138][ T5147] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  673.107040][ T5147] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  673.123266][ T5147] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  673.124156][T21316] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  673.140934][T21316] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  673.150343][T21316] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  673.162164][T21316] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  673.170922][T21316] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  673.255298][T24115] lo speed is unknown, defaulting to 1000
[  673.269940][T24113] lo speed is unknown, defaulting to 1000
[  673.276299][T21316] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  673.288317][T21316] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  673.306119][T21316] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  673.317756][T21316] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  673.325451][T21316] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  673.384699][T24118] lo speed is unknown, defaulting to 1000
[  673.474836][T24115] wg1 speed is unknown, defaulting to 1000
[  673.664999][T24115] chnl_net:caif_netlink_parms(): no params data found
[  673.712360][T24113] wg1 speed is unknown, defaulting to 1000
[  673.850379][T24115] bridge0: port 1(bridge_slave_0) entered blocking state
[  673.858638][T24115] bridge0: port 1(bridge_slave_0) entered disabled state
[  673.868021][T24115] bridge_slave_0: entered allmulticast mode
[  673.877439][T24115] bridge_slave_0: entered promiscuous mode
[  673.891882][T24115] bridge0: port 2(bridge_slave_1) entered blocking state
[  673.899280][T24115] bridge0: port 2(bridge_slave_1) entered disabled state
[  673.908022][T24115] bridge_slave_1: entered allmulticast mode
[  673.917084][T24115] bridge_slave_1: entered promiscuous mode
[  673.992092][T24118] wg1 speed is unknown, defaulting to 1000
[  674.008280][T24115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  674.031330][T24115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  674.103424][T24115] team0: Port device team_slave_0 added
[  674.129184][T24115] team0: Port device team_slave_1 added
[  674.254350][T21316] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  674.266215][T21316] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  674.274527][T21316] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  674.285799][T21316] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  674.294936][T21316] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  674.326497][T21316] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  674.340720][T21316] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  674.349128][T21316] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  674.361523][T21316] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  674.369333][T21316] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  674.383319][T24115] batman_adv: batadv0: Adding interface: batadv_slave_0
[  674.390714][T24115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  674.421515][T24115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  674.450857][T24115] batman_adv: batadv0: Adding interface: batadv_slave_1
[  674.458053][T24115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  674.485161][T24115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  674.600642][T24129] lo speed is unknown, defaulting to 1000
[  674.641812][T24113] chnl_net:caif_netlink_parms(): no params data found
[  674.662168][T24131] lo speed is unknown, defaulting to 1000
[  674.689748][T24115] hsr_slave_0: entered promiscuous mode
[  674.698183][T24115] hsr_slave_1: entered promiscuous mode
[  674.946806][T24129] wg1 speed is unknown, defaulting to 1000
[  674.968915][T24118] chnl_net:caif_netlink_parms(): no params data found
[  674.991048][T24113] bridge0: port 1(bridge_slave_0) entered blocking state
[  674.999789][T24113] bridge0: port 1(bridge_slave_0) entered disabled state
[  675.007510][T24113] bridge_slave_0: entered allmulticast mode
[  675.016076][T24113] bridge_slave_0: entered promiscuous mode
[  675.027829][T24113] bridge0: port 2(bridge_slave_1) entered blocking state
[  675.036236][T24113] bridge0: port 2(bridge_slave_1) entered disabled state
[  675.043544][T24113] bridge_slave_1: entered allmulticast mode
[  675.052303][T24113] bridge_slave_1: entered promiscuous mode
[  675.218560][   T51] Bluetooth: hci6: command tx timeout
[  675.224917][   T51] Bluetooth: hci4: command tx timeout
[  675.233719][T24131] wg1 speed is unknown, defaulting to 1000
[  675.252580][T24113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  675.266630][T24113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  675.352346][T24113] team0: Port device team_slave_0 added
[  675.361737][T24113] team0: Port device team_slave_1 added
[  675.375830][   T51] Bluetooth: hci7: command tx timeout
[  675.464367][T24113] batman_adv: batadv0: Adding interface: batadv_slave_0
[  675.471400][T24113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  675.498097][T24113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  675.516154][T24113] batman_adv: batadv0: Adding interface: batadv_slave_1
[  675.523156][T24113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  675.550905][T24113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  675.604436][T24118] bridge0: port 1(bridge_slave_0) entered blocking state
[  675.613236][T24118] bridge0: port 1(bridge_slave_0) entered disabled state
[  675.621533][T24118] bridge_slave_0: entered allmulticast mode
[  675.629402][T24118] bridge_slave_0: entered promiscuous mode
[  675.643435][T24118] bridge0: port 2(bridge_slave_1) entered blocking state
[  675.651166][T24118] bridge0: port 2(bridge_slave_1) entered disabled state
[  675.658929][T24118] bridge_slave_1: entered allmulticast mode
[  675.667122][T24118] bridge_slave_1: entered promiscuous mode
[  675.705973][T24118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  675.720538][T24118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  675.841162][T24118] team0: Port device team_slave_0 added
[  675.874220][T24113] hsr_slave_0: entered promiscuous mode
[  675.881888][T24113] hsr_slave_1: entered promiscuous mode
[  675.889078][T24113] debugfs: 'hsr0' already exists in 'hsr'
[  675.894832][T24113] Cannot create hsr debugfs directory
[  675.902820][T24118] team0: Port device team_slave_1 added
[  675.977368][T24118] batman_adv: batadv0: Adding interface: batadv_slave_0
[  675.984377][T24118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  676.013438][T24118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  676.043224][T24118] batman_adv: batadv0: Adding interface: batadv_slave_1
[  676.050946][T24118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  676.078381][T24118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  676.117895][T24129] chnl_net:caif_netlink_parms(): no params data found
[  676.271887][T24118] hsr_slave_0: entered promiscuous mode
[  676.279221][T24118] hsr_slave_1: entered promiscuous mode
[  676.285651][T24118] debugfs: 'hsr0' already exists in 'hsr'
[  676.291418][T24118] Cannot create hsr debugfs directory
[  676.303710][T24131] chnl_net:caif_netlink_parms(): no params data found
[  676.341485][T21316] Bluetooth: hci8: command tx timeout
[  676.432963][T24129] bridge0: port 1(bridge_slave_0) entered blocking state
[  676.440832][T24129] bridge0: port 1(bridge_slave_0) entered disabled state
[  676.448708][T24129] bridge_slave_0: entered allmulticast mode
[  676.456935][T24129] bridge_slave_0: entered promiscuous mode
[  676.485332][T24129] bridge0: port 2(bridge_slave_1) entered blocking state
[  676.492717][T24129] bridge0: port 2(bridge_slave_1) entered disabled state
[  676.500855][T24129] bridge_slave_1: entered allmulticast mode
[  676.507660][T21316] Bluetooth: hci9: command tx timeout
[  676.514870][T24129] bridge_slave_1: entered promiscuous mode
[  676.638115][T24129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  676.647854][T24131] bridge0: port 1(bridge_slave_0) entered blocking state
[  676.655075][T24131] bridge0: port 1(bridge_slave_0) entered disabled state
[  676.662882][T24131] bridge_slave_0: entered allmulticast mode
[  676.671716][T24131] bridge_slave_0: entered promiscuous mode
[  676.701373][T24129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  676.722063][T24131] bridge0: port 2(bridge_slave_1) entered blocking state
[  676.729674][T24131] bridge0: port 2(bridge_slave_1) entered disabled state
[  676.738650][T24131] bridge_slave_1: entered allmulticast mode
[  676.746382][T24131] bridge_slave_1: entered promiscuous mode
[  676.812018][T24129] team0: Port device team_slave_0 added
[  676.821140][T24129] team0: Port device team_slave_1 added
[  676.830295][T24131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  676.843275][T24131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  676.922289][T24129] batman_adv: batadv0: Adding interface: batadv_slave_0
[  676.929504][T24129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  676.956569][T24129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  676.999681][T24129] batman_adv: batadv0: Adding interface: batadv_slave_1
[  677.006870][T24129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  677.033816][T24129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  677.047261][T24131] team0: Port device team_slave_0 added
[  677.082946][T24131] team0: Port device team_slave_1 added
[  677.117569][T24131] batman_adv: batadv0: Adding interface: batadv_slave_0
[  677.124748][T24131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  677.151984][T24131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  677.164757][T24131] batman_adv: batadv0: Adding interface: batadv_slave_1
[  677.171868][T24131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  677.198783][T24131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  677.262197][T24129] hsr_slave_0: entered promiscuous mode
[  677.269118][T24129] hsr_slave_1: entered promiscuous mode
[  677.275338][T24129] debugfs: 'hsr0' already exists in 'hsr'
[  677.281760][T24129] Cannot create hsr debugfs directory
[  677.296341][T21316] Bluetooth: hci4: command tx timeout
[  677.301784][T21316] Bluetooth: hci6: command tx timeout
[  677.351881][T24131] hsr_slave_0: entered promiscuous mode
[  677.358545][T24131] hsr_slave_1: entered promiscuous mode
[  677.364808][T24131] debugfs: 'hsr0' already exists in 'hsr'
[  677.371076][T24131] Cannot create hsr debugfs directory
[  677.456353][T21316] Bluetooth: hci7: command tx timeout
[  678.416220][T21316] Bluetooth: hci8: command tx timeout
[  678.575865][T21316] Bluetooth: hci9: command tx timeout
[  679.376420][T21316] Bluetooth: hci4: command tx timeout
[  679.376431][   T51] Bluetooth: hci6: command tx timeout
[  679.536207][   T51] Bluetooth: hci7: command tx timeout
[  680.496829][   T51] Bluetooth: hci8: command tx timeout
[  680.655912][   T51] Bluetooth: hci9: command tx timeout
[  681.457231][ T1171] block nbd2: Possible stuck request ffff8880267a0000: control (read@0,4096B). Runtime 60 seconds
[  681.457384][   T51] Bluetooth: hci6: command tx timeout
[  681.468505][T21316] Bluetooth: hci4: command tx timeout
[  681.615953][T21316] Bluetooth: hci7: command tx timeout
[  682.575973][T21316] Bluetooth: hci8: command tx timeout
[  682.735887][T21316] Bluetooth: hci9: command tx timeout
[  683.729553][ T5196] udevd[5196]: worker [21791] /devices/virtual/block/nbd2 is taking a long time
[  711.538099][ T1171] block nbd2: Possible stuck request ffff8880267a0000: control (read@0,4096B). Runtime 90 seconds
[  734.076870][   T51] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  734.088352][   T51] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  734.098002][   T51] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  734.108191][   T51] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  734.120908][   T51] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  734.156486][T21316] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  734.167970][T21316] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  734.179427][T21316] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  734.188276][T21316] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  734.197637][T21316] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  734.239217][T24169] lo speed is unknown, defaulting to 1000
[  734.282094][T24171] lo speed is unknown, defaulting to 1000
[  734.298321][T21316] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  734.308482][T21316] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  734.317195][T21316] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  734.327932][T21316] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  734.336260][T21316] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  734.393191][T24173] lo speed is unknown, defaulting to 1000
[  734.473470][T24169] wg1 speed is unknown, defaulting to 1000
[  734.678935][T24169] chnl_net:caif_netlink_parms(): no params data found
[  734.704438][T24171] wg1 speed is unknown, defaulting to 1000
[  734.873283][T24169] bridge0: port 1(bridge_slave_0) entered blocking state
[  734.880996][T24169] bridge0: port 1(bridge_slave_0) entered disabled state
[  734.889605][T24169] bridge_slave_0: entered allmulticast mode
[  734.903902][T24169] bridge_slave_0: entered promiscuous mode
[  734.927150][T24169] bridge0: port 2(bridge_slave_1) entered blocking state
[  734.934362][T24169] bridge0: port 2(bridge_slave_1) entered disabled state
[  734.947640][T24169] bridge_slave_1: entered allmulticast mode
[  734.956490][T24169] bridge_slave_1: entered promiscuous mode
[  734.968503][T24173] wg1 speed is unknown, defaulting to 1000
[  735.083752][T24169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  735.138900][T24169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  735.170525][   T51] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  735.181488][   T51] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  735.189866][   T51] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  735.198648][   T51] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  735.206565][   T51] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  735.289613][T24169] team0: Port device team_slave_0 added
[  735.329048][T24169] team0: Port device team_slave_1 added
[  735.341896][   T51] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  735.352987][   T51] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  735.361076][   T51] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  735.369208][   T51] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  735.378018][   T51] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  735.470789][T24169] batman_adv: batadv0: Adding interface: batadv_slave_0
[  735.477962][T24169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  735.504845][T24169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  735.517874][T24169] batman_adv: batadv0: Adding interface: batadv_slave_1
[  735.524877][T24169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  735.552874][T24169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  735.564276][T24184] lo speed is unknown, defaulting to 1000
[  735.582590][T24171] chnl_net:caif_netlink_parms(): no params data found
[  735.645276][T24169] hsr_slave_0: entered promiscuous mode
[  735.653887][T24169] hsr_slave_1: entered promiscuous mode
[  735.660838][T24169] debugfs: 'hsr0' already exists in 'hsr'
[  735.667067][T24169] Cannot create hsr debugfs directory
[  735.694414][T24187] lo speed is unknown, defaulting to 1000
[  735.874183][T24184] wg1 speed is unknown, defaulting to 1000
[  735.989519][T24171] bridge0: port 1(bridge_slave_0) entered blocking state
[  735.997430][T24171] bridge0: port 1(bridge_slave_0) entered disabled state
[  736.005057][T24171] bridge_slave_0: entered allmulticast mode
[  736.013932][T24171] bridge_slave_0: entered promiscuous mode
[  736.053856][T24171] bridge0: port 2(bridge_slave_1) entered blocking state
[  736.064911][T24171] bridge0: port 2(bridge_slave_1) entered disabled state
[  736.076662][T24171] bridge_slave_1: entered allmulticast mode
[  736.096833][T24171] bridge_slave_1: entered promiscuous mode
[  736.142621][T24187] wg1 speed is unknown, defaulting to 1000
[  736.176566][T21316] Bluetooth: hci10: command tx timeout
[  736.221628][T24171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  736.239935][T24173] chnl_net:caif_netlink_parms(): no params data found
[  736.266136][T21316] Bluetooth: hci11: command tx timeout
[  736.287601][T24171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  736.413604][T24171] team0: Port device team_slave_0 added
[  736.419467][T21316] Bluetooth: hci12: command tx timeout
[  736.436894][T24171] team0: Port device team_slave_1 added
[  736.491652][T24171] batman_adv: batadv0: Adding interface: batadv_slave_0
[  736.499700][T24171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  736.526427][T24171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  736.539543][T24171] batman_adv: batadv0: Adding interface: batadv_slave_1
[  736.546885][T24171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  736.574965][T24171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  736.636360][T24173] bridge0: port 1(bridge_slave_0) entered blocking state
[  736.643814][T24173] bridge0: port 1(bridge_slave_0) entered disabled state
[  736.651651][T24173] bridge_slave_0: entered allmulticast mode
[  736.660250][T24173] bridge_slave_0: entered promiscuous mode
[  736.673685][T24173] bridge0: port 2(bridge_slave_1) entered blocking state
[  736.682291][T24173] bridge0: port 2(bridge_slave_1) entered disabled state
[  736.691310][T24173] bridge_slave_1: entered allmulticast mode
[  736.699385][T24173] bridge_slave_1: entered promiscuous mode
[  736.806790][T24171] hsr_slave_0: entered promiscuous mode
[  736.813353][T24171] hsr_slave_1: entered promiscuous mode
[  736.820582][T24171] debugfs: 'hsr0' already exists in 'hsr'
[  736.826662][T24171] Cannot create hsr debugfs directory
[  736.838381][T24173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  736.851303][T24173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  736.963661][T24173] team0: Port device team_slave_0 added
[  736.984748][T24187] chnl_net:caif_netlink_parms(): no params data found
[  737.023726][T24173] team0: Port device team_slave_1 added
[  737.133193][T24173] batman_adv: batadv0: Adding interface: batadv_slave_0
[  737.143029][T24173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  737.169651][T24173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  737.201527][T24184] chnl_net:caif_netlink_parms(): no params data found
[  737.229564][T24173] batman_adv: batadv0: Adding interface: batadv_slave_1
[  737.238786][T24173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  737.265739][T24173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  737.296016][T21316] Bluetooth: hci13: command tx timeout
[  737.457853][T21316] Bluetooth: hci14: command tx timeout
[  737.494809][T24187] bridge0: port 1(bridge_slave_0) entered blocking state
[  737.503191][T24187] bridge0: port 1(bridge_slave_0) entered disabled state
[  737.510897][T24187] bridge_slave_0: entered allmulticast mode
[  737.519289][T24187] bridge_slave_0: entered promiscuous mode
[  737.532898][T24173] hsr_slave_0: entered promiscuous mode
[  737.539931][T24173] hsr_slave_1: entered promiscuous mode
[  737.546939][T24173] debugfs: 'hsr0' already exists in 'hsr'
[  737.552707][T24173] Cannot create hsr debugfs directory
[  737.596473][T24187] bridge0: port 2(bridge_slave_1) entered blocking state
[  737.604509][T24187] bridge0: port 2(bridge_slave_1) entered disabled state
[  737.612702][T24187] bridge_slave_1: entered allmulticast mode
[  737.622289][T24187] bridge_slave_1: entered promiscuous mode
[  737.650391][T24184] bridge0: port 1(bridge_slave_0) entered blocking state
[  737.657748][T24184] bridge0: port 1(bridge_slave_0) entered disabled state
[  737.665169][T24184] bridge_slave_0: entered allmulticast mode
[  737.673284][T24184] bridge_slave_0: entered promiscuous mode
[  737.712434][T24184] bridge0: port 2(bridge_slave_1) entered blocking state
[  737.719949][T24184] bridge0: port 2(bridge_slave_1) entered disabled state
[  737.727718][T24184] bridge_slave_1: entered allmulticast mode
[  737.735348][T24184] bridge_slave_1: entered promiscuous mode
[  737.785502][T24187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  737.800487][T24187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  737.828091][T24184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  737.857710][T24184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  737.927648][T24187] team0: Port device team_slave_0 added
[  737.941901][T24184] team0: Port device team_slave_0 added
[  737.951010][T24184] team0: Port device team_slave_1 added
[  737.961323][T24187] team0: Port device team_slave_1 added
[  738.050069][T24187] batman_adv: batadv0: Adding interface: batadv_slave_0
[  738.058307][T24187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  738.085165][T24187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  738.114803][T24184] batman_adv: batadv0: Adding interface: batadv_slave_0
[  738.121880][T24184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  738.148725][T24184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  738.160851][T24187] batman_adv: batadv0: Adding interface: batadv_slave_1
[  738.168460][T24187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  738.195153][T24187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  738.225877][T24184] batman_adv: batadv0: Adding interface: batadv_slave_1
[  738.232847][T24184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  738.259899][T21316] Bluetooth: hci10: command tx timeout
[  738.266185][T24184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  738.327793][T24187] hsr_slave_0: entered promiscuous mode
[  738.334352][T24187] hsr_slave_1: entered promiscuous mode
[  738.340182][T21316] Bluetooth: hci11: command tx timeout
[  738.347865][T24187] debugfs: 'hsr0' already exists in 'hsr'
[  738.353620][T24187] Cannot create hsr debugfs directory
[  738.462307][T24184] hsr_slave_0: entered promiscuous mode
[  738.470181][T24184] hsr_slave_1: entered promiscuous mode
[  738.477646][T24184] debugfs: 'hsr0' already exists in 'hsr'
[  738.483392][T24184] Cannot create hsr debugfs directory
[  738.496011][T21316] Bluetooth: hci12: command tx timeout
[  739.376342][T21316] Bluetooth: hci13: command tx timeout
[  739.535884][T21316] Bluetooth: hci14: command tx timeout
[  740.336503][T21316] Bluetooth: hci10: command tx timeout
[  740.415955][T21316] Bluetooth: hci11: command tx timeout
[  740.576183][T21316] Bluetooth: hci12: command tx timeout
[  741.455864][T21316] Bluetooth: hci13: command tx timeout
[  741.616398][T21316] Bluetooth: hci14: command tx timeout
[  741.622276][ T1171] block nbd2: Possible stuck request ffff8880267a0000: control (read@0,4096B). Runtime 120 seconds
[  742.416171][   T51] Bluetooth: hci10: command tx timeout
[  742.495812][   T51] Bluetooth: hci11: command tx timeout
[  742.656400][   T51] Bluetooth: hci12: command tx timeout
[  743.535930][   T51] Bluetooth: hci13: command tx timeout
[  743.706349][   T51] Bluetooth: hci14: command tx timeout
[  744.337346][   T51] Bluetooth: hci1: command 0x0405 tx timeout
[  771.698180][ T1171] block nbd2: Possible stuck request ffff8880267a0000: control (read@0,4096B). Runtime 150 seconds
[  788.463559][T20613] bond4 (unregistering): (slave vti0): Releasing backup interface
[  788.475252][T20613] vti0 (unregistering): left promiscuous mode
[  788.515842][T20613] bond3 (unregistering): (slave gretap2): Releasing active interface
[  788.539605][T20613] bond8 (unregistering): (slave gretap3): Releasing active interface
[  788.719896][T20613] bond6 (unregistering): (slave bridge3): Releasing active interface
[  788.779881][T20613] bond0 (unregistering): Released all slaves
[  788.790572][T20613] bond1 (unregistering): Released all slaves
[  788.806594][T20613] bond2 (unregistering): Released all slaves
[  788.822040][T20613] bond3 (unregistering): Released all slaves
[  788.841643][T20613] bond4 (unregistering): Released all slaves
[  788.856426][T20613] bond5 (unregistering): Released all slaves
[  788.871527][T20613] bond6 (unregistering): Released all slaves
[  788.892896][T20613] bond7 (unregistering): Released all slaves
[  788.911441][T20613] bond8 (unregistering): Released all slaves
[  788.926252][T20613] bond9 (unregistering): Released all slaves
[  788.941869][T20613] bond10 (unregistering): Released all slaves
[  789.078905][T20613] tipc: Disabling bearer <udp:syz2>
[  789.091505][T20613] tipc: Left network mode
[  789.422287][T20613] hsr_slave_0: left promiscuous mode
[  789.429272][T20613] hsr_slave_1: left promiscuous mode
[  789.451099][T20613] veth1_vlan: left allmulticast mode
[  789.457621][T20613] veth1_macvtap: left promiscuous mode
[  789.477106][T20613] pimreg3 (unregistering): left allmulticast mode
[  789.596696][T20613] batadv1 (unregistering): left promiscuous mode
[  789.603151][T20613] batadv1 (unregistering): left allmulticast mode
[  789.632457][T20613] team0 (unregistering): Port device batadv1 removed
[  790.274638][T20613] IPVS: stop unused estimator thread 0...
[  794.392418][ T5147] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  794.411069][T24292] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  794.421314][T24292] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  794.421312][T24295] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  794.438724][T24292] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  794.446852][T24295] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  794.448972][T24292] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  794.463872][T24292] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  794.475268][T24292] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  794.493295][T24292] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  794.551533][T24292] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  794.568402][T24292] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  794.576494][T24292] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  794.584784][T24292] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  794.593684][T24290] lo speed is unknown, defaulting to 1000
[  794.600096][T24292] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  794.614044][T24289] lo speed is unknown, defaulting to 1000
[  794.661316][T24296] lo speed is unknown, defaulting to 1000
[  794.786061][T24290] wg1 speed is unknown, defaulting to 1000
[  795.001761][T24290] chnl_net:caif_netlink_parms(): no params data found
[  795.025720][T24289] wg1 speed is unknown, defaulting to 1000
[  795.181620][T24290] bridge0: port 1(bridge_slave_0) entered blocking state
[  795.189785][T24290] bridge0: port 1(bridge_slave_0) entered disabled state
[  795.198364][T24290] bridge_slave_0: entered allmulticast mode
[  795.207437][T24290] bridge_slave_0: entered promiscuous mode
[  795.234526][T24290] bridge0: port 2(bridge_slave_1) entered blocking state
[  795.241869][T24290] bridge0: port 2(bridge_slave_1) entered disabled state
[  795.250660][T24290] bridge_slave_1: entered allmulticast mode
[  795.260232][T24290] bridge_slave_1: entered promiscuous mode
[  795.336850][T24290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  795.370772][T24296] wg1 speed is unknown, defaulting to 1000
[  795.388923][T24290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  795.532283][T24292] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  795.537572][T24295] Bluetooth: hci7: command 0x0406 tx timeout
[  795.547200][T24292] Bluetooth: hci6: command 0x0406 tx timeout
[  795.548420][ T5147] Bluetooth: hci4: command 0x0406 tx timeout
[  795.562504][T24292] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  795.577260][T24292] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  795.590550][T24290] team0: Port device team_slave_0 added
[  795.598799][T24292] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  795.610423][T24292] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  795.647705][   T51] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1
[  795.657837][   T51] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9
[  795.668044][   T51] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9
[  795.677569][   T51] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4
[  795.679122][T24290] team0: Port device team_slave_1 added
[  795.691154][   T51] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2
[  795.765473][T24290] batman_adv: batadv0: Adding interface: batadv_slave_0
[  795.773476][T24290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  795.800886][T24290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  795.813925][T24290] batman_adv: batadv0: Adding interface: batadv_slave_1
[  795.824174][T24290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  795.851304][T24290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  795.931685][T24290] hsr_slave_0: entered promiscuous mode
[  795.944539][T24290] hsr_slave_1: entered promiscuous mode
[  795.951426][T24290] debugfs: 'hsr0' already exists in 'hsr'
[  795.958321][T24290] Cannot create hsr debugfs directory
[  795.984985][T24307] lo speed is unknown, defaulting to 1000
[  796.034300][T24310] lo speed is unknown, defaulting to 1000
[  796.035286][T24289] chnl_net:caif_netlink_parms(): no params data found
[  796.328738][T24307] wg1 speed is unknown, defaulting to 1000
[  796.400659][T24296] chnl_net:caif_netlink_parms(): no params data found
[  796.476466][T24289] bridge0: port 1(bridge_slave_0) entered blocking state
[  796.485344][T24289] bridge0: port 1(bridge_slave_0) entered disabled state
[  796.494050][T24289] bridge_slave_0: entered allmulticast mode
[  796.500704][T24116] Bluetooth: hci16: command tx timeout
[  796.512011][T24289] bridge_slave_0: entered promiscuous mode
[  796.551835][T24289] bridge0: port 2(bridge_slave_1) entered blocking state
[  796.559531][T24289] bridge0: port 2(bridge_slave_1) entered disabled state
[  796.568434][T24289] bridge_slave_1: entered allmulticast mode
[  796.577109][T24289] bridge_slave_1: entered promiscuous mode
[  796.578743][T24116] Bluetooth: hci15: command tx timeout
[  796.624168][T24310] wg1 speed is unknown, defaulting to 1000
[  796.656289][   T51] Bluetooth: hci17: command tx timeout
[  796.680753][T24289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  796.726768][T24289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  796.808036][T24296] bridge0: port 1(bridge_slave_0) entered blocking state
[  796.815284][T24296] bridge0: port 1(bridge_slave_0) entered disabled state
[  796.823235][T24296] bridge_slave_0: entered allmulticast mode
[  796.831147][T24296] bridge_slave_0: entered promiscuous mode
[  796.840372][T24296] bridge0: port 2(bridge_slave_1) entered blocking state
[  796.847652][T24296] bridge0: port 2(bridge_slave_1) entered disabled state
[  796.854960][T24296] bridge_slave_1: entered allmulticast mode
[  796.863524][T24296] bridge_slave_1: entered promiscuous mode
[  796.872885][T24289] team0: Port device team_slave_0 added
[  796.886498][T24289] team0: Port device team_slave_1 added
[  796.955190][T24289] batman_adv: batadv0: Adding interface: batadv_slave_0
[  796.962685][T24289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  796.993942][T24289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  797.014484][T24296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  797.028278][T24296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  797.040874][T24289] batman_adv: batadv0: Adding interface: batadv_slave_1
[  797.048910][T24289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  797.076736][T24289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  797.201031][T24296] team0: Port device team_slave_0 added
[  797.209701][T24296] team0: Port device team_slave_1 added
[  797.285590][T24296] batman_adv: batadv0: Adding interface: batadv_slave_0
[  797.292593][T24296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  797.320179][T24296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  797.333751][T24296] batman_adv: batadv0: Adding interface: batadv_slave_1
[  797.342697][T24296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  797.369104][T24296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  797.454067][T24289] hsr_slave_0: entered promiscuous mode
[  797.461886][T24289] hsr_slave_1: entered promiscuous mode
[  797.468633][T24289] debugfs: 'hsr0' already exists in 'hsr'
[  797.474397][T24289] Cannot create hsr debugfs directory
[  797.500148][T24310] chnl_net:caif_netlink_parms(): no params data found
[  797.574745][T24296] hsr_slave_0: entered promiscuous mode
[  797.581599][T24296] hsr_slave_1: entered promiscuous mode
[  797.588562][T24296] debugfs: 'hsr0' already exists in 'hsr'
[  797.594301][T24296] Cannot create hsr debugfs directory
[  797.623840][T24307] chnl_net:caif_netlink_parms(): no params data found
[  797.699408][   T51] Bluetooth: hci18: command tx timeout
[  797.775850][   T51] Bluetooth: hci19: command tx timeout
[  797.873343][T24310] bridge0: port 1(bridge_slave_0) entered blocking state
[  797.881056][T24310] bridge0: port 1(bridge_slave_0) entered disabled state
[  797.889377][T24310] bridge_slave_0: entered allmulticast mode
[  797.897419][T24310] bridge_slave_0: entered promiscuous mode
[  797.936585][T24310] bridge0: port 2(bridge_slave_1) entered blocking state
[  797.943775][T24310] bridge0: port 2(bridge_slave_1) entered disabled state
[  797.953155][T24310] bridge_slave_1: entered allmulticast mode
[  797.961054][T24310] bridge_slave_1: entered promiscuous mode
[  798.005442][T24307] bridge0: port 1(bridge_slave_0) entered blocking state
[  798.013188][T24307] bridge0: port 1(bridge_slave_0) entered disabled state
[  798.021825][T24307] bridge_slave_0: entered allmulticast mode
[  798.031179][T24307] bridge_slave_0: entered promiscuous mode
[  798.070918][T24307] bridge0: port 2(bridge_slave_1) entered blocking state
[  798.078337][T24307] bridge0: port 2(bridge_slave_1) entered disabled state
[  798.085675][T24307] bridge_slave_1: entered allmulticast mode
[  798.093134][T24307] bridge_slave_1: entered promiscuous mode
[  798.119405][T24310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  798.157399][T24310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  798.194955][T24307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  798.240780][T24307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  798.270879][T24310] team0: Port device team_slave_0 added
[  798.280532][T24310] team0: Port device team_slave_1 added
[  798.327262][T24307] team0: Port device team_slave_0 added
[  798.347881][T24307] team0: Port device team_slave_1 added
[  798.354340][T24310] batman_adv: batadv0: Adding interface: batadv_slave_0
[  798.361443][T24310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  798.388888][T24310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  798.402063][T24310] batman_adv: batadv0: Adding interface: batadv_slave_1
[  798.409100][T24310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  798.435963][T24310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  798.485358][T24307] batman_adv: batadv0: Adding interface: batadv_slave_0
[  798.492917][T24307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  798.521768][T24307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  798.535415][T24307] batman_adv: batadv0: Adding interface: batadv_slave_1
[  798.542529][T24307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  798.570116][T24307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  798.583476][T24292] Bluetooth: hci16: command tx timeout
[  798.632906][T24310] hsr_slave_0: entered promiscuous mode
[  798.639858][T24310] hsr_slave_1: entered promiscuous mode
[  798.646744][T24310] debugfs: 'hsr0' already exists in 'hsr'
[  798.652485][T24310] Cannot create hsr debugfs directory
[  798.657549][T24292] Bluetooth: hci15: command tx timeout
[  798.732222][T24307] hsr_slave_0: entered promiscuous mode
[  798.738027][T24292] Bluetooth: hci17: command tx timeout
[  798.745054][T24307] hsr_slave_1: entered promiscuous mode
[  798.751459][T24307] debugfs: 'hsr0' already exists in 'hsr'
[  798.757376][T24307] Cannot create hsr debugfs directory
[  799.775904][T24292] Bluetooth: hci18: command tx timeout
[  799.857804][T24292] Bluetooth: hci19: command tx timeout
[  800.658805][T24292] Bluetooth: hci8: command 0x0406 tx timeout
[  800.658840][ T5839] Bluetooth: hci9: command 0x0406 tx timeout
[  800.672442][T21316] Bluetooth: hci16: command tx timeout
[  800.735808][   T51] Bluetooth: hci15: command tx timeout
[  800.815807][   T51] Bluetooth: hci17: command tx timeout
[  801.778165][ T1171] block nbd2: Possible stuck request ffff8880267a0000: control (read@0,4096B). Runtime 180 seconds
[  801.855955][   T51] Bluetooth: hci18: command tx timeout
[  801.935791][   T51] Bluetooth: hci19: command tx timeout
[  802.736218][   T51] Bluetooth: hci16: command tx timeout
[  802.816108][   T51] Bluetooth: hci15: command tx timeout
[  802.895871][   T51] Bluetooth: hci17: command tx timeout
[  803.691715][ T5196] udevd[5196]: worker [21791] /devices/virtual/block/nbd2 timeout; kill it
[  803.703400][ T5196] udevd[5196]: seq 25638 '/devices/virtual/block/nbd2' killed
[  803.935965][   T51] Bluetooth: hci18: command tx timeout
[  804.015974][   T51] Bluetooth: hci19: command tx timeout
[  818.416345][   T30] INFO: task syz.2.4898:24072 blocked for more than 143 seconds.
[  818.424146][   T30]       Not tainted syzkaller #0
[  818.433743][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  818.443192][   T30] task:syz.2.4898      state:D stack:26240 pid:24072 tgid:24070 ppid:16515  task_flags:0x480140 flags:0x00080002
[  818.455261][   T30] Call Trace:
[  818.458942][   T30]  <TASK>
[  818.461923][   T30]  __schedule+0x1585/0x5340
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  818.466594][   T30]  ? do_raw_spin_lock+0x12b/0x2f0
[  818.471671][   T30]  ? __pfx___schedule+0x10/0x10
[  818.476774][   T30]  ? schedule+0x90/0x360
[  818.481954][   T30]  schedule+0x164/0x360
[  818.486469][   T30]  blk_mq_freeze_queue_wait+0x101/0x180
[  818.492173][   T30]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[  818.499327][   T30]  ? __pfx_autoremove_wake_function+0x10/0x10
[  818.506164][   T30]  queue_limits_commit_update_frozen+0x55/0xd0
[  818.512455][   T30]  nbd_set_size+0x454/0x680
[  818.517384][   T30]  ? __pfx_nbd_set_size+0x10/0x10
[  818.522493][   T30]  ? nla_memcpy+0x5b/0xc0
[  818.527871][   T30]  nbd_genl_reconfigure+0x7f5/0x1ea0
[  818.533245][   T30]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  818.539246][   T30]  ? rcu_is_watching+0x15/0xb0
[  818.544071][   T30]  ? trace_kmalloc+0x2a/0x110
[  818.548935][   T30]  ? __nla_parse+0x40/0x60
[  818.555573][   T30]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  818.562708][   T30]  genl_family_rcv_msg_doit+0x22a/0x330
[  818.605577][   T30]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  818.611811][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  818.632071][   T30]  genl_rcv_msg+0x61c/0x7a0
[  818.637764][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  818.642862][   T30]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  818.648775][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  818.653792][   T30]  netlink_rcv_skb+0x232/0x4b0
[  818.660095][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  818.665204][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  818.670708][   T30]  ? down_read+0x272/0x2e0
[  818.675174][   T30]  ? genl_rcv+0xd/0x40
[  818.680785][   T30]  genl_rcv+0x28/0x40
[  818.684840][   T30]  netlink_unicast+0x80f/0x9b0
[  818.690276][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  818.696494][   T30]  ? netlink_sendmsg+0x650/0xb40
[  818.702408][   T30]  ? skb_put+0x11b/0x210
[  818.707000][   T30]  netlink_sendmsg+0x813/0xb40
[  818.711804][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  818.718031][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  818.723000][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  818.728727][   T30]  ____sys_sendmsg+0x972/0x9f0
[  818.733538][   T30]  ? futex_unqueue+0x211/0x240
[  818.738774][   T30]  ? __pfx_____sys_sendmsg+0x10/0x10
[  818.744177][   T30]  ? import_iovec+0x73/0xa0
[  818.748915][   T30]  ___sys_sendmsg+0x2a5/0x360
[  818.753696][   T30]  ? __pfx____sys_sendmsg+0x10/0x10
[  818.759302][   T30]  ? futex_wait+0x29a/0x380
[  818.763897][   T30]  ? __fget_files+0x2a/0x420
[  818.768990][   T30]  ? __fget_files+0x3a0/0x420
[  818.773709][   T30]  __x64_sys_sendmsg+0x1bd/0x2a0
[  818.778860][   T30]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  818.784532][   T30]  ? rcu_is_watching+0x15/0xb0
[  818.789830][   T30]  do_syscall_64+0x14d/0xf80
[  818.794482][   T30]  ? trace_irq_disable+0x3b/0x150
[  818.800424][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  818.807510][   T30]  ? clear_bhb_loop+0x40/0x90
[  818.812253][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  818.818852][   T30] RIP: 0033:0x7f3a8419c799
[  818.823314][   T30] RSP: 002b:00007f3a84ffd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  818.832236][   T30] RAX: ffffffffffffffda RBX: 00007f3a84415fa0 RCX: 00007f3a8419c799
[  818.840371][   T30] RDX: 0000000020000004 RSI: 0000200000000280 RDI: 0000000000000005
[  818.848971][   T30] RBP: 00007f3a84232bd9 R08: 0000000000000000 R09: 0000000000000000
[  818.857202][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  818.865220][   T30] R13: 00007f3a84416038 R14: 00007f3a84415fa0 R15: 00007ffdabdd7c68
[  818.873478][   T30]  </TASK>
[  818.876921][   T30] INFO: task syz.2.4898:24078 blocked for more than 143 seconds.
[  818.884684][   T30]       Not tainted syzkaller #0
[  818.889818][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  818.899693][   T30] task:syz.2.4898      state:D stack:28720 pid:24078 tgid:24070 ppid:16515  task_flags:0x400040 flags:0x00080002
[  818.913022][   T30] Call Trace:
[  818.916587][   T30]  <TASK>
[  818.919564][   T30]  __schedule+0x1585/0x5340
[  818.924172][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  818.929321][   T30]  ? __pfx___schedule+0x10/0x10
[  818.934314][   T30]  ? schedule+0x90/0x360
[  818.939215][   T30]  schedule+0x164/0x360
[  818.943414][   T30]  schedule_preempt_disabled+0x13/0x30
[  818.949052][   T30]  __mutex_lock+0x7fe/0x1300
[  818.953730][   T30]  ? is_bpf_text_address+0x26/0x2b0
[  818.959064][   T30]  ? __mutex_lock+0x5ac/0x1300
[  818.963899][   T30]  ? genl_rcv_msg+0x10b/0x7a0
[  818.969160][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  818.974246][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  818.979556][   T30]  ? radix_tree_lookup+0x240/0x290
[  818.984814][   T30]  genl_rcv_msg+0x10b/0x7a0
[  818.989658][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  818.994751][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  819.000170][   T30]  netlink_rcv_skb+0x232/0x4b0
[  819.004971][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  819.011115][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  819.016614][   T30]  ? down_read+0x272/0x2e0
[  819.021106][   T30]  ? genl_rcv+0xd/0x40
[  819.025207][   T30]  genl_rcv+0x28/0x40
[  819.029723][   T30]  netlink_unicast+0x80f/0x9b0
[  819.034557][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  819.039979][   T30]  ? netlink_sendmsg+0x650/0xb40
[  819.044992][   T30]  ? skb_put+0x11b/0x210
[  819.049585][   T30]  netlink_sendmsg+0x813/0xb40
[  819.054385][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  819.061190][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  819.066315][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  819.071655][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  819.077077][   T30]  __sys_sendto+0x672/0x710
[  819.081629][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  819.087237][   T30]  ? fd_install+0x94/0x3d0
[  819.091712][   T30]  ? fd_install+0x306/0x3d0
[  819.096376][   T30]  __x64_sys_sendto+0xde/0x100
[  819.101192][   T30]  do_syscall_64+0x14d/0xf80
[  819.106009][   T30]  ? trace_irq_disable+0x3b/0x150
[  819.111786][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  819.118381][   T30]  ? clear_bhb_loop+0x40/0x90
[  819.123114][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  819.129209][   T30] RIP: 0033:0x7f3a8415cfce
[  819.133682][   T30] RSP: 002b:00007f3a84fdae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  819.142484][   T30] RAX: ffffffffffffffda RBX: 00007f3a84fdc6c0 RCX: 00007f3a8415cfce
[  819.150826][   T30] RDX: 0000000000000020 RSI: 00007f3a84fdb000 RDI: 0000000000000004
[  819.159135][   T30] RBP: 0000000000000000 R08: 00007f3a84fdaf04 R09: 000000000000000c
[  819.167334][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  819.175351][   T30] R13: 00007f3a84fdaf58 R14: 00007f3a84fdb000 R15: 0000000000000000
[  819.183705][   T30]  </TASK>
[  819.186954][   T30] INFO: task syz.3.4899:24076 blocked for more than 144 seconds.
[  819.194747][   T30]       Not tainted syzkaller #0
[  819.199899][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  819.209253][   T30] task:syz.3.4899      state:D stack:25192 pid:24076 tgid:24074 ppid:17779  task_flags:0x400140 flags:0x00080002
[  819.222114][   T30] Call Trace:
[  819.225439][   T30]  <TASK>
[  819.228543][   T30]  __schedule+0x1585/0x5340
[  819.233126][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  819.238444][   T30]  ? __pfx___schedule+0x10/0x10
[  819.243328][   T30]  ? schedule+0x90/0x360
[  819.247734][   T30]  schedule+0x164/0x360
[  819.251956][   T30]  schedule_preempt_disabled+0x13/0x30
[  819.257592][   T30]  __mutex_lock+0x7fe/0x1300
[  819.262241][   T30]  ? is_bpf_text_address+0x26/0x2b0
[  819.267973][   T30]  ? __mutex_lock+0x5ac/0x1300
[  819.272774][   T30]  ? genl_rcv_msg+0x10b/0x7a0
[  819.277629][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  819.282713][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  819.287847][   T30]  ? radix_tree_lookup+0x240/0x290
[  819.293026][   T30]  genl_rcv_msg+0x10b/0x7a0
[  819.298049][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  819.303158][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  819.308404][   T30]  netlink_rcv_skb+0x232/0x4b0
[  819.314119][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  819.319317][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  819.324661][   T30]  ? down_read+0x272/0x2e0
[  819.329524][   T30]  ? genl_rcv+0xd/0x40
[  819.333625][   T30]  genl_rcv+0x28/0x40
[  819.337778][   T30]  netlink_unicast+0x80f/0x9b0
[  819.342587][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  819.348141][   T30]  ? netlink_sendmsg+0x650/0xb40
[  819.353143][   T30]  ? skb_put+0x11b/0x210
[  819.357814][   T30]  netlink_sendmsg+0x813/0xb40
[  819.362628][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  819.368109][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  819.373088][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  819.378878][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  819.384223][   T30]  __sys_sendto+0x672/0x710
[  819.389168][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  819.394248][   T30]  ? exc_page_fault+0x6a/0xc0
[  819.399044][   T30]  ? do_user_addr_fault+0xc6f/0x1340
[  819.404382][   T30]  __x64_sys_sendto+0xde/0x100
[  819.409412][   T30]  do_syscall_64+0x14d/0xf80
[  819.414056][   T30]  ? trace_irq_disable+0x3b/0x150
[  819.420443][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  819.426778][   T30]  ? clear_bhb_loop+0x40/0x90
[  819.431501][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  819.437503][   T30] RIP: 0033:0x7f45b955cfce
[  819.441953][   T30] RSP: 002b:00007f45b77f4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  819.450816][   T30] RAX: ffffffffffffffda RBX: 00007f45b77f66c0 RCX: 00007f45b955cfce
[  819.459068][   T30] RDX: 000000000000001c RSI: 00007f45b77f5000 RDI: 0000000000000005
[  819.467172][   T30] RBP: 0000000000000000 R08: 00007f45b77f4f04 R09: 000000000000000c
[  819.475204][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  819.483580][   T30] R13: 00007f45b77f4f58 R14: 00007f45b77f5000 R15: 0000000000000000
[  819.491820][   T30]  </TASK>
[  819.494888][   T30] INFO: task syz.3.4899:24084 blocked for more than 144 seconds.
[  819.512406][   T30]       Not tainted syzkaller #0
[  819.518187][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  819.527372][   T30] task:syz.3.4899      state:D stack:28752 pid:24084 tgid:24074 ppid:17779  task_flags:0x400040 flags:0x00080002
[  819.540042][   T30] Call Trace:
[  819.543372][   T30]  <TASK>
[  819.546489][   T30]  __schedule+0x1585/0x5340
[  819.551076][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  819.556149][   T30]  ? __pfx___schedule+0x10/0x10
[  819.561051][   T30]  ? schedule+0x90/0x360
[  819.565312][   T30]  schedule+0x164/0x360
[  819.569969][   T30]  schedule_preempt_disabled+0x13/0x30
[  819.575466][   T30]  __mutex_lock+0x7fe/0x1300
[  819.580249][   T30]  ? is_bpf_text_address+0x26/0x2b0
[  819.585462][   T30]  ? __mutex_lock+0x5ac/0x1300
[  819.590480][   T30]  ? genl_rcv_msg+0x10b/0x7a0
[  819.595184][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  819.600824][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  819.605940][   T30]  ? radix_tree_lookup+0x240/0x290
[  819.611102][   T30]  genl_rcv_msg+0x10b/0x7a0
[  819.616031][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  819.622002][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  819.627521][   T30]  netlink_rcv_skb+0x232/0x4b0
[  819.632361][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  819.637589][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  819.642935][   T30]  ? down_read+0x272/0x2e0
[  819.647553][   T30]  ? genl_rcv+0xd/0x40
[  819.651677][   T30]  genl_rcv+0x28/0x40
[  819.656075][   T30]  netlink_unicast+0x80f/0x9b0
[  819.660864][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  819.666321][   T30]  ? netlink_sendmsg+0x650/0xb40
[  819.671300][   T30]  ? skb_put+0x11b/0x210
[  819.675639][   T30]  netlink_sendmsg+0x813/0xb40
[  819.680494][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  819.686285][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  819.691281][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  819.697091][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  819.702434][   T30]  __sys_sendto+0x672/0x710
[  819.707307][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  819.712419][   T30]  ? exc_page_fault+0x6a/0xc0
[  819.717616][   T30]  ? do_user_addr_fault+0xc6f/0x1340
[  819.723811][   T30]  __x64_sys_sendto+0xde/0x100
[  819.728825][   T30]  do_syscall_64+0x14d/0xf80
[  819.733467][   T30]  ? trace_irq_disable+0x3b/0x150
[  819.738612][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  819.744707][   T30]  ? clear_bhb_loop+0x40/0x90
[  819.749898][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  819.755926][   T30] RIP: 0033:0x7f45b955cfce
[  819.760367][   T30] RSP: 002b:00007f45b77d3e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  819.768953][   T30] RAX: ffffffffffffffda RBX: 00007f45b77d56c0 RCX: 00007f45b955cfce
[  819.777596][   T30] RDX: 0000000000000024 RSI: 00007f45b77d4000 RDI: 0000000000000005
[  819.785851][   T30] RBP: 0000000000000000 R08: 00007f45b77d3f04 R09: 000000000000000c
[  819.793858][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  819.801938][   T30] R13: 00007f45b77d3f58 R14: 00007f45b77d4000 R15: 0000000000000000
[  819.810292][   T30]  </TASK>
[  819.813358][   T30] INFO: task syz.0.4900:24077 blocked for more than 144 seconds.
[  819.821564][   T30]       Not tainted syzkaller #0
[  819.827481][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  819.836558][   T30] task:syz.0.4900      state:D stack:27112 pid:24077 tgid:24075 ppid:17369  task_flags:0x400140 flags:0x00080002
[  819.848650][   T30] Call Trace:
[  819.851951][   T30]  <TASK>
[  819.854890][   T30]  __schedule+0x1585/0x5340
[  819.859730][   T30]  ? __pfx___schedule+0x10/0x10
[  819.864649][   T30]  ? schedule+0x90/0x360
[  819.869390][   T30]  schedule+0x164/0x360
[  819.873601][   T30]  schedule_preempt_disabled+0x13/0x30
[  819.879200][   T30]  __mutex_lock+0x7fe/0x1300
[  819.883887][   T30]  ? __mutex_lock+0x5ac/0x1300
[  819.888885][   T30]  ? genl_rcv_msg+0x10b/0x7a0
[  819.893627][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  819.899113][   T30]  ? radix_tree_lookup+0x240/0x290
[  819.904273][   T30]  genl_rcv_msg+0x10b/0x7a0
[  819.909063][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  819.914153][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  819.919290][   T30]  netlink_rcv_skb+0x232/0x4b0
[  819.924119][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  819.930406][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  819.935976][   T30]  ? down_read+0x272/0x2e0
[  819.940542][   T30]  ? genl_rcv+0xd/0x40
[  819.944671][   T30]  genl_rcv+0x28/0x40
[  819.948882][   T30]  netlink_unicast+0x80f/0x9b0
[  819.953679][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  819.959386][   T30]  ? netlink_sendmsg+0x650/0xb40
[  819.964369][   T30]  ? skb_put+0x11b/0x210
[  819.968842][   T30]  netlink_sendmsg+0x813/0xb40
[  819.973770][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  819.979341][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  819.984320][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  819.990129][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  819.995475][   T30]  __sys_sendto+0x672/0x710
[  820.000147][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  820.005239][   T30]  ? exc_page_fault+0x6a/0xc0
[  820.010123][   T30]  ? do_user_addr_fault+0xc6f/0x1340
[  820.015462][   T30]  __x64_sys_sendto+0xde/0x100
[  820.020898][   T30]  do_syscall_64+0x14d/0xf80
[  820.025733][   T30]  ? trace_irq_disable+0x3b/0x150
[  820.031565][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  820.037958][   T30]  ? clear_bhb_loop+0x40/0x90
[  820.042689][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  820.049047][   T30] RIP: 0033:0x7fb45115cfce
[  820.053483][   T30] RSP: 002b:00007fb451fcae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  820.062065][   T30] RAX: ffffffffffffffda RBX: 00007fb451fcc6c0 RCX: 00007fb45115cfce
[  820.070261][   T30] RDX: 0000000000000020 RSI: 00007fb451fcb000 RDI: 0000000000000007
[  820.078722][   T30] RBP: 0000000000000000 R08: 00007fb451fcaf04 R09: 000000000000000c
[  820.086888][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  820.094905][   T30] R13: 00007fb451fcaf58 R14: 00007fb451fcb000 R15: 0000000000000000
[  820.103421][   T30]  </TASK>
[  820.106949][   T30] INFO: task syz.1.4904:24091 blocked for more than 145 seconds.
[  820.114716][   T30]       Not tainted syzkaller #0
[  820.119895][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  820.128724][   T30] task:syz.1.4904      state:D stack:26336 pid:24091 tgid:24090 ppid:16968  task_flags:0x400140 flags:0x00080002
[  820.141787][   T30] Call Trace:
[  820.145110][   T30]  <TASK>
[  820.148364][   T30]  __schedule+0x1585/0x5340
[  820.152942][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  820.158034][   T30]  ? __pfx___schedule+0x10/0x10
[  820.162939][   T30]  ? schedule+0x90/0x360
[  820.167630][   T30]  schedule+0x164/0x360
[  820.171818][   T30]  schedule_preempt_disabled+0x13/0x30
[  820.177575][   T30]  __mutex_lock+0x7fe/0x1300
[  820.182223][   T30]  ? is_bpf_text_address+0x26/0x2b0
[  820.187688][   T30]  ? __mutex_lock+0x5ac/0x1300
[  820.192505][   T30]  ? genl_rcv_msg+0x10b/0x7a0
[  820.197597][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  820.202672][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  820.207973][   T30]  ? radix_tree_lookup+0x240/0x290
[  820.213151][   T30]  genl_rcv_msg+0x10b/0x7a0
[  820.217773][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  820.222825][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  820.228231][   T30]  netlink_rcv_skb+0x232/0x4b0
[  820.233045][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  820.239106][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  820.244485][   T30]  ? down_read+0x272/0x2e0
[  820.249102][   T30]  ? genl_rcv+0xd/0x40
[  820.253224][   T30]  genl_rcv+0x28/0x40
[  820.257867][   T30]  netlink_unicast+0x80f/0x9b0
[  820.262686][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  820.268185][   T30]  ? netlink_sendmsg+0x650/0xb40
[  820.273176][   T30]  ? skb_put+0x11b/0x210
[  820.277605][   T30]  netlink_sendmsg+0x813/0xb40
[  820.282429][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  820.288107][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  820.293069][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  820.298566][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  820.303900][   T30]  __sys_sendto+0x672/0x710
[  820.308608][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  820.313704][   T30]  ? exc_page_fault+0x6a/0xc0
[  820.318771][   T30]  ? do_user_addr_fault+0xc6f/0x1340
[  820.324191][   T30]  __x64_sys_sendto+0xde/0x100
[  820.329192][   T30]  do_syscall_64+0x14d/0xf80
[  820.333844][   T30]  ? trace_irq_disable+0x3b/0x150
[  820.339954][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  820.346560][   T30]  ? clear_bhb_loop+0x40/0x90
[  820.351302][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  820.357351][   T30] RIP: 0033:0x7fa5c455cfce
[  820.361802][   T30] RSP: 002b:00007fa5c53f3e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  820.370560][   T30] RAX: ffffffffffffffda RBX: 00007fa5c53f56c0 RCX: 00007fa5c455cfce
[  820.379025][   T30] RDX: 0000000000000020 RSI: 00007fa5c53f4000 RDI: 0000000000000007
[  820.387187][   T30] RBP: 0000000000000000 R08: 00007fa5c53f3f04 R09: 000000000000000c
[  820.395190][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  820.403269][   T30] R13: 00007fa5c53f3f58 R14: 00007fa5c53f4000 R15: 0000000000000000
[  820.411630][   T30]  </TASK>
[  820.414708][   T30] INFO: task syz.1.4904:24092 blocked for more than 145 seconds.
[  820.422842][   T30]       Not tainted syzkaller #0
[  820.427916][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  820.437033][   T30] task:syz.1.4904      state:D stack:28832 pid:24092 tgid:24090 ppid:16968  task_flags:0x400040 flags:0x00080002
[  820.449962][   T30] Call Trace:
[  820.453291][   T30]  <TASK>
[  820.456362][   T30]  __schedule+0x1585/0x5340
[  820.460929][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  820.466373][   T30]  ? __pfx___schedule+0x10/0x10
[  820.471299][   T30]  ? schedule+0x90/0x360
[  820.475852][   T30]  schedule+0x164/0x360
[  820.480057][   T30]  schedule_preempt_disabled+0x13/0x30
[  820.485710][   T30]  __mutex_lock+0x7fe/0x1300
[  820.490354][   T30]  ? is_bpf_text_address+0x26/0x2b0
[  820.495909][   T30]  ? __mutex_lock+0x5ac/0x1300
[  820.500720][   T30]  ? genl_rcv_msg+0x10b/0x7a0
[  820.505459][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  820.510783][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  820.515919][   T30]  ? radix_tree_lookup+0x240/0x290
[  820.521086][   T30]  genl_rcv_msg+0x10b/0x7a0
[  820.526078][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  820.531163][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  820.536245][   T30]  netlink_rcv_skb+0x232/0x4b0
[  820.541049][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  820.547240][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  820.552596][   T30]  ? down_read+0x272/0x2e0
[  820.557390][   T30]  ? genl_rcv+0xd/0x40
[  820.561519][   T30]  genl_rcv+0x28/0x40
[  820.565753][   T30]  netlink_unicast+0x80f/0x9b0
[  820.570566][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  820.576233][   T30]  ? netlink_sendmsg+0x650/0xb40
[  820.581235][   T30]  ? skb_put+0x11b/0x210
[  820.586153][   T30]  netlink_sendmsg+0x813/0xb40
[  820.590993][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  820.596413][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  820.601407][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  820.606899][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  820.612244][   T30]  __sys_sendto+0x672/0x710
[  820.617189][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  820.622273][   T30]  ? fd_install+0x94/0x3d0
[  820.626966][   T30]  ? fd_install+0x306/0x3d0
[  820.631529][   T30]  __x64_sys_sendto+0xde/0x100
[  820.636420][   T30]  do_syscall_64+0x14d/0xf80
[  820.641080][   T30]  ? trace_irq_disable+0x3b/0x150
[  820.647291][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  820.653438][   T30]  ? clear_bhb_loop+0x40/0x90
[  820.658618][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  820.664559][   T30] RIP: 0033:0x7fa5c455cfce
[  820.669791][   T30] RSP: 002b:00007fa5c53d2e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  820.678451][   T30] RAX: ffffffffffffffda RBX: 00007fa5c53d46c0 RCX: 00007fa5c455cfce
[  820.686588][   T30] RDX: 0000000000000020 RSI: 00007fa5c53d3000 RDI: 000000000000000b
[  820.694577][   T30] RBP: 0000000000000000 R08: 00007fa5c53d2f04 R09: 000000000000000c
[  820.704041][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b
[  820.712558][   T30] R13: 00007fa5c53d2f58 R14: 00007fa5c53d3000 R15: 0000000000000000
[  820.720691][   T30]  </TASK>
[  820.723771][   T30] INFO: task syz.4.4909:24106 blocked for more than 145 seconds.
[  820.731829][   T30]       Not tainted syzkaller #0
[  820.737504][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  820.746970][   T30] task:syz.4.4909      state:D stack:27880 pid:24106 tgid:24105 ppid:18320  task_flags:0x400040 flags:0x00080002
[  820.759257][   T30] Call Trace:
[  820.762571][   T30]  <TASK>
[  820.766000][   T30]  __schedule+0x1585/0x5340
[  820.770573][   T30]  ? __pfx___schedule+0x10/0x10
[  820.775447][   T30]  ? schedule+0x90/0x360
[  820.780176][   T30]  schedule+0x164/0x360
[  820.784372][   T30]  schedule_preempt_disabled+0x13/0x30
[  820.790158][   T30]  __mutex_lock+0x7fe/0x1300
[  820.794802][   T30]  ? __mutex_lock+0x5ac/0x1300
[  820.799960][   T30]  ? genl_rcv_msg+0x10b/0x7a0
[  820.804664][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  820.810150][   T30]  ? radix_tree_lookup+0x240/0x290
[  820.815311][   T30]  genl_rcv_msg+0x10b/0x7a0
[  820.820018][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  820.825095][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  820.830528][   T30]  netlink_rcv_skb+0x232/0x4b0
[  820.835339][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  820.840583][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  820.846108][   T30]  ? down_read+0x272/0x2e0
[  820.851241][   T30]  ? genl_rcv+0xd/0x40
[  820.855368][   T30]  genl_rcv+0x28/0x40
[  820.859770][   T30]  netlink_unicast+0x80f/0x9b0
[  820.864593][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  820.870062][   T30]  ? netlink_sendmsg+0x650/0xb40
[  820.875038][   T30]  ? skb_put+0x11b/0x210
[  820.879436][   T30]  netlink_sendmsg+0x813/0xb40
[  820.884247][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  820.889985][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  820.894944][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  820.900448][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  820.905950][   T30]  __sys_sendto+0x672/0x710
[  820.910510][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  820.916191][   T30]  ? exc_page_fault+0x6a/0xc0
[  820.920929][   T30]  ? do_user_addr_fault+0xc6f/0x1340
[  820.926443][   T30]  __x64_sys_sendto+0xde/0x100
[  820.931270][   T30]  do_syscall_64+0x14d/0xf80
[  820.936041][   T30]  ? trace_irq_disable+0x3b/0x150
[  820.941113][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  820.947725][   T30]  ? clear_bhb_loop+0x40/0x90
[  820.953191][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  820.959322][   T30] RIP: 0033:0x7fc05e15cfce
[  820.963773][   T30] RSP: 002b:00007fc05f101e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  820.972395][   T30] RAX: ffffffffffffffda RBX: 00007fc05f1036c0 RCX: 00007fc05e15cfce
[  820.981266][   T30] RDX: 0000000000000020 RSI: 00007fc05f102000 RDI: 0000000000000005
[  820.989456][   T30] RBP: 0000000000000000 R08: 00007fc05f101f04 R09: 000000000000000c
[  820.997567][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  821.006001][   T30] R13: 00007fc05f101f58 R14: 00007fc05f102000 R15: 0000000000000000
[  821.014037][   T30]  </TASK>
[  821.017158][   T30] INFO: task syz.4.4909:24107 blocked for more than 145 seconds.
[  821.024893][   T30]       Not tainted syzkaller #0
[  821.030894][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  821.039955][   T30] task:syz.4.4909      state:D stack:25352 pid:24107 tgid:24105 ppid:18320  task_flags:0x400140 flags:0x00080002
[  821.052093][   T30] Call Trace:
[  821.056605][   T30]  <TASK>
[  821.059587][   T30]  __schedule+0x1585/0x5340
[  821.064174][   T30]  ? __pfx___schedule+0x10/0x10
[  821.069436][   T30]  ? schedule+0x90/0x360
[  821.073700][   T30]  schedule+0x164/0x360
[  821.077976][   T30]  schedule_preempt_disabled+0x13/0x30
[  821.083505][   T30]  __mutex_lock+0x7fe/0x1300
[  821.088318][   T30]  ? __mutex_lock+0x5ac/0x1300
[  821.093172][   T30]  ? genl_rcv_msg+0x10b/0x7a0
[  821.098254][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  821.103405][   T30]  ? radix_tree_lookup+0x240/0x290
[  821.108720][   T30]  genl_rcv_msg+0x10b/0x7a0
[  821.113282][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  821.118424][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  821.123411][   T30]  netlink_rcv_skb+0x232/0x4b0
[  821.128655][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  821.133747][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  821.139636][   T30]  ? down_read+0x272/0x2e0
[  821.144079][   T30]  ? genl_rcv+0xd/0x40
[  821.148345][   T30]  genl_rcv+0x28/0x40
[  821.152389][   T30]  netlink_unicast+0x80f/0x9b0
[  821.158496][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  821.163839][   T30]  ? netlink_sendmsg+0x650/0xb40
[  821.169035][   T30]  ? skb_put+0x11b/0x210
[  821.173328][   T30]  netlink_sendmsg+0x813/0xb40
[  821.178310][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  821.183639][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  821.189038][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  821.194369][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  821.199775][   T30]  __sys_sendto+0x672/0x710
[  821.204331][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  821.209723][   T30]  ? fd_install+0x94/0x3d0
[  821.214257][   T30]  ? fd_install+0x306/0x3d0
[  821.219394][   T30]  __x64_sys_sendto+0xde/0x100
[  821.224187][   T30]  do_syscall_64+0x14d/0xf80
[  821.228974][   T30]  ? trace_irq_disable+0x3b/0x150
[  821.234051][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  821.240279][   T30]  ? clear_bhb_loop+0x40/0x90
[  821.244998][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  821.251456][   T30] RIP: 0033:0x7fc05e15cfce
[  821.255993][   T30] RSP: 002b:00007fc05f0e0e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  821.265428][   T30] RAX: ffffffffffffffda RBX: 00007fc05f0e26c0 RCX: 00007fc05e15cfce
[  821.273621][   T30] RDX: 0000000000000020 RSI: 00007fc05f0e1000 RDI: 0000000000000008
[  821.281956][   T30] RBP: 0000000000000000 R08: 00007fc05f0e0f04 R09: 000000000000000c
[  821.290185][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[  821.298269][   T30] R13: 00007fc05f0e0f58 R14: 00007fc05f0e1000 R15: 0000000000000000
[  821.306749][   T30]  </TASK>
[  821.309828][   T30] INFO: task syz.4.4909:24108 blocked for more than 146 seconds.
[  821.318487][   T30]       Not tainted syzkaller #0
[  821.323445][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  821.332293][   T30] task:syz.4.4909      state:D stack:27144 pid:24108 tgid:24105 ppid:18320  task_flags:0x400140 flags:0x00080002
[  821.344598][   T30] Call Trace:
[  821.348082][   T30]  <TASK>
[  821.351044][   T30]  __schedule+0x1585/0x5340
[  821.355848][   T30]  ? __pfx___schedule+0x10/0x10
[  821.361471][   T30]  ? schedule+0x90/0x360
[  821.366468][   T30]  schedule+0x164/0x360
[  821.370654][   T30]  schedule_preempt_disabled+0x13/0x30
[  821.376320][   T30]  __mutex_lock+0x7fe/0x1300
[  821.380972][   T30]  ? __mutex_lock+0x5ac/0x1300
[  821.385958][   T30]  ? genl_rcv_msg+0x10b/0x7a0
[  821.390698][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  821.396220][   T30]  ? radix_tree_lookup+0x240/0x290
[  821.401383][   T30]  genl_rcv_msg+0x10b/0x7a0
[  821.406103][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  821.411179][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  821.416281][   T30]  netlink_rcv_skb+0x232/0x4b0
[  821.421082][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  821.426552][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  821.431872][   T30]  ? down_read+0x272/0x2e0
[  821.436382][   T30]  ? genl_rcv+0xd/0x40
[  821.440496][   T30]  genl_rcv+0x28/0x40
[  821.444491][   T30]  netlink_unicast+0x80f/0x9b0
[  821.449426][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  821.454745][   T30]  ? netlink_sendmsg+0x650/0xb40
[  821.460071][   T30]  ? skb_put+0x11b/0x210
[  821.465115][   T30]  netlink_sendmsg+0x813/0xb40
[  821.470268][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  821.475701][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  821.480673][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  821.486413][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  821.491722][   T30]  __sys_sendto+0x672/0x710
[  821.496456][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  821.501538][   T30]  ? fd_install+0x94/0x3d0
[  821.506153][   T30]  ? fd_install+0x306/0x3d0
[  821.510715][   T30]  __x64_sys_sendto+0xde/0x100
[  821.516515][   T30]  do_syscall_64+0x14d/0xf80
[  821.521160][   T30]  ? trace_irq_disable+0x3b/0x150
[  821.526412][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  821.532524][   T30]  ? clear_bhb_loop+0x40/0x90
[  821.537334][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  821.543287][   T30] RIP: 0033:0x7fc05e15cfce
[  821.548205][   T30] RSP: 002b:00007fc05f0bfe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  821.556879][   T30] RAX: ffffffffffffffda RBX: 00007fc05f0c16c0 RCX: 00007fc05e15cfce
[  821.564887][   T30] RDX: 0000000000000020 RSI: 00007fc05f0c0000 RDI: 000000000000000a
[  821.573787][   T30] RBP: 0000000000000000 R08: 00007fc05f0bff04 R09: 000000000000000c
[  821.582309][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a
[  821.590503][   T30] R13: 00007fc05f0bff58 R14: 00007fc05f0c0000 R15: 0000000000000000
[  821.598588][   T30]  </TASK>
[  821.601612][   T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  821.611180][   T30] 
[  821.611180][   T30] Showing all locks held in the system:
[  821.619411][   T30] 1 lock held by khungtaskd/30:
[  821.624303][   T30]  #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  821.634558][   T30] 1 lock held by klogd/5185:
[  821.639639][   T30]  #0: ffff8880b873ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150
[  821.649787][   T30] 2 locks held by getty/5588:
[  821.654505][   T30]  #0: ffff8880329850a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  821.664552][   T30]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  821.676132][   T30] 3 locks held by kworker/u8:22/9807:
[  821.681545][   T30]  #0: ffff8880b873ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150
[  821.691837][   T30]  #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  821.701437][   T30]  #2: ffff888055663920 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_ogm_schedule+0xe5/0xf50
[  821.713582][   T30] 1 lock held by udevd/21791:
[  821.718380][   T30]  #0: ffff8880266aa358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  821.728177][   T30] 6 locks held by syz.2.4898/24072:
[  821.733383][   T30]  #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  821.741751][   T30]  #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  821.750882][   T30]  #2: ffff888026690278 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0
[  821.761704][   T30]  #3: ffff88802667bff0 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680
[  821.772135][   T30]  #4: ffff88802667b990 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  821.784505][   T30]  #5: ffff88802667b9c8 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  821.797533][   T30] 2 locks held by syz.2.4898/24078:
[  821.802775][   T30]  #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  821.811166][   T30]  #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  821.820334][   T30] 2 locks held by syz.3.4899/24076:
[  821.825960][   T30]  #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  821.834214][   T30]  #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  821.843424][   T30] 2 locks held by syz.3.4899/24084:
[  821.848739][   T30]  #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  821.857491][   T30]  #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  821.866606][   T30] 2 locks held by syz.0.4900/24077:
[  821.871839][   T30]  #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  821.881043][   T30]  #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  821.890463][   T30] 2 locks held by syz.1.4904/24091:
[  821.895846][   T30]  #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  821.904101][   T30]  #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  821.913419][   T30] 2 locks held by syz.1.4904/24092:
[  821.919063][   T30]  #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  821.927369][   T30]  #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  821.936677][   T30] 2 locks held by syz.4.4909/24106:
[  821.942005][   T30]  #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  821.950663][   T30]  #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  821.959929][   T30] 2 locks held by syz.4.4909/24107:
[  821.965160][   T30]  #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  821.973519][   T30]  #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  821.983763][   T30] 2 locks held by syz.4.4909/24108:
[  821.989133][   T30]  #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  821.997509][   T30]  #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  822.006886][   T30] 2 locks held by syz-executor/24113:
[  822.012263][   T30]  #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  822.021115][   T30]  #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  822.030279][   T30] 2 locks held by syz-executor/24115:
[  822.036107][   T30]  #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  822.044342][   T30]  #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  822.053463][   T30] 2 locks held by syz-executor/24118:
[  822.059066][   T30]  #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  822.067775][   T30]  #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  822.076953][   T30] 2 locks held by syz-executor/24129:
[  822.083064][   T30]  #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  822.091450][   T30]  #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  822.101041][   T30] 2 locks held by syz-executor/24131:
[  822.106532][   T30]  #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  822.114825][   T30]  #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  822.124161][   T30] 2 locks held by syz-executor/24169:
[  822.130043][   T30]  #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  822.138476][   T30]  #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  822.147636][   T30] 2 locks held by syz-executor/24171:
[  822.153020][   T30]  #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  822.161799][   T30]  #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  822.171114][   T30] 2 locks held by syz-executor/24173:
[  822.177531][   T30]  #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  822.187340][   T30]  #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  822.196602][   T30] 2 locks held by syz-executor/24184:
[  822.202014][   T30]  #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  822.210579][   T30]  #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  822.220123][   T30] 2 locks held by syz-executor/24187:
[  822.225644][   T30]  #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  822.233927][   T30]  #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  822.243305][   T30] 2 locks held by syz-executor/24289:
[  822.249011][   T30]  #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  822.259742][   T30]  #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  822.269229][   T30] 2 locks held by syz-executor/24290:
[  822.274645][   T30]  #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  822.283742][   T30]  #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  822.293067][   T30] 2 locks held by syz-executor/24296:
[  822.299049][   T30]  #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  822.307680][   T30]  #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  822.316974][   T30] 2 locks held by syz-executor/24307:
[  822.322363][   T30]  #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  822.330758][   T30]  #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  822.340469][   T30] 2 locks held by syz-executor/24310:
[  822.346013][   T30]  #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  822.354299][   T30]  #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  822.363458][   T30] 
[  822.366080][   T30] =============================================
[  822.366080][   T30] 
[  822.374627][   T30] NMI backtrace for cpu 1
[  822.374647][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  822.374671][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  822.374692][   T30] Call Trace:
[  822.374699][   T30]  <TASK>
[  822.374707][   T30]  dump_stack_lvl+0xe8/0x150
[  822.374739][   T30]  nmi_cpu_backtrace+0x274/0x2d0
[  822.374761][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  822.374787][   T30]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  822.374811][   T30]  sys_info+0x135/0x170
[  822.374828][   T30]  watchdog+0xfd9/0x1030
[  822.374874][   T30]  ? watchdog+0x21a/0x1030
[  822.374910][   T30]  kthread+0x388/0x470
[  822.374927][   T30]  ? __pfx_watchdog+0x10/0x10
[  822.374955][   T30]  ? __pfx_kthread+0x10/0x10
[  822.374972][   T30]  ret_from_fork+0x51e/0xb90
[  822.375006][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  822.375029][   T30]  ? __switch_to+0xc7d/0x1450
[  822.375062][   T30]  ? __pfx_kthread+0x10/0x10
[  822.375079][   T30]  ret_from_fork_asm+0x1a/0x30
[  822.375122][   T30]  </TASK>
[  822.375128][   T30] Sending NMI from CPU 1 to CPUs 0:
[  822.486357][    C0] NMI backtrace for cpu 0
[  822.486376][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  822.486398][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  822.486411][    C0] RIP: 0010:__sanitizer_cov_trace_cmp8+0x27/0x90
[  822.486450][    C0] Code: 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0d e8 31 56 11 65 8b 15 09 32 56 11 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 <83> b9 54 16 00 00 00 74 4e 8b 91 30 16 00 00 83 fa 03 75 43 48 8b
[  822.486468][    C0] RSP: 0018:ffffc90000007b80 EFLAGS: 00000246
[  822.486487][    C0] RAX: ffffffff89b49f3f RBX: 000000000001c9c3 RCX: ffffffff8e494ec0
[  822.486502][    C0] RDX: 0000000000000100 RSI: 000000000001c9c3 RDI: 0000000000000000
[  822.486515][    C0] RBP: ffff88808b219988 R08: 0000000000000003 R09: 0000000000000004
[  822.486527][    C0] R10: dffffc0000000000 R11: fffff52000000f74 R12: dffffc0000000000
[  822.486542][    C0] R13: 0000000000000001 R14: ffff88808b2199a0 R15: 0000000000000000
[  822.486556][    C0] FS:  0000000000000000(0000) GS:ffff888125464000(0000) knlGS:0000000000000000
[  822.486572][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  822.486585][    C0] CR2: 000056439d79eee8 CR3: 000000000e54c000 CR4: 00000000003526f0
[  822.486603][    C0] Call Trace:
[  822.486611][    C0]  <IRQ>
[  822.486617][    C0]  pie_calculate_probability+0x4df/0x7e0
[  822.486740][    C0]  fq_pie_timer+0x288/0x5b0
[  822.486763][    C0]  ? fq_pie_timer+0x4d/0x5b0
[  822.486787][    C0]  call_timer_fn+0x192/0x640
[  822.486821][    C0]  ? __pfx_fq_pie_timer+0x10/0x10
[  822.486841][    C0]  ? call_timer_fn+0xd4/0x640
[  822.486882][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  822.486916][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  822.486974][    C0]  ? __pfx_fq_pie_timer+0x10/0x10
[  822.487002][    C0]  __run_timer_base+0x652/0x8b0
[  822.487026][    C0]  ? ktime_get+0x45/0x200
[  822.487057][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  822.487087][    C0]  ? sched_clock_cpu+0x74/0x440
[  822.487124][    C0]  run_timer_softirq+0xb7/0x170
[  822.487150][    C0]  handle_softirqs+0x22a/0x870
[  822.487183][    C0]  ? __irq_exit_rcu+0x5f/0x150
[  822.487220][    C0]  __irq_exit_rcu+0x5f/0x150
[  822.487250][    C0]  irq_exit_rcu+0x9/0x30
[  822.487280][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  822.487315][    C0]  </IRQ>
[  822.487322][    C0]  <TASK>
[  822.487331][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  822.487356][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  822.487391][    C0] Code: 7e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 1d 1c 00 fb f4 <e9> 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  822.487411][    C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000246
[  822.487430][    C0] RAX: 000000000037acf9 RBX: ffffffff819a80dd RCX: 0000000080000001
[  822.487446][    C0] RDX: 0000000000000001 RSI: ffffffff8def2c4d RDI: ffffffff8c27aa00
[  822.487463][    C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b
[  822.487480][    C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: ffffffff901186b0
[  822.487495][    C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000
[  822.487512][    C0]  ? do_idle+0x1bd/0x500
[  822.487548][    C0]  default_idle+0x9/0x20
[  822.487567][    C0]  default_idle_call+0x72/0xb0
[  822.487587][    C0]  do_idle+0x1bd/0x500
[  822.487615][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  822.487649][    C0]  ? __pfx_do_idle+0x10/0x10
[  822.487684][    C0]  cpu_startup_entry+0x43/0x60
[  822.487714][    C0]  rest_init+0x2de/0x300
[  822.487736][    C0]  start_kernel+0x385/0x3d0
[  822.487848][    C0]  x86_64_start_reservations+0x24/0x30
[  822.487902][    C0]  x86_64_start_kernel+0x143/0x1c0
[  822.487925][    C0]  common_startup_64+0x13e/0x147
[  822.487957][    C0]  </TASK>
[  822.856882][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  822.863797][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  822.872912][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  822.882979][   T30] Call Trace:
[  822.886292][   T30]  <TASK>
[  822.889241][   T30]  vpanic+0x56c/0xa60
[  822.893238][   T30]  ? __pfx___schedule+0x10/0x10
[  822.898106][   T30]  ? __pfx_vpanic+0x10/0x10
[  822.902671][   T30]  ? __pfx_console_unlock+0x10/0x10
[  822.907912][   T30]  panic+0xc5/0xd0
[  822.911667][   T30]  ? __pfx_panic+0x10/0x10
[  822.916116][   T30]  ? preempt_schedule_thunk+0x16/0x30
[  822.921546][   T30]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  822.927729][   T30]  watchdog+0x1023/0x1030
[  822.932111][   T30]  ? watchdog+0x21a/0x1030
[  822.936576][   T30]  kthread+0x388/0x470
[  822.940688][   T30]  ? __pfx_watchdog+0x10/0x10
[  822.945398][   T30]  ? __pfx_kthread+0x10/0x10
[  822.950012][   T30]  ret_from_fork+0x51e/0xb90
[  822.954672][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  822.959812][   T30]  ? __switch_to+0xc7d/0x1450
[  822.964515][   T30]  ? __pfx_kthread+0x10/0x10
[  822.969131][   T30]  ret_from_fork_asm+0x1a/0x30
[  822.973936][   T30]  </TASK>
[  822.977731][   T30] Kernel Offset: disabled
[  822.982069][   T30] Rebooting in 86400 seconds..