last executing test programs:

19.56949221s ago: executing program 2 (id=1864):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f0000000080), 0x4)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@private2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast1, 0x0, 0x3c}, @in=@broadcast, {0x5, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, {0x0, 0x4, 0xfffffffffffffff8}, {0x0, 0x3, 0xffff}, 0x0, 0x0, 0xa}, 0x5, 0x5}}, 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = accept(r2, &(0x7f0000000080), &(0x7f0000000000)=0x80)
bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x80000000}, 0xc)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4)
setsockopt$inet6_tcp_int(r4, 0x6, 0x1b, &(0x7f0000000300)=0x8, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x24000000)
connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa)
r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010829bd7000567960a42f2fef00", @ANYRES32=0x0, @ANYBLOB="0001000004200400080004"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884)
connect$bt_rfcomm(r6, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa)
shutdown(r2, 0x1)
r8 = gettid()
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004c40)=[{{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r8}}}], 0x38, 0x40004}}], 0x1, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000a80))
getgid()
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYRESOCT], 0x38}}, 0x0)
accept4$llc(r5, &(0x7f0000000ac0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000b00)=0x10, 0x800)
socket$netlink(0x10, 0x3, 0x0)
gettid()

18.677784973s ago: executing program 2 (id=1886):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80005)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipvlan1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002480)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xe11}}]}, 0x38}, 0x1, 0x0, 0x0, 0x51}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00l\x00\x00', @ANYRESDEC=r1, @ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="fc0977aa9e47ca2a50e627f23c9e1490ccebb5d26f6c0517ecf4bcb524e518cc2c90c53ac41dfecf08b84175483261f70210c8f98d43d63f41efd2743cf7aae8a30ccd5b4709ba25ba2f7c561e190e92b1f500f8cdc1a76b0e7e952ad459ef26bbc61e38db86109b9a6eae97"], 0x1c}, 0x1, 0x0, 0x0, 0x20000095}, 0x400c810)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r5 = openat$cgroup_type(r4, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r5, &(0x7f0000000280), 0x9)
r6 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r6, &(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c)
r7 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f00000001c0), 0x9)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r8}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
bind$llc(r10, &(0x7f0000000340)={0x1a, 0x30a, 0xbe, 0x4, 0x7, 0x5d}, 0x10)
write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={0x0}, 0x18)
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r11, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r11, &(0x7f0000000580)=ANY=[@ANYBLOB="1300000002"], 0x8)
syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0)

17.715350025s ago: executing program 0 (id=1893):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r0, &(0x7f0000000f40)={{0x6, @rose}, [@default, @bcast, @netrom, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48)
sendto(r0, 0x0, 0x0, 0x80, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000dcf3490000000000000007850000080000000e00000095000000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
r9 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000052c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000006080)=""/4074, 0xfea}, {&(0x7f0000000240)=""/103, 0x67}, {&(0x7f0000000040)=""/113, 0x71}, {&(0x7f0000000140)=""/55, 0x37}, {&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f00000001c0)=""/54, 0x36}, {&(0x7f0000007080)=""/4096, 0x1000}], 0xa}, 0x4db}, {{0x0, 0x0, 0x0}, 0x20008}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000780)=""/146, 0x92}, {&(0x7f0000000840)=""/158, 0x9e}, {&(0x7f0000000900)=""/220, 0xdc}, {&(0x7f0000000a00)=""/11, 0xb}, {&(0x7f0000000a40)=""/80, 0x50}, {&(0x7f0000000b40)=""/97, 0x61}, {&(0x7f0000000bc0)=""/123, 0x7b}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/171, 0xab}], 0x9, &(0x7f0000003e00)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000000dc0)=@generic, 0x80, &(0x7f0000001400)=[{&(0x7f0000000e40)=""/223, 0xdf}, {&(0x7f0000000fc0)=""/166, 0xa6}, {&(0x7f0000001100)=""/212, 0xd4}, {&(0x7f0000001200)=""/108, 0x6c}, {&(0x7f0000001280)=""/134, 0x86}, {&(0x7f0000001340)=""/95, 0x5f}, {&(0x7f00000013c0)=""/57, 0x39}], 0x7, &(0x7f0000001480)=""/165, 0xa5}, 0x9}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000015c0)=""/27, 0x1b}, {&(0x7f0000000600)=""/96, 0x60}, {&(0x7f00000016c0)=""/218, 0xda}], 0x3, &(0x7f0000001800)=""/222, 0xde}, 0x4}, {{&(0x7f0000001900)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000001980)=[{&(0x7f0000002a40)=""/143, 0x8f}], 0x1, &(0x7f0000004e00)=""/181, 0xb5}, 0xb68d}, {{&(0x7f0000004ec0)=@generic, 0x80, &(0x7f0000005180)=[{&(0x7f0000004f40)=""/179, 0xb3}, {&(0x7f0000005000)=""/240, 0xf0}, {&(0x7f0000005100)=""/124, 0x7c}, {&(0x7f00000019c0)=""/21, 0x15}], 0x4, &(0x7f00000051c0)=""/247, 0xf7}, 0x6}], 0xc, 0x40002000, 0x0)
socket$igmp(0x2, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmmsg$inet(r10, &(0x7f00000000c0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="08746100839de29f80cbd1fea21bd790ddffb5bf4221aec44908bc5bda64216408fc2465294b8765ddfa4818d2296b6305fe098a9c32f7fec2f9b654eec757858e9271455a5d88ba59ac017c93ebca88ab351859ad0935722d4b157ed7774b3bdee295afa5796ec4ec77f76c7d9e24777847c773d4f4bd86369366a1c9f4f8bd42fd8acb410bb8a7140da53378dbdf60d31f0102ddb8e5b71817"], 0x70}}], 0x1, 0x4000004)

17.450056883s ago: executing program 1 (id=1902):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_smc(0x2b, 0x1, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)
write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r1, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r6, 0x6a98047402e98331, 0x1000000, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x0, 0xa}, 0x94)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0)

17.259514024s ago: executing program 2 (id=1904):
r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000040)=0x10, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0)
ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000140)=0x80000001)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0300001a"], 0x34c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x1, 0x70bd25, 0x7, {0x0, 0x0, 0x0, r5, 0x44198, 0x180f}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8, 0x25, 0x9}, @IFLA_BRPORT_MCAST_FLOOD={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x811}, 0x4000000)
ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc8a000500feff"], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x88, &(0x7f0000000200)=""/136, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000040)=0x10, 0x0) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) (async)
ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000140)=0x80000001) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0300001a"], 0x34c}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) (async)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x1, 0x70bd25, 0x7, {0x0, 0x0, 0x0, r5, 0x44198, 0x180f}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8, 0x25, 0x9}, @IFLA_BRPORT_MCAST_FLOOD={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x811}, 0x4000000) (async)
ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x1) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc8a000500feff"], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x88, &(0x7f0000000200)=""/136, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async)

17.13859008s ago: executing program 2 (id=1906):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000006040), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48)
close(r1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e1850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdff}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r6}, 0x10)
poll(0x0, 0x0, 0xffffffffffbffff8)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201)
close(0xffffffffffffffff)

16.831557137s ago: executing program 0 (id=1909):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)='wi', 0x2}], 0x1, 0x1) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000004a80)=@delchain={0xb8, 0x65, 0x20, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf, 0xc}, {0xfff1, 0x3}, {0x4, 0x9}}, [@f_rsvp={{0x9}, {0x88, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xffff, 0x8}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xf882, 0x6, 0x4}, {0x7fff, 0x2, 0x7}, 0x2f, 0x1, 0xf}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff2, 0x2}}, @TCA_RSVP_ACT={0x54, 0x6, [@m_connmark={0x50, 0x1f, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x200, 0x2, 0x5, 0xffffffff, 0x4}, 0xa89d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40054}, 0x1) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}, 0x1, 0x0, 0x0, 0x20048080}, 0x4010) (async)
r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
splice(r0, 0x0, r3, 0x0, 0x80000002, 0x1)

16.56748559s ago: executing program 3 (id=1911):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockname(r0, &(0x7f0000000100)=@sco={0x1f, @none}, &(0x7f0000000080)=0x80) (async)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000000)=0x7fffffff, 0x4) (async)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3)
setsockopt$ax25_int(r3, 0x101, 0x5, &(0x7f00000008c0)=0x7, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000004789c4da0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0xffffff1f, 0x2000000}}, 0x20) (async)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010700000000000000001600000008000300", @ANYRES32=r6], 0x1c}}, 0x0) (async)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) (async)
mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48)

16.567175974s ago: executing program 0 (id=1912):
r0 = socket$netlink(0x10, 0x3, 0x14)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async)
recvmsg$qrtr(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000640)=""/1, 0x1}, {&(0x7f0000000700)=""/192, 0xc0}], 0x2, 0x0, 0x0, 0x10000}, 0x38, 0x2) (async)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x100, 0x70bd25, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1800) (async)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async)
sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)={0x10, 0x31, 0x20, 0x70bd26, 0x25dfdbfd}, 0x10}], 0x1, 0x0, 0x0, 0x8080}, 0x40)

16.562430868s ago: executing program 3 (id=1913):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001240)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x4804)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r5, 0x0)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x4c84c000)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

16.550056383s ago: executing program 1 (id=1914):
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB="0600000000000000000000004d04869700000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000240)=""/150, 0x96, <r0=>0x0, &(0x7f0000000300)=""/200, 0xc8}}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002006400000008000a000100000008001800ac1414aa080019"], 0x58}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.empty_time\x00', 0x0, 0x0)
bind$bt_hci(r3, &(0x7f0000000040), 0x6)
r5 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
connect$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e22, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c)
sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
ioctl$sock_bt_hci(r3, 0x400448ca, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000700)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f00000001c0)={r7, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000000)={r7, 0x9}, 0x8)
socket$rxrpc(0x21, 0x2, 0x2)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="180800f5d1e17b29248100000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000080))
r8 = socket$l2tp6(0xa, 0x2, 0x73)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r10, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, r10, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x2c}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20040048}, 0x0)
setsockopt$inet6_int(r8, 0x29, 0x21, &(0x7f0000000380)=0x4, 0x4)

16.492251212s ago: executing program 0 (id=1915):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0xfc, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xf, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc8, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0x4}}, @TCA_MATCHALL_ACT={0xcb, 0x2, [@m_skbedit={0xa0, 0xe, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x80000000, 0xfffffffd, 0xffffffffffffffff, 0x3, 0x9}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0xfff3}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x4, 0xfff3}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x8, 0xfff1}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7ff}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x50e}]}, {0x34, 0x6, "4451f677e1feba51f0ca936c35676af75510a35c3d1e76db91483b29378a9cfebc4ed602044c88674ebdcbd0ed1f7310"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r7, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000200002800500040001"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004)
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @dev={0xac, 0x14, 0x14, 0x27}}}}], 0x20}}], 0x1, 0x80)

16.434875024s ago: executing program 4 (id=1916):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8)
close(r4)
r5 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000280)={'gretap0\x00', &(0x7f00000000c0)={'syztnl0\x00', <r10=>r9, 0x80, 0x7800, 0x326, 0x800, {{0x8, 0x4, 0x1, 0x18, 0x20, 0x68, 0x0, 0x9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @dev={0xac, 0x14, 0x14, 0xf}, {[@timestamp={0x44, 0x8, 0xed, 0x0, 0x1, [0x8]}, @noop]}}}}})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4, <r11=>0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000400)=r4}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x1b, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff9}, @map_val={0x18, 0x102ad75a2d4658b7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x3}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x7}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x6}]}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x68, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x5, 0x0, 0x3, 0x101}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000480)=[r4, r0, r4, r0, r0, r11], &(0x7f0000000500)=[{0x4, 0x1, 0x8, 0x2}, {0x2, 0x4, 0x8, 0x8}, {0x0, 0x4, 0x7, 0x9}, {0x3, 0x4, 0x3, 0x5}, {0x1, 0x5, 0x10, 0x5}, {0x5, 0x4, 0x2, 0xb}, {0x2, 0x2, 0x4}], 0x10, 0x5}, 0x94)
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000)
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x2}, {}, {0xfff1, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084)
socket(0x11, 0x3, 0xffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

16.434378023s ago: executing program 0 (id=1917):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000005)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001000)='veno\x00', 0x5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xd11}], 0x5, &(0x7f0000001480)}, 0x80)
recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300)
r2 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, r1, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000300ffffffb702000005000000b70300000000000085000000b00000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='percpu_alloc_percpu\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fe0f00000700000000000000", @ANYRES32, @ANYBLOB="010000004100eb3d10c1d8fb9f30000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c)
sendto$inet6(r0, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x89b1, &(0x7f0000000040)={'syz_tun\x00', 0xfffffffe})
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001180)="009fc3e8a42c8d01fc4ebeb6c15e4b166c541d808cdd6524cc2319725dd45208cd8be28cb104e3d0f056240c324ba0143f77474668566bce917af3d89c8ef5e062a214b60f15", 0x46)
accept4(r4, 0x0, 0x0, 0x80000)
bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0xb, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000d3000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x94)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
unshare(0x20040600)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x8)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
shutdown(r0, 0x1)

16.43342719s ago: executing program 1 (id=1918):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd0, 0x9, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x32}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x95}]}, @IPSET_ATTR_DATA={0x5c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xcf}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x16}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2e}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1ca1}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24040890}, 0x4) (async)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r3, 0x0) (async)
splice(r3, 0x0, r2, 0x0, 0x2, 0x0) (async)
setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f00000003c0), 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="680000001000ffff24bd7000f8fbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000030000480012800b000100697036746e6c0000380002800400130008000100", @ANYRES32, @ANYBLOB="14000200fc0200eaffffffffffffff000000000014000300fe"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)

16.387101482s ago: executing program 1 (id=1919):
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x200012}, 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000004000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000f4ffffff00000700000000000000ffff0000000000"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0xd}, 0x94)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'})
ioctl(r1, 0x8b22, &(0x7f0000000040))

16.385817813s ago: executing program 3 (id=1920):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, 0x0, 0x84)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x37, 0x2, {0xe, 0x10, 0xbb2f, 0x7}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x84}}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000340)={'syz_tun\x00', 0x101})
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000000202010f0000000000000000020000092c00028006000340000400001400018008000100ac1414aa080002000a0101000c0002"], 0x40}, 0x1, 0x0, 0x0, 0x4c800}, 0x40000)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0)
close(r2)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, 0x0, 0x84) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'xfrm0\x00'}) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x37, 0x2, {0xe, 0x10, 0xbb2f, 0x7}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x84}}, 0x0) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000340)={'syz_tun\x00', 0x101}) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000000202010f0000000000000000020000092c00028006000340000400001400018008000100ac1414aa080002000a0101000c0002"], 0x40}, 0x1, 0x0, 0x0, 0x4c800}, 0x40000) (async)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) (async)
close(r2) (async)

16.327465287s ago: executing program 4 (id=1921):
r0 = socket(0x10, 0x3, 0x0) (async)
r1 = socket(0xa, 0x3, 0x3a) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f00000000c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async)
r4 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4624, 0x0, @local, 0x3}, 0x1c)
syz_emit_ethernet(0x0, 0x0, 0x0)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) (async)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)) (async)
sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004011}, 0x24008000)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00', <r5=>0x0})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) (async)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r7, 0x1, 0x27, &(0x7f0000000240)=0x5, 0x4) (async)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r5}, 0xc)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0xfc, r5}, 0xc)
write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)

16.226771518s ago: executing program 2 (id=1922):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180009ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x14, 0x13, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}}, 0x4000)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, r3, 0x7}, 0x50)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newsa={0x13c, 0x10, 0x713, 0x70bd2d, 0x0, {{@in=@broadcast, @in=@loopback, 0x0, 0x7, 0x0, 0x0, 0xa}, {@in=@local, 0x0, 0x3c}, @in6=@private1, {0x0, 0xfffffffffffffffe, 0x7, 0x100000}, {0x0, 0x0, 0xfffffffffffffff8}, {0x0, 0x0, 0x8}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(md5)\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x0)
getsockopt$inet6_int(r2, 0x29, 0x9, &(0x7f0000000140), &(0x7f0000000180)=0x4)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
unshare(0x22020600)
r7 = socket$kcm(0x11, 0x3, 0x0)
socket$kcm(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0x17, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1e, &(0x7f0000000840)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x20000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @map_fd={0x18, 0x5, 0x1, 0x0, r4}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r10)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x3c, r11, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x11, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0)
sendmsg$NLBL_UNLABEL_C_STATICADD(r9, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r11, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:hostname_exec_t:s0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0xc010}, 0x4000)

16.179301668s ago: executing program 1 (id=1923):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r4=>0x0}) (async)
r5 = socket$netlink(0x10, 0x3, 0x0) (async)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x23311, 0x8831}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14)
sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x7c, r3, 0x8, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x15}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x84c0}, 0x4004040) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000000000001b000000200001801400020064756d6d79300000000000000000000008000100", @ANYRES32=r9, @ANYBLOB], 0x34}}, 0x4000000) (async)
r10 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00', <r11=>0x0}) (async)
r12 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}, @in={0x2, 0x4e24, @private=0xa010102}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e23, @loopback}], 0x40) (async)
sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x12, r11, {}, {0xffff, 0xffff}, {0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r16=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x38, r15, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x200, 0x153e, 0x6, 0x3, 0x9, 0x6, 0x5]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) (async)
sendmsg$OSF_MSG_ADD(r13, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000800)={0x1060, 0x0, 0x5, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [{{0x254, 0x1, {{0x2, 0x7}, 0x8, 0x7, 0xe7, 0x5, 0x5, 'syz1\x00', "e0d3b2bee8f8cc6418f3e113a0166da73d411aafc526bec1504b9351b53c0d05", "7ca079ca7bf158a42965f5b628fc9e3cf9a09c99e31c48fe6dddae49a79d5f48", [{0x9, 0x6, {0x3, 0x4}}, {0x6, 0xfffd, {0x3}}, {0x0, 0x41, {0x0, 0x2}}, {0x4, 0xae0d, {0x0, 0x3}}, {0x1, 0x0, {0x1, 0xd0}}, {0x4, 0xfff, {0x0, 0x5b58}}, {0x9, 0x8, {0x2, 0x8}}, {0xb, 0x5, {0x3, 0x7397}}, {0x94d1, 0x0, {0x2, 0x8}}, {0xaba, 0x9, {0x0, 0x4}}, {0x2, 0x0, {0x3, 0x3}}, {0x6, 0x4, {0x1, 0xfffffffd}}, {0x9d1, 0x6, {0x1, 0xd}}, {0x4fae, 0x4, {0x1, 0x77}}, {0x6, 0x87, {0x3, 0x3}}, {0x4, 0x5, {0x2, 0x6}}, {0x12, 0x0, {0x1, 0x4}}, {0x0, 0x2, {0x3, 0x8}}, {0x3, 0x3, {0x3, 0xaa7}}, {0x200, 0x1}, {0x33, 0xff, {0x3, 0x1000}}, {0x923, 0x9, {0x1, 0x3ff}}, {0x3, 0xffff, {0x1, 0x99a}}, {0x8000, 0x7, {0x2, 0x9da6}}, {0x40, 0x775, {0x3, 0xffff14a7}}, {0x4, 0xffff, {0x3, 0xd9}}, {0x6, 0xfffc, {0x1, 0x2}}, {0x4, 0xfff9, {0x1, 0x8}}, {0x7, 0x2, {0x1, 0x10}}, {0xa, 0xff, {0x0, 0x3}}, {0x7f, 0x6, {0x1, 0xe6e}}, {0x7, 0x5, {0x0, 0x8}}, {0x3, 0x8, {0x3, 0x6}}, {0x5, 0x2, {0x2, 0x2040}}, {0xfffe, 0x3, {0x2, 0x12ab}}, {0x718, 0x4, {0x0, 0x6}}, {0x2, 0x2, {0x1, 0x4}}, {0x2, 0x0, {0x3, 0x1}}, {0x7, 0xfff, {0x2, 0x101}}, {0x7, 0x8000}]}}}, {{0x254, 0x1, {{0x3, 0x7}, 0x1, 0x6, 0x4, 0xc, 0x2, 'syz1\x00', "c0b5b7d00d10c7b41055bcbb95ec0feb6d2cfb140b120a9bcab8ffa377b7df5c", "9a67d51a56cec80e8aeda92f312358619f801a33b9456f583d0fefab17ebf5d5", [{0x0, 0x1, {0x3}}, {0x3ff, 0x7f}, {0x2, 0x8, {0x2, 0x8}}, {0x810, 0x8001, {0x2, 0x7}}, {0x800, 0x4, {0x2, 0x3}}, {0x101, 0x7f, {0x1}}, {0x9, 0x9, {0x3, 0x3}}, {0x5, 0x2, {0x2, 0x5}}, {0x1, 0x357, {0x3, 0x5}}, {0x8, 0x2a74, {0x3, 0x9}}, {0x9, 0xe61, {0x0, 0xf}}, {0x6, 0x2b5, {0x0, 0x7}}, {0x3, 0x461, {0x0, 0x8}}, {0x5, 0x81, {0x1, 0x6}}, {0xb, 0x7, {0x2, 0x89da}}, {0xb9, 0x9, {0x3, 0x8}}, {0x6, 0x7, {0x1}}, {0x1, 0x4, {0x2, 0x81}}, {0x4, 0x2, {0x3, 0x1}}, {0xf76, 0xff, {0x3, 0x7}}, {0x0, 0x1000, {0x3, 0x9}}, {0x8000, 0xe, {0x3, 0xe4bb}}, {0x2, 0x400, {0x0, 0x6}}, {0x79, 0x8, {0x0, 0x7a}}, {0x6, 0xf, {0x3, 0x8}}, {0x144a, 0x5c, {0x1, 0xffffff7f}}, {0x2, 0x0, {0x3, 0x7}}, {0x200, 0x8, {0x2, 0x3}}, {0x94, 0xd2, {0x3, 0x7f}}, {0x3, 0xfff8, {0x2, 0x372}}, {0x2746, 0x4, {0x0, 0x2}}, {0x1, 0x4, {0x3, 0xffff8001}}, {0x6, 0x5, {0x0, 0x401}}, {0x1, 0x3, {0x3, 0x902c}}, {0x6, 0x0, {0x2, 0x5}}, {0x4, 0x5, {0x0, 0x9}}, {0x702, 0x6, {0x1, 0x1}}, {0x7, 0xfff7, {0x2, 0x6}}, {0x9, 0x2c, {0x3, 0xffff8001}}, {0x9, 0x101, {0x0, 0xe9}}]}}}, {{0x254, 0x1, {{0x2, 0x5}, 0x64, 0xf9, 0x9, 0x2, 0x27, 'syz1\x00', "d1327b141a9087eaef7fad2cbdf4213493f08860f37a7975e6c5c429417bc9fc", "70b02295804bc364d432483364340ca5303fe1bbfc1d3e333424205c19cdcd96", [{0x8, 0x7, {0x1, 0x7}}, {0x400, 0x10, {0x2, 0x4}}, {0x35e, 0x0, {0x0, 0x1000}}, {0xc1d, 0x10, {0x3}}, {0x8000, 0x6, {0x3, 0x8}}, {0x7f, 0xf3e8, {0x2, 0x68d9}}, {0x2, 0x0, {0x0, 0xfffffffe}}, {0x9, 0xd, {0x0, 0x81}}, {0x61, 0x4, {0x2, 0x1}}, {0x80, 0x9, {0x2, 0x3ff}}, {0x3, 0x101, {0x0, 0x400000}}, {0x5, 0x2, {0x3, 0x6}}, {0xf535, 0x0, {0x3, 0x9}}, {0x2, 0x81, {0x1, 0x3d}}, {0x1, 0x9, {0x2a046555b2a8523b, 0x86d}}, {0x0, 0x6, {0x0, 0xfff}}, {0x8, 0x2, {0x0, 0x4}}, {0xfff7, 0x9, {0x3, 0x9}}, {0x7, 0x5, {0x2, 0xfffff734}}, {0xe, 0x0, {0x3, 0x8}}, {0xd, 0x7, {0x3, 0x8}}, {0x200, 0x8, {0x2, 0x7f04}}, {0xfff, 0x5, {0x0, 0x2}}, {0x7, 0x9, {0x3, 0x2}}, {0x9, 0x40, {0x3}}, {0x8000, 0xc, {0x0, 0x7}}, {0x3, 0xffff, {0x1}}, {0x9, 0x3, {0x1, 0x9}}, {0x1284, 0x80, {0x3, 0x3}}, {0xe07, 0x10, {0x2, 0x8}}, {0x8, 0x5, {0x1, 0x7fffffff}}, {0x400, 0x3, {0x2, 0x1}}, {0xfff8, 0x3ff, {0x1, 0x1}}, {0x2, 0x0, {0x2, 0x2}}, {0x4, 0x0, {0x2, 0x4}}, {0x3, 0x341, {0x1, 0x422}}, {0x38, 0x6, {0x2, 0x9}}, {0xf, 0x5, {0x2, 0xe148}}, {0x5, 0x6, {0x3, 0x7fff}}, {0x0, 0xa82, {0x0, 0x466}}]}}}, {{0x254, 0x1, {{0x0, 0x4}, 0x3, 0x6, 0x4, 0x1, 0x17, 'syz0\x00', "0d41c2e6af63569f003f9787a5e13d4974747dc293e8315f0d190e42a6f06e96", "b31952e5701eb3467ff9f92e5f81854f34edbb6246cc3a5db514b5914614978f", [{0x5, 0xc, {0x1, 0x4}}, {0xc, 0x5, {0x3, 0x6}}, {0xffff, 0x81, {0x3, 0x3}}, {0x800, 0xe, {0x2, 0x1}}, {0xffff, 0x0, {0x2}}, {0xab, 0x8, {0x3, 0x10001}}, {0x9, 0x0, {0x2, 0x4}}, {0x5, 0x50, {0x1, 0x55}}, {0x3, 0xd, {0x3, 0x3}}, {0xf, 0x100, {0x2, 0x10000}}, {0x800, 0x7, {0x1, 0x4}}, {0x80, 0x6, {0x2}}, {0x1, 0xe, {0x2, 0x9}}, {0x6f5, 0x0, {0x3, 0x8}}, {0xfff, 0x4d, {0x3, 0x5000000}}, {0x40, 0x2, {0x3, 0x30e4}}, {0x36cf, 0xfffd, {0x2, 0x5}}, {0xb, 0x4, {0x0, 0x58b}}, {0x40, 0x7, {0x0, 0x24000}}, {0x4, 0x7ec6, {0x3, 0x1}}, {0x5, 0x2, {0x1, 0xee0}}, {0xb, 0x5a6, {0x3, 0x5}}, {0xe, 0x2, {0x0, 0xfffffffa}}, {0x9, 0x3, {0x1, 0x5}}, {0xd8, 0x6, {0x0, 0x200}}, {0x6, 0x9, {0x0, 0xd5}}, {0xe8c0, 0x8000, {0x1, 0x8}}, {0x0, 0x7ff, {0x1, 0x2}}, {0x7, 0xb, {0x3, 0xc8}}, {0x200, 0x8, {0x1, 0xe2b3}}, {0x3, 0x5, {0x0, 0x5}}, {0x4f0a, 0x1ff, {0x1, 0x10000}}, {0x9, 0xd, {0x2, 0x4}}, {0x2, 0x7, {0x0, 0xf6f}}, {0xd52f, 0x200}, {0x8, 0x92b, {0x0, 0x6}}, {0x9, 0xff34, {0x2, 0x6}}, {0x4, 0x6}, {0xd, 0x6, {0x2, 0x4}}, {0x8, 0x8, {0x3, 0x700000}}]}}}, {{0x254, 0x1, {{0x1, 0x5}, 0x6, 0xd9, 0xff, 0x7f, 0x2, 'syz1\x00', "59d04030db33bc8d4d355165f53f0f0d03b4781ab6db12d1febc4c3d2295af9c", "93a3da43347d622996c802831bac14eb50c4d5a97758599ffb914463282e67a4", [{0x4, 0x5, {0x1, 0x9e21ea3e}}, {0x1000, 0x4, {0x3, 0x3}}, {0x0, 0xa6, {0x3, 0x5}}, {0x45dc, 0x6, {0x3, 0x10001}}, {0x2, 0x6, {0x3, 0x1000}}, {0x1c, 0xe, {0x3, 0x8001}}, {0x0, 0x401, {0x2, 0x3}}, {0x54, 0x5, {0x0, 0x6}}, {0x1, 0xf180, {0x2, 0x4}}, {0x6b, 0xfbb, {0x0, 0x6}}, {0x84, 0x0, {0x2, 0x10}}, {0x5, 0x6, {0x2, 0x9}}, {0x6, 0x1, {0x2, 0x10001}}, {0x8, 0x8000, {0x1, 0x9}}, {0x8, 0x6, {0x3, 0x707fc497}}, {0xa675, 0xd11c, {0xae4a2a5f6c8de67b, 0x3}}, {0x1, 0x4b7, {0x2, 0x8}}, {0x52, 0x0, {0x1, 0x6}}, {0x7fff, 0xb, {0x0, 0x1}}, {0x0, 0x5}, {0x7, 0x6, {0x0, 0x7}}, {0x4c, 0x4000, {0x2, 0xd30}}, {0x2, 0x200f, {0x3, 0x2}}, {0x2, 0xf8f, {0x1, 0x6}}, {0x7, 0x22, {0x3, 0x2}}, {0x2, 0x9, {0x1, 0x7d2}}, {0x2, 0x34, {0x0, 0x2594}}, {0x0, 0x9, {0x1, 0xc43}}, {0xf800, 0x80, {0x1, 0x200}}, {0x0, 0xa831, {0x3, 0x8}}, {0xb4bb, 0x1, {0x1, 0x8001}}, {0xa, 0x9, {0x1, 0xa0f9}}, {0xfff, 0xa}, {0x4, 0xcc8, {0x1, 0x9}}, {0xe93, 0x200, {0x1, 0xffffff26}}, {0x6, 0x2, {0x1, 0x9}}, {0x5, 0x9, {0x3, 0x8}}, {0x7, 0x0, {0x1, 0x138c}}, {0x1, 0x2, {0x1, 0x10}}, {0x5, 0x5, {0x3, 0x6}}]}}}, {{0x254, 0x1, {{0x0, 0x5}, 0x8, 0x43, 0x9, 0x100, 0x24, 'syz1\x00', "edd31ec35e5a29a4d78c1b58a90570c101d80052788109f00c160f84b040969a", "6c714d311bbb198b1333821035e494f4abd2222c32a01ddc960f0b4f75a30e28", [{0x7, 0x2, {0x2, 0x3}}, {0xf, 0x7, {0x1, 0x9}}, {0x2, 0x9, {0x2, 0x4}}, {0x7, 0x548, {0x3, 0x4}}, {0xa9, 0x0, {0x2, 0x3}}, {0xe000, 0xbb2, {0x3, 0x100}}, {0x7, 0x7f, {0x2, 0xfffffffd}}, {0x8fe2, 0x7, {0x1, 0x5}}, {0x81, 0xd8e, {0x2, 0x101}}, {0x1, 0x0, {0x0, 0x9}}, {0x9, 0x7, {0x2, 0x3055}}, {0x81, 0x2, {0x0, 0xf9}}, {0x8, 0x7db2, {0x0, 0x9}}, {0x2150, 0x3, {0x2, 0x9}}, {0x1, 0x80, {0x2, 0x5}}, {0x2, 0x9, {0x3, 0x7}}, {0x2, 0x5, {0x2, 0x80000000}}, {0x8, 0x5, {0x3, 0xfffffffb}}, {0x3, 0x0, {0x3}}, {0xc, 0xcf, {0x1}}, {0x44, 0xa31, {0x1}}, {0xfff, 0x9, {0x3, 0xc152}}, {0x8001, 0x5, {0x0, 0x5}}, {0xfff8, 0x2ae1, {0x2, 0x8}}, {0x2, 0x8001, {0x1, 0xfffffffe}}, {0xbc1, 0xfffa, {0x1, 0x1c0000}}, {0x5, 0x200, {0x1, 0x9}}, {0x4, 0x7, {0x2, 0x401}}, {0x80, 0x0, {0x2, 0x5}}, {0x958, 0x7, {0x2, 0x400}}, {0x101, 0x2, {0x2, 0x1}}, {0x0, 0x4, {0x1, 0x3}}, {0x2, 0x672, {0x1, 0x6}}, {0x1ff, 0x101, {0x0, 0x6}}, {0x8, 0x34, {0x2}}, {0xa8, 0x6a, {0x0, 0x8}}, {0x3, 0x1, {0x0, 0x7}}, {0xf93, 0x2e18, {0x3, 0x40}}, {0x4, 0xb7, {0x2, 0xffffffff}}, {0x0, 0x2, {0x2, 0x6}}]}}}, {{0x254, 0x1, {{0x0, 0x7f}, 0xf3, 0x81, 0x4, 0xfff1, 0x1a, 'syz0\x00', "a47a2e6f4eece2a4b6fdb82b997ce47e2f0abf2103ce5cf3b70f0a34921f5bcf", "5d542a9b40720031ecf09872954658fa1e46a7544ee8bf81c7e5ba4c9709c16f", [{0x4, 0x4, {0x2, 0x5}}, {0x5, 0xa85a, {0x0, 0x4}}, {0x9b18, 0x3, {0x0, 0x1}}, {0x7, 0x2, {0x0, 0x8001}}, {0x6, 0x9, {0x3, 0x2ea4}}, {0x7, 0xda68, {0x2, 0x3}}, {0xe41a, 0x5, {0x2, 0x5}}, {0x200, 0x2, {0x2, 0x4}}, {0x4, 0x6, {0x0, 0x62b}}, {0x8, 0xb, {0x1}}, {0x1, 0x3, {0x2, 0x439ef3e7}}, {0xfff7, 0x56ac, {0x0, 0xe76}}, {0x800, 0x0, {0x2, 0xffff8001}}, {0x8000, 0x7, {0x0, 0x285}}, {0x81, 0x1, {0x3, 0x5}}, {0x2, 0x2, {0x0, 0x1000000}}, {0x23d0, 0x8, {0x0, 0xf8a9}}, {0x2, 0x8, {0x1, 0x4}}, {0x0, 0x5, {0x0, 0x9}}, {0x9, 0x7, {0x3, 0x200}}, {0x7ff, 0x802, {0x0, 0xfffff208}}, {0x1, 0x7ff, {0x3, 0xc4}}, {0x7, 0xfe01, {0x3, 0x3}}, {0x4, 0x9, {0x2, 0xfffffffa}}, {0x611, 0x0, {0x3, 0x100}}, {0x8001, 0x5a5, {0x1, 0x64f}}, {0x0, 0xf748, {0x0, 0x1}}, {0x0, 0x4, {0x2, 0xfffffbff}}, {0x7, 0x95, {0x3, 0x4}}, {0x9, 0x3}, {0xe, 0x4, {0x2, 0x7}}, {0x6, 0x5, {0x1, 0x8}}, {0x800, 0x0, {0x3, 0x5}}, {0x3ff, 0x1, {0x2, 0xfffffff8}}, {0x9, 0xf, {0x3, 0x1d}}, {0xa, 0x2, {0x1, 0xfb5}}, {0x9, 0x7, {0x1, 0x8}}, {0x4, 0x2, {0x3, 0x2}}, {0xa, 0x7, {0x0, 0x8}}, {0x1, 0x800, {0x3, 0x3b01}}]}}}]}, 0x1060}, 0x1, 0x0, 0x0, 0x4000090}, 0x24004000)

16.111528818s ago: executing program 4 (id=1924):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r0, &(0x7f0000000200)={0x2, @short}, 0x3a)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000000))

16.068463531s ago: executing program 3 (id=1925):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x8e, &(0x7f0000001080)={@local, @link_local, @val, {@ipv4={0x88a8, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x300, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x3, "7fe77f731db8aba73f3509d6e7118104224a45fe99a8fbc5252b1170535ac6fb", "c196168f72696bf9ad5b6dc51a703690", {"aa72f4bd15c2580cdc3d66fdf23cb5a3", "a02ad2bc4f0c9415f88c3599baddc6ee"}}}}}}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="50000000100001040000805b0000000000000000", @ANYRES32=0x0, @ANYBLOB="014800001953010014003500626f6e643000000000000000000000001c00128009000100626f6e64000000000c000280050011"], 0x50}, 0x1, 0x0, 0x0, 0x600050a1}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x1, 0x3, 0x2, 0x3c}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000002051f610a1d9c964b51bda018142df9100002070200000300000080020000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000400"/28], 0x50)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)

16.0616841s ago: executing program 4 (id=1926):
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3)
ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000180)={0x80fd, 0x3})
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0x400}, {0x6, 0x62, 0x6, 0xc}]})
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000000a010400000000000000000a0000040900010073797a310000000008000540000000020900020073"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
write$ppp(r0, &(0x7f0000000300)="5af9", 0x2)

16.059975672s ago: executing program 1 (id=1927):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x18, 0x69, 0xb}, 0x18}}, 0x0)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r8 = accept(r0, 0x0, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x50)
r10 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r10, 0x0, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="84000000100001002cbd7000f4dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000080002001400030064756d6d7930000000000000000000000a000100aaaaaaaaaaaa0000440016804000018014000a00ab0000f2"], 0x84}}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r8}, 0x47)
close(r8)

15.971635238s ago: executing program 3 (id=1928):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="000001001800000000004c810000000000000092"], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x28)

15.963948334s ago: executing program 2 (id=1929):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x9}}}, 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80)
r2 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockname(r3, 0x0, &(0x7f0000000a80))
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r5=>0x0})
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', r5, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bind$inet(r6, &(0x7f0000000300)={0x2, 0x4e21, @broadcast}, 0x10)
socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r7)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r7)
pipe(&(0x7f0000000000))
r8 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r8, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c)
connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_SECURITY(r9, 0x112, 0x4, &(0x7f0000000080)={0x4, 0xfc}, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001a006da80000000000004c08eac22f57f77b000000360100000000000009f5ed1dafa71c6da206013f2c1ef8a37bf0dfc854ef8c1f5afb5925d7cacedb42dcac84d429d2ef139f8e"], 0x1c}}, 0x0)
sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x0)

15.904553257s ago: executing program 4 (id=1930):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000400000091f615725d4bce177f37032489f1f727dbd2e425ff4827c111d465183ccb42467882773dcf095d76fe990cec0b9ac6a1ded79a53cd59e56921ac125fb3836455d89ae1c379e0001fcba801a6f60f57fb6f6f03695f7ed6f2efb3deb80e43addfcde8fef35afbcceea2232b7200ccf03588acc5be97f7555cd1299e1d36f9cba36a225a0d0b0004e27e2b681284321e", @ANYRES64, @ANYBLOB="00f7ff0d00000000b702000014000000b7030000000000008500000083000000bf09008f4df5830055090100000000009500000000e10000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000076983fb6704e66f37ee9cf1dfcc56f04ff2e6166a86e42a0de21fcb2a96aadee77a52d7225b08d574ee29e599b477d7ed597f42aa0c9fc3af882cbd9bd17c2a92a3a7f4ebfc1756b963c2cc"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0xd}, 0x94)

15.88691779s ago: executing program 3 (id=1931):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x3}, 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f0000000100)='^'}, 0x20)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32=r4, @ANYRESHEX=r4], 0x80}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r7)
sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x110, r8, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0xc9, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xbc\xdb\x7f\x9a\xf2\xb7\xc5\xb7|\xca\x85\xfd\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\xd9\\\xbf\\s0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xf1\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8f'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x110}}, 0x4904)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x64, r8, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
pipe(&(0x7f0000000140)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
write$ppp(r10, &(0x7f00000005c0), 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r12, 0x0, 0xd}, 0x18)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x3c, 0x107, 0x0, 0x0, {0x2, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)
tee(r9, r11, 0xaf6, 0x6)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x45, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)
r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r15 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r15, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_DEFAULT_RATE={0x0, 0x6, 0x4}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x2b3}]}}]}, 0x48}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)

15.811469488s ago: executing program 4 (id=1932):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32)
connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="2503000000000600000008"], 0x14}}, 0x50)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000000)={0x47, 0x6, 0x0, 0xdab2, 0x2, 0x0, [{0x100, 0x4, 0x4}, {0xa752, 0x1, 0x80000001, '\x00', 0x800}]})
mmap(&(0x7f00000b0000/0x3000)=nil, 0x3000, 0x3, 0x100010, r2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008b00)=[{{0x0, 0x0, &(0x7f00000076c0)=[{0x0}], 0x1}, 0xffffffff}], 0x1, 0x100, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

15.577916827s ago: executing program 0 (id=1933):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xc463f262, 0x10, &(0x7f0000000040)}, 0x48) (async, rerun: 64)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (rerun: 64)
bind$802154_raw(r0, &(0x7f0000001440)={0x24, @short={0x2, 0x2, 0xffff}}, 0x8) (async)
r1 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r1, &(0x7f0000019440)=[{&(0x7f0000000340)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed090f0000600000f3a1bc5603ca00000f7f89e3ff296aa1f6475322f000200000004a2471083ec6991778581acb6c0101ff00", 0x48}], 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x4c, r3, 0x7, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x32}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '@{/.-\x00'}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x8040)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) (async, rerun: 64)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$SEG6(&(0x7f00000011c0), 0xffffffffffffffff)
sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)={0x14, r6, 0xf21, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x8010) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0x68}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x7800, 0x8000, 0x6, 0x800, {{0x1b, 0x4, 0x3, 0x2, 0x6c, 0x65, 0x0, 0xea, 0x2f, 0x0, @remote, @loopback, {[@generic={0x7, 0xe, "ff5655c77de2922492b8d540"}, @ssrr={0x89, 0x1b, 0xea, [@remote, @remote, @dev={0xac, 0x14, 0x14, 0x1f}, @dev={0xac, 0x14, 0x14, 0x38}, @private=0xa010100, @remote]}, @timestamp_prespec={0x44, 0x2c, 0xc8, 0x3, 0xe, [{@broadcast, 0xffffff00}, {@empty, 0x2}, {@multicast1, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@empty, 0x8}]}]}}}}}) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)

144.830206ms ago: executing program 32 (id=1933):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de72f6599a2310c3841f4bb7f39cabc82c9fdfff5587ed4fa84090635fa3445c4cc54478b2f98320944ac7cb1c4e414556f7b0b763a00a84327cec7e11b3470f0384b27bbfdd8b2472497e7fe8c5df7e0a00641872472efa21c9ad3979e642dcc85c17ca8e084aa9689b83426e2fdaa01f500000000000000000000f9fd84fa991466ff749afe900d02281b2bb60d458340c4f68ec34835760ceca945bf181a000000c000000000b4a76515564ae189de7c1765f0ff68a0388ca8dd2aa831d0e01f0d7ce74401a58cef60e63e97a50c18de54121ce66380224ab7b9c0d4710f2347bad2c9b3e41cc738c1092728687f33e5cdb077223dc82c2137b4e3ba6791a2cd764e654f904c9505b7c5e3b2897072e747534952dcda50cde3e4deb6ebf85a04c3e415112b01eed6515c845a8a20519cd21787d560e9d8283fa8ff0c17b63ba06577c26678ff45420a1f85df47dbfc44e534f71aae5693fb5df61c5096219091ce0cd8e1e2e79bf9d37779e52007c66a00e6ded1499ed3892ed1544d1577906b52e16c734d4aec07dd15faa768c97298be87dd34ce704ffe3da8b46708cf972de4f31c0705ac933db80bdcfcb35c0d4620d4ec270ff7c9ce1b78994dd2b28b9d1c5c469d4c1a61781dce2f1b54d6138bd3f7df9e9ca613bec407c1b8d1bd0c7cb9d76eebf2f17c"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xc463f262, 0x10, &(0x7f0000000040)}, 0x48) (async, rerun: 64)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (rerun: 64)
bind$802154_raw(r0, &(0x7f0000001440)={0x24, @short={0x2, 0x2, 0xffff}}, 0x8) (async)
r1 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r1, &(0x7f0000019440)=[{&(0x7f0000000340)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed090f0000600000f3a1bc5603ca00000f7f89e3ff296aa1f6475322f000200000004a2471083ec6991778581acb6c0101ff00", 0x48}], 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x4c, r3, 0x7, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x32}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '@{/.-\x00'}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x8040)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) (async, rerun: 64)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$SEG6(&(0x7f00000011c0), 0xffffffffffffffff)
sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)={0x14, r6, 0xf21, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x8010) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0x68}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x7800, 0x8000, 0x6, 0x800, {{0x1b, 0x4, 0x3, 0x2, 0x6c, 0x65, 0x0, 0xea, 0x2f, 0x0, @remote, @loopback, {[@generic={0x7, 0xe, "ff5655c77de2922492b8d540"}, @ssrr={0x89, 0x1b, 0xea, [@remote, @remote, @dev={0xac, 0x14, 0x14, 0x1f}, @dev={0xac, 0x14, 0x14, 0x38}, @private=0xa010100, @remote]}, @timestamp_prespec={0x44, 0x2c, 0xc8, 0x3, 0xe, [{@broadcast, 0xffffff00}, {@empty, 0x2}, {@multicast1, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@empty, 0x8}]}]}}}}}) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)

120.314108ms ago: executing program 33 (id=1927):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x18, 0x69, 0xb}, 0x18}}, 0x0)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r8 = accept(r0, 0x0, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x50)
r10 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r10, 0x0, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="84000000100001002cbd7000f4dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000080002001400030064756d6d7930000000000000000000000a000100aaaaaaaaaaaa0000440016804000018014000a00ab0000f2"], 0x84}}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r8}, 0x47)
close(r8)

93.801593ms ago: executing program 34 (id=1929):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x9}}}, 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80)
r2 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockname(r3, 0x0, &(0x7f0000000a80))
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r5=>0x0})
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', r5, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bind$inet(r6, &(0x7f0000000300)={0x2, 0x4e21, @broadcast}, 0x10)
socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r7)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r7)
pipe(&(0x7f0000000000))
r8 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r8, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c)
connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_SECURITY(r9, 0x112, 0x4, &(0x7f0000000080)={0x4, 0xfc}, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001a006da80000000000004c08eac22f57f77b000000360100000000000009f5ed1dafa71c6da206013f2c1ef8a37bf0dfc854ef8c1f5afb5925d7cacedb42dcac84d429d2ef139f8e"], 0x1c}}, 0x0)
sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x0)

54.446925ms ago: executing program 35 (id=1931):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x3}, 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f0000000100)='^'}, 0x20)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32=r4, @ANYRESHEX=r4], 0x80}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r7)
sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x110, r8, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0xc9, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xbc\xdb\x7f\x9a\xf2\xb7\xc5\xb7|\xca\x85\xfd\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\xd9\\\xbf\\s0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xf1\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8f'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x110}}, 0x4904)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x64, r8, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
pipe(&(0x7f0000000140)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
write$ppp(r10, &(0x7f00000005c0), 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r12, 0x0, 0xd}, 0x18)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x3c, 0x107, 0x0, 0x0, {0x2, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)
tee(r9, r11, 0xaf6, 0x6)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x45, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)
r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r15 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r15, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_DEFAULT_RATE={0x0, 0x6, 0x4}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x2b3}]}}]}, 0x48}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)

0s ago: executing program 36 (id=1932):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32)
connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="2503000000000600000008"], 0x14}}, 0x50)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000000)={0x47, 0x6, 0x0, 0xdab2, 0x2, 0x0, [{0x100, 0x4, 0x4}, {0xa752, 0x1, 0x80000001, '\x00', 0x800}]})
mmap(&(0x7f00000b0000/0x3000)=nil, 0x3000, 0x3, 0x100010, r2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008b00)=[{{0x0, 0x0, &(0x7f00000076c0)=[{0x0}], 0x1}, 0xffffffff}], 0x1, 0x100, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

][ T8657] IPVS: using max 37 ests per chain, 88800 per kthread
[  110.603346][ T8664] af_packet: tpacket_rcv: packet too big, clamped from 64989 to 3696. macoff=96
[  110.817646][ T8681] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  110.880288][ T8683] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.922201][ T8687] netlink: 44 bytes leftover after parsing attributes in process `syz.3.704'.
[  111.345815][ T8716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.712'.
[  111.346403][ T8717] syzkaller1: entered promiscuous mode
[  111.360616][ T8716] netlink: 48 bytes leftover after parsing attributes in process `syz.3.712'.
[  111.362849][ T8717] syzkaller1: entered allmulticast mode
[  111.378641][ T8713] netlink: 48 bytes leftover after parsing attributes in process `syz.4.711'.
[  111.390728][ T8713] netlink: 48 bytes leftover after parsing attributes in process `syz.4.711'.
[  111.406085][ T8713] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  111.418266][ T8713] gretap1: entered promiscuous mode
[  111.423488][ T8713] gretap1: entered allmulticast mode
[  111.452329][ T8716] wg1 speed is unknown, defaulting to 1000
[  111.568965][ T8678] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  111.950333][ T8753] validate_nla: 2 callbacks suppressed
[  111.950352][ T8753] netlink: 'syz.4.727': attribute type 39 has an invalid length.
[  112.058820][ T8756] nbd: socks must be embedded in a SOCK_ITEM attr
[  112.092217][ T6986] block nbd64: NBD_DISCONNECT
[  112.226810][ T8766] 8021q: adding VLAN 0 to HW filter on device bond1
[  112.235729][ T8766] bond0: (slave bond1): Enslaving as an active interface with an up link
[  112.446667][ T8756] wg1 speed is unknown, defaulting to 1000
[  112.493870][ T8775] pimreg: entered allmulticast mode
[  112.510747][ T6986] udevd[6986]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  112.530938][ T8775] dvmrp8: entered allmulticast mode
[  112.537237][ T8775] pimreg: left allmulticast mode
[  112.545508][ T8775] dvmrp8: left allmulticast mode
[  112.704430][ T8781] !
: renamed from dummy0
[  112.728582][ T8775] netlink: 'syz.1.732': attribute type 1 has an invalid length.
[  113.078992][ T8815] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.126087][ T8814] wg1 speed is unknown, defaulting to 1000
[  113.176523][ T8824] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.183891][ T8824] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.239813][ T8824] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.251394][ T8824] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.303963][ T8815] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.316897][ T7799] wg1 speed is unknown, defaulting to 1000
[  113.323547][   T13] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.324573][ T7799] syz0: Port: 1 Link DOWN
[  113.339616][   T13] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.428611][ T8833] netlink: 'syz.2.749': attribute type 3 has an invalid length.
[  113.439612][ T8833] syz_tun: entered allmulticast mode
[  113.464414][ T8833] 8021q: adding VLAN 0 to HW filter on device team0
[  113.471735][ T8833] tipc: Resetting bearer <eth:team0>
[  113.477271][ T8833] tipc: Resetting bearer <eth:team0>
[  113.486416][ T8833] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  113.510768][ T8832] syz_tun: left allmulticast mode
[  113.664911][ T8850] pim6reg1: entered promiscuous mode
[  113.673382][ T8850] pim6reg1: entered allmulticast mode
[  114.076977][ T8857] tipc: Resetting bearer <eth:team0>
[  114.094642][ T8857] vlan0: left promiscuous mode
[  114.106204][ T8857] bridge1: left allmulticast mode
[  114.113624][ T8857] bond0: left promiscuous mode
[  114.119057][ T8857] batadv1: left promiscuous mode
[  114.124210][ T8857] batadv1: left allmulticast mode
[  114.294027][ T8896] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  114.511857][ T8911] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.521594][ T8911] syzkaller0: entered promiscuous mode
[  114.527913][ T8911] syzkaller0: entered allmulticast mode
[  114.543004][ T8911] tipc: Resetting bearer <eth:syzkaller0>
[  114.555579][ T8909] tipc: Resetting bearer <eth:syzkaller0>
[  114.570783][ T8909] tipc: Disabling bearer <eth:syzkaller0>
[  114.642303][ T8913] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.650799][ T8913] syzkaller0: entered promiscuous mode
[  114.656437][ T8913] syzkaller0: entered allmulticast mode
[  114.673905][ T8913] tipc: Resetting bearer <eth:syzkaller0>
[  114.689654][ T8912] tipc: Resetting bearer <eth:syzkaller0>
[  114.697846][ T8912] tipc: Disabling bearer <eth:syzkaller0>
[  114.719287][ T8915] __nla_validate_parse: 12 callbacks suppressed
[  114.719305][ T8915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.775'.
[  114.747393][ T8915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.775'.
[  114.895624][ T8923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.777'.
[  114.927070][ T8923] wg1 speed is unknown, defaulting to 1000
[  115.474804][ T8937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.781'.
[  115.566084][ T5182] Bluetooth: hci4: link tx timeout
[  115.571412][ T5182] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  115.583387][ T5182] Bluetooth: hci4: link tx timeout
[  115.588676][ T5182] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  115.596765][ T5182] Bluetooth: hci4: link tx timeout
[  115.603324][ T5182] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  115.830200][ T8957] pimreg: entered allmulticast mode
[  115.838988][ T8958] netlink: 'syz.2.784': attribute type 1 has an invalid length.
[  115.855592][ T8958] netlink: 224 bytes leftover after parsing attributes in process `syz.2.784'.
[  115.960853][ T8961] netlink: 48 bytes leftover after parsing attributes in process `syz.4.787'.
[  116.034490][ T8963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.788'.
[  116.255943][ T8979] netlink: 24 bytes leftover after parsing attributes in process `syz.1.792'.
[  116.277141][ T8982] veth0: entered promiscuous mode
[  116.290886][ T8982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.793'.
[  116.480523][ T8988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.794'.
[  116.502124][ T8989] netlink: 'syz.1.795': attribute type 3 has an invalid length.
[  116.514214][ T8988] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  116.542749][ T8989] netlink: 'syz.1.795': attribute type 22 has an invalid length.
[  116.557330][ T8994] netlink: 'syz.4.798': attribute type 13 has an invalid length.
[  116.577952][ T8989] netlink: 'syz.1.795': attribute type 22 has an invalid length.
[  116.629888][ T8998] vlan0: entered promiscuous mode
[  116.651616][ T8998] team0: Port device vlan0 added
[  116.701158][ T9000] netlink: 'syz.1.801': attribute type 1 has an invalid length.
[  116.746578][ T9000] 8021q: adding VLAN 0 to HW filter on device bond2
[  116.785442][ T9000] veth3: entered promiscuous mode
[  116.793880][ T9000] bond2: (slave veth3): Enslaving as an active interface with a down link
[  117.619742][ T5182] Bluetooth: hci4: command 0x0405 tx timeout
[  117.674888][ T9047] syzkaller1: entered promiscuous mode
[  117.681102][ T9047] syzkaller1: entered allmulticast mode
[  118.087038][ T9067] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  118.125194][ T9069] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.150302][ T9068] tipc: Disabling bearer <eth:syzkaller0>
[  118.517380][ T9095] wg1 speed is unknown, defaulting to 1000
[  118.814156][ T9123] wg1 speed is unknown, defaulting to 1000
[  118.886097][ T9130] wg1 speed is unknown, defaulting to 1000
[  119.333494][ T9173] syzkaller0: entered promiscuous mode
[  119.339424][ T9173] syzkaller0: entered allmulticast mode
[  119.784409][ T9187] __nla_validate_parse: 17 callbacks suppressed
[  119.784426][ T9187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.848'.
[  119.804452][ T9184] netlink: 'syz.2.849': attribute type 142 has an invalid length.
[  119.830416][ T9185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.850'.
[  119.839369][ T9185] netlink: 24 bytes leftover after parsing attributes in process `syz.1.850'.
[  119.846215][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.851'.
[  119.869222][ T9190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.847'.
[  119.879162][ T9191] syz_tun: entered allmulticast mode
[  119.894744][ T9190] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  119.912400][ T9191] dvmrp1: entered allmulticast mode
[  119.953586][ T9183] syz_tun: left allmulticast mode
[  119.998208][ T9198] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  120.041975][ T9202] netlink: 172 bytes leftover after parsing attributes in process `syz.2.855'.
[  120.182408][ T9212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.858'.
[  120.261944][ T9216] netlink: 52 bytes leftover after parsing attributes in process `syz.1.859'.
[  120.323295][ T9222] openvswitch: netlink: Flow key attr not present in new flow.
[  120.412819][ T9232] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.449758][ T9232] syzkaller0: entered promiscuous mode
[  120.455670][ T9232] syzkaller0: entered allmulticast mode
[  120.483790][ T9232] tipc: Resetting bearer <eth:syzkaller0>
[  120.509044][ T9236] wg1 speed is unknown, defaulting to 1000
[  120.513522][ T9230] tipc: Resetting bearer <eth:syzkaller0>
[  120.545050][ T9238] netlink: 192 bytes leftover after parsing attributes in process `syz.1.867'.
[  120.554540][ T9238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.867'.
[  120.576020][ T9230] tipc: Disabling bearer <eth:syzkaller0>
[  121.441746][ T9285] geneve2: entered promiscuous mode
[  121.501168][ T9285] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  121.545963][ T9287] netlink: 'syz.0.882': attribute type 282 has an invalid length.
[  121.595931][ T9290] netlink: 'syz.1.883': attribute type 1 has an invalid length.
[  122.362188][ T9335] pimreg: entered allmulticast mode
[  122.580351][ T9351] wg1 speed is unknown, defaulting to 1000
[  122.606073][ T9359] netlink: 'syz.2.898': attribute type 1 has an invalid length.
[  122.720444][ T9351] geneve0: entered promiscuous mode
[  122.725863][ T9351] geneve0: entered allmulticast mode
[  122.759698][ T9368] netlink: 'syz.0.900': attribute type 39 has an invalid length.
[  122.822423][ T9373] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.985226][ T9388] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  123.240234][ T9395] netlink: 'syz.4.909': attribute type 10 has an invalid length.
[  123.249422][ T9395] bond0: (slave wlan1): Opening slave failed
[  123.420632][ T9402] syzkaller1: entered promiscuous mode
[  123.431074][ T9402] syzkaller1: entered allmulticast mode
[  123.573631][ T9414] 8021q: adding VLAN 0 to HW filter on device bond2
[  123.596524][ T9414] bond2: (slave ip6gretap3): Enslaving as a backup interface with an up link
[  123.609903][ T9410] wg1 speed is unknown, defaulting to 1000
[  123.679163][   T74] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  123.780760][ T9426] netlink: 'syz.4.918': attribute type 17 has an invalid length.
[  123.799165][   T74] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  123.965661][ T9439] netlink: 'syz.3.921': attribute type 1 has an invalid length.
[  124.220468][ T9454] delete_channel: no stack
[  124.364660][ T9471] sctp: [Deprecated]: syz.3.931 (pid 9471) Use of int in maxseg socket option.
[  124.364660][ T9471] Use struct sctp_assoc_value instead
[  124.396294][ T9471] wg1 speed is unknown, defaulting to 1000
[  124.410583][ T9473] tc_dump_action: action bad kind
[  124.647007][ T9483] netlink: 'syz.1.934': attribute type 12 has an invalid length.
[  124.968985][ T9488] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.976498][ T9488] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.209943][ T9488] batadv_slave_0: left promiscuous mode
[  125.221516][ T9488] batadv_slave_1: left promiscuous mode
[  125.273914][ T9488] vlan0: left promiscuous mode
[  125.320980][ T9488] mac80211_hwsim hwsim8 wlan0: left promiscuous mode
[  125.338013][ T9488] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  125.348962][ T9488] veth3: left promiscuous mode
[  125.369159][ T9488] gretap1: left promiscuous mode
[  125.374295][ T9488] gretap1: left allmulticast mode
[  125.382167][ T9488] geneve2: left promiscuous mode
[  125.425382][ T9508] netlink: 'syz.0.940': attribute type 12 has an invalid length.
[  125.445053][ T9508] __nla_validate_parse: 27 callbacks suppressed
[  125.445074][ T9508] netlink: 132 bytes leftover after parsing attributes in process `syz.0.940'.
[  125.497282][ T3555] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.532964][ T3555] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.569564][   T13] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.595023][   T13] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.636584][ T9522] netlink: 36 bytes leftover after parsing attributes in process `syz.0.943'.
[  125.679804][ T9529] macsec1: entered promiscuous mode
[  125.685158][ T9529] veth0_to_batadv: entered promiscuous mode
[  125.707242][ T9529] macsec1: entered allmulticast mode
[  125.713154][ T9529] veth0_to_batadv: entered allmulticast mode
[  125.729260][ T9529] veth0_to_batadv: left allmulticast mode
[  125.735539][ T9529] veth0_to_batadv: left promiscuous mode
[  125.750107][ T9540] netlink: 'syz.2.945': attribute type 13 has an invalid length.
[  125.779728][ T9533] netlink: 'syz.0.948': attribute type 27 has an invalid length.
[  125.863236][ T9545] wg1 speed is unknown, defaulting to 1000
[  126.018128][ T5182] Bluetooth: hci4: command 0x0405 tx timeout
[  126.064568][   T49] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  126.083106][   T49] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  126.093208][   T49] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  126.101861][   T49] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  126.122116][ T9569] wg1 speed is unknown, defaulting to 1000
[  126.149495][ T9573] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  126.226208][ T9578] syzkaller1: entered promiscuous mode
[  126.232461][ T9578] syzkaller1: entered allmulticast mode
[  126.315219][ T9580] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  126.373141][ T9582] netlink: 24 bytes leftover after parsing attributes in process `syz.3.962'.
[  126.409743][ T9589] netlink: 20 bytes leftover after parsing attributes in process `syz.0.964'.
[  126.423544][ T9589] bridge_slave_0: left allmulticast mode
[  126.431104][ T9589] bridge_slave_0: left promiscuous mode
[  126.437081][ T9589] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.449890][ T9589] bridge_slave_1: left allmulticast mode
[  126.455669][ T9589] bridge_slave_1: left promiscuous mode
[  126.461891][ T9589] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.479800][ T9589] bond0: (slave bond_slave_0): Releasing backup interface
[  126.493326][ T9589] bond0: (slave bond_slave_1): Releasing backup interface
[  126.519950][ T9589] team0: Port device team_slave_0 removed
[  126.536184][ T9589] team0: Port device team_slave_1 removed
[  126.543224][ T9589] batman_adv: batadv0: Removing interface: batadv_slave_0
[  126.551838][ T9589] batman_adv: batadv0: Removing interface: batadv_slave_1
[  126.561473][ T9589] bond1: (slave bridge3): Releasing active interface
[  126.676316][ T9602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.969'.
[  126.698933][ T9607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.970'.
[  126.709345][ T9607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.970'.
[  126.727675][ T9602] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20003
[  126.797081][ T9619] wg1 speed is unknown, defaulting to 1000
[  126.816541][ T9621] netlink: 'syz.0.974': attribute type 2 has an invalid length.
[  126.844868][ T9624] netlink: 260 bytes leftover after parsing attributes in process `syz.2.975'.
[  126.904198][ T9629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.978'.
[  126.928119][ T9629] netlink: 16 bytes leftover after parsing attributes in process `syz.3.978'.
[  126.989148][ T9633] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  127.075751][ T9642] netlink: 'syz.1.981': attribute type 10 has an invalid length.
[  127.142844][ T9642] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  127.199038][ T9656] team0: left allmulticast mode
[  127.225867][ T9656] team_slave_0: left allmulticast mode
[  127.233300][ T9656] team_slave_1: left allmulticast mode
[  127.241890][ T9656] team0: left promiscuous mode
[  127.246849][ T9656] team_slave_0: left promiscuous mode
[  127.253984][ T9656] team_slave_1: left promiscuous mode
[  127.259927][ T9656] bridge0: port 3(team0) entered disabled state
[  127.281249][ T9656] bridge_slave_1: left allmulticast mode
[  127.286952][ T9656] bridge_slave_1: left promiscuous mode
[  127.293280][ T9656] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.302661][ T9663] netlink: 'syz.3.985': attribute type 1 has an invalid length.
[  127.311946][ T9656] bridge_slave_0: left allmulticast mode
[  127.317845][ T9656] bridge_slave_0: left promiscuous mode
[  127.323553][ T9656] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.336688][ T9656] bond0: (slave bridge0): Releasing backup interface
[  127.405384][ T9667] tipc: Started in network mode
[  127.410914][ T9667] tipc: Node identity 1a04bd4fc97a, cluster identity 4711
[  127.418331][ T9667] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.441694][ T9658] syzkaller0: entered promiscuous mode
[  127.447210][ T9658] syzkaller0: entered allmulticast mode
[  127.546725][ T9657] tipc: Resetting bearer <eth:syzkaller0>
[  127.556462][ T9657] tipc: Disabling bearer <eth:syzkaller0>
[  127.711896][ T9689] wg1 speed is unknown, defaulting to 1000
[  127.737965][ T9693] tap0: tun_chr_ioctl cmd 1074025677
[  127.743436][ T9693] tap0: linktype set to 804
[  127.797156][ T9691] wg1 speed is unknown, defaulting to 1000
[  127.875958][ T9705] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  128.072910][ T9710] wg1 speed is unknown, defaulting to 1000
[  128.643695][ T9741] FAULT_INJECTION: forcing a failure.
[  128.643695][ T9741] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  128.658839][ T9741] CPU: 1 UID: 0 PID: 9741 Comm: syz.2.1006 Not tainted syzkaller #0 PREEMPT(full) 
[  128.658864][ T9741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  128.658874][ T9741] Call Trace:
[  128.658881][ T9741]  <TASK>
[  128.658889][ T9741]  dump_stack_lvl+0x189/0x250
[  128.658923][ T9741]  ? __pfx____ratelimit+0x10/0x10
[  128.658946][ T9741]  ? __pfx_dump_stack_lvl+0x10/0x10
[  128.658965][ T9741]  ? __pfx__printk+0x10/0x10
[  128.658986][ T9741]  ? __might_fault+0xb0/0x130
[  128.659022][ T9741]  ? rcu_is_watching+0x15/0xb0
[  128.659040][ T9741]  should_fail_ex+0x414/0x560
[  128.659064][ T9741]  _copy_from_user+0x2d/0xb0
[  128.659083][ T9741]  hidp_sock_ioctl+0x257/0x560
[  128.659107][ T9741]  ? __pfx_hidp_sock_ioctl+0x10/0x10
[  128.659156][ T9741]  ? do_vfs_ioctl+0xbe8/0x1430
[  128.659182][ T9741]  sock_do_ioctl+0xdc/0x300
[  128.659204][ T9741]  ? __pfx_sock_do_ioctl+0x10/0x10
[  128.659223][ T9741]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  128.659255][ T9741]  sock_ioctl+0x576/0x790
[  128.659273][ T9741]  ? lock_release+0x4b/0x3e0
[  128.659296][ T9741]  ? __pfx_sock_ioctl+0x10/0x10
[  128.659315][ T9741]  ? __fget_files+0x2a/0x420
[  128.659329][ T9741]  ? __fget_files+0x3a0/0x420
[  128.659342][ T9741]  ? __fget_files+0x2a/0x420
[  128.659358][ T9741]  ? bpf_lsm_file_ioctl+0x9/0x20
[  128.659379][ T9741]  ? __pfx_sock_ioctl+0x10/0x10
[  128.659398][ T9741]  __se_sys_ioctl+0xf9/0x170
[  128.659418][ T9741]  do_syscall_64+0xfa/0x3b0
[  128.659434][ T9741]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.659451][ T9741]  ? clear_bhb_loop+0x60/0xb0
[  128.659469][ T9741]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.659485][ T9741] RIP: 0033:0x7f820e98ebe9
[  128.659506][ T9741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  128.659520][ T9741] RSP: 002b:00007f820cbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  128.659543][ T9741] RAX: ffffffffffffffda RBX: 00007f820ebb5fa0 RCX: 00007f820e98ebe9
[  128.659555][ T9741] RDX: 00002000000006c0 RSI: 00000000400448c8 RDI: 0000000000000005
[  128.659567][ T9741] RBP: 00007f820cbf6090 R08: 0000000000000000 R09: 0000000000000000
[  128.659577][ T9741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  128.659586][ T9741] R13: 00007f820ebb6038 R14: 00007f820ebb5fa0 R15: 00007fff18fd1308
[  128.659606][ T9741]  </TASK>
[  129.016831][ T9750] wg1 speed is unknown, defaulting to 1000
[  129.154554][ T9755] tap0: tun_chr_ioctl cmd 1074025677
[  129.211021][ T9755] tap0: linktype set to 823
[  129.251958][ T9755] syzkaller1: entered promiscuous mode
[  129.257670][ T9755] syzkaller1: entered allmulticast mode
[  129.557070][ T9780] wg1 speed is unknown, defaulting to 1000
[  129.630115][ T9785] IPVS: set_ctl: invalid protocol: 113 224.0.0.1:20000
[  130.179158][ T9823] FAULT_INJECTION: forcing a failure.
[  130.179158][ T9823] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  130.196739][ T9823] CPU: 0 UID: 0 PID: 9823 Comm: syz.3.1029 Not tainted syzkaller #0 PREEMPT(full) 
[  130.196762][ T9823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  130.196771][ T9823] Call Trace:
[  130.196777][ T9823]  <TASK>
[  130.196784][ T9823]  dump_stack_lvl+0x189/0x250
[  130.196807][ T9823]  ? __pfx____ratelimit+0x10/0x10
[  130.196830][ T9823]  ? __pfx_dump_stack_lvl+0x10/0x10
[  130.196846][ T9823]  ? __pfx__printk+0x10/0x10
[  130.196874][ T9823]  ? __might_fault+0xb0/0x130
[  130.196897][ T9823]  ? rcu_is_watching+0x15/0xb0
[  130.196915][ T9823]  should_fail_ex+0x414/0x560
[  130.196935][ T9823]  _copy_from_iter+0x1db/0x16f0
[  130.196951][ T9823]  ? rcu_is_watching+0x15/0xb0
[  130.196966][ T9823]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  130.196994][ T9823]  ? __pfx__copy_from_iter+0x10/0x10
[  130.197009][ T9823]  ? __build_skb_around+0x257/0x3e0
[  130.197032][ T9823]  ? netlink_sendmsg+0x642/0xb30
[  130.197045][ T9823]  ? skb_put+0x11b/0x210
[  130.197058][ T9823]  netlink_sendmsg+0x6b2/0xb30
[  130.197075][ T9823]  ? __pfx_netlink_sendmsg+0x10/0x10
[  130.197118][ T9823]  ? aa_sock_msg_perm+0xf1/0x1d0
[  130.197132][ T9823]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  130.197149][ T9823]  ? __pfx_netlink_sendmsg+0x10/0x10
[  130.197162][ T9823]  __sock_sendmsg+0x219/0x270
[  130.197186][ T9823]  ____sys_sendmsg+0x505/0x830
[  130.197206][ T9823]  ? __pfx_____sys_sendmsg+0x10/0x10
[  130.197225][ T9823]  ? import_iovec+0x74/0xa0
[  130.197244][ T9823]  ___sys_sendmsg+0x21f/0x2a0
[  130.197260][ T9823]  ? __pfx____sys_sendmsg+0x10/0x10
[  130.197266][ T9819] bridge6: port 1(veth1) entered blocking state
[  130.197291][ T9823]  ? __fget_files+0x2a/0x420
[  130.197304][ T9823]  ? __fget_files+0x3a0/0x420
[  130.197317][ T9823]  __x64_sys_sendmsg+0x19b/0x260
[  130.197333][ T9823]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  130.197353][ T9823]  ? __pfx_ksys_write+0x10/0x10
[  130.197373][ T9823]  ? rcu_is_watching+0x15/0xb0
[  130.197391][ T9823]  ? rcu_is_watching+0x15/0xb0
[  130.197407][ T9823]  do_syscall_64+0xfa/0x3b0
[  130.197422][ T9823]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.197438][ T9823]  ? clear_bhb_loop+0x60/0xb0
[  130.197460][ T9823]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.197476][ T9823] RIP: 0033:0x7fec15d8ebe9
[  130.197491][ T9823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  130.197504][ T9823] RSP: 002b:00007fec16c4c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  130.197522][ T9823] RAX: ffffffffffffffda RBX: 00007fec15fb5fa0 RCX: 00007fec15d8ebe9
[  130.197534][ T9823] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003
[  130.197545][ T9823] RBP: 00007fec16c4c090 R08: 0000000000000000 R09: 0000000000000000
[  130.197555][ T9823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  130.197565][ T9823] R13: 00007fec15fb6038 R14: 00007fec15fb5fa0 R15: 00007ffdbdc9ef88
[  130.197584][ T9823]  </TASK>
[  130.493029][ T9819] bridge6: port 1(veth1) entered disabled state
[  130.499754][ T9819] veth1: entered allmulticast mode
[  130.506157][ T9819] veth1: entered promiscuous mode
[  130.514997][ T9826] bridge6: port 2(veth0_to_bond) entered blocking state
[  130.531899][ T9826] bridge6: port 2(veth0_to_bond) entered disabled state
[  130.576186][ T9826] veth0_to_bond: entered allmulticast mode
[  130.594877][ T9826] veth0_to_bond: entered promiscuous mode
[  130.729203][ T9839] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  130.749358][ T9840] __nla_validate_parse: 10 callbacks suppressed
[  130.749376][ T9840] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1034'.
[  130.772223][ T9840] netlink: 'syz.1.1034': attribute type 5 has an invalid length.
[  131.102800][ T9858] FAULT_INJECTION: forcing a failure.
[  131.102800][ T9858] name failslab, interval 1, probability 0, space 0, times 0
[  131.117387][ T9858] CPU: 1 UID: 0 PID: 9858 Comm: syz.2.1042 Not tainted syzkaller #0 PREEMPT(full) 
[  131.117411][ T9858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  131.117422][ T9858] Call Trace:
[  131.117428][ T9858]  <TASK>
[  131.117436][ T9858]  dump_stack_lvl+0x189/0x250
[  131.117464][ T9858]  ? __pfx____ratelimit+0x10/0x10
[  131.117485][ T9858]  ? __pfx_dump_stack_lvl+0x10/0x10
[  131.117503][ T9858]  ? __pfx__printk+0x10/0x10
[  131.117525][ T9858]  ? __pfx___might_resched+0x10/0x10
[  131.117541][ T9858]  ? lock_acquire+0x5f/0x360
[  131.117565][ T9858]  should_fail_ex+0x414/0x560
[  131.117587][ T9858]  should_failslab+0xa8/0x100
[  131.117610][ T9858]  kmem_cache_alloc_noprof+0x73/0x3c0
[  131.117630][ T9858]  ? skb_clone+0x212/0x3a0
[  131.117650][ T9858]  skb_clone+0x212/0x3a0
[  131.117667][ T9858]  ? nfnetlink_rcv+0x486/0x2520
[  131.117689][ T9858]  nfnetlink_rcv+0x4b4/0x2520
[  131.117709][ T9858]  ? is_bpf_text_address+0x26/0x2b0
[  131.117734][ T9858]  ? kernel_text_address+0xa5/0xe0
[  131.117758][ T9858]  ? __kernel_text_address+0xd/0x40
[  131.117779][ T9858]  ? unwind_get_return_address+0x4d/0x90
[  131.117799][ T9858]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  131.117820][ T9858]  ? arch_stack_walk+0xfc/0x150
[  131.117846][ T9858]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  131.117870][ T9858]  ? kasan_save_track+0x4f/0x80
[  131.117895][ T9858]  ? kasan_save_track+0x3e/0x80
[  131.117911][ T9858]  ? __kasan_slab_alloc+0x6c/0x80
[  131.117932][ T9858]  ? __netlink_lookup+0xbd/0x810
[  131.117947][ T9858]  ? rcu_is_watching+0x15/0xb0
[  131.117963][ T9858]  ? rcu_is_watching+0x15/0xb0
[  131.117978][ T9858]  ? lock_release+0x4b/0x3e0
[  131.118004][ T9858]  ? net_generic+0x1e/0x240
[  131.118022][ T9858]  ? rcu_is_watching+0x15/0xb0
[  131.118038][ T9858]  ? netlink_deliver_tap+0x2e/0x1b0
[  131.118060][ T9858]  ? rcu_is_watching+0x15/0xb0
[  131.118076][ T9858]  ? netlink_deliver_tap+0x2e/0x1b0
[  131.118099][ T9858]  ? rcu_is_watching+0x15/0xb0
[  131.118113][ T9858]  ? netlink_deliver_tap+0x2e/0x1b0
[  131.118136][ T9858]  ? lock_release+0x4b/0x3e0
[  131.118156][ T9858]  ? net_generic+0x1e/0x240
[  131.118174][ T9858]  ? net_generic+0x1e/0x240
[  131.118198][ T9858]  netlink_unicast+0x82f/0x9e0
[  131.118222][ T9858]  ? __pfx_netlink_unicast+0x10/0x10
[  131.118244][ T9858]  ? netlink_sendmsg+0x642/0xb30
[  131.118258][ T9858]  ? skb_put+0x11b/0x210
[  131.118275][ T9858]  netlink_sendmsg+0x805/0xb30
[  131.118295][ T9858]  ? __pfx_netlink_sendmsg+0x10/0x10
[  131.118312][ T9858]  ? aa_sock_msg_perm+0xf1/0x1d0
[  131.118329][ T9858]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  131.118347][ T9858]  ? __pfx_netlink_sendmsg+0x10/0x10
[  131.118362][ T9858]  __sock_sendmsg+0x219/0x270
[  131.118385][ T9858]  ____sys_sendmsg+0x505/0x830
[  131.118405][ T9858]  ? __pfx_____sys_sendmsg+0x10/0x10
[  131.118427][ T9858]  ? import_iovec+0x74/0xa0
[  131.118447][ T9858]  ___sys_sendmsg+0x21f/0x2a0
[  131.118465][ T9858]  ? __pfx____sys_sendmsg+0x10/0x10
[  131.118499][ T9858]  ? __fget_files+0x2a/0x420
[  131.118514][ T9858]  ? __fget_files+0x3a0/0x420
[  131.118533][ T9858]  __x64_sys_sendmsg+0x19b/0x260
[  131.118552][ T9858]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  131.118574][ T9858]  ? __pfx_ksys_write+0x10/0x10
[  131.118593][ T9858]  ? rcu_is_watching+0x15/0xb0
[  131.118610][ T9858]  ? rcu_is_watching+0x15/0xb0
[  131.118627][ T9858]  do_syscall_64+0xfa/0x3b0
[  131.118643][ T9858]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.118660][ T9858]  ? clear_bhb_loop+0x60/0xb0
[  131.118679][ T9858]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.118695][ T9858] RIP: 0033:0x7f820e98ebe9
[  131.118711][ T9858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  131.118725][ T9858] RSP: 002b:00007f820cbf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  131.118744][ T9858] RAX: ffffffffffffffda RBX: 00007f820ebb5fa0 RCX: 00007f820e98ebe9
[  131.118757][ T9858] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003
[  131.118768][ T9858] RBP: 00007f820cbf6090 R08: 0000000000000000 R09: 0000000000000000
[  131.118779][ T9858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  131.118789][ T9858] R13: 00007f820ebb6038 R14: 00007f820ebb5fa0 R15: 00007fff18fd1308
[  131.118808][ T9858]  </TASK>
[  131.692723][ T9866] tap0: tun_chr_ioctl cmd 1074025677
[  131.698383][ T9866] tap0: linktype set to 825
[  131.730227][ T9869] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.742176][ T9875] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1049'.
[  131.754479][ T9876] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1049'.
[  131.766707][ T9872] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1048'.
[  131.776976][ T9869] syzkaller0: entered promiscuous mode
[  131.784205][ T9869] syzkaller0: entered allmulticast mode
[  131.794195][ T9878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1049'.
[  131.807424][ T9869] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  131.824066][ T9869] tipc: Resetting bearer <eth:syzkaller0>
[  131.832032][ T9868] tipc: Resetting bearer <eth:syzkaller0>
[  131.842285][ T9868] tipc: Disabling bearer <eth:syzkaller0>
[  132.200457][ T9902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1055'.
[  132.217011][ T9902] netlink: 1032 bytes leftover after parsing attributes in process `syz.4.1055'.
[  132.264610][ T9904] 
: renamed from bond_slave_0
[  132.315379][ T9908] tc_dump_action: action bad kind
[  132.518470][ T9915] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1060'.
[  132.538093][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1060'.
[  132.639517][ T9923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1062'.
[  132.758671][ T9934] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.800870][ T9936] hsr_slave_1 (unregistering): left promiscuous mode
[  132.810314][ T9928] tipc: Resetting bearer <eth:syzkaller0>
[  132.857133][ T9928] tipc: Disabling bearer <eth:syzkaller0>
[  132.870669][ T9941] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  132.899919][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  133.228710][ T9964] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004
[  133.268218][ T9964] nbd0: detected capacity change from 0 to 127
[  133.276975][   T51] block nbd0: Receive control failed (result -104)
[  133.457299][ T9982] netlink: 'syz.1.1085': attribute type 3 has an invalid length.
[  133.572469][ T9997] openvswitch: netlink: IPv4 tunnel dst address is zero
[  133.732827][T10007] bridge8: entered allmulticast mode
[  134.064633][T10043] wg1 speed is unknown, defaulting to 1000
[  134.103460][T10039] vlan2: entered promiscuous mode
[  134.111256][T10039] macvtap0: entered promiscuous mode
[  134.829835][T10084] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  134.853295][T10086] openvswitch: netlink: Key type 16144 is out of range max 32
[  134.990233][T10096] bond0: (slave bond_slave_0): Releasing backup interface
[  135.031138][T10096] bond0: (slave bond_slave_1): Releasing backup interface
[  135.046449][T10096] team0: Port device team_slave_0 removed
[  135.055690][T10096] team0: Port device team_slave_1 removed
[  135.062431][T10096] batman_adv: batadv0: Removing interface: batadv_slave_0
[  135.072500][T10096] batman_adv: batadv0: Removing interface: batadv_slave_1
[  135.083086][T10096] bond0: (slave bond1): Releasing backup interface
[  135.155260][T10096] bond2: (slave veth3): Releasing active interface
[  135.241044][T10101] syzkaller1: entered promiscuous mode
[  135.249465][T10101] syzkaller1: entered allmulticast mode
[  135.285839][T10096] team0: Failed to send options change via netlink (err -105)
[  135.296867][T10096] team0: Mode changed to "activebackup"
[  135.310910][T10117] netlink: 'syz.0.1127': attribute type 11 has an invalid length.
[  135.470712][T10135] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  135.719730][T10157] netlink: 'syz.3.1139': attribute type 2 has an invalid length.
[  135.846063][T10164] __nla_validate_parse: 25 callbacks suppressed
[  135.846076][T10164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1141'.
[  135.862013][T10164] netlink: 'syz.1.1141': attribute type 5 has an invalid length.
[  135.869952][T10164] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1141'.
[  135.881582][T10164] geneve3: entered promiscuous mode
[  135.886918][T10164] geneve3: entered allmulticast mode
[  135.893364][   T49] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  135.901866][   T49] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  135.947616][T10162] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  136.021042][T10162] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  136.035636][T10171] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1143'.
[  136.247075][T10173] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1144'.
[  136.247638][T10174] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1144'.
[  136.503422][T10192] netlink: 'syz.0.1151': attribute type 16 has an invalid length.
[  136.512376][T10192] netlink: 'syz.0.1151': attribute type 17 has an invalid length.
[  136.603796][ T7584] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  136.613008][ T7584] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  136.625964][T10198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1151'.
[  136.645090][   T74] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  136.664410][   T74] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  136.681373][T10196] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  136.777173][T10215] geneve2: entered promiscuous mode
[  136.784519][   T74] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.796428][T10215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1155'.
[  136.800225][   T74] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.816654][T10215] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  136.839375][   T74] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  136.861703][   T74] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  136.932553][T10224] ipvlan4: entered promiscuous mode
[  137.070188][T10227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1162'.
[  137.089754][T10232] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1163'.
[  137.094774][T10227] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1162'.
[  137.099182][T10232] netlink: 'syz.3.1163': attribute type 7 has an invalid length.
[  137.117352][T10232] netlink: 'syz.3.1163': attribute type 8 has an invalid length.
[  137.149231][T10235] sock: sock_set_timeout: `syz.0.1164' (pid 10235) tries to set negative timeout
[  137.225771][ T9515] hid-generic 0005:10CF:8002.0001: collection stack underflow
[  137.246987][ T9515] hid-generic 0005:10CF:8002.0001: item 0 0 0 12 parsing failed
[  137.255794][ T9515] hid-generic 0005:10CF:8002.0001: probe with driver hid-generic failed with error -22
[  137.509150][ T3555] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  137.518531][ T3555] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  137.545164][ T3555] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  137.562684][T10261] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  137.579302][ T3555] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  137.789852][T10292] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  137.869221][T10300] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.887291][T10300] syzkaller0: entered promiscuous mode
[  137.894825][T10300] syzkaller0: entered allmulticast mode
[  137.926036][T10298] tipc: Resetting bearer <eth:syzkaller0>
[  137.943779][T10298] tipc: Disabling bearer <eth:syzkaller0>
[  138.011276][T10314] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.021531][T10303] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  138.037234][T10303] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  138.062772][T10303] gtp0: left promiscuous mode
[  138.071138][T10303] bridge8: left allmulticast mode
[  138.207438][T10324] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.281214][T10324] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.334871][T10324] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.365579][T10339] tc_dump_action: action bad kind
[  138.371040][T10340] tc_dump_action: action bad kind
[  138.390798][T10324] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.414553][T10342] netlink: 'syz.0.1195': attribute type 10 has an invalid length.
[  138.461582][   T74] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  138.474004][   T74] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  138.486367][   T74] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  138.500113][   T74] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  138.576525][T10352] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  138.664609][T10356] macsec0: entered promiscuous mode
[  138.671822][T10356] macsec0: entered allmulticast mode
[  138.681084][T10356] veth1_macvtap: entered allmulticast mode
[  138.691456][T10356] macsec0: left promiscuous mode
[  138.700429][T10356] macsec0: left allmulticast mode
[  138.705761][T10356] veth1_macvtap: left allmulticast mode
[  139.280662][T10380] netlink: 'syz.1.1206': attribute type 5 has an invalid length.
[  139.346637][T10380] geneve4: entered promiscuous mode
[  139.361293][T10380] geneve4: entered allmulticast mode
[  139.565865][T10395] vxcan1: entered allmulticast mode
[  139.575612][T10395] vxcan1: left allmulticast mode
[  139.580725][T10395] pim6reg: left allmulticast mode
[  139.617926][ T5182] Bluetooth: hci4: command 0x0405 tx timeout
[  139.757649][T10399] raw_sendmsg: syz.0.1211 forgot to set AF_INET. Fix it!
[  139.827276][T10393] bond0: entered promiscuous mode
[  139.848996][T10393] batadv0: entered promiscuous mode
[  139.858731][T10393] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  139.886490][T10393] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  139.909308][T10393] hsr1: entered allmulticast mode
[  139.914808][T10393] bond0: entered allmulticast mode
[  139.925546][T10393] batadv0: entered allmulticast mode
[  139.938128][T10393] 8021q: adding VLAN 0 to HW filter on device hsr1
[  139.962840][T10393] bond0: left promiscuous mode
[  139.969020][T10393] batadv0: left promiscuous mode
[  140.119511][T10416] bond0: Device is already in use.
[  140.293708][T10432] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  140.464638][T10444] batadv_slave_1: entered promiscuous mode
[  140.489452][T10443] batadv_slave_1: left promiscuous mode
[  140.629948][T10465] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.646865][T10467] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.655002][T10465] syzkaller0: entered promiscuous mode
[  140.661811][T10465] syzkaller0: entered allmulticast mode
[  140.669350][T10467] syzkaller0: entered promiscuous mode
[  140.675669][T10467] syzkaller0: entered allmulticast mode
[  140.686412][T10463] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  140.699340][T10465] tipc: Resetting bearer <eth:syzkaller0>
[  140.705769][T10463] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  140.715157][T10463] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  140.724956][T10461] tipc: Resetting bearer <eth:syzkaller0>
[  140.733519][T10461] tipc: Disabling bearer <eth:syzkaller0>
[  140.760652][T10467] tipc: Resetting bearer <eth:syzkaller0>
[  140.775735][T10466] tipc: Resetting bearer <eth:syzkaller0>
[  140.808084][T10466] tipc: Disabling bearer <eth:syzkaller0>
[  140.961179][T10490] bond0: Device is already in use.
[  141.247080][T10508] __nla_validate_parse: 13 callbacks suppressed
[  141.247097][T10508] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1239'.
[  141.316951][T10515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1242'.
[  141.342561][T10515] 8021q: adding VLAN 0 to HW filter on device bond3
[  141.374733][T10515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1242'.
[  141.392151][T10515] macvlan2: entered promiscuous mode
[  141.398567][T10515] bond3: entered promiscuous mode
[  141.403937][T10515] macvlan2: entered allmulticast mode
[  141.410054][T10515] bond3: entered allmulticast mode
[  141.415617][T10515] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  141.464001][T10525] netlink: 'syz.0.1245': attribute type 10 has an invalid length.
[  141.473145][T10525] bond0: (slave wlan1): Opening slave failed
[  141.531066][T10531] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.547088][T10531] syzkaller0: entered promiscuous mode
[  141.558720][T10531] syzkaller0: entered allmulticast mode
[  141.568984][T10537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1250'.
[  141.579369][T10531] tipc: Resetting bearer <eth:syzkaller0>
[  141.590789][T10530] tipc: Resetting bearer <eth:syzkaller0>
[  141.603279][T10530] tipc: Disabling bearer <eth:syzkaller0>
[  141.851364][T10559] netlink: 732 bytes leftover after parsing attributes in process `syz.2.1256'.
[  141.861400][T10559] netlink: 732 bytes leftover after parsing attributes in process `syz.2.1256'.
[  142.100080][T10571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1261'.
[  142.277014][T10585] netlink: 'syz.4.1264': attribute type 29 has an invalid length.
[  142.288307][T10585] netlink: 'syz.4.1264': attribute type 29 has an invalid length.
[  142.296959][T10585] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1264'.
[  142.348480][T10587] netlink: 'syz.4.1265': attribute type 7 has an invalid length.
[  144.883437][T10605] wg1 speed is unknown, defaulting to 1000
[  144.901982][T10610] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  144.909879][T10610] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  145.112748][T10625] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  145.138620][T10625] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  145.151532][T10625] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  145.216656][T10634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1278'.
[  145.269332][T10633] wg1 speed is unknown, defaulting to 1000
[  145.338557][T10640] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1279'.
[  145.522505][T10648] netlink: 'syz.1.1282': attribute type 3 has an invalid length.
[  145.543899][T10648] syz_tun: entered allmulticast mode
[  145.573248][T10648] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  145.727414][T10647] syz_tun: left allmulticast mode
[  146.212941][T10674] tun0: tun_chr_ioctl cmd 2147767520
[  146.346187][T10674] veth3: left promiscuous mode
[  146.394144][T10674] geneve3: left promiscuous mode
[  146.399289][T10674] geneve3: left allmulticast mode
[  146.434966][T10674] geneve4: left promiscuous mode
[  146.469847][T10674] geneve4: left allmulticast mode
[  146.507566][T10674] bond3: left allmulticast mode
[  146.512495][T10674] bond3: left promiscuous mode
[  146.558321][T10674] macvlan2: left promiscuous mode
[  146.567554][T10674] macvlan2: left allmulticast mode
[  146.593524][T10683] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[  146.623087][T10686] macvlan1: entered promiscuous mode
[  146.629514][T10686] ipvlan0: entered promiscuous mode
[  146.635838][T10686] ipvlan0: left promiscuous mode
[  146.690957][T10686] macvlan1: left promiscuous mode
[  146.708688][   T74] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  146.723658][   T74] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  146.774633][T10709] __nla_validate_parse: 2 callbacks suppressed
[  146.774653][T10709] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1290'.
[  146.781363][   T74] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  146.801741][   T74] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  146.825481][T10709] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  146.906755][T10712] "syz.0.1292" (10712) uses obsolete ecb(arc4) skcipher
[  146.985059][T10729] wg1 speed is unknown, defaulting to 1000
[  147.233047][T10737] netlink: 'syz.3.1294': attribute type 10 has an invalid length.
[  147.243744][T10737] bond0: (slave wlan1): Opening slave failed
[  147.518978][T10729] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1296'.
[  147.562378][T10744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1297'.
[  147.593098][T10746] netlink: 'syz.4.1298': attribute type 10 has an invalid length.
[  147.604238][T10746] syz_tun: entered promiscuous mode
[  147.612350][T10746] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  147.641329][T10746] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1298'.
[  147.669145][T10746] macvlan2: entered allmulticast mode
[  147.675254][T10746] veth1_vlan: entered allmulticast mode
[  147.699873][T10746] veth1_vlan: left allmulticast mode
[  147.824331][T10753] syzkaller1: entered promiscuous mode
[  147.837633][T10753] syzkaller1: entered allmulticast mode
[  147.879048][T10758] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1302'.
[  147.939642][T10760] bond2: option mode: unable to set because the bond device has slaves
[  147.948954][T10769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1306'.
[  148.113287][T10784] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1308'.
[  148.187427][T10791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1310'.
[  148.311752][T10807] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1314'.
[  148.358052][T10812] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  148.389152][T10814] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  148.456011][T10820] wg1 speed is unknown, defaulting to 1000
[  148.478195][T10824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1317'.
[  148.544519][T10826] netlink: 'syz.0.1317': attribute type 1 has an invalid length.
[  148.649408][T10832] netlink: zone id is out of range
[  148.654746][T10832] netlink: zone id is out of range
[  148.660407][T10832] netlink: zone id is out of range
[  148.665628][T10832] netlink: zone id is out of range
[  148.671359][T10832] netlink: zone id is out of range
[  148.679115][T10832] netlink: zone id is out of range
[  148.785034][T10840] netlink: 'syz.2.1322': attribute type 10 has an invalid length.
[  148.880958][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  148.902197][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  148.927066][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  148.935985][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  148.987602][T10861] netlink: 'syz.3.1328': attribute type 1 has an invalid length.
[  149.282707][T10882] macsec0: entered promiscuous mode
[  149.290102][T10882] macsec0: entered allmulticast mode
[  149.296394][T10882] veth1_macvtap: entered allmulticast mode
[  149.303611][T10882] macsec0: left promiscuous mode
[  149.309333][T10882] macsec0: left allmulticast mode
[  149.317627][T10882] veth1_macvtap: left allmulticast mode
[  149.959218][T10903] netlink: 'syz.3.1339': attribute type 4 has an invalid length.
[  150.179642][T10912] netlink: 'syz.0.1343': attribute type 1 has an invalid length.
[  150.491302][T10935] netlink: 'syz.0.1351': attribute type 1 has an invalid length.
[  150.574007][T10936] netlink: 'syz.4.1342': attribute type 6 has an invalid length.
[  150.804100][T10955] netlink: 'syz.0.1355': attribute type 11 has an invalid length.
[  151.067039][T10967] wg1 speed is unknown, defaulting to 1000
[  151.211815][T10986] net_ratelimit: 626 callbacks suppressed
[  151.211838][T10986] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  151.601642][T11001] netlink: 'syz.1.1368': attribute type 2 has an invalid length.
[  151.625451][T10995] wg1 speed is unknown, defaulting to 1000
[  151.636107][T11001] þ`Ì: entered promiscuous mode
[  151.680472][T11001] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  151.829664][T11024] __nla_validate_parse: 14 callbacks suppressed
[  151.829686][T11024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1375'.
[  151.906098][T11032] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1377'.
[  152.125699][T11048] wg1 speed is unknown, defaulting to 1000
[  152.208571][T11044] IPVS: ovf: UDP 224.0.0.2:20004 - no destination available
[  152.225247][ T7789] IPVS: starting estimator thread 0...
[  152.357606][T11064] IPVS: using max 49 ests per chain, 117600 per kthread
[  152.395384][T11065] C: renamed from lo
[  152.413930][T11065] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  152.600172][T11086] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µ
â侦¸ÑKc'A¥»–
[  152.690264][T11105] netlink: 79 bytes leftover after parsing attributes in process `syz.1.1393'.
[  152.722942][T11101] 8021q: VLANs not supported on gre0
[  152.919790][T11111] validate_nla: 1 callbacks suppressed
[  152.919809][T11111] netlink: 'syz.1.1393': attribute type 10 has an invalid length.
[  152.944738][T11110] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.970708][T11111] 8021q: adding VLAN 0 to HW filter on device batadv0
[  153.003237][T11111] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  153.074265][T11115] tipc: Resetting bearer <eth:syzkaller0>
[  153.109420][   T49] tipc: Resetting bearer <eth:syzkaller0>
[  153.239258][T11132] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1398'.
[  153.298384][T11143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1400'.
[  153.393693][T11155] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1402'.
[  153.458298][T11158] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1402'.
[  153.552207][T11166] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1406'.
[  153.562031][T11166] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1406'.
[  153.594776][T11168] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1407'.
[  153.605226][T11109] tipc: Resetting bearer <eth:syzkaller0>
[  153.645342][T11109] tipc: Disabling bearer <eth:syzkaller0>
[  153.659893][T11168] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.673331][T11168] bond0: (slave rose0): Enslaving as an active interface with an up link
[  154.335019][T11232] macsec0: entered allmulticast mode
[  154.711506][T11260] netlink: 'syz.2.1425': attribute type 10 has an invalid length.
[  154.863033][T11277] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.884574][T11277] syzkaller0: entered promiscuous mode
[  154.900733][T11277] syzkaller0: entered allmulticast mode
[  154.965071][T11277] tipc: Resetting bearer <eth:syzkaller0>
[  154.993984][T11276] tipc: Resetting bearer <eth:syzkaller0>
[  155.007312][T11276] tipc: Disabling bearer <eth:syzkaller0>
[  155.048404][T11294] tipc: Cannot configure node identity twice
[  155.522655][ T7794] IPVS: starting estimator thread 0...
[  155.526444][T11334] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  155.582232][T11330] wg1 speed is unknown, defaulting to 1000
[  155.638160][T11337] IPVS: using max 46 ests per chain, 110400 per kthread
[  155.753421][T11353] netlink: 'syz.2.1446': attribute type 3 has an invalid length.
[  155.768266][T11353] syz_tun: entered allmulticast mode
[  155.775571][T11353] dvmrp1: left allmulticast mode
[  155.781192][T11353] pimreg: left allmulticast mode
[  155.811772][T11354] bridge0: port 1(erspan0) entered blocking state
[  155.819469][T11354] bridge0: port 1(erspan0) entered disabled state
[  155.826362][T11354] erspan0: entered allmulticast mode
[  155.840455][T11354] erspan0: left allmulticast mode
[  155.849229][T11356] netlink: 'syz.3.1447': attribute type 4 has an invalid length.
[  155.860940][T11353] siw: device registration error -23
[  155.867342][T11356] netlink: 'syz.3.1447': attribute type 4 has an invalid length.
[  155.912738][T11353] 8021q: adding VLAN 0 to HW filter on device team0
[  155.921233][T11353] tipc: Resetting bearer <eth:team0>
[  155.927191][T11353] tipc: Resetting bearer <eth:team0>
[  155.940471][T11353] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  156.031354][T11352] syz_tun: left allmulticast mode
[  156.364664][T11407] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  156.372447][T11407] syzkaller0: entered promiscuous mode
[  156.378488][T11407] syzkaller0: entered allmulticast mode
[  156.399322][T11407] tipc: Resetting bearer <eth:syzkaller0>
[  156.449452][T11406] tipc: Resetting bearer <eth:syzkaller0>
[  156.458529][T11406] tipc: Disabling bearer <eth:syzkaller0>
[  156.855992][T11415] netlink: 'syz.1.1465': attribute type 3 has an invalid length.
[  156.926479][T11415] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  156.950964][T11415] netlink: 'syz.1.1465': attribute type 4 has an invalid length.
[  157.060354][T11432] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  157.282441][T11448] tc_dump_action: action bad kind
[  157.400278][T11462] __nla_validate_parse: 14 callbacks suppressed
[  157.400301][T11462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1480'.
[  157.416709][T11462] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  157.479060][T11467] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1481'.
[  157.494652][ T1318] tipc: Subscription rejected, illegal request
[  157.604323][T11478] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  157.614677][T11478] netlink: 'syz.3.1483': attribute type 9 has an invalid length.
[  157.625851][T11478] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1483'.
[  157.870622][T11482] bridge_slave_0: entered promiscuous mode
[  157.893594][T11481] bridge_slave_0: left promiscuous mode
[  157.963076][T11490] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1488'.
[  158.060799][T11494] bridge6: entered allmulticast mode
[  158.080129][T11494] wg1 speed is unknown, defaulting to 1000
[  158.148551][T11498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1491'.
[  158.161004][T11498] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  158.543378][T11521] wg1 speed is unknown, defaulting to 1000
[  158.684661][T11522] geneve0: entered allmulticast mode
[  158.703301][   T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  158.727272][   T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  158.763163][T11531] wg1 speed is unknown, defaulting to 1000
[  158.769450][   T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  158.788475][   T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.791622][T11537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1502'.
[  158.830086][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1504'.
[  158.854296][T11537] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  158.978216][T11555] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1508'.
[  159.035038][T11559] netlink: 'syz.3.1509': attribute type 1 has an invalid length.
[  159.134803][T11568] wg1 speed is unknown, defaulting to 1000
[  159.143611][T11573] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1513'.
[  159.166043][T11556] netlink: 'syz.1.1506': attribute type 16 has an invalid length.
[  159.175302][T11556] netlink: 'syz.1.1506': attribute type 17 has an invalid length.
[  159.282399][T11580] !
: renamed from dummy0
[  159.332301][T11585] veth2: entered promiscuous mode
[  159.339774][T11585] veth2: entered allmulticast mode
[  159.482141][T11599] bond0: option mode: unable to set because the bond device has slaves
[  159.582149][T11606] wg1 speed is unknown, defaulting to 1000
[  159.694733][T11616] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1522'.
[  159.951547][T11629] ieee802154 phy1 wpan1: encryption failed: -22
[  159.958125][T11629] ieee802154 phy1 wpan1: encryption failed: -22
[  160.002115][T11631] wg1 speed is unknown, defaulting to 1000
[  160.439016][T11647] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  160.524048][T11649] netlink: 'syz.4.1532': attribute type 29 has an invalid length.
[  161.654477][T11668] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  161.666394][T11670] batadv_slave_1: entered promiscuous mode
[  161.681887][T11666] bridge7: entered promiscuous mode
[  161.687126][T11666] bridge7: entered allmulticast mode
[  161.703839][T11669] batadv_slave_1: left promiscuous mode
[  161.780762][T11676] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  161.892734][T11681] netlink: 'syz.3.1543': attribute type 6 has an invalid length.
[  161.900642][T11681] IPv6: NLM_F_CREATE should be specified when creating new route
[  161.980835][T11687] wg1 speed is unknown, defaulting to 1000
[  162.050041][T11698] netlink: 'syz.4.1549': attribute type 4 has an invalid length.
[  162.081897][T11693] netlink: 'syz.0.1545': attribute type 1 has an invalid length.
[  162.364850][T11711] wg1 speed is unknown, defaulting to 1000
[  162.500839][T11727] __nla_validate_parse: 6 callbacks suppressed
[  162.500859][T11727] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1557'.
[  162.534791][T11730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1558'.
[  162.571863][T11730] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address
[  162.584133][T11730] bond4: (slave vxcan5): Error -95 calling set_mac_address
[  162.619766][T11739] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1558'.
[  162.631029][T11739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1558'.
[  162.658567][T11739] macvlan3: entered promiscuous mode
[  162.664081][T11739] macvlan3: entered allmulticast mode
[  162.671111][T11743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1561'.
[  162.681179][T11743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1561'.
[  162.761105][T11742] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  162.772791][T11742] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  162.785109][T11742] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  162.787241][T11750] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  162.877746][T11742] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  162.896087][T11755] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  162.980923][T11742] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  162.986956][T11742] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  163.064636][T11742] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  163.072418][T11765] netlink: 'syz.3.1567': attribute type 13 has an invalid length.
[  163.099056][T11742] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  163.125925][T11765] netlink: 'syz.3.1567': attribute type 17 has an invalid length.
[  163.477261][T11765] 8021q: adding VLAN 0 to HW filter on device bond0
[  163.543205][T11765] 8021q: adding VLAN 0 to HW filter on device team0
[  163.558812][T11765] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  163.635885][ T2754] block nbd0: Possible stuck request ffff888025327000: control (read@0,1024B). Runtime 30 seconds
[  163.646856][ T2754] block nbd0: Possible stuck request ffff8880253271c0: control (read@1024,1024B). Runtime 30 seconds
[  163.668808][ T2754] block nbd0: Possible stuck request ffff888025327380: control (read@2048,1024B). Runtime 30 seconds
[  163.669221][T11771] wg1 speed is unknown, defaulting to 1000
[  163.680236][ T2754] block nbd0: Possible stuck request ffff888025327540: control (read@3072,1024B). Runtime 30 seconds
[  163.741757][T11782] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1572'.
[  163.767329][T11786] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  163.961286][T11801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1578'.
[  164.004573][T11801] netlink: 'syz.4.1578': attribute type 1 has an invalid length.
[  164.090074][T11801] veth7: entered promiscuous mode
[  164.118796][T11814] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  164.142779][T11814] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  164.221161][T11796] netlink: 'syz.1.1575': attribute type 1 has an invalid length.
[  164.229304][T11796] netlink: 'syz.1.1575': attribute type 1 has an invalid length.
[  164.231749][T11822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1583'.
[  164.237317][T11796] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1575'.
[  164.461629][T11834] wg1 speed is unknown, defaulting to 1000
[  164.640169][T11834] wg1 speed is unknown, defaulting to 1000
[  164.867261][T11859] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  165.433538][T11902] team0: Port device vlan0 removed
[  165.471222][T11903] wg1 speed is unknown, defaulting to 1000
[  165.706481][T11911] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  165.871883][T11921] wg1 speed is unknown, defaulting to 1000
[  165.910175][T11924] vcan0: tx drop: invalid da for name 0x0000000000000001
[  165.978863][T11928] netlink: 'syz.3.1613': attribute type 11 has an invalid length.
[  166.075719][T11931] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  166.088063][T11931] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  166.472293][T11956] bond0: (slave gretap0): Error: Device type is different from other slaves
[  166.501117][T11959] netlink: 'syz.2.1621': attribute type 1 has an invalid length.
[  166.548462][T11952] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  166.569142][T11952] gretap2: entered promiscuous mode
[  166.724874][T11975] netlink: 'syz.1.1624': attribute type 1 has an invalid length.
[  166.987829][T11985] syz_tun: left promiscuous mode
[  167.102490][T11985] geneve0: left allmulticast mode
[  167.137224][ T1318] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.165947][ T1318] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.186599][ T1318] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.207383][ T1318] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.377148][T11998] wg1 speed is unknown, defaulting to 1000
[  167.550975][T12011] __nla_validate_parse: 12 callbacks suppressed
[  167.550993][T12011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1638'.
[  167.597091][T12014] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1644'.
[  167.609770][T12011] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  167.849081][T12027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1648'.
[  168.017009][T12035] wg1 speed is unknown, defaulting to 1000
[  168.084405][T12040] wg1 speed is unknown, defaulting to 1000
[  168.310666][T12058] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1655'.
[  168.321221][T12055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1654'.
[  168.337008][T12055] nbd: must specify a size in bytes for the device
[  168.353649][T12060] netlink: 'syz.4.1656': attribute type 7 has an invalid length.
[  168.375014][T12060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1656'.
[  168.384458][T12060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1656'.
[  168.396388][T12060] netlink: 'syz.4.1656': attribute type 11 has an invalid length.
[  168.539282][T12072] vlan0: entered allmulticast mode
[  168.545267][T12072] batman_adv: batadv0: Adding interface: vlan0
[  168.552024][T12072] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.577857][T12072] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active
[  168.589622][T12076] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1663'.
[  168.637236][T12079] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.647857][T12076] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  168.699737][T12081] netlink: del zone limit has 8 unknown bytes
[  168.721991][T12081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1665'.
[  168.873778][T12098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1669'.
[  168.943168][T12107] netlink: 'syz.0.1673': attribute type 16 has an invalid length.
[  169.024908][T12112] netlink: 'syz.0.1675': attribute type 10 has an invalid length.
[  169.032153][T12109] wg1 speed is unknown, defaulting to 1000
[  169.258384][T12132] macsec0: entered promiscuous mode
[  169.263742][T12132] macsec0: entered allmulticast mode
[  169.390753][T12142] veth1_macvtap: entered allmulticast mode
[  169.414880][T12142] macsec0: left promiscuous mode
[  169.421199][T12142] macsec0: left allmulticast mode
[  169.426408][T12142] veth1_macvtap: left allmulticast mode
[  169.538340][T12144] bond0: (slave batadv0): Releasing backup interface
[  169.559451][T12144] netlink: 'syz.1.1682': attribute type 10 has an invalid length.
[  169.674045][T12154] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  169.711650][T12154] syzkaller0: entered promiscuous mode
[  169.717295][T12154] syzkaller0: entered allmulticast mode
[  169.737159][T12154] tipc: Resetting bearer <eth:syzkaller0>
[  169.758467][T12153] tipc: Resetting bearer <eth:syzkaller0>
[  169.822855][T12153] tipc: Disabling bearer <eth:syzkaller0>
[  169.838469][T12164] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  169.846022][T12164] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  169.855261][T12164] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  169.904766][T12169] netlink: 'syz.0.1691': attribute type 1 has an invalid length.
[  169.955248][T12176] netlink: 'syz.0.1693': attribute type 2 has an invalid length.
[  169.975008][T12176] k›*·]‘: entered promiscuous mode
[  170.021613][T12176] 8021q: adding VLAN 0 to HW filter on device bond0
[  170.029860][T12176] 8021q: adding VLAN 0 to HW filter on device team0
[  170.041810][T12176] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  170.063311][T12178] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  170.075795][T12178] tipc: Resetting bearer <eth:syzkaller0>
[  170.084880][T12177] tipc: Disabling bearer <eth:syzkaller0>
[  170.099623][T12180] netlink: 'syz.4.1695': attribute type 1 has an invalid length.
[  170.185616][T12190] syzkaller1: entered promiscuous mode
[  170.212023][T12190] syzkaller1: entered allmulticast mode
[  170.475759][T12219] netlink: set zone limit has 4 unknown bytes
[  170.555551][T12229] nbd: nbd0 already in use
[  170.567229][T12228] block nbd0: NBD_DISCONNECT
[  170.573849][T12228] block nbd0: Send disconnect failed -32
[  170.580049][T12228] block nbd0: shutting down sockets
[  170.600681][    C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  170.610133][    C1] Buffer I/O error on dev nbd0, logical block 0, async page read
[  170.619173][    C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  170.629408][    C1] Buffer I/O error on dev nbd0, logical block 1, async page read
[  170.637302][    C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  170.646585][    C1] Buffer I/O error on dev nbd0, logical block 2, async page read
[  170.654436][    C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  170.664116][    C1] Buffer I/O error on dev nbd0, logical block 3, async page read
[  170.672335][ T6986] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  170.686468][ T6986] Buffer I/O error on dev nbd0, logical block 0, async page read
[  170.695169][ T6986] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  170.705305][ T6986] Buffer I/O error on dev nbd0, logical block 1, async page read
[  170.713388][ T6986] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  170.722720][ T6986] Buffer I/O error on dev nbd0, logical block 2, async page read
[  170.730991][ T6986] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  170.740452][ T6986] Buffer I/O error on dev nbd0, logical block 3, async page read
[  170.748931][ T6986] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  170.761099][ T6986] Buffer I/O error on dev nbd0, logical block 0, async page read
[  170.769739][ T6986] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  170.785287][ T6986] Buffer I/O error on dev nbd0, logical block 1, async page read
[  170.801127][ T6986] ldm_validate_partition_table(): Disk read failed.
[  170.809574][ T6986] Dev nbd0: unable to read RDB block 0
[  170.820115][ T6986]  nbd0: unable to read partition table
[  170.878516][ T6986] ldm_validate_partition_table(): Disk read failed.
[  170.886544][ T6986] Dev nbd0: unable to read RDB block 0
[  170.911551][ T6986]  nbd0: unable to read partition table
[  171.011546][T12282] pimreg: left allmulticast mode
[  171.073230][   T30] audit: type=1800 audit(1756224980.122:7): pid=12291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1722" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=1600 res=0 errno=0
[  171.102548][T12295] rdma_rxe: rxe_newlink: failed to add lo
[  171.201490][T12304] veth0: entered promiscuous mode
[  171.210482][T12304] veth0 (unregistering): left promiscuous mode
[  171.391152][T12319] netlink: 'syz.0.1729': attribute type 3 has an invalid length.
[  171.400003][T12319] netlink: 'syz.0.1729': attribute type 3 has an invalid length.
[  171.498954][T12323] netlink: 'syz.0.1731': attribute type 14 has an invalid length.
[  171.565100][T12327] netlink: 'syz.0.1733': attribute type 4 has an invalid length.
[  171.576368][T12327] netlink: 'syz.0.1733': attribute type 4 has an invalid length.
[  171.589483][T12327] netlink: 'syz.0.1733': attribute type 4 has an invalid length.
[  171.897247][T12347] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  171.983763][T12355] IPVS: Error connecting to the multicast addr
[  172.105101][T12364] wg1 speed is unknown, defaulting to 1000
[  172.262923][T12373] wg1 speed is unknown, defaulting to 1000
[  172.909966][T12406] __nla_validate_parse: 35 callbacks suppressed
[  172.909987][T12406] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1758'.
[  172.926675][T12410] 8021q: adding VLAN 0 to HW filter on device bond0
[  172.981142][T12414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1759'.
[  173.059762][T12419] syzkaller0: entered promiscuous mode
[  173.065491][T12419] syzkaller0: entered allmulticast mode
[  173.208327][T12430] wg1 speed is unknown, defaulting to 1000
[  173.486351][T12446] macvtap1: entered promiscuous mode
[  173.491910][T12446] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  173.505155][T12446] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  173.552421][T12453] macvtap1: entered promiscuous mode
[  173.563880][T12453] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  173.589705][T12453] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  173.712619][T12468] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1773'.
[  173.759224][T12468] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  173.874900][T12479] wg1 speed is unknown, defaulting to 1000
[  173.940540][T12486] bridge_slave_0: default FDB implementation only supports local addresses
[  173.952537][T12488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1780'.
[  173.965407][T12484] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  173.975865][T12488] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1780'.
[  173.991355][T12484] syzkaller0: entered promiscuous mode
[  173.996900][T12484] syzkaller0: entered allmulticast mode
[  174.032073][T12488] bridge0: port 1(vlan4) entered blocking state
[  174.039213][T12488] bridge0: port 1(vlan4) entered disabled state
[  174.045913][T12488] vlan4: entered allmulticast mode
[  174.052996][T12488] bridge0: entered allmulticast mode
[  174.060175][T12488] vlan4: left allmulticast mode
[  174.065726][T12488] bridge0: left allmulticast mode
[  174.135883][T12484] tipc: Resetting bearer <eth:syzkaller0>
[  174.210742][T12482] tipc: Resetting bearer <eth:syzkaller0>
[  174.224357][T12482] tipc: Disabling bearer <eth:syzkaller0>
[  174.259537][T12504] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  174.280511][T12506] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  174.288066][T12506] syzkaller0: entered promiscuous mode
[  174.293787][T12506] syzkaller0: entered allmulticast mode
[  174.365507][T12506] tipc: Resetting bearer <eth:syzkaller0>
[  174.502247][T12505] tipc: Resetting bearer <eth:syzkaller0>
[  174.508869][T12529] nbd: nbd1 already in use
[  174.532288][T12505] tipc: Disabling bearer <eth:syzkaller0>
[  174.553599][T12519] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1786'.
[  174.637917][T12539] IPVS: set_ctl: invalid protocol: 41 255.255.255.255:20004
[  174.645884][T12539] validate_nla: 12 callbacks suppressed
[  174.645901][T12539] netlink: 'syz.4.1791': attribute type 4 has an invalid length.
[  174.664169][T12539] netlink: 'syz.4.1791': attribute type 4 has an invalid length.
[  174.750000][T12546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1792'.
[  174.861567][T12559] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1794'.
[  174.881557][T12557] wg1 speed is unknown, defaulting to 1000
[  174.888126][T12560] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1796'.
[  174.939689][T12557] tipc: Resetting bearer <eth:team0>
[  175.091799][T12573] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1801'.
[  175.103189][T12573] netlink: 'syz.0.1801': attribute type 7 has an invalid length.
[  175.103307][T12569] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.111187][T12573] netlink: 'syz.0.1801': attribute type 8 has an invalid length.
[  175.143596][T12573] gretap0: entered promiscuous mode
[  175.159521][T12573] batadv_slave_1: entered promiscuous mode
[  175.165952][T12573] erspan0: entered promiscuous mode
[  175.172383][T12573] erspan0: left promiscuous mode
[  175.179872][T12573] gretap0: left promiscuous mode
[  175.185767][T12573] batadv_slave_1: left promiscuous mode
[  175.196327][T12569] syzkaller0: entered promiscuous mode
[  175.204299][T12569] syzkaller0: entered allmulticast mode
[  175.217352][T12569] tipc: Resetting bearer <eth:syzkaller0>
[  175.225181][T12568] tipc: Resetting bearer <eth:syzkaller0>
[  175.250702][T12568] tipc: Disabling bearer <eth:syzkaller0>
[  175.703366][T12633] netlink: 'syz.4.1817': attribute type 12 has an invalid length.
[  175.818264][T12642] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  175.939569][T12646] netlink: 'syz.0.1822': attribute type 1 has an invalid length.
[  176.150517][T12660] 8021q: adding VLAN 0 to HW filter on device bond0
[  176.424168][T12684] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  176.433201][T12684] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  176.441139][T12684] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  177.014699][T12718] netlink: 'syz.0.1845': attribute type 21 has an invalid length.
[  177.043408][T12718] IPv6: NLM_F_CREATE should be specified when creating new route
[  177.054283][T12718] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.061540][T12718] IPv6: NLM_F_CREATE should be set when creating new route
[  177.068916][T12718] IPv6: NLM_F_CREATE should be set when creating new route
[  177.076223][T12718] IPv6: NLM_F_CREATE should be set when creating new route
[  177.241608][T12745] batadv_slave_1: entered promiscuous mode
[  177.318064][T12742] wg1 speed is unknown, defaulting to 1000
[  177.335561][T12734] batadv_slave_1: left promiscuous mode
[  177.361576][T12753] sctp: [Deprecated]: syz.0.1853 (pid 12753) Use of struct sctp_assoc_value in delayed_ack socket option.
[  177.361576][T12753] Use struct sctp_sack_info instead
[  177.489609][T12759] bond0: entered promiscuous mode
[  177.500926][T12759] bond0: left promiscuous mode
[  177.983220][T12801] __nla_validate_parse: 24 callbacks suppressed
[  177.983240][T12801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1867'.
[  178.010996][T12805] syzkaller1: entered promiscuous mode
[  178.018464][T12805] syzkaller1: entered allmulticast mode
[  178.160026][T12816] wg1 speed is unknown, defaulting to 1000
[  178.274206][T12833] vlan2: entered promiscuous mode
[  178.279520][T12833] macvtap0: entered promiscuous mode
[  178.450519][T12846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1880'.
[  178.461291][T12846] veth0_to_bond: entered allmulticast mode
[  178.472888][T12833] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1877'.
[  178.592082][T12856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1883'.
[  178.649185][T12860] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  178.660583][T12859] tipc: Resetting bearer <eth:syzkaller0>
[  178.716687][T12859] tipc: Disabling bearer <eth:syzkaller0>
[  178.764944][T12872] netlink: 'syz.3.1888': attribute type 12 has an invalid length.
[  179.552793][T12877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1891'.
[  179.562409][T12877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1891'.
[  179.579989][T12882] netlink: 'syz.4.1889': attribute type 1 has an invalid length.
[  179.582009][T12877] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1891'.
[  179.660875][T12888] netlink: 'syz.0.1893': attribute type 1 has an invalid length.
[  179.702697][T12888] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  179.714895][T12888] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  179.891438][T12907] wg1 speed is unknown, defaulting to 1000
[  180.013101][    C0] IPv4: Oversized IP packet from 127.0.0.1
[  180.076037][T12918] netlink: 'syz.2.1904': attribute type 29 has an invalid length.
[  180.089738][T12918] netlink: 'syz.2.1904': attribute type 29 has an invalid length.
[  180.102306][T12918] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1904'.
[  180.459221][T12936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1908'.
[  180.503348][T12936] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  180.622539][T12945] netlink: zone id is out of range
[  180.628591][T12945] netlink: zone id is out of range
[  180.633801][T12945] netlink: zone id is out of range
[  180.639609][T12945] netlink: zone id is out of range
[  180.644890][T12945] netlink: zone id is out of range
[  180.663816][T12945] netlink: zone id is out of range
[  180.677289][T12945] netlink: zone id is out of range
[  180.812016][T12952] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1913'.
[  180.997264][T12977] bridge0: entered allmulticast mode
[  181.015740][T12975] bridge_slave_1: left allmulticast mode
[  181.040706][T12975] bridge_slave_1: left promiscuous mode
[  181.046614][T12975] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.055548][T12975] bridge_slave_0: left allmulticast mode
[  181.062429][T12975] bridge_slave_0: left promiscuous mode
[  181.070583][T12975] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.091131][T12975] bridge0 (unregistering): left allmulticast mode
[  181.136207][T12979] netlink: 'syz.3.1920': attribute type 10 has an invalid length.
[  181.211309][T12979] syz_tun: entered promiscuous mode
[  181.221825][T12979] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  181.342645][T13004] netlink: 'syz.4.1926': attribute type 2 has an invalid length.
[  181.357209][T13003] nbd: nbd1 already in use
[  181.374518][T13003] block nbd1: NBD_DISCONNECT
[  181.393652][T13003] block nbd1: Send disconnect failed -107
[  181.405678][T13003] block nbd1: Disconnected due to user request.
[  181.419042][T13003] block nbd1: shutting down sockets
[  197.606099][ T5856] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  197.613619][ T5856] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  197.629562][ T5856] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  197.649141][ T5856] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  197.667950][ T5856] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  197.688435][ T5856] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  197.695722][ T5856] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  197.696181][ T5862] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  197.710581][ T5856] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  197.717976][ T5862] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  197.725443][ T5862] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  197.725528][ T5856] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  197.733369][ T5862] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  197.747436][ T5856] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  197.755170][ T5856] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  197.784091][ T5182] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  197.795147][ T5182] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  197.802511][ T5182] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  197.810371][ T5182] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  197.818947][ T5182] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  197.837840][ T5856] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  197.845749][ T5856] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  197.850945][T13035] wg1 speed is unknown, defaulting to 1000
[  197.859055][ T5856] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  197.866148][ T5865] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  197.874860][ T5865] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  197.883866][ T5856] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  197.894132][ T5856] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  197.897987][ T5865] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  197.908741][ T5856] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  197.909913][ T5865] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  197.923536][T13032] wg1 speed is unknown, defaulting to 1000
[  198.007888][T13038] wg1 speed is unknown, defaulting to 1000
[  198.034643][T13045] wg1 speed is unknown, defaulting to 1000
[  198.080125][T13041] wg1 speed is unknown, defaulting to 1000
[  198.165997][T13032] chnl_net:caif_netlink_parms(): no params data found
[  198.185978][T13035] chnl_net:caif_netlink_parms(): no params data found
[  198.302908][T13032] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.310830][T13032] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.318175][T13032] bridge_slave_0: entered allmulticast mode
[  198.324844][T13032] bridge_slave_0: entered promiscuous mode
[  198.351777][T13032] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.359043][T13032] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.366333][T13032] bridge_slave_1: entered allmulticast mode
[  198.373632][T13032] bridge_slave_1: entered promiscuous mode
[  198.437891][T13032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  198.464152][T13045] chnl_net:caif_netlink_parms(): no params data found
[  198.481736][T13032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  198.499361][T13035] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.507329][T13035] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.515034][T13035] bridge_slave_0: entered allmulticast mode
[  198.521750][T13035] bridge_slave_0: entered promiscuous mode
[  198.528800][T13038] chnl_net:caif_netlink_parms(): no params data found
[  198.554911][T13035] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.562266][T13035] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.569681][T13035] bridge_slave_1: entered allmulticast mode
[  198.576210][T13035] bridge_slave_1: entered promiscuous mode
[  198.609213][T13032] team0: Port device team_slave_0 added
[  198.639780][T13032] team0: Port device team_slave_1 added
[  198.673504][T13035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  198.690618][T13032] batman_adv: batadv0: Adding interface: batadv_slave_0
[  198.697936][T13032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.725096][T13032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  198.737264][T13032] batman_adv: batadv0: Adding interface: batadv_slave_1
[  198.744450][T13032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.770599][T13032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  198.783085][T13035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  198.814149][T13041] chnl_net:caif_netlink_parms(): no params data found
[  198.840210][T13045] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.847914][T13045] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.855144][T13045] bridge_slave_0: entered allmulticast mode
[  198.862052][T13045] bridge_slave_0: entered promiscuous mode
[  198.874507][T13035] team0: Port device team_slave_0 added
[  198.896112][T13045] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.903758][T13045] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.911463][T13045] bridge_slave_1: entered allmulticast mode
[  198.918486][T13045] bridge_slave_1: entered promiscuous mode
[  198.931673][T13035] team0: Port device team_slave_1 added
[  198.943623][T13038] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.951015][T13038] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.958536][T13038] bridge_slave_0: entered allmulticast mode
[  198.965328][T13038] bridge_slave_0: entered promiscuous mode
[  199.000984][T13038] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.008417][T13038] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.015807][T13038] bridge_slave_1: entered allmulticast mode
[  199.022532][T13038] bridge_slave_1: entered promiscuous mode
[  199.045296][T13045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  199.081172][T13032] hsr_slave_0: entered promiscuous mode
[  199.087423][T13032] hsr_slave_1: entered promiscuous mode
[  199.094433][T13032] debugfs: 'hsr0' already exists in 'hsr'
[  199.100558][T13032] Cannot create hsr debugfs directory
[  199.115301][T13045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  199.129453][T13035] batman_adv: batadv0: Adding interface: batadv_slave_0
[  199.136662][T13035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.163655][T13035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  199.175817][T13035] batman_adv: batadv0: Adding interface: batadv_slave_1
[  199.183047][T13035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.210170][T13035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  199.223185][T13038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  199.251397][T13038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  199.301806][T13045] team0: Port device team_slave_0 added
[  199.309885][T13045] team0: Port device team_slave_1 added
[  199.343519][T13041] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.351613][T13041] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.359419][T13041] bridge_slave_0: entered allmulticast mode
[  199.366296][T13041] bridge_slave_0: entered promiscuous mode
[  199.374014][T13041] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.381339][T13041] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.388714][T13041] bridge_slave_1: entered allmulticast mode
[  199.395341][T13041] bridge_slave_1: entered promiscuous mode
[  199.412568][T13038] team0: Port device team_slave_0 added
[  199.435937][T13035] hsr_slave_0: entered promiscuous mode
[  199.442810][T13035] hsr_slave_1: entered promiscuous mode
[  199.449534][T13035] debugfs: 'hsr0' already exists in 'hsr'
[  199.455708][T13035] Cannot create hsr debugfs directory
[  199.465673][T13038] team0: Port device team_slave_1 added
[  199.491988][T13045] batman_adv: batadv0: Adding interface: batadv_slave_0
[  199.499789][T13045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.529546][T13045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  199.543141][T13045] batman_adv: batadv0: Adding interface: batadv_slave_1
[  199.552621][T13045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.579496][T13045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  199.599408][T13041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  199.619758][T13038] batman_adv: batadv0: Adding interface: batadv_slave_0
[  199.626899][T13038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.653307][T13038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  199.680625][T13041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  199.693617][T13038] batman_adv: batadv0: Adding interface: batadv_slave_1
[  199.701123][T13038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.727848][T13038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  199.777997][ T5862] Bluetooth: hci5: command tx timeout
[  199.793011][T13041] team0: Port device team_slave_0 added
[  199.810348][T13045] hsr_slave_0: entered promiscuous mode
[  199.817057][T13045] hsr_slave_1: entered promiscuous mode
[  199.823300][T13045] debugfs: 'hsr0' already exists in 'hsr'
[  199.829596][T13045] Cannot create hsr debugfs directory
[  199.840747][T13041] team0: Port device team_slave_1 added
[  199.857784][ T5862] Bluetooth: hci7: command tx timeout
[  199.857790][ T5182] Bluetooth: hci6: command tx timeout
[  199.920605][T13041] batman_adv: batadv0: Adding interface: batadv_slave_0
[  199.927752][T13041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.953865][ T5862] Bluetooth: hci8: command tx timeout
[  199.959827][T13041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  199.976868][T13038] hsr_slave_0: entered promiscuous mode
[  199.983239][T13038] hsr_slave_1: entered promiscuous mode
[  199.989406][T13038] debugfs: 'hsr0' already exists in 'hsr'
[  199.995134][T13038] Cannot create hsr debugfs directory
[  200.019004][ T5862] Bluetooth: hci9: command tx timeout
[  200.025633][T13041] batman_adv: batadv0: Adding interface: batadv_slave_1
[  200.033391][T13041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.060410][T13041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  200.156432][T13041] hsr_slave_0: entered promiscuous mode
[  200.163421][T13041] hsr_slave_1: entered promiscuous mode
[  200.169781][T13041] debugfs: 'hsr0' already exists in 'hsr'
[  200.175776][T13041] Cannot create hsr debugfs directory
[  201.857756][ T5862] Bluetooth: hci5: command tx timeout
[  201.937932][ T5182] Bluetooth: hci7: command tx timeout
[  201.943471][ T5862] Bluetooth: hci6: command tx timeout
[  202.017726][ T5862] Bluetooth: hci8: command tx timeout
[  202.097933][ T5862] Bluetooth: hci9: command tx timeout
[  203.937798][ T5862] Bluetooth: hci5: command tx timeout
[  204.017743][ T5862] Bluetooth: hci6: command tx timeout
[  204.017992][ T5182] Bluetooth: hci7: command tx timeout
[  204.097680][ T5182] Bluetooth: hci8: command tx timeout
[  204.177858][ T5182] Bluetooth: hci9: command tx timeout
[  206.017679][ T5182] Bluetooth: hci5: command tx timeout
[  206.097691][ T5182] Bluetooth: hci7: command tx timeout
[  206.097718][ T5862] Bluetooth: hci6: command tx timeout
[  206.177735][ T5862] Bluetooth: hci8: command tx timeout
[  206.258364][ T5862] Bluetooth: hci9: command tx timeout
[  258.160512][ T5182] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  258.168491][ T5182] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  258.180853][ T5182] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  258.199204][ T5182] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  258.207678][ T5182] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  258.256754][T13083] wg1 speed is unknown, defaulting to 1000
[  258.293296][ T5862] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  258.302724][ T5862] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  258.310264][ T5865] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  258.317568][ T5862] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  258.325416][ T5865] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  258.332868][ T5865] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  258.335234][ T5863] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  258.340777][ T5865] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  258.350529][ T5863] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  258.362663][ T5863] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  258.370839][ T5863] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  258.378600][ T5863] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  258.386642][ T5863] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  258.394617][T13095] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  258.400404][ T5863] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  258.409115][T13095] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  258.414371][T13094] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  258.423779][T13095] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  258.434708][T13095] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  258.442614][T13095] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  258.526035][T13091] wg1 speed is unknown, defaulting to 1000
[  258.545492][T13089] wg1 speed is unknown, defaulting to 1000
[  258.565393][T13096] wg1 speed is unknown, defaulting to 1000
[  258.584089][T13083] chnl_net:caif_netlink_parms(): no params data found
[  258.608540][T13087] wg1 speed is unknown, defaulting to 1000
[  258.746097][T13083] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.753698][T13083] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.761394][T13083] bridge_slave_0: entered allmulticast mode
[  258.769413][T13083] bridge_slave_0: entered promiscuous mode
[  258.795876][T13083] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.803158][T13083] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.812127][T13083] bridge_slave_1: entered allmulticast mode
[  258.819016][T13083] bridge_slave_1: entered promiscuous mode
[  258.888319][T13083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  258.905687][T13091] chnl_net:caif_netlink_parms(): no params data found
[  258.928591][T13083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  258.986162][T13083] team0: Port device team_slave_0 added
[  259.004698][T13089] chnl_net:caif_netlink_parms(): no params data found
[  259.024013][T13083] team0: Port device team_slave_1 added
[  259.069685][T13083] batman_adv: batadv0: Adding interface: batadv_slave_0
[  259.077030][T13083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  259.103545][T13083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  259.135298][T13087] chnl_net:caif_netlink_parms(): no params data found
[  259.145573][T13083] batman_adv: batadv0: Adding interface: batadv_slave_1
[  259.152842][T13083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  259.179930][T13083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  259.242637][T13091] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.250443][T13091] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.257983][T13091] bridge_slave_0: entered allmulticast mode
[  259.264681][T13091] bridge_slave_0: entered promiscuous mode
[  259.307067][T13091] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.314459][T13091] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.322199][T13091] bridge_slave_1: entered allmulticast mode
[  259.328952][T13091] bridge_slave_1: entered promiscuous mode
[  259.346443][T13096] chnl_net:caif_netlink_parms(): no params data found
[  259.355498][T13089] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.363175][T13089] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.370608][T13089] bridge_slave_0: entered allmulticast mode
[  259.377323][T13089] bridge_slave_0: entered promiscuous mode
[  259.412359][T13089] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.420030][T13089] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.427325][T13089] bridge_slave_1: entered allmulticast mode
[  259.435054][T13089] bridge_slave_1: entered promiscuous mode
[  259.453958][T13083] hsr_slave_0: entered promiscuous mode
[  259.460844][T13083] hsr_slave_1: entered promiscuous mode
[  259.467130][T13083] debugfs: 'hsr0' already exists in 'hsr'
[  259.473449][T13083] Cannot create hsr debugfs directory
[  259.481206][T13091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  259.498032][T13091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  259.544192][T13087] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.551723][T13087] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.559646][T13087] bridge_slave_0: entered allmulticast mode
[  259.566278][T13087] bridge_slave_0: entered promiscuous mode
[  259.583857][T13089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  259.607180][T13087] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.615256][T13087] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.622899][T13087] bridge_slave_1: entered allmulticast mode
[  259.630058][T13087] bridge_slave_1: entered promiscuous mode
[  259.642427][T13089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  259.656471][T13091] team0: Port device team_slave_0 added
[  259.696691][T13091] team0: Port device team_slave_1 added
[  259.704821][T13087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  259.717422][T13087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  259.765403][T13089] team0: Port device team_slave_0 added
[  259.774398][T13089] team0: Port device team_slave_1 added
[  259.812737][T13096] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.821119][T13096] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.828797][T13096] bridge_slave_0: entered allmulticast mode
[  259.835531][T13096] bridge_slave_0: entered promiscuous mode
[  259.843618][T13091] batman_adv: batadv0: Adding interface: batadv_slave_0
[  259.851437][T13091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  259.877800][T13091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  259.891256][T13091] batman_adv: batadv0: Adding interface: batadv_slave_1
[  259.898313][T13091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  259.924454][T13091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  259.936464][T13087] team0: Port device team_slave_0 added
[  259.953000][T13096] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.961210][T13096] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.969259][T13096] bridge_slave_1: entered allmulticast mode
[  259.976603][T13096] bridge_slave_1: entered promiscuous mode
[  259.997643][T13087] team0: Port device team_slave_1 added
[  260.007273][T13089] batman_adv: batadv0: Adding interface: batadv_slave_0
[  260.014530][T13089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  260.042110][T13089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  260.054609][T13089] batman_adv: batadv0: Adding interface: batadv_slave_1
[  260.061842][T13089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  260.088646][T13089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  260.131559][T13087] batman_adv: batadv0: Adding interface: batadv_slave_0
[  260.138711][T13087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  260.165515][T13087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  260.183379][T13096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  260.211965][T13087] batman_adv: batadv0: Adding interface: batadv_slave_1
[  260.219579][T13087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  260.246265][T13087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  260.263840][ T5856] Bluetooth: hci10: command tx timeout
[  260.274344][T13096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  260.312232][T13089] hsr_slave_0: entered promiscuous mode
[  260.318644][T13089] hsr_slave_1: entered promiscuous mode
[  260.324926][T13089] debugfs: 'hsr0' already exists in 'hsr'
[  260.331460][T13089] Cannot create hsr debugfs directory
[  260.356336][T13091] hsr_slave_0: entered promiscuous mode
[  260.362859][T13091] hsr_slave_1: entered promiscuous mode
[  260.369627][T13091] debugfs: 'hsr0' already exists in 'hsr'
[  260.375393][T13091] Cannot create hsr debugfs directory
[  260.392099][T13087] hsr_slave_0: entered promiscuous mode
[  260.398649][T13087] hsr_slave_1: entered promiscuous mode
[  260.404846][T13087] debugfs: 'hsr0' already exists in 'hsr'
[  260.410728][T13087] Cannot create hsr debugfs directory
[  260.417634][ T5856] Bluetooth: hci11: command tx timeout
[  260.421677][T13095] Bluetooth: hci13: command tx timeout
[  260.451661][T13096] team0: Port device team_slave_0 added
[  260.460751][T13096] team0: Port device team_slave_1 added
[  260.497601][T13095] Bluetooth: hci14: command tx timeout
[  260.507786][T13095] Bluetooth: hci12: command tx timeout
[  260.553643][T13096] batman_adv: batadv0: Adding interface: batadv_slave_0
[  260.561392][T13096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  260.588394][T13096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  260.614303][T13096] batman_adv: batadv0: Adding interface: batadv_slave_1
[  260.621412][T13096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  260.647753][T13096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  260.750555][T13096] hsr_slave_0: entered promiscuous mode
[  260.757825][T13096] hsr_slave_1: entered promiscuous mode
[  260.764126][T13096] debugfs: 'hsr0' already exists in 'hsr'
[  260.771767][T13096] Cannot create hsr debugfs directory
[  262.337769][T13095] Bluetooth: hci10: command tx timeout
[  262.497997][ T5856] Bluetooth: hci13: command tx timeout
[  262.501772][T13095] Bluetooth: hci11: command tx timeout
[  262.577845][ T5856] Bluetooth: hci14: command tx timeout
[  262.583728][T13095] Bluetooth: hci12: command tx timeout
[  264.417763][T13095] Bluetooth: hci10: command tx timeout
[  264.577677][T13095] Bluetooth: hci13: command tx timeout
[  264.583210][T13095] Bluetooth: hci11: command tx timeout
[  264.657687][T13095] Bluetooth: hci12: command tx timeout
[  264.662008][ T5856] Bluetooth: hci14: command tx timeout
[  266.497685][ T5856] Bluetooth: hci10: command tx timeout
[  266.657696][ T5856] Bluetooth: hci11: command tx timeout
[  266.667931][ T5856] Bluetooth: hci13: command tx timeout
[  266.737721][T13095] Bluetooth: hci12: command tx timeout
[  266.738052][ T5856] Bluetooth: hci14: command tx timeout
[  318.097774][T13095] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  318.105145][T13095] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  318.112559][T13095] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  318.120406][T13095] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  318.132495][T13095] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  318.161821][T13095] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  318.169193][T13095] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  318.176553][T13095] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  318.184827][T13095] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  318.185206][T13132] wg1 speed is unknown, defaulting to 1000
[  318.208236][T13095] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  318.239388][T13095] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  318.246933][T13095] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  318.254377][T13095] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  318.262315][T13095] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  318.269960][T13095] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  318.282532][T13135] wg1 speed is unknown, defaulting to 1000
[  318.328646][T13138] wg1 speed is unknown, defaulting to 1000
[  318.413137][T13132] chnl_net:caif_netlink_parms(): no params data found
[  318.520130][T13135] chnl_net:caif_netlink_parms(): no params data found
[  318.555122][T13132] bridge0: port 1(bridge_slave_0) entered blocking state
[  318.563593][T13132] bridge0: port 1(bridge_slave_0) entered disabled state
[  318.570991][T13132] bridge_slave_0: entered allmulticast mode
[  318.578807][T13132] bridge_slave_0: entered promiscuous mode
[  318.601991][T13132] bridge0: port 2(bridge_slave_1) entered blocking state
[  318.609654][T13132] bridge0: port 2(bridge_slave_1) entered disabled state
[  318.616860][T13132] bridge_slave_1: entered allmulticast mode
[  318.623767][T13132] bridge_slave_1: entered promiscuous mode
[  318.630510][T13138] chnl_net:caif_netlink_parms(): no params data found
[  318.674040][T13132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  318.699926][T13132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  318.720086][T13135] bridge0: port 1(bridge_slave_0) entered blocking state
[  318.727874][T13135] bridge0: port 1(bridge_slave_0) entered disabled state
[  318.735167][T13135] bridge_slave_0: entered allmulticast mode
[  318.742637][T13135] bridge_slave_0: entered promiscuous mode
[  318.760756][T13135] bridge0: port 2(bridge_slave_1) entered blocking state
[  318.768153][T13135] bridge0: port 2(bridge_slave_1) entered disabled state
[  318.775507][T13135] bridge_slave_1: entered allmulticast mode
[  318.783216][T13135] bridge_slave_1: entered promiscuous mode
[  318.808938][T13132] team0: Port device team_slave_0 added
[  318.831295][T13135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  318.841937][T13132] team0: Port device team_slave_1 added
[  318.864142][T13135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  318.914538][T13132] batman_adv: batadv0: Adding interface: batadv_slave_0
[  318.928438][T13132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  318.987619][T13132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  319.008058][T13138] bridge0: port 1(bridge_slave_0) entered blocking state
[  319.015345][T13138] bridge0: port 1(bridge_slave_0) entered disabled state
[  319.038259][T13138] bridge_slave_0: entered allmulticast mode
[  319.045407][T13138] bridge_slave_0: entered promiscuous mode
[  319.085493][T13132] batman_adv: batadv0: Adding interface: batadv_slave_1
[  319.102228][T13132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  319.157244][ T5856] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  319.164747][T13132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  319.164977][ T5856] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  319.183855][ T5856] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  319.192019][ T5856] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  319.202649][ T5856] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  319.215242][T13138] bridge0: port 2(bridge_slave_1) entered blocking state
[  319.223145][T13138] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.230607][T13138] bridge_slave_1: entered allmulticast mode
[  319.237726][T13138] bridge_slave_1: entered promiscuous mode
[  319.244726][ T5856] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1
[  319.248284][T13135] team0: Port device team_slave_0 added
[  319.259796][ T5856] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9
[  319.260862][T13135] team0: Port device team_slave_1 added
[  319.271389][ T5856] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9
[  319.288379][ T5856] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4
[  319.295954][ T5856] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2
[  319.339978][T13138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  319.356419][T13135] batman_adv: batadv0: Adding interface: batadv_slave_0
[  319.363790][T13160] wg1 speed is unknown, defaulting to 1000
[  319.369974][T13135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  319.396038][T13135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  319.408687][T13135] batman_adv: batadv0: Adding interface: batadv_slave_1
[  319.415634][T13135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  319.444174][T13135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  319.459631][T13138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  319.481080][T13132] hsr_slave_0: entered promiscuous mode
[  319.487510][T13132] hsr_slave_1: entered promiscuous mode
[  319.493632][T13132] debugfs: 'hsr0' already exists in 'hsr'
[  319.499702][T13132] Cannot create hsr debugfs directory
[  319.531864][T13138] team0: Port device team_slave_0 added
[  319.542845][T13138] team0: Port device team_slave_1 added
[  319.600335][T13138] batman_adv: batadv0: Adding interface: batadv_slave_0
[  319.607421][T13138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  319.635368][T13138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  319.650604][T13162] wg1 speed is unknown, defaulting to 1000
[  319.669931][T13135] hsr_slave_0: entered promiscuous mode
[  319.676436][T13135] hsr_slave_1: entered promiscuous mode
[  319.682855][T13135] debugfs: 'hsr0' already exists in 'hsr'
[  319.688751][T13135] Cannot create hsr debugfs directory
[  319.702448][T13138] batman_adv: batadv0: Adding interface: batadv_slave_1
[  319.710062][T13138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  319.737378][T13138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  319.814300][T13138] hsr_slave_0: entered promiscuous mode
[  319.820799][T13138] hsr_slave_1: entered promiscuous mode
[  319.826872][T13138] debugfs: 'hsr0' already exists in 'hsr'
[  319.833736][T13138] Cannot create hsr debugfs directory
[  320.104775][T13160] chnl_net:caif_netlink_parms(): no params data found
[  320.164749][T13162] chnl_net:caif_netlink_parms(): no params data found
[  320.179753][ T5856] Bluetooth: hci15: command tx timeout
[  320.230091][T13160] bridge0: port 1(bridge_slave_0) entered blocking state
[  320.238600][T13160] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.245908][T13160] bridge_slave_0: entered allmulticast mode
[  320.253433][T13160] bridge_slave_0: entered promiscuous mode
[  320.259860][ T5856] Bluetooth: hci16: command tx timeout
[  320.261808][T13160] bridge0: port 2(bridge_slave_1) entered blocking state
[  320.274014][T13160] bridge0: port 2(bridge_slave_1) entered disabled state
[  320.281782][T13160] bridge_slave_1: entered allmulticast mode
[  320.289112][T13160] bridge_slave_1: entered promiscuous mode
[  320.329602][T13162] bridge0: port 1(bridge_slave_0) entered blocking state
[  320.337039][T13162] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.338429][ T5856] Bluetooth: hci17: command tx timeout
[  320.351083][T13162] bridge_slave_0: entered allmulticast mode
[  320.361526][T13162] bridge_slave_0: entered promiscuous mode
[  320.370548][T13160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  320.383866][T13162] bridge0: port 2(bridge_slave_1) entered blocking state
[  320.391726][T13162] bridge0: port 2(bridge_slave_1) entered disabled state
[  320.399246][T13162] bridge_slave_1: entered allmulticast mode
[  320.405977][T13162] bridge_slave_1: entered promiscuous mode
[  320.423340][T13160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  320.460465][T13162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  320.473755][T13162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  320.484740][T13160] team0: Port device team_slave_0 added
[  320.494376][T13160] team0: Port device team_slave_1 added
[  320.542278][T13162] team0: Port device team_slave_0 added
[  320.550960][T13162] team0: Port device team_slave_1 added
[  320.559480][T13160] batman_adv: batadv0: Adding interface: batadv_slave_0
[  320.566616][T13160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  320.593641][T13160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  320.606427][T13160] batman_adv: batadv0: Adding interface: batadv_slave_1
[  320.613709][T13160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  320.640162][T13160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  320.689543][T13162] batman_adv: batadv0: Adding interface: batadv_slave_0
[  320.696585][T13162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  320.726351][T13162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  320.739706][T13162] batman_adv: batadv0: Adding interface: batadv_slave_1
[  320.746878][T13162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  320.774821][T13162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  320.804040][T13160] hsr_slave_0: entered promiscuous mode
[  320.810739][T13160] hsr_slave_1: entered promiscuous mode
[  320.817192][T13160] debugfs: 'hsr0' already exists in 'hsr'
[  320.823376][T13160] Cannot create hsr debugfs directory
[  320.871856][T13162] hsr_slave_0: entered promiscuous mode
[  320.879153][T13162] hsr_slave_1: entered promiscuous mode
[  320.885325][T13162] debugfs: 'hsr0' already exists in 'hsr'
[  320.891758][T13162] Cannot create hsr debugfs directory
[  321.217755][ T5856] Bluetooth: hci18: command tx timeout
[  321.379065][ T5856] Bluetooth: hci19: command tx timeout
[  322.257733][ T5856] Bluetooth: hci15: command tx timeout
[  322.339180][T13095] Bluetooth: hci16: command tx timeout
[  322.417842][ T5865] Bluetooth: hci17: command tx timeout
[  323.297877][ T5865] Bluetooth: hci18: command tx timeout
[  323.457877][ T5865] Bluetooth: hci19: command tx timeout
[  324.347863][ T5865] Bluetooth: hci15: command tx timeout
[  324.418136][ T5865] Bluetooth: hci5: command 0x0406 tx timeout
[  324.421046][ T5182] Bluetooth: hci7: command 0x0406 tx timeout
[  324.424315][ T5865] Bluetooth: hci9: command 0x0406 tx timeout
[  324.431258][ T5182] Bluetooth: hci6: command 0x0406 tx timeout
[  324.436641][ T5865] Bluetooth: hci8: command 0x0406 tx timeout
[  324.442953][T13176] Bluetooth: hci16: command tx timeout
[  324.498174][ T5856] Bluetooth: hci17: command tx timeout
[  325.377940][ T5856] Bluetooth: hci18: command tx timeout
[  325.537858][ T5856] Bluetooth: hci19: command tx timeout
[  326.417720][ T5856] Bluetooth: hci15: command tx timeout
[  326.497800][ T5856] Bluetooth: hci16: command tx timeout
[  326.577713][ T5856] Bluetooth: hci17: command tx timeout
[  327.458242][ T5856] Bluetooth: hci18: command tx timeout
[  327.617962][ T5856] Bluetooth: hci19: command tx timeout
[  338.347875][   T31] INFO: task syz.1.1927:13003 blocked for more than 143 seconds.
[  338.355657][   T31]       Not tainted syzkaller #0
[  338.360751][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  338.369517][   T31] task:syz.1.1927      state:D stack:25032 pid:13003 tgid:12998 ppid:5868   task_flags:0x400140 flags:0x00004004
[  338.381696][   T31] Call Trace:
[  338.385016][   T31]  <TASK>
[  338.388070][   T31]  __schedule+0x1798/0x4cc0
[  338.392588][   T31]  ? __pfx___console_unlock+0x10/0x10
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  338.398099][   T31]  ? number+0x41/0xf60
[  338.402386][   T31]  ? __pfx___schedule+0x10/0x10
[  338.407537][   T31]  ? preempt_schedule+0xae/0xc0
[  338.412413][   T31]  ? schedule+0x91/0x360
[  338.416672][   T31]  ? rcu_is_watching+0x15/0xb0
[  338.447628][   T31]  ? lock_release+0x4b/0x3e0
[  338.452290][   T31]  schedule+0x165/0x360
[  338.456467][   T31]  schedule_timeout+0x9a/0x270
[  338.475207][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  338.480670][   T31]  ? rcu_is_watching+0x15/0xb0
[  338.485962][   T31]  ? rcu_is_watching+0x15/0xb0
[  338.491126][   T31]  ? wait_for_completion+0x267/0x5d0
[  338.496418][   T31]  wait_for_completion+0x2bf/0x5d0
[  338.501678][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[  338.507335][   T31]  ? flush_workqueue_prep_pwqs+0x47c/0x4f0
[  338.513274][   T31]  ? check_flush_dependency+0x88/0x400
[  338.518814][   T31]  __flush_workqueue+0x6f7/0x14b0
[  338.523847][   T31]  ? rcu_is_watching+0x15/0xb0
[  338.528742][   T31]  ? __pfx___flush_workqueue+0x10/0x10
[  338.534229][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  338.540179][   T31]  ? __wake_up_common_lock+0x190/0x1f0
[  338.546012][   T31]  nbd_disconnect_and_put+0x9e/0x2a0
[  338.551481][   T31]  nbd_genl_disconnect+0x485/0x570
[  338.556728][   T31]  ? __pfx_nbd_genl_disconnect+0x10/0x10
[  338.562447][   T31]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  338.568954][   T31]  genl_family_rcv_msg_doit+0x212/0x300
[  338.574522][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  338.580994][   T31]  ? stack_trace_save+0x9c/0xe0
[  338.585965][   T31]  genl_rcv_msg+0x60e/0x790
[  338.590601][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  338.595643][   T31]  ? __kasan_slab_alloc+0x6c/0x80
[  338.600719][   T31]  ? __pfx_nbd_genl_disconnect+0x10/0x10
[  338.606409][   T31]  ? __netlink_lookup+0xbd/0x810
[  338.611484][   T31]  ? rcu_is_watching+0x15/0xb0
[  338.616329][   T31]  netlink_rcv_skb+0x208/0x470
[  338.621161][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  338.626199][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  338.631565][   T31]  ? lock_release+0x4b/0x3e0
[  338.636162][   T31]  ? down_read+0x1ad/0x2e0
[  338.640651][   T31]  genl_rcv+0x28/0x40
[  338.644663][   T31]  netlink_unicast+0x82f/0x9e0
[  338.649645][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  338.654938][   T31]  ? netlink_sendmsg+0x642/0xb30
[  338.660776][   T31]  ? skb_put+0x11b/0x210
[  338.665046][   T31]  netlink_sendmsg+0x805/0xb30
[  338.670327][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  338.675639][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[  338.680783][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  338.686091][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  338.691876][   T31]  __sock_sendmsg+0x219/0x270
[  338.697110][   T31]  ____sys_sendmsg+0x505/0x830
[  338.702058][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  338.707346][   T31]  ? import_iovec+0x74/0xa0
[  338.712721][   T31]  ___sys_sendmsg+0x21f/0x2a0
[  338.717852][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  338.723072][   T31]  ? futex_wake+0x4b2/0x560
[  338.727668][   T31]  ? __fget_files+0x2a/0x420
[  338.732345][   T31]  ? __fget_files+0x3a0/0x420
[  338.737037][   T31]  __x64_sys_sendmsg+0x19b/0x260
[  338.742301][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  338.748472][   T31]  ? rcu_is_watching+0x15/0xb0
[  338.753347][   T31]  ? rcu_is_watching+0x15/0xb0
[  338.758474][   T31]  do_syscall_64+0xfa/0x3b0
[  338.763104][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.769272][   T31]  ? clear_bhb_loop+0x60/0xb0
[  338.774023][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.780326][   T31] RIP: 0033:0x7fec1198ebe9
[  338.785085][   T31] RSP: 002b:00007fec1273d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  338.793782][   T31] RAX: ffffffffffffffda RBX: 00007fec11bb5fa0 RCX: 00007fec1198ebe9
[  338.802258][   T31] RDX: 00000000000000c0 RSI: 0000200000000280 RDI: 0000000000000005
[  338.811229][   T31] RBP: 00007fec11a11e19 R08: 0000000000000000 R09: 0000000000000000
[  338.819805][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  338.828027][   T31] R13: 00007fec11bb6038 R14: 00007fec11bb5fa0 R15: 00007ffd08296288
[  338.836324][   T31]  </TASK>
[  338.839448][   T31] INFO: task syz.2.1929:13008 blocked for more than 143 seconds.
[  338.847190][   T31]       Not tainted syzkaller #0
[  338.852272][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  338.861291][   T31] task:syz.2.1929      state:D stack:26600 pid:13008 tgid:13007 ppid:5864   task_flags:0x400140 flags:0x00004004
[  338.873417][   T31] Call Trace:
[  338.876704][   T31]  <TASK>
[  338.879776][   T31]  __schedule+0x1798/0x4cc0
[  338.884415][   T31]  ? stack_trace_save+0x9c/0xe0
[  338.889571][   T31]  ? __pfx___schedule+0x10/0x10
[  338.894531][   T31]  ? schedule+0x91/0x360
[  338.899067][   T31]  ? rcu_is_watching+0x15/0xb0
[  338.903855][   T31]  ? lock_release+0x4b/0x3e0
[  338.908609][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  338.914709][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  338.921619][   T31]  schedule+0x165/0x360
[  338.925771][   T31]  schedule_preempt_disabled+0x13/0x30
[  338.931361][   T31]  __mutex_lock+0x7e6/0x1350
[  338.936135][   T31]  ? __mutex_lock+0x5bb/0x1350
[  338.940986][   T31]  ? genl_rcv_msg+0x10d/0x790
[  338.945694][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  338.950913][   T31]  ? stack_trace_save+0x9c/0xe0
[  338.955967][   T31]  ? __pfx_stack_trace_save+0x10/0x10
[  338.961412][   T31]  ? radix_tree_lookup+0x240/0x290
[  338.966549][   T31]  genl_rcv_msg+0x10d/0x790
[  338.971254][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  338.976302][   T31]  ? __kasan_slab_alloc+0x6c/0x80
[  338.981797][   T31]  ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  338.988383][   T31]  ? kmalloc_reserve+0xbd/0x290
[  338.993274][   T31]  ? __netlink_lookup+0xbd/0x810
[  338.998334][   T31]  ? rcu_is_watching+0x15/0xb0
[  339.003316][   T31]  netlink_rcv_skb+0x208/0x470
[  339.008279][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  339.013414][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  339.018841][   T31]  ? lock_release+0x4b/0x3e0
[  339.023755][   T31]  ? down_read+0x1ad/0x2e0
[  339.028312][   T31]  genl_rcv+0x28/0x40
[  339.032310][   T31]  netlink_unicast+0x82f/0x9e0
[  339.037099][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  339.042436][   T31]  ? netlink_sendmsg+0x642/0xb30
[  339.047447][   T31]  ? skb_put+0x11b/0x210
[  339.052231][   T31]  netlink_sendmsg+0x805/0xb30
[  339.057143][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  339.062788][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[  339.068378][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  339.073770][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  339.079176][   T31]  __sock_sendmsg+0x219/0x270
[  339.083931][   T31]  __sys_sendto+0x3bd/0x520
[  339.088873][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  339.093957][   T31]  ? count_memcg_event_mm+0x21/0x260
[  339.099310][   T31]  ? do_user_addr_fault+0xc8a/0x1390
[  339.104619][   T31]  __x64_sys_sendto+0xde/0x100
[  339.109617][   T31]  do_syscall_64+0xfa/0x3b0
[  339.114248][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.120587][   T31]  ? clear_bhb_loop+0x60/0xb0
[  339.125283][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.131653][   T31] RIP: 0033:0x7f820e990a7c
[  339.136185][   T31] RSP: 002b:00007f820cbf4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  339.145009][   T31] RAX: ffffffffffffffda RBX: 00007f820cbf4fc0 RCX: 00007f820e990a7c
[  339.153101][   T31] RDX: 0000000000000024 RSI: 00007f820cbf5010 RDI: 000000000000000a
[  339.161253][   T31] RBP: 0000000000000000 R08: 00007f820cbf4f14 R09: 000000000000000c
[  339.169609][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000a
[  339.177777][   T31] R13: 00007f820cbf4f68 R14: 00007f820cbf5010 R15: 0000000000000000
[  339.185787][   T31]  </TASK>
[  339.188957][   T31] INFO: task syz.2.1929:13016 blocked for more than 144 seconds.
[  339.196682][   T31]       Not tainted syzkaller #0
[  339.202169][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  339.211067][   T31] task:syz.2.1929      state:D stack:27144 pid:13016 tgid:13007 ppid:5864   task_flags:0x400140 flags:0x00004004
[  339.223215][   T31] Call Trace:
[  339.226501][   T31]  <TASK>
[  339.229558][   T31]  __schedule+0x1798/0x4cc0
[  339.234086][   T31]  ? stack_trace_save+0x9c/0xe0
[  339.239113][   T31]  ? __pfx___schedule+0x10/0x10
[  339.244081][   T31]  ? schedule+0x91/0x360
[  339.248552][   T31]  ? rcu_is_watching+0x15/0xb0
[  339.253335][   T31]  ? lock_release+0x4b/0x3e0
[  339.258021][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  339.263943][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  339.270407][   T31]  schedule+0x165/0x360
[  339.274574][   T31]  schedule_preempt_disabled+0x13/0x30
[  339.280207][   T31]  __mutex_lock+0x7e6/0x1350
[  339.284818][   T31]  ? __mutex_lock+0x5bb/0x1350
[  339.289717][   T31]  ? genl_rcv_msg+0x10d/0x790
[  339.294433][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  339.299681][   T31]  ? stack_trace_save+0x9c/0xe0
[  339.304728][   T31]  ? __pfx_stack_trace_save+0x10/0x10
[  339.310184][   T31]  ? radix_tree_lookup+0x240/0x290
[  339.315291][   T31]  genl_rcv_msg+0x10d/0x790
[  339.320020][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  339.325144][   T31]  ? __kasan_slab_alloc+0x6c/0x80
[  339.330300][   T31]  ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  339.336522][   T31]  ? kmalloc_reserve+0xbd/0x290
[  339.341446][   T31]  ? __netlink_lookup+0xbd/0x810
[  339.346386][   T31]  ? rcu_is_watching+0x15/0xb0
[  339.351237][   T31]  netlink_rcv_skb+0x208/0x470
[  339.356012][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  339.361102][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  339.366393][   T31]  ? lock_release+0x4b/0x3e0
[  339.371078][   T31]  ? down_read+0x1ad/0x2e0
[  339.375487][   T31]  genl_rcv+0x28/0x40
[  339.379662][   T31]  netlink_unicast+0x82f/0x9e0
[  339.384452][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  339.389965][   T31]  ? netlink_sendmsg+0x642/0xb30
[  339.394972][   T31]  ? skb_put+0x11b/0x210
[  339.399335][   T31]  netlink_sendmsg+0x805/0xb30
[  339.404311][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  339.409779][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[  339.414714][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  339.420084][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  339.425407][   T31]  __sock_sendmsg+0x219/0x270
[  339.430180][   T31]  __sys_sendto+0x3bd/0x520
[  339.434711][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  339.439774][   T31]  ? count_memcg_event_mm+0x21/0x260
[  339.445065][   T31]  ? do_user_addr_fault+0xc8a/0x1390
[  339.450527][   T31]  __x64_sys_sendto+0xde/0x100
[  339.455311][   T31]  do_syscall_64+0xfa/0x3b0
[  339.459951][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.466133][   T31]  ? clear_bhb_loop+0x60/0xb0
[  339.471042][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.477054][   T31] RIP: 0033:0x7f820e990a7c
[  339.481526][   T31] RSP: 002b:00007f820cbd3ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  339.490098][   T31] RAX: ffffffffffffffda RBX: 00007f820cbd3fc0 RCX: 00007f820e990a7c
[  339.498970][   T31] RDX: 0000000000000024 RSI: 00007f820cbd4010 RDI: 000000000000000a
[  339.507127][   T31] RBP: 0000000000000000 R08: 00007f820cbd3f14 R09: 000000000000000c
[  339.515367][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000a
[  339.523500][   T31] R13: 00007f820cbd3f68 R14: 00007f820cbd4010 R15: 0000000000000000
[  339.531587][   T31]  </TASK>
[  339.534658][   T31] INFO: task syz.3.1931:13015 blocked for more than 144 seconds.
[  339.542688][   T31]       Not tainted syzkaller #0
[  339.548360][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  339.557050][   T31] task:syz.3.1931      state:D stack:26408 pid:13015 tgid:13014 ppid:5870   task_flags:0x400140 flags:0x00004004
[  339.569098][   T31] Call Trace:
[  339.572408][   T31]  <TASK>
[  339.575325][   T31]  __schedule+0x1798/0x4cc0
[  339.580058][   T31]  ? stack_trace_save+0x9c/0xe0
[  339.584924][   T31]  ? __pfx___schedule+0x10/0x10
[  339.589882][   T31]  ? schedule+0x91/0x360
[  339.594133][   T31]  ? rcu_is_watching+0x15/0xb0
[  339.599032][   T31]  ? lock_release+0x4b/0x3e0
[  339.603680][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  339.609836][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  339.616247][   T31]  schedule+0x165/0x360
[  339.620879][   T31]  schedule_preempt_disabled+0x13/0x30
[  339.626352][   T31]  __mutex_lock+0x7e6/0x1350
[  339.630995][   T31]  ? __mutex_lock+0x5bb/0x1350
[  339.635750][   T31]  ? genl_rcv_msg+0x10d/0x790
[  339.640473][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  339.645519][   T31]  ? stack_trace_save+0x9c/0xe0
[  339.650434][   T31]  ? __pfx_stack_trace_save+0x10/0x10
[  339.655895][   T31]  ? radix_tree_lookup+0x240/0x290
[  339.661188][   T31]  genl_rcv_msg+0x10d/0x790
[  339.666154][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  339.671226][   T31]  ? __kasan_slab_alloc+0x6c/0x80
[  339.676271][   T31]  ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  339.682390][   T31]  ? kmalloc_reserve+0xbd/0x290
[  339.687251][   T31]  ? __netlink_lookup+0xbd/0x810
[  339.692219][   T31]  ? rcu_is_watching+0x15/0xb0
[  339.696971][   T31]  netlink_rcv_skb+0x208/0x470
[  339.702109][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  339.707154][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  339.712519][   T31]  ? lock_release+0x4b/0x3e0
[  339.717124][   T31]  ? down_read+0x1ad/0x2e0
[  339.721963][   T31]  genl_rcv+0x28/0x40
[  339.726024][   T31]  netlink_unicast+0x82f/0x9e0
[  339.730990][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  339.736379][   T31]  ? netlink_sendmsg+0x642/0xb30
[  339.741411][   T31]  ? skb_put+0x11b/0x210
[  339.745664][   T31]  netlink_sendmsg+0x805/0xb30
[  339.750483][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  339.756121][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[  339.761602][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  339.778015][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  339.783374][   T31]  __sock_sendmsg+0x219/0x270
[  339.788227][   T31]  __sys_sendto+0x3bd/0x520
[  339.792744][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  339.797935][   T31]  ? count_memcg_event_mm+0x21/0x260
[  339.803232][   T31]  ? do_user_addr_fault+0xc8a/0x1390
[  339.808580][   T31]  __x64_sys_sendto+0xde/0x100
[  339.813342][   T31]  do_syscall_64+0xfa/0x3b0
[  339.817893][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.824067][   T31]  ? clear_bhb_loop+0x60/0xb0
[  339.828956][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.834957][   T31] RIP: 0033:0x7fec15d90a7c
[  339.839455][   T31] RSP: 002b:00007fec16c4aec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  339.847985][   T31] RAX: ffffffffffffffda RBX: 00007fec16c4afc0 RCX: 00007fec15d90a7c
[  339.855955][   T31] RDX: 0000000000000024 RSI: 00007fec16c4b010 RDI: 000000000000000a
[  339.864316][   T31] RBP: 0000000000000000 R08: 00007fec16c4af14 R09: 000000000000000c
[  339.872448][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000a
[  339.880726][   T31] R13: 00007fec16c4af68 R14: 00007fec16c4b010 R15: 0000000000000000
[  339.888744][   T31]  </TASK>
[  339.891771][   T31] INFO: task syz.4.1932:13018 blocked for more than 144 seconds.
[  339.899647][   T31]       Not tainted syzkaller #0
[  339.904587][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  339.913380][   T31] task:syz.4.1932      state:D stack:28296 pid:13018 tgid:13017 ppid:5858   task_flags:0x400140 flags:0x00004004
[  339.925417][   T31] Call Trace:
[  339.928749][   T31]  <TASK>
[  339.931683][   T31]  __schedule+0x1798/0x4cc0
[  339.936200][   T31]  ? stack_trace_save+0x9c/0xe0
[  339.941480][   T31]  ? __pfx___schedule+0x10/0x10
[  339.946397][   T31]  ? schedule+0x91/0x360
[  339.950829][   T31]  ? rcu_is_watching+0x15/0xb0
[  339.955600][   T31]  ? lock_release+0x4b/0x3e0
[  339.960234][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  339.966255][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  339.972640][   T31]  schedule+0x165/0x360
[  339.976801][   T31]  schedule_preempt_disabled+0x13/0x30
[  339.982397][   T31]  __mutex_lock+0x7e6/0x1350
[  339.987018][   T31]  ? __mutex_lock+0x5bb/0x1350
[  339.991870][   T31]  ? genl_rcv_msg+0x10d/0x790
[  339.996723][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  340.001841][   T31]  ? stack_trace_save+0x9c/0xe0
[  340.006706][   T31]  ? __pfx_stack_trace_save+0x10/0x10
[  340.012112][   T31]  ? radix_tree_lookup+0x240/0x290
[  340.017218][   T31]  genl_rcv_msg+0x10d/0x790
[  340.022018][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  340.027154][   T31]  ? __kasan_slab_alloc+0x6c/0x80
[  340.032240][   T31]  ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  340.038386][   T31]  ? kmalloc_reserve+0xbd/0x290
[  340.043430][   T31]  ? __netlink_lookup+0xbd/0x810
[  340.048580][   T31]  ? rcu_is_watching+0x15/0xb0
[  340.053364][   T31]  netlink_rcv_skb+0x208/0x470
[  340.058313][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  340.063344][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  340.068637][   T31]  ? lock_release+0x4b/0x3e0
[  340.073217][   T31]  ? down_read+0x1ad/0x2e0
[  340.077690][   T31]  genl_rcv+0x28/0x40
[  340.081683][   T31]  netlink_unicast+0x82f/0x9e0
[  340.086751][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  340.092090][   T31]  ? netlink_sendmsg+0x642/0xb30
[  340.097179][   T31]  ? skb_put+0x11b/0x210
[  340.101838][   T31]  netlink_sendmsg+0x805/0xb30
[  340.106703][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  340.112034][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[  340.117625][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  340.122916][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  340.128231][   T31]  __sock_sendmsg+0x219/0x270
[  340.132933][   T31]  __sys_sendto+0x3bd/0x520
[  340.137445][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  340.142891][   T31]  ? count_memcg_event_mm+0x21/0x260
[  340.148412][   T31]  ? do_user_addr_fault+0xc8a/0x1390
[  340.154049][   T31]  __x64_sys_sendto+0xde/0x100
[  340.159005][   T31]  do_syscall_64+0xfa/0x3b0
[  340.163524][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  340.169689][   T31]  ? clear_bhb_loop+0x60/0xb0
[  340.174367][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  340.180388][   T31] RIP: 0033:0x7f5b6ef90a7c
[  340.184841][   T31] RSP: 002b:00007f5b6fed6ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  340.193302][   T31] RAX: ffffffffffffffda RBX: 00007f5b6fed6fc0 RCX: 00007f5b6ef90a7c
[  340.201328][   T31] RDX: 0000000000000020 RSI: 00007f5b6fed7010 RDI: 000000000000000a
[  340.209336][   T31] RBP: 0000000000000000 R08: 00007f5b6fed6f14 R09: 000000000000000c
[  340.217392][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000a
[  340.225402][   T31] R13: 00007f5b6fed6f68 R14: 00007f5b6fed7010 R15: 0000000000000000
[  340.233451][   T31]  </TASK>
[  340.236473][   T31] INFO: task syz.0.1933:13024 blocked for more than 145 seconds.
[  340.244363][   T31]       Not tainted syzkaller #0
[  340.249363][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  340.258398][   T31] task:syz.0.1933      state:D stack:26080 pid:13024 tgid:13022 ppid:5854   task_flags:0x400140 flags:0x00004004
[  340.270870][   T31] Call Trace:
[  340.274156][   T31]  <TASK>
[  340.277075][   T31]  __schedule+0x1798/0x4cc0
[  340.281796][   T31]  ? __pfx_bpf_trace_run2+0x10/0x10
[  340.287206][   T31]  ? __pfx___schedule+0x10/0x10
[  340.292155][   T31]  ? schedule+0x91/0x360
[  340.296502][   T31]  ? rcu_is_watching+0x15/0xb0
[  340.301332][   T31]  ? lock_release+0x4b/0x3e0
[  340.305950][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  340.311919][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  340.318671][   T31]  schedule+0x165/0x360
[  340.322941][   T31]  schedule_preempt_disabled+0x13/0x30
[  340.328656][   T31]  __mutex_lock+0x7e6/0x1350
[  340.333272][   T31]  ? __mutex_lock+0x5bb/0x1350
[  340.338191][   T31]  ? genl_rcv_msg+0x10d/0x790
[  340.342881][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  340.347981][   T31]  ? __dev_queue_xmit+0x27b/0x3b50
[  340.353087][   T31]  ? radix_tree_lookup+0x240/0x290
[  340.358212][   T31]  genl_rcv_msg+0x10d/0x790
[  340.362724][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  340.367787][   T31]  ? ref_tracker_free+0x63a/0x7d0
[  340.372799][   T31]  ? __asan_memcpy+0x40/0x70
[  340.377526][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  340.383006][   T31]  netlink_rcv_skb+0x208/0x470
[  340.387940][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  340.392953][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  340.398270][   T31]  ? lock_release+0x4b/0x3e0
[  340.402966][   T31]  ? down_read+0x1ad/0x2e0
[  340.407522][   T31]  genl_rcv+0x28/0x40
[  340.411518][   T31]  netlink_unicast+0x82f/0x9e0
[  340.416310][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  340.424178][   T31]  ? netlink_sendmsg+0x642/0xb30
[  340.429327][   T31]  ? skb_put+0x11b/0x210
[  340.433598][   T31]  netlink_sendmsg+0x805/0xb30
[  340.438489][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  340.444305][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[  340.449628][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  340.455174][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  340.460711][   T31]  __sock_sendmsg+0x219/0x270
[  340.465693][   T31]  __sys_sendto+0x3bd/0x520
[  340.470294][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  340.475337][   T31]  ? count_memcg_event_mm+0x21/0x260
[  340.480975][   T31]  ? do_user_addr_fault+0xc8a/0x1390
[  340.486364][   T31]  __x64_sys_sendto+0xde/0x100
[  340.491321][   T31]  do_syscall_64+0xfa/0x3b0
[  340.495815][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  340.502179][   T31]  ? clear_bhb_loop+0x60/0xb0
[  340.506957][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  340.512985][   T31] RIP: 0033:0x7fee1b390a7c
[  340.517815][   T31] RSP: 002b:00007fee1c19dec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  340.526236][   T31] RAX: ffffffffffffffda RBX: 00007fee1c19dfc0 RCX: 00007fee1b390a7c
[  340.534276][   T31] RDX: 0000000000000020 RSI: 00007fee1c19e010 RDI: 0000000000000054
[  340.542330][   T31] RBP: 0000000000000000 R08: 00007fee1c19df14 R09: 000000000000000c
[  340.550433][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000054
[  340.558542][   T31] R13: 00007fee1c19df68 R14: 00007fee1c19e010 R15: 0000000000000000
[  340.567061][   T31]  </TASK>
[  340.570189][   T31] INFO: lockdep is turned off.
[  340.574974][   T31] NMI backtrace for cpu 0
[  340.574987][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  340.574999][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  340.575006][   T31] Call Trace:
[  340.575012][   T31]  <TASK>
[  340.575019][   T31]  dump_stack_lvl+0x189/0x250
[  340.575036][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  340.575047][   T31]  ? __pfx__printk+0x10/0x10
[  340.575063][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  340.575076][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  340.575087][   T31]  ? __pfx__printk+0x10/0x10
[  340.575100][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  340.575116][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  340.575128][   T31]  watchdog+0xf93/0xfe0
[  340.575144][   T31]  ? watchdog+0x1de/0xfe0
[  340.575159][   T31]  kthread+0x70e/0x8a0
[  340.575172][   T31]  ? __pfx_watchdog+0x10/0x10
[  340.575183][   T31]  ? __pfx_kthread+0x10/0x10
[  340.575194][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  340.575207][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  340.575219][   T31]  ? __pfx_kthread+0x10/0x10
[  340.575230][   T31]  ret_from_fork+0x3f9/0x770
[  340.575242][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  340.575252][   T31]  ? __switch_to_asm+0x39/0x70
[  340.575264][   T31]  ? __switch_to_asm+0x33/0x70
[  340.575274][   T31]  ? __pfx_kthread+0x10/0x10
[  340.575285][   T31]  ret_from_fork_asm+0x1a/0x30
[  340.575301][   T31]  </TASK>
[  340.575305][   T31] Sending NMI from CPU 0 to CPUs 1:
[  340.721840][    C1] NMI backtrace for cpu 1
[  340.721858][    C1] CPU: 1 UID: 0 PID: 7594 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT(full) 
[  340.721877][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  340.721887][    C1] Workqueue: bat_events batadv_nc_worker
[  340.721912][    C1] RIP: 0010:lock_acquire+0x180/0x360
[  340.721935][    C1] Code: 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 4b 24 03 11 48 3b 44 24 58 0f 85 f2 00 00 00 <48> 83 c4 60 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 65 8b
[  340.721956][    C1] RSP: 0018:ffffc90003e1f8d0 EFLAGS: 00000246
[  340.721969][    C1] RAX: 34c7c9264000bf00 RBX: 0000000000000000 RCX: 34c7c9264000bf00
[  340.721981][    C1] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: ffffffff8be33620
[  340.721992][    C1] RBP: ffffffff8b47d4d7 R08: 0000000000000001 R09: 0000000000000000
[  340.722003][    C1] R10: dffffc0000000000 R11: fffffbfff1f470e7 R12: 0000000000000000
[  340.722014][    C1] R13: ffff888029168698 R14: 0000000000000000 R15: 0000000000000001
[  340.722025][    C1] FS:  0000000000000000(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000
[  340.722038][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  340.722049][    C1] CR2: 0000555c54a23fb0 CR3: 000000000df36000 CR4: 00000000003526f0
[  340.722063][    C1] Call Trace:
[  340.722070][    C1]  <TASK>
[  340.722079][    C1]  ? __local_bh_enable_ip+0x12d/0x1c0
[  340.722096][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  340.722114][    C1]  ? batadv_nc_purge_paths+0xe7/0x3b0
[  340.722133][    C1]  _raw_spin_lock_bh+0x36/0x50
[  340.722152][    C1]  ? batadv_nc_purge_paths+0xe7/0x3b0
[  340.722171][    C1]  ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10
[  340.722191][    C1]  batadv_nc_purge_paths+0xe7/0x3b0
[  340.722212][    C1]  ? rcu_is_watching+0x15/0xb0
[  340.722232][    C1]  batadv_nc_worker+0x328/0x610
[  340.722252][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  340.722268][    C1]  process_scheduled_works+0xae1/0x17b0
[  340.722297][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  340.722320][    C1]  worker_thread+0x8a0/0xda0
[  340.722341][    C1]  ? __kthread_parkme+0x7b/0x200
[  340.722362][    C1]  kthread+0x70e/0x8a0
[  340.722380][    C1]  ? __pfx_worker_thread+0x10/0x10
[  340.722395][    C1]  ? __pfx_kthread+0x10/0x10
[  340.722413][    C1]  ? rcu_is_watching+0x15/0xb0
[  340.722428][    C1]  ? __pfx_kthread+0x10/0x10
[  340.722446][    C1]  ret_from_fork+0x3f9/0x770
[  340.722463][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  340.722481][    C1]  ? __switch_to_asm+0x39/0x70
[  340.722500][    C1]  ? __switch_to_asm+0x33/0x70
[  340.722517][    C1]  ? __pfx_kthread+0x10/0x10
[  340.722535][    C1]  ret_from_fork_asm+0x1a/0x30
[  340.722562][    C1]  </TASK>
[  340.722967][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  340.990768][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  340.999864][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  341.009905][   T31] Call Trace:
[  341.013179][   T31]  <TASK>
[  341.016103][   T31]  dump_stack_lvl+0x99/0x250
[  341.020742][   T31]  ? __asan_memcpy+0x40/0x70
[  341.025322][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  341.030537][   T31]  ? __pfx__printk+0x10/0x10
[  341.035137][   T31]  vpanic+0x281/0x750
[  341.039201][   T31]  ? __pfx_vpanic+0x10/0x10
[  341.043702][   T31]  ? preempt_schedule+0xae/0xc0
[  341.048906][   T31]  ? preempt_schedule_common+0x83/0xd0
[  341.054444][   T31]  panic+0xb9/0xc0
[  341.058174][   T31]  ? __pfx_panic+0x10/0x10
[  341.062720][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  341.068442][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  341.074584][   T31]  watchdog+0xfd2/0xfe0
[  341.078742][   T31]  ? watchdog+0x1de/0xfe0
[  341.083072][   T31]  kthread+0x70e/0x8a0
[  341.087133][   T31]  ? __pfx_watchdog+0x10/0x10
[  341.091806][   T31]  ? __pfx_kthread+0x10/0x10
[  341.096485][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  341.101764][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  341.106949][   T31]  ? __pfx_kthread+0x10/0x10
[  341.111610][   T31]  ret_from_fork+0x3f9/0x770
[  341.116203][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  341.121338][   T31]  ? __switch_to_asm+0x39/0x70
[  341.126097][   T31]  ? __switch_to_asm+0x33/0x70
[  341.130850][   T31]  ? __pfx_kthread+0x10/0x10
[  341.135449][   T31]  ret_from_fork_asm+0x1a/0x30
[  341.140204][   T31]  </TASK>
[  341.143521][   T31] Kernel Offset: disabled
[  341.147953][   T31] Rebooting in 86400 seconds..