last executing test programs:

18.906876624s ago: executing program 1 (id=518):
r0 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000001240)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff3556b3b598b353011a5b90650042e2dacdc165ecece4e6be1862e2bdacd2737d00ad6f9f030000005e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f8049f260c603dbc317f54b901ee80eae132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x24008000)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00'})
r1 = socket(0xa, 0x5, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000140), 0x2)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c)
sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa0000000020000000000000008400000008000000200100000000000000000000000000002000000000000000840000000800000000000000000000000000ffff0a01010065f0e3c65b022f25f0b5364c4a7455561068efc4a7720d0110ed1842fb507c33bd0071a7e45d77de643ba3c351c2c4f0326252e6a3e3705fbd1bb67fb766a132c789a7d15412c15cbba0223d8b835e44251fea80c66c838a8405c76ee9e794839905ba953c7bcfdcc70cda03cc2b6520a1063d3b21f8501caa986aed1f226611854de79089375bfd07371a3ee2d39655a4a520"], 0x58, 0x4875}, 0x24000052)
syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa448100200086dd60005507002c0600fc010000000000000000000000000002fe8000000000000000000000000000aa0000c001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7d936d6204eed27273f111350d62b002000090787ffefe06a800000000000000306a6d418070abd95a8700000000"], 0x0)

18.843610163s ago: executing program 3 (id=520):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc, 0x400000}, 0xc) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0xda778000) (async)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000140)={<r1=>r0, &(0x7f0000000040)='\x00', 0x200, &(0x7f0000000080)={@align=0x3, {0x4, 0x4, 0x6, 0x66}}, 0x14f, &(0x7f00000000c0), &(0x7f0000000100)=0x3})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r2=>0x0})
sendmsg$xdp(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x2c, 0x8, r2, 0xb}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000200)="1de5cca806c5be2d80e76bf9871547ed8a17f59915afc22e453b3d243aed1924765e1e3fb8db564ef54a2fe57fa80b2718f03da52f3ce13a42b38d279dd7d61672c20614c8dbb3be5a2024f7d62e5f03018743fb95c1dc4cb386ef5d68e3bdea15475e606c7632c1105807ad403b1262c717a92644e3", 0x76}, {&(0x7f0000000280)="5cd76dc5", 0x4}, {&(0x7f00000002c0)="83905ce689cf510c301ced4c628db64e265803a426aec147df8a07147e7db0c08d0fbfb89cdc6af199f66eb06ff35bea700ecbcbb5028d38318b5d1ece6c270696aec67c21af19782c3795bf5780296f6e0cd01cfaad81756a0a35b424e6fb32ca228b34aa121526dcb3c25270e4febe8673c75746e3757517ad9e40c461bcd9648515d9a9360c6d7e143979dd579804875ede26fcd2a8ba6b2cc746084bdf7facf4b3a65170", 0xa6}], 0x3, 0x0, 0x0, 0x8000}, 0x80) (async)
r3 = socket$tipc(0x1e, 0x7, 0x0)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000400)={0x0, 0x10, 0x4, 0x1, 0x9, 0x9, 0x90, 0x4, {<r4=>0x0, @in={{0x2, 0x4e20, @remote}}, 0x800, 0x3, 0x3, 0x9, 0x1}}, &(0x7f00000004c0)=0xb0)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000500)={r4, 0x1}, &(0x7f0000000540)=0x8) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$XFS_IOC_RTGROUP_GEOMETRY(r5, 0xc0805841, &(0x7f0000000580)={0x6, 0x5aa, 0x9, 0x5ac, 0xb})
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000600)="aef49c320d4c1f2379814ec57ef430cbab79c6a30bedbb82da5e6345d4739057f1e939c68a2491b9c266ab4aa365d1f22180e91d3d67f79fbcea0a6651758808c9e88b10e37d1e6aba0b725c18ddd3daec0f6994cbbaf45d3b63", 0x5a)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000006c0)=<r6=>0x0, &(0x7f0000000700)=0x4) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl0\x00', <r7=>r2, 0x2f, 0x2, 0x0, 0x3, 0x1, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x20, 0x7, 0x9}}) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000880)={'syztnl2\x00', &(0x7f0000000800)={'syztnl0\x00', <r8=>r2, 0x2f, 0xf7, 0x2, 0x3, 0x2, @mcast1, @mcast2, 0x1, 0x20, 0x2, 0xe6}})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f00000008c0)={0x16c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x4}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40081}, 0x800) (async)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r1)
sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0xd8, r9, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_SOPASS={0x9c, 0x3, "5997d9cd38500940f4f8dfb7caa6385827b7121cb4e3ca48109d7f47ecffabe1938505906efdecd518223d114d00e80e179ff2d388360d10cfd711f2253e8d82cf35f75a2a5ca6184907d50b1e8111c59e0de8702c647674eb1ea6b0835afceb39710ecafc6047d6ca675c9c91ed60a79636f1da8d6e00cdd3fde600e039fdd1f2e48996b6dc6160b1a3be1b7f23a130c7d4af80c150cb1c"}, @ETHTOOL_A_WOL_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8005}, 0x8040) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000cc0)) (async)
setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000d00)={0x9, {{0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}}, 0x88)
setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000dc0)={0x0, 0xea60}, 0x10)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000e00)=0x1c, 0x4) (async)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000f40)={<r10=>r1, &(0x7f0000000e40)='bridge0\x00', 0x4400, &(0x7f0000000e80)={@_ha_fsid={[0x0, 0x2]}, {0x63ee, 0x5, 0x6, 0x9}}, 0x10, &(0x7f0000000ec0), &(0x7f0000000f00)=0x5})
ioctl$sock_SIOCBRDELBR(r10, 0x89a1, &(0x7f0000000f80)='gretap0\x00') (async)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r1)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r10, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x5c, r11, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xba61, 0x31}}}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) (async)
epoll_ctl$EPOLL_CTL_DEL(r10, 0x2, r3)
r12 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TLS_RX(r12, 0x11a, 0x2, &(0x7f0000001140)=@ccm_128={{0x303}, "0e2b788bcc41958e", "15cd888a58645e12363f64c5ff93c16e", "25ae1ea8", "dce4b7ca2a90e144"}, 0x28) (async)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)

18.688487064s ago: executing program 3 (id=523):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40)
getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000002c0)={0x8001, {{0x2, 0x4e23, @rand_addr=0x64010100}}}, 0x88)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
r2 = epoll_create1(0x80000)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000100)={0x1f, 0x4000, @none, 0x0, 0x2}, 0xffffffffffffffd5)
connect$bt_l2cap(r3, &(0x7f00000000c0)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}, 0x0, 0x2}, 0xe)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'tunl0\x00', 0x1})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r6, &(0x7f0000019580)=ANY=[@ANYBLOB="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"], 0x6e)
sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
r8 = socket$nl_route(0x10, 0x3, 0x0)
recvmsg(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)=[{0x0}, {0x0}], 0x2, &(0x7f0000000840)=""/43, 0x2b}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x800)
setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000040), 0x4)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000600))
write$tun(r0, &(0x7f0000000980)=ANY=[@ANYRES32=0x41424344, @ANYBLOB="d1800007907800091e59063bcc55e2fb4b662a463b24b28a4fafb428a89d60f9547d33690c48bf9581455479f14cea31faf5212327c508ed14d3cc9f1b20adaecc3b4c664e61295f92adc7b03928e6f24a8ee8e299effe97537d57096d808d21b4fe04f98900000013d3b3875dfd9a3f6328f33f09ceec09986b30406704e2560f04592cb4869c77658fcb3eca004c77b183c5840dbb0fd30bcd067737d3f07dff1755aac0e628d921d141b089c153"], 0xe4)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa080045ac"], 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000080))

18.557616444s ago: executing program 1 (id=524):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000700000000000000000000008500000022000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000000071000000950000000000000000000065e65fa4260c7ace75238e40afc9254875eb9dfd2a06bb8956f6b445e72ca040cfd6720ea988ba4e76"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b20, &(0x7f0000000080)={'wlan1\x00', @remote}) (async)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b8a050000000000440012800b000100697036746e6c00003400028008000100", @ANYRES32, @ANYRES8=r0], 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x4008000)
socket(0x1a, 0x3, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000280)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) (async, rerun: 64)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3) (async, rerun: 64)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "569142cc91061c00", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00'})
sendmsg$nl_route_sched(r3, 0x0, 0x24048004) (async)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$sock_int(r6, 0x1, 0x8, 0x0, 0x0) (async, rerun: 64)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (rerun: 64)
r7 = socket$netlink(0x10, 0x3, 0x10) (async)
r8 = socket$unix(0x1, 0x2, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3d1d15e2949149d41bd8913031dd8354f5f63b2290f5a0c5514b9929ae15105bd0721a", @ANYRES16=r9, @ANYBLOB="010026bd300000dcdf250700000008000300", @ANYRES32=r10, @ANYBLOB="140004007379c3d7313bcf2280fbdd112b612d35157a08000000000000000000000000080005000a000000"], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) (async, rerun: 32)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000002c0)=[@sack_perm, @mss={0x2, 0x2}, @timestamp, @mss={0x2, 0x200000}, @window={0x3, 0x1, 0xfc00}, @window={0x3, 0x9, 0xc}], 0x6) (async, rerun: 32)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r12, 0xb01, 0x70bd28, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x24040015}, 0x40000)
socket(0x2, 0x80805, 0x0)

18.55585241s ago: executing program 4 (id=525):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', <r0=>0x0, 0x4, 0x3, 0x6, 0x401, 0x18, @remote, @private2, 0x40, 0x7800, 0x101, 0x7}}) (async)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x8}, {0x0, [0x0, 0x0, 0x61, 0x0, 0x5f, 0x30]}}, &(0x7f0000000500)=""/174, 0x20, 0xae, 0x0, 0x5}, 0x28)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x480000, 0x40, 0x100000, 0x2080c, 0xffffffffffffffff, 0x80, '\x00', r0, r1, 0x2, 0x4, 0x4, 0x6}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x6, 0x0, 0x40b01, r2, 0x6, '\x00', 0x0, r2, 0x2, 0x3, 0x0, 0x2}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x1fd329c737eb6ad6}, 0x50) (async)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
preadv(r5, &(0x7f0000002200)=[{&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/64, 0x40}, {&(0x7f0000001cc0)=""/149, 0x95}, {&(0x7f0000001d80)=""/174, 0xae}, {&(0x7f0000001e40)=""/176, 0xb0}, {&(0x7f0000001f00)=""/104, 0x68}, {&(0x7f0000001f80)=""/208, 0xd0}, {&(0x7f0000002080)=""/242, 0xf2}, {&(0x7f0000002180)=""/108, 0x6c}], 0x9, 0x2, 0x5bb4) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

18.215656857s ago: executing program 1 (id=527):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async)
r3 = socket$kcm(0x29, 0x2, 0x0)
sendmmsg$inet(r3, &(0x7f0000007ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)="2a69c258ca", 0x34000}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="7349b402ed", 0x5}, {0x0, 0x11}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x40) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r2, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20)
close(r4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006301a0000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r5 = socket$unix(0x1, 0x5, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'veth0_to_hsr\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x8}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8011}, 0x24048080) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)

18.128488955s ago: executing program 4 (id=529):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r1=>0x0})
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000500)=0xd79d, 0x4)
write(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x7fff}, &(0x7f0000000200)=0x8)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r6, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8004)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0)
r10 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r10, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r10, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e28, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}}, 0x1c)
connect$inet6(r10, &(0x7f0000000300)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x80000001}, 0x1c)
sendto$inet6(r10, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0)
recvmmsg(r10, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r11, 0x89a2, &(0x7f0000000000)='bridge0\x00')
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

17.688950909s ago: executing program 0 (id=531):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async)
close(r1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) (async)
splice(r0, 0x0, r1, 0x0, 0x10500, 0x0)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xb05, 0x0, 0xffff41cf, 0x24918, r1, 0x81, '\x00', 0x0, r2, 0x4, 0x3, 0x2, 0x2}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc)

17.632512302s ago: executing program 0 (id=532):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x2004, 0xffffffffffffffff, 0xffffffff}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0xfffffffffffffe70, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x29, 0x5, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4)
recvmmsg(r3, &(0x7f0000003e00)=[{{&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, 0x0, 0x0, &(0x7f0000003f40)=""/253, 0xfd}}, {{&(0x7f0000002840)=@tipc=@name, 0x80, &(0x7f0000003d80)=[{&(0x7f0000002740)=""/246, 0xf6}, {&(0x7f0000002900)=""/119, 0x77}, {&(0x7f0000003d40)=""/22, 0x16}], 0x3, &(0x7f0000002980)=""/193, 0xc1}}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/253, 0xfd}, {&(0x7f0000003b80)=""/215, 0xd7}, {&(0x7f0000003c80)=""/166, 0xa6}], 0x4, &(0x7f0000003ec0)=""/91, 0x5b}}], 0x3, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854)
setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000180)=0x4c, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4)
sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

17.590152404s ago: executing program 4 (id=533):
epoll_create1(0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
ioctl(r0, 0x8b1b, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x48)
r1 = socket(0x11, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0))
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
socket$kcm(0x29, 0x5, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r4, @ANYRES16=r3], 0x1c}, 0x1, 0x0, 0x0, 0x831e368c771a0719}, 0x400c080)
sendmmsg(r1, &(0x7f00000000c0), 0x0, 0x0)

17.492182519s ago: executing program 3 (id=534):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x24000850}, 0x3) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x24000850}, 0x3)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000003c0)={<r3=>r0, &(0x7f0000000140)='syz1\x00', 0x100, &(0x7f0000000180)={@_ha_fsid={[0x8, 0x36]}, {0x7, 0xb, 0x5, 0x100000001}}, 0x8, &(0x7f0000000340), &(0x7f0000000380)=0x8000})
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xe4, 0x0, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_LABELS_MASK={0x10, 0x17, [0x9, 0x8, 0x401]}, @CTA_NAT_SRC={0x28, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}]}, @CTA_TUPLE_ORIG={0x28, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4, 0x1, 0x3a}}]}, @CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x101}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x80000000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x404}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5dff}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x1) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xe4, 0x0, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_LABELS_MASK={0x10, 0x17, [0x9, 0x8, 0x401]}, @CTA_NAT_SRC={0x28, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}]}, @CTA_TUPLE_ORIG={0x28, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4, 0x1, 0x3a}}]}, @CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x101}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x80000000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x404}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5dff}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', <r5=>0x0})
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYBLOB="1c2af7ca4217bb5ff831eb7b4b653e6ace9edf4d7e93cd6d4d0b86d9f9119ac96cdffddfafd946ca577e23c65196a626e8a8d75cfa7800f8062e99e0c5dd1dc72348e07e1184b4923f4062ffdd2f6449ebbd1871828c7c928bf24a0d45fc378f43d85051affbe11b50204e09b4b57cc67eaa8a8cace44082cecbb7856acdc966878dfd9698e50190dfc13b68f2b38ae8cd6d158858736d0efcb7222bff84978db157d893498dba55e6ee45276f", @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r5, @ANYBLOB="0500060001000000050007a10000000005000300df00000008000200", @ANYRESOCT=r0], 0x68}}, 0x40000)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14)

17.481412596s ago: executing program 4 (id=535):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$sock(r0, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001340)}}], 0x4, 0x0)

17.349181877s ago: executing program 2 (id=536):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0)

17.304880756s ago: executing program 3 (id=537):
r0 = socket$netlink(0x10, 0x3, 0x8000000004) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) (async)
unshare(0x22020600) (async)
r1 = socket(0x1f, 0x3, 0x857)
write(r1, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) (async)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000200ffffffff", 0x58}], 0x1)

17.256151033s ago: executing program 4 (id=538):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}, @IFLA_GTP_LOCAL6={0x14, 0x8, @dev={0xfe, 0x80, '\x00', 0x16}}]}}}]}, 0x4c}}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000730133000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)

17.191760798s ago: executing program 1 (id=539):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000240)={<r2=>0xffffffffffffffff})
r3 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/ipc\x00')
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, 0x1402, 0x200, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008051}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000040)=0x297f, 0x4)
sendmmsg$inet6(r6, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000010340)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r8}, 0x4)
close(0x3)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002200)={{r9}, &(0x7f0000000940), &(0x7f00000021c0)=r9}, 0x20)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r10}, 0xc)
recvfrom(r6, 0x0, 0x0, 0x7ffffffff000, 0x0, 0x0)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r5, 0x4, 0x0, 0x1000000, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x4, 0x700000000000000, 0x0, 0x4084002}, 0x40800)

17.128151537s ago: executing program 2 (id=540):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6, 0x3}, {0xa, 0x2}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xb3ca}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000023c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {}, {0xd, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048800}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x1000000, 0x0, 0x400c0}, 0x44840)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r9)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x20004001)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
r12 = socket(0xa, 0x1, 0x0)
ioctl(r12, 0x8901, &(0x7f0000000000))
getsockopt$SO_TIMESTAMP(r11, 0x1, 0x40, 0x0, &(0x7f0000000080)=0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840)
socket$netlink(0x10, 0x3, 0x0)

17.063677192s ago: executing program 0 (id=541):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="780000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414bb0c00028005000100000000000800074000000001"], 0x78}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
r4 = socket$netlink(0x10, 0x3, 0x9)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @remote})
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000480)={'veth1_macvtap\x00', &(0x7f00000003c0)=@ethtool_rxnfc={0x32, 0xd, 0x2, {0x3, @usr_ip6_spec={@loopback, @dev={0xfe, 0x80, '\x00', 0xd}, 0x8001, 0x2, 0x7}, {0x0, @multicast, 0x3, 0x8, [0x7, 0xd]}, @sctp_ip6_spec={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x4e21, 0x4e21, 0xfa}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 0x200, 0x6, [0xff, 0x8]}, 0x5, 0x6}}})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7000000000010104000000000000000002000006240001801400018008000100e000000108000200ac1414000c00028005000100000000002c0002801400018008000100e000000108000200e00000010c000280050001000000000006000340000000000800074000000000040006"], 0x70}}, 0x0)

17.057942143s ago: executing program 3 (id=542):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async)
r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80400)
sendmmsg(r0, &(0x7f0000001ec0)=[{{&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x4, 0x4, 0x4, {0xa, 0x4e24, 0xfffffff9, @empty, 0x1000}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)="32e1c4bd86f4725819e00e26219c83dd22a68bba7ac82ed450eca7c6b4068b2192acf912b3ea63bbd857926333edcc6ffcce5453e1", 0x35}, {&(0x7f0000000140)="c00d3d6f1c9d394025383918123d9472b17b715e28e1e6a2a09bb7954fa5ab2716eaa35e672d0f290319860f0a7d5d", 0x2f}], 0x2, &(0x7f00000007c0)=[{0xb8, 0x112, 0x8, "c24b3cf40c551db0efedd9d0afa0b565029c269775482835ce90b85396a84f0416f158b37a5d6bb9206bc4e1b71a0ebcd9bbf2f21e80d96d28b88c1e3ec969f5ea216913fb7bb1a797ef9fbd325e6f33ebef8d28352f52541ec4e56587fad45b8922120682aaace39812cbbae83e339cdbee0e89b6850d6a7f8185782aea1d2615672d2a83b9e1565fa9281492a819dc9da5771f211c0adeb39fde59959a5e3baa655f"}, {0x100, 0x110, 0x1923, "b3649f787a94159a9e7dda482ed5c2f254377f044331cb4d78f5b029599a83fe3d928bff2aa3e6d73296fab4df2a67c8b5e3169b3796fcdb8dd356792a06a516782d6eb0dcb1f55c9e33d52aa0d101b995b15e99a862bd6675d50757b99310f99b11580b3a3ecb17a58696ab4ab2233ad6851f29461f6af2cd3667eefcbac4c422289be0712cec9819375e4a9c17150e67d024fb49bcf8790a8916e1c826307c321dbd838cb0a68e183c8b0391af18190576a19480798d1823401ab0148b084421c6ab7688f2198ebda8623080bcbcc8212332dd37ad5d9f0f557d9610ff78a61b16fa38f7e5aa54960cbfbc"}, {0x1010, 0x0, 0x6, "10db6e7bce101ba07ec275def6ef40afbe48a03a9bc13fb92e1e8c9eab914649a990ddbbe9b00d02786f962e3e9668c0809b068d7e2b2756634c822d9fbf2f834f68c8db789cb15b3a0efdf7a95db8985e6af6fc04e5806e454d7e5a57a266fce8bfc58224b385eb1d5089b62b0b96ab32e4d1d6ab0c7428cecbd16548a95a6851e5abcee562c561ce49369b9aa5474cd970d702a5920a6a6f493f8583d0941aa8433a77d0ac22936ba43c43aa742740ed9e4826d16be97bb9262a12a13da09367e9eb2bb9f6b2b43f9dece9bdb6471ed076d6c20018a2fa9cd44108e1421284529e607c3e3c9577ba1442b2b6a4d6162b2d93460006e999102f1175e99f7c9af4543f1d2bcde86af722d261610942cb797562694f2a9a3eb28445208bd987527a7931df6d389c2dc8b7d411ac1611c8ce22bbc7d810c57530a3f2500f94f612e9942eaea65ac9cdcd826d9e387d73ce61a9fd633ab44617ba6dd0b24117ebbd66afdab5b552d234d2e4c5f9ef6d3c047ac208f457e6a6d9229c55cde7f6590ea0e30d2a702e0bb2ba59cafc092f808dff4b9a8af84c2a7b45e5e46e319680d5202fe901094ba88297defa1b37792c324e7d6ddb49d265b744ca3ee5a668da9c15f5f502b9e165858d113264516c54461afe9536dedc30893a5fc6320927a915543865d27dc4dcc42238b4b335ceda2cbbb1e9fc94544afc48df108b6fae1ee19f410e5b6c31831bb7cdb29e26902e95d77f57d0cd44e7eee099b653daef21660b942576f4586ebb055efbce12a46844fbdca9b19b2a01be51fa940bbf0ab5201d4bb8ccc650b7e18b2adbea36bae98c1ea850c7ab20c5c26bff9121c23f1183aad024cb745654c4da304bc7a181c6aa0607e97676f50c00525e83718b36b6e695577df1a465e81e49b9ca936450b7d9aaa7708c5598856efe3c8669bb38b2d0f5c8271227aaa8658942dc8eccea2ede3f162beee78ab9eecf163952be9d7615f213ff928ecebd8307ce806af03c130d80e7cca10e2e0933515f777b0dacd5a62cc5cc7a98a43efed271fa60d8517482862b3b0a64872e4c0e62be3883c9e8826ff628baa9b6e7b6a18522ba0096ee0c7fe868e0c756ad3c42e1e053dbc623957fc3ab10c780f9278bcc827309210df2dce157268f96520b8f4667dc102528bbe35b59e8ee30a1bbd293ad4ab09521e14db192b8d2b0eac7109da0c58ab255dde05ec57c95948bbce43d60f22a050a8bf80d3974f50e9507492051d6a129d3412337e657ae1322d5b7277030879cfe8508501f550269da18c23b09da275a62a06dd85517e61e6653f06cdbbfe72e071479f22b62c76dc163d35af41da5b8a7948e1acce141b9bf8bd3951028bffaa2f0d7fa08577834a8e0205c9c6860494bb4f18e123dcf1ae1c48c1b5b81aa8e39d5f2c650c5c7c31f83e4b7df2cf6582694b16f2d44560d0ac62a097df5b2b0fc3600ddd1728c0f6d2b80e06ac923da33040274eb22c12cdc3a4e744531c0300d3e9414f98aedf809338652ff8c9bb237612a41b4d4eb6c5b754344fa9cabeb51e46ccd58ed3c392dea9be21f1df8cf76c0235c0dffe955cca195c23bc655b8482c5c382e93c17c836b559a903ae14c6c161f1e842dcc64c99a6644ee647b096ece1dcde88181afd274cf4b332f3b3dbc1cd1c01ce5a6b94a65439d253f9410e68148bea00138abe1d152818d9efef8b2b2e49ebe9fb81c329b941f21969f6c62ad9c789143d64eb912ea57069b5f76e1374855ecacbc6153f199eaef00b81823f55b611b68d55488df01138517b95d5e2e9e19d9776f6f29a9c6c045ac16253766aadd5e14ce10fcdadd635b3c9329c5ee4a006f60404a9275fa014a5b0537e8b3ebce16f950cb602d99c5ef53dd96d63903608f922e2cf7dca580b3d7dd0f34bd8d654c185b1ab86ad7027c7d66936ec1db958701a324efcf70bd9d1fb3e7dbf5a98b3cd55596910e837516178d794ec7ef0848f513baa30f38d80e9a5cef3e48f7764513c41f6f59e1ce21ff89a4c4522a77b6d7b2236ba4087d96e4c55c1e0ace6379ef9691815b03e363aff2e9eec7df0e3a3596c368c60fb374b8a30883abbf1d13b4ae4e247bbce5f5c2c073ae86e582d03f56f92370395b878e385efce98867abee169779162ca3c5175a1bb890cdb17902873ca7794bdcd26c45c171d820ca7ba1e431d3fd04badeeb64bdbac58077bea0cd8e9ccf6fee8c1a36361a9ce95257e895e92bb2d1966aaba551ebd942fe0be5143290ec49f4469ae1166bc8ff532656564eb0db9384acaa3003a3e62dbaaaa32666e1e37355f82f2d62ca6e9fac071410115070afda87c0fae6ebde6a94adfd0232d1e083c9a7d6479ab7e2dbe99236ed1ded29613864a94c9450688aab4b307f2094b39ddb6bcdebdb8831208264f310e00d0687279a8eb33b1d4266dc6263446233161e3faab8683a164aff0ea2fbb2192fbe60a0ee56040f1ea3c9434bdf1877e88ac0aa4971cc2f42cb54ce0451ef286df2bc6c8ac2cbf57acdaaa54d51a861fcbdb352e35928419c004e6db3b1ad680dfafbd97ad165f8735676df6a34bd16cd671c25517e57c66b563e11ba95ee86a08626768aeb90186e62f2d6ff1449e8dac49dc19623c3c846473b5d66e13a9c119100ce0b00f7404509e1d8ca95c680f7769bd830c2cf67694ec38bce79b32240be47ce918c58f351156e0f0d485fa3864a72f9368cf7e39ad6ac808efec9625f6aa5731d856d1dd3ba426a7bc062e5f992a9141042b88151deced7c4a74a388b6bb61a58d161599d63c6a8840817ffaf7dc424474d758f30c7cda2b1b8fad671b68c34563731b60206524804b6b6552867966f3a4b454358161a0f5710ff88d0c958e2aad31591816c420ba5b6755acd756f52504f1feaff49312495e3e229bc00a01702d64316097b0f89a34975162f1dae6f921edae9a3327489931882e192894d12e811f1054d50d80e51108e11f7d9e1ae04c24a8c02f7ca9dc516abc3fe076862d9f13e7b5914f9b55fee1de2165d6dd33b51c1691866d45d7aafc79a7dfb317ac39480892deac5822c9c074ff2b0add4e9c8c272903a68c6f7a2318a5558e0dca4dcdee3bdddd5b766a230594fa85fec0dff9cd8e5d30e69c1d20e12c08c1756be40455c677e98787beb0d2b1bfec1ae4986332bc83c10cebc941968705e584be54234616d9b5c7ba0b3eacbb6f480330b9dd1e898deefe57ef2d3a47f89a0fb1887df96ace3c2653fd630933c6ea4c4af95ae9ec2a1efa7feb5968361559d0ae1048b3c2d66259487d946153fdb3f4bcf6a1159610889b1855562a4d490bd9dc6972df98c6d76bf69ac8f6b6c53339683b44133d1a11edd604039fc04b4466c70d0b7c55aad9d17ee6d77a880b25a4cbc0132da7ca882ac660d572bdd1137e8a5a04a34c08f453e9237c69401992182f81b5becdf6cfc7f171a22a7d6182637c07ae031d5821167da408b0b4ff31977ff67a4242bf83b3b98a03f42eb50776bec053fe1e2c7acd9fe875206885c6548188ea8afaa2a0a67f22e0e4eea63cd523aa1798440374c1e161b38a0b2e2578fd8dd25cf38191bea7a6a154a365c689db878baa5a3db496ba5e0d7cc37289eb03dd10930747abb870c8a0ebbfff288fc9510ee4b02894a73af16b54501257ae5575793bc03fa09d64d81b0b7cccc0f95820020135fb4518e673baa8b0c6bfff8e80bdb860fa77ccdd068356034c436de6a9845c2a014acc493d59a0772740697bc90bab70e8cd132fbd19634a821c95c23ff183c568b3225f6dc2486488c80ca067f8aed663418d9561518591d4fab0a94e921a83cb87a4d90a62b1a81b8c62af90a07e2289f1fd67d86048a13b756f2683de3fe3924ae9b2ab58355a05824b2bdad6f5747b6252688c521d002bad628dd9917d69970ad3603f97e00fe9737b61afd1409bfa8fd43c048a68df893befc6bb6c1e2ac0dd1828dabc465f39548759c5451a078b2440a3db4f397594e7f5df1832d70af0df336731ab62abac0a0d283c93cb78812570608c97e25a459715f278cb801575f76aa8a384d67ac4cff1b3253e9b9f24f99cf803adf2915ac66177fc8a2876ad20cbca301fc71ced989e573183608648fbcab792a59fc5c107ee89b47cce71e3320590c41e6d60fe86c99c734587944e03db77a5980f816052946623478165adcf38286e58185ac51e62fbfd51df34a5b95db8dcaa32fcec82437fbb1cf618fc5b60d43f52e843d6d0412f49b185fa6bbd114a981e16166d740c95307e22fe78cf4b85d4f5a2369243dce443885f74296efc45126a1551925cff731fb2ee98bd010d8844b53f581110abe6310dbecdbe8496a23cdedafb56a01357bdb363468248b439290bb7cf3be9797eb9933d89bba74e5658168a08d8813db74fc4d7deed4316e2240693107fce9493d4c5bf11b734af015a08283c314e9b894edf88d943bba3fb057071752b35da4e988f81701255a1946b2bcfc6457d61ef662643891ae036bc22e705a21d7f5d6402f03d0e2270a6ddbbcf9b2a21f7dee9ae848b82d966ea5f325e48d6315fd12523dba88bed6a9c4ebbb46b54ae22f50c70598be07f71f29b128d215a3d55fe1c7b568dded61f7b2deda2ad7a607ca27120cd76febd9e0c8f1cd0729ede7a24748ddf5486300664ace76a87773152ed1b865e1c2afbde3806b7c40220de050c80138de5688aba78e5e88d666add70472fc470e141189837320a6228d08d91cbee3ea337dea8e4a1308b360be36c9e77431036fcc4848f178dfe4826638c43f2ed888060d26eb18f1b6c9ce61c4c6f85400fe2f08feecf5d89bd90575190c8a850de68d703fd846f8f3a4ee6066d1104e2716f9a824f55ccd33fcdd77bc042959e73219ec4be9b50c35415314b492361c62f9305a3059d294a52824a6ffa23ab04284a13a07c665eedfd34ff93aca2d7ddaf5c4245acb924dc5e82d158fd3c8a369fe0dfd4ec3a399530a242e2521bdfb28949d87110eba04f4c5b039bf13a0915c6a851c5029905b2171c61d2f162e047bc0f44f255782ec304ffb55c85944eea7d6582c1e4598714a0eac0eeb32174b79d09a6e1c3fb8ea848c0d13d3b2eaf80e15a6b5cfe39e2cf40108896549a270c6c51a1a0adf46a76363d7cae273982badb7fab263380d429e80399b8b07bc7029067292de36c49c3d0abe5073ce845c64dbeb0bf0475618a58989bbdf1a410661431af695ca1bd889af20e11ffd69fce75aef946399dbc14e9c9d6bffd0df9d5635b008c07d58d84d9e735b119ddc7469beea4bce7a4ae73528ace8bbe85acf9d3b113576c1051645e7eaa2ac976e1606d20cc64ab4e4d90082e4916c65f1bf06cd379fab522f66c7c46446051af7fe2b2b6580ae1b7b96c1ee7853593c023a7aa422b2b2bece848105ff29322c2881413549b226cf1b6ea777054537f8aa0cf3409460243e6e4a9a1c244fe34b13df00e2ae88cf14f197c4ae64b41a9dd9fc04e584928eb0ab8ffafb2af5700790eb4dbb0d7d1a702a141e0bda4ae0114551918f79aa6f46b978bfdea3477bdcd0bda8085cfa3d85c5222513716b28774181a373f0fd9573ba76bfc8169294fcd924f095c10584dfde248ce96d56ab06729bff572738dd5411baa6d103d6303ffeb7265c42d6f4d86e0ea11c0037210af1dd7299c6e938c352e5c13a9dc5f4466e68b52bac500dbcbaf9ba34485074bde5962dff7b31bba68218d6def9a19696bed9f21fb98389615e64a71bd918d93c375af85c8695d981"}], 0x11c8}}, {{&(0x7f00000019c0)=@pppoe={0x18, 0x0, {0x4, @random="adae57d0ff39", 'lo\x00'}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001a40)="5aa37db91d", 0x5}, {&(0x7f0000001a80)="8c9418009b130b003de224c7d7c254bf4b4a71a1473b749e69bf968a18e55d75e823c7ba2f36678a02d4bc1f0bcd01c018590c9f0b0bab410b33d59d5d5b631960a2a424ffed27eabb98ef07b804876bec8e7a93274a8e4376793af57049af3326441d12704f964a29c0e034a0af77c7517cdb376d9fe90aafcbe5ca87418763b450ca43321f52f9098a71ea97af3adf6c8fdeecaf28be98ee210db875ac195f6c7306a66656b85ea5b7308edcf86f4bf67ddf364cd0abcf21411b299443a8da16674ddeb9cdf11c94deca9668d1b57349f97175", 0xd4}, {&(0x7f0000001b80)="a2277a00e139ac021a77eab6b6b0", 0xe}], 0x3, &(0x7f0000001c00)=[{0x70, 0x6, 0x0, "50638a80d05155eb7f2ef3954273acd06275b0d582cba55862931d633b66f9f90abfa1e042a0e934532d9f86b9055164699f7267d91f18db1220d9d4d6c84160c9f5a9db8a3db4938aa38cd200e94b8635204d41f4f43102f00b05d2685f989b"}, {0x30, 0x114, 0xa, "abbbcfda8d73282d3ccb468d2b8d35f813e741e2f70f75351bddb7708cc49aaa"}, {0x98, 0x119, 0x7, "ca3c0fdfa54c61ae94620f95c4afcca378d12a63568ede27e86baeaa58301b932ba6d2da9bc08acb95eb48280ac9a95b3a2aeb059bc086dd8a7ab95a3c656dd5a521f94d202d1631c16dc079b92419547233dc510fa2b8497939702d5a7151781b526ff0dbc8035299f4a793233adfcce01863092a20e730c195cfb819b52d215e11a679e827dd92"}, {0x60, 0x88, 0x6, "db7b69fc5ddcfc90b8e3b2c199c6294a93b8d5bb5fd2df8e9cc398ceee6ff9998b33dfbf684ebdd54c0eb3c5bab4b7cc4138fb5dd23addab303896529b9872eb1fd162da5ffc779836613c"}, {0x80, 0x110, 0x0, "f52c7121c9e7c697fc61d0a611ebaae037affb122d76ff38f099d77c59c55ac3fbc9618f77cefc662a5d679a6b42bfad0452b961fcbcae6b649380892eeac17a6da17b92f8399ba794cd21171c8acfe7cfe9a85b98bf55f2693b6ecb9a7d621102b9c2e75944471538ba70a8"}, {0xa0, 0x114, 0xfffffcd1, "ee0e472766e899ecf25f7286d4c81b093b3576593f5bfd4c81df96fc6ff45b7975166410f8e2a064e9d66e3c88a5e921c33d45e0c52383eabf45307e1eb4ac30dc45564e72c4ccf154e913c60a843fbbf0324a88953e3cdc7a77427f1c02717d4a8cb8ae0d39d78f84160f9f36fb34ce3dd07e0a4021e10e191e40f1d57e3d349d4059f68158d7417f9454d4"}], 0x2b8}}], 0x2, 0x200040c4) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x1, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_DST={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2b}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

17.022444237s ago: executing program 4 (id=543):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25ffdbfd, {0x0, 0x0, 0x0, r1, {0xffff, 0xf}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f00000002c0)=[{0x20, 0x2, 0x40, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000000380)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x6, 0x24, 0x64, 0x0, 0x6, 0x21, 0x0, @private=0xa010100, @private=0xa010101}, {{0x4e21, 0x4e22, 0x4, 0x1, 0x8, 0x0, 0x0, 0x3, 0x4, "020a99", 0x4, "289d21"}}}}}}, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x3c, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '(\\'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8}, 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711206000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r6, &(0x7f0000002b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)='h', 0x1}, {0x0}], 0x2}}], 0x1, 0x2000c044)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000070000000000000013d380009111bb000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x58}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x40000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x7, 0x5}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x81}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0xfffffffc}}, 0x10)
bind$tipc(r7, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x40, 0x801}}}, 0x10)
bind$tipc(r7, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}}}, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x138, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x10c, 0x4, 0x0, 0x1, [{0x108, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xfc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x1a}, @NFTA_CMP_DATA={0xe8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc5, 0x1, "7408c8db2141adc160d37e2f1df40f8e62192bf7ffffffa83b5c2a3816ebdc487d9f5d1d8ca84e7f4e244b226fec776168a1a0f58639f915c6cc480d7a05c371dcc36d4ae65016f63437e0a0394e20ade44eacad24eb7fdf0b20aadb481d2c864c6627d7c9a75720d92c22796e507f112d77faaf5a860b839950a2d93e5ce33e3d53be0b32b2d080c48d1ec3b0e96306e4af5f27f1229e1105cff97b8d404013713f9526755f173fbf0e3719266dbe6b3e29ce2ef699f45b50328685fc617f6810"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x160}, 0x1, 0x0, 0x0, 0x6040850}, 0x20004080)

16.8638832s ago: executing program 1 (id=544):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB="0627d2f50000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000020000000000000000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x158, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfff3, 0x10}, {0xfff3, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x124, 0x2, [@TCA_MATCHALL_ACT={0x120, 0x2, [@m_mpls={0x11c, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x9, 0x1, 0x6, 0x588}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1fc16}]}, {0xca, 0x6, "0d4e015fe9bd6376f48d23a3d270fd62c45b69c891813af171bd899a92fc631da8f6e45548a7440c202fdb589e21a28bfd0f55bda2b89266c71d5ed985ce028baf2279416545d7345a4e12697bd06c2793a99b0c8c0f900d042f4481606c6e8ccb828f6eb962ad2035126542bfa4fa65826158bc1e474a45d081263f1f5f3aa75bd92738bef590ca60d870b7a89e80ce31212442df9d5a8f925331e0a11a5ac144b9ed834266f66cc3aec93852d490dc33a5d9b7e72a55fd1cb690d6daf29606646e01592ba8"}, {0xc}, {0xc}}}]}]}}]}, 0x158}}, 0x0)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109004d00108025b57efaa223b473fe7783bc4a506cf756740574b89d316af9b5963870ef3391f3ac176f88d6e1db9b2bb2e5c90fa4eb2f71ebaede447dc8f6f61c6615fcf740adda4853b2d23adb370000001e0106"], 0x184}}, 0x0)
write$tun(r2, &(0x7f0000000400)=ANY=[], 0x46)
connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB="0627d2f50000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
close(0x3) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000020000000000000000"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$unix(0x1, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller1\x00'}) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x158, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfff3, 0x10}, {0xfff3, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x124, 0x2, [@TCA_MATCHALL_ACT={0x120, 0x2, [@m_mpls={0x11c, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x9, 0x1, 0x6, 0x588}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1fc16}]}, {0xca, 0x6, "0d4e015fe9bd6376f48d23a3d270fd62c45b69c891813af171bd899a92fc631da8f6e45548a7440c202fdb589e21a28bfd0f55bda2b89266c71d5ed985ce028baf2279416545d7345a4e12697bd06c2793a99b0c8c0f900d042f4481606c6e8ccb828f6eb962ad2035126542bfa4fa65826158bc1e474a45d081263f1f5f3aa75bd92738bef590ca60d870b7a89e80ce31212442df9d5a8f925331e0a11a5ac144b9ed834266f66cc3aec93852d490dc33a5d9b7e72a55fd1cb690d6daf29606646e01592ba8"}, {0xc}, {0xc}}}]}]}}]}, 0x158}}, 0x0) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109004d00108025b57efaa223b473fe7783bc4a506cf756740574b89d316af9b5963870ef3391f3ac176f88d6e1db9b2bb2e5c90fa4eb2f71ebaede447dc8f6f61c6615fcf740adda4853b2d23adb370000001e0106"], 0x184}}, 0x0) (async)
write$tun(r2, &(0x7f0000000400)=ANY=[], 0x46) (async)

16.861790542s ago: executing program 3 (id=545):
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @loopback, 0x4}, 0x1c) (async)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @loopback, 0x4}, 0x1c)
r1 = socket(0x11, 0x5, 0x6)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000085100000fdffffff0600000000ec21923116e4d1fea3d43ebd94f7c40ff28cb5ebdbe59e13f0881eb117bbd5830de760a8e5cf6edf81625b56928d8c330a3fe16780e5f15dbfbdecf3913b5937a2bec90c686d"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22)
ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f00000009c0)={0xe1f, 0x4, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
recvfrom$packet(r1, 0x0, 0x0, 0x40000000, &(0x7f0000000440)={0x11, 0x1c, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x14)
r2 = socket(0x1, 0x803, 0x0)
getpeername$packet(r2, 0x0, 0x0) (async)
getpeername$packet(r2, 0x0, 0x0)
unshare(0xc040480)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a91e9cd38fbd9bbe52b5a0c5c7d19aa8a853e20c7a5d0eecfbf538f60516334160012c9ca3ec31833885dd7eeee7daa225a112af8bb7160d2bea31c62961064b46da9797b11fcb84fd44923accb71c830031957822d3469136fd969746e0e8b242fa164965e18cc5b798072237a83f3b82e1b36851c2348bc9f073b7dbd22f7b9b41d5b8db13821460b5c4e4e3f7345769c2d8b41edfa5591fb82d7e4b07ad286b689fb3e3e5209f5394bffdba7e91f7fdd929dd07de049cf77ed966f53f6f2b7b3f3fc9c513b5", @ANYRES16=r3, @ANYBLOB="0100feffffff0000000001000000100007800c00018008000100", @ANYRES32=r4, @ANYBLOB="0c000200ffff0000000000000c0004000200000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan0\x00'})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0500000001f01f00008000007b00000001"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r6}, 0x0, 0x0, 0x7b}, 0x20)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x48, r7, 0x1, 0x70bd28, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}]}, 0x48}}, 0x0) (async)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x48, r7, 0x1, 0x70bd28, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}]}, 0x48}}, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb4, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x878}]}, @NL802154_ATTR_SEC_DEVKEY={0x54, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x4000895)
socket(0x40000000015, 0x5, 0x0) (async)
r9 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r9, 0x0, 0x0) (async)
connect$inet(r9, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, "4526000000927650", '\x00', "c406b192"}, 0x28)
socket$nl_crypto(0x10, 0x3, 0x15) (async)
socket$nl_crypto(0x10, 0x3, 0x15)
socket$inet6(0x10, 0x2, 0x4)

16.724040126s ago: executing program 2 (id=546):
socket(0xa, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f, 0x60004}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}]}}}]}, 0x48}}, 0x0)
r1 = socket(0x28, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000080)=0xdb2, 0x4)
sendto$inet6(r3, 0x0, 0x0, 0x20040800, &(0x7f0000000180)={0xa, 0x4e24, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000040)=0x5, 0x4)
recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=""/11, 0xb}, 0x9}], 0x1, 0x40002000, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x74, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x3, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x30, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x4c2}, {{0x2}, {0xf0ffff, 0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x1fde, 0x3, 0x5}, {0x6, 0x2, 0x2}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x24000045}, 0x2008c014)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, 0x1412, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4a044}, 0x4000000)
bind$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0x2711}, 0x10)
listen(r1, 0x0)
r8 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r8, &(0x7f0000000080), 0x10)
setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
sendmmsg(r8, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001d80)="16", 0x1}], 0x1}}], 0x1, 0x24008094)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0)
setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000200)=0x40a0, 0x4)
close(0x4)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r8, &(0x7f0000000100)={0x2017be01})

16.624773876s ago: executing program 0 (id=547):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xc8000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'nicvf0\x00', 0x2})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x3, 0x1, 0x1, 0x1}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0000000000000000000400ff00000008080000", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000005000000050000000a00"/28], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0600000004000000060000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000d0000000000000000017b91c208e670d6b000000000000f19150e6ca589f5f0b8092fef54c03ddbc9a6a04ee02662c6add6ddc08bdfae2ce029006a73be3c1b1eab2f4d4b901c9262f05ebeaf7bdd29871a5b6c0b80b86e4a06f4f952b7ecf5e26fb536996dd197b9d9ba4c1ace86a5fdef6b100"/138], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000780), 0xcff5, r1}, 0x38)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}, @in={0x2, 0x4e21, @loopback}], 0x12)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r4, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x1)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x10, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r6=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000100)={r6}, &(0x7f00000002c0)=0x8)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r7, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
socket$inet_sctp(0x2, 0x1, 0x84)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000ff0000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0fe000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000206000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r8, 0x0, 0xe, 0x0, &(0x7f0000000080)="0000000000002d9d8aaf5dc79048", 0x0, 0x8ce3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x3, 0x1, 0x0, 0x8}, 0x0)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r9, 0x400452c8, &(0x7f0000000100))

16.340372037s ago: executing program 1 (id=548):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@map, 0xffffffffffffffff, 0x7, 0xc}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x48, &(0x7f0000000280)={&(0x7f0000000340)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x100]}, @NL80211_ATTR_CQM_TXE_RATE={0x0, 0x5, 0x1d}]}]}, 0x30}}, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r4, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4)
recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003580)=""/35, 0x23}, 0xaa}], 0x1, 0x2, 0x0)
getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@local, <r5=>0x0}, &(0x7f0000000040)=0x14)
setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f00000000c0)={0x0, 0x0, 0x6f, r5, 0x5}, 0xc)
getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, 0x0, &(0x7f00000005c0)=0x28)
sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x75}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x4)

16.28627763s ago: executing program 2 (id=549):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r0, &(0x7f0000006180)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x6, @mcast1, 0xf9af}, 0x1c, &(0x7f00000013c0)=[{&(0x7f0000000880)="357cba1b73403d364d8c987ce1a58be7dd6b6b7a38a8cb1a6b0ddd6a5082a5eb838a272355b5c6b6f7a64be3789c7d93aef05c0273a688931199b79bf2379d029099c60c7a7c80148faccb937faf9a985c093c87e9b9a173e9742b485bfb61d06f79c0b67608ef3d0951a2b3e15bab754804c991fb833e02c57e574cfbebced6d48cdfb0f907f176fab9f45b5d2da07f908070d3c7a596fb9e6f92ba739fe5b928ecea3ea51d55a4515958160b385b5f1e796dcdf0fdd84c3e4af3db0fefaef8384341b187dc3ac835a948ba1cabd3aa75d31f8e510517dc87cafe9e816d9ac2bab2ccd8bfe9a0c87ded931676eeb18e284d03eabc66c32a567603f2e3da1089d3c4071c87e1fc4c1d05f2c452e4e0f97a8d8bce6b22a8f771296c1f8dff6a65dff4a863f766ad5005ac62131d392350b8d0a6924820b2c0f6f58f98f42ab3f6cc683c1959a6e707610a103df6b6088e86d7bd9ab4835ab0715d3b1054a03d95d3d5ffd9730a2e9740809e9725e27c0a03f6a655d508b23d9925ad74e1db61be9c08dab790b71ec0deafef2068e28051d41c24cd45af8ccf516fe04c806bcae0ca63f662876b9a0182713c00019e16390b197bc5a21b", 0x1b6}, {&(0x7f0000000ac0)="546dc57733cb388e7bb4921c2f955a5a56e7a4fed1e147d8239d0a9a96861e820ebf32514afcd9710db608dbbfd2ad4c917d4fbf8037e2a19ac1e37e7df7ebaf896c2daa3e8143daf884fbf01c13c4b929db0c8b6fe7660da087689c736b6eb94110f4512ab79bfde1966a84da31afba651f3924f068b3bc1165eb346311328fa383e063e6cb027cd6c1e1deadd85d37287828bdfaee8d43783984a91b88978c75f0f09e66188838facb96fccae8c3ffddde7c49968feea48d58403170a7aab92dc6889189ed48b7732770e8e8aba248dece892d5960e77777e0a478881aa96ea92f5086475e41e0d341895bc718acb35da4c1a2bcb31f358333b6ec5ffbb1bf4a3c49348cdeb3006f9100d98777f4030694e7042ab07668e524f62f733afdc8695d8967e4f493a2dcb4b0286bce2d730c47170e20c8be3cea66cbf9aa4244ee627c12207099edae49ac17ba40892006861d61fdd8c0b4a98551f209896fd1edac0c67bf82a564212914c7a6d3c0f7063622b6803808220678193e369e453f8c25b6a1de0f73f3dadf661ab1eb5ab77d721b205df794bc5e7f49676a72be7214d31ab0c6c08b88544ff3b504beaa35631ff59f8b36c322c4bfe484376fb45cef4739dadd190608af5a0460306f79f84d6c0f223407d2f112496faaafeaae2afa95daba57032dedc72770e795ef83d39eca075df006d8deb2b49ae7205666873e6ed044a75be5a0097428510c91b15409d65674a493aa5820cd608fd825c5c2e8de168396fd62f4b71a6c0030f7a9e3458386095d115ac8b3302ebac805f3982c128eb5b1d1da7a8b14aa4f6bc22830d805d86bc3ae99e7f098c63773b835bb75734c9595c9104f2f5e176e219fe3c928d5500b39a1ca7d87bf33ae5e2cf14305c66874017c12792fbd80f4fe084c92d00a75752216f1148e9bc2e497a9d60a41e9a0c65fdf3a6eb4e37a39837d36779cf0dfa620ae269929dbb79029702c6476741446c942d2c0035a2a685e691f6ec20f805dca46ccc219144638c341a1089cd04c7308ff094ec7d32a4e578848e65273bd98b54691716601ac1a031e870f488ebaa6c3098e10d97d4b97b2081a65651cea19db364a892e62b559c1b33c6a82cf5fe7fd92dc62cc473e487783c80ea1b66744ddf7e4da6b97bfe5894aa1178d75d30d50bb533b9bf4ba8a81e0b1a6f5d0d3307165f010fdbeca97af6773e77a144e0cf7a26199568298a0bfebad38c2095b50bf463f7934535446e15c9cac33865fb8f02d346d5a3b6f", 0x38a}], 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffffffffff7f3600000045008000000000001400000000000000003e0000000100000000000000001c00"], 0x30}}], 0x1, 0x20000000)

16.226085591s ago: executing program 0 (id=550):
r0 = socket(0x2b, 0x80801, 0x1)
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000fc0)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x7, 0x772a, 0xffffffffe, 0x1]}, &(0x7f0000000000)=0x78) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000002a40)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0xe, 0x0, &(0x7f0000000140)="05a42f284a5bf1fa61960ae8f0f9", 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async)
r2 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000))
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', <r3=>0x0}) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r4, r5, 0x5, 0x0, @void}, 0x10) (async, rerun: 64)
close(0x4) (rerun: 64)
close(r6) (async)
setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000080)={@broadcast, @broadcast, r3}, 0xc)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="680000001000010029bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8db20200211a0100140003006e657464657673696d30000000000000200016801c00018008000c80"], 0x68}, 0x1, 0x0, 0x0, 0xc1}, 0x48880) (async)
sendmsg$nl_route(r7, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=@setneightbl={0x58, 0x43, 0x4, 0x70bd26, 0x69c9, {0x7}, [@NDTA_PARMS={0x3c, 0x6, 0x0, 0x1, [@NDTPA_MCAST_REPROBES={0x8, 0x11, 0x401}, @NDTPA_RETRANS_TIME={0xc, 0x5, 0x8}, @NDTPA_MCAST_REPROBES={0x8, 0x11, 0x3}, @NDTPA_APP_PROBES={0x8, 0x9, 0xa9e}, @NDTPA_QUEUE_LEN={0x8, 0x8, 0xf}, @NDTPA_GC_STALETIME={0xc, 0x6, 0x8001}]}, @NDTA_THRESH2={0x8, 0x3, 0x1}]}, 0x58}}, 0x41) (async, rerun: 32)
socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)

16.164672402s ago: executing program 2 (id=551):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4000004, 0x80000003, 0x3, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
socket(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x2) (async)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000680)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r4, &(0x7f0000000240)={0xc})
sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)=@newtfilter={0x44, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r5, {0x9}, {0xf9d690b100bbf911}, {0x10, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3, 0xfff2}}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x40)
socket(0x10, 0x3, 0x0) (async)
r6 = socket(0x10, 0x3, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x75}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe12}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="60010000100005000000a7de787e178e78ca7c5345000000000000ff0100000000000000000000000000017f0000010000000000000000000000001f90ffff1f90ffff0200202000000000680523168e137ae5784f5beada59faf623c0fe547b654ea05c0c74b26d75391590d6e43fc7028368c471704a388bf9fbc1f012b440f2cb0bc74c9d4ea5f3cf131d106b2f3d493fc3c0989b6791d7bb6bf71b0bf4bdceafb0c08bfeeff45685f206cd289a532e3a624ed8922dfdfd73e9339cf85ca6f1419305eb11549b18a8c247ef7a8e9f1ed6080d746c6c6702b341af613101936b96732a4ae752e4b8b0c570e470", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000001234320000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00120063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005002100020000001c0017000000000029bd700027bd70002dbd700025bd70007f000000"], 0x160}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18130000", @ANYRES32=r1, @ANYRES32=r9, @ANYRES32=r1], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18130000", @ANYRES32=r1, @ANYRES32=r9, @ANYRES32=r1], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

16.07482749s ago: executing program 0 (id=552):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)={0x18, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x818}, 0xc044)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x42004}, 0x80000)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, <r5=>0x0, 0x0}}, 0x10)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000e40)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000001240)={r6, 0xa66, 0x8})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000001000000000000000000850000002e00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x80, 0x0, 0x1, 0x3, '\x00', 0x0, r1, 0x2, 0x1}, 0x50)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r10, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xe, 0x19, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x843}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x27}}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r7, 0x0, 0x0, 0x0, 0x10, 0x80000007}, 0x94)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r12, 0x0, 0x16, 0x0, &(0x7f00000008c0)="c1dfb080cd21d308098e000081007e2288a8849088a8", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000b49bc36022a8e10ee12ab3fa5502c6ad5fe74eed2441b2304e3e9a02db15897274e1b5bff87833104529b1b84c410398f5df389456b4f6b7d870a5eaa7952e07bcc10c5ef4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES64=r11, @ANYRESHEX=r4, @ANYRES32, @ANYRES8=0x0, @ANYRES32=r13, @ANYBLOB="b2b0d42047058b0b6d924005af671c16e5e491af8eb3706818765215d6a907d22bba8cecfa909ab290079cc684f25a594c0fcdb3", @ANYRESHEX=r5, @ANYRES16=r7, @ANYRESOCT=r4, @ANYRESHEX=0x0], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x10, 0x28c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x408, 0x0, 0x0, 0x0, 0x2}, [@generic={0x91, 0x1, 0x1, 0x8}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94)

16.010669275s ago: executing program 2 (id=553):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 64)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="62d3d00100fdffffff0000000501000000100007080000018008", @ANYRES32=r3, @ANYBLOB="08000100000000000c000200ff7f000000000000"], 0x38}}, 0x20000000) (async, rerun: 64)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)={0x20, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x51}, 0x4000811) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
r6 = socket$kcm(0x1e, 0x4, 0x0) (rerun: 64)
setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async)
r7 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x101d0) (async)
sendmsg$kcm(r7, &(0x7f00000001c0)={&(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x1458}, 0x20048811) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008666dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async)
r8 = socket$netlink(0x10, 0x3, 0x0) (async)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xd9}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x4d, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) (async)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r11)
sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r12, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b800800"], 0x250}}, 0x2000c000)

1.194706061s ago: executing program 32 (id=548):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@map, 0xffffffffffffffff, 0x7, 0xc}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x48, &(0x7f0000000280)={&(0x7f0000000340)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x100]}, @NL80211_ATTR_CQM_TXE_RATE={0x0, 0x5, 0x1d}]}]}, 0x30}}, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r4, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4)
recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003580)=""/35, 0x23}, 0xaa}], 0x1, 0x2, 0x0)
getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@local, <r5=>0x0}, &(0x7f0000000040)=0x14)
setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f00000000c0)={0x0, 0x0, 0x6f, r5, 0x5}, 0xc)
getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, 0x0, &(0x7f00000005c0)=0x28)
sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x75}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x4)

1.147540595s ago: executing program 33 (id=545):
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @loopback, 0x4}, 0x1c) (async)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @loopback, 0x4}, 0x1c)
r1 = socket(0x11, 0x5, 0x6)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000085100000fdffffff0600000000ec21923116e4d1fea3d43ebd94f7c40ff28cb5ebdbe59e13f0881eb117bbd5830de760a8e5cf6edf81625b56928d8c330a3fe16780e5f15dbfbdecf3913b5937a2bec90c686d"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22)
ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f00000009c0)={0xe1f, 0x4, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
recvfrom$packet(r1, 0x0, 0x0, 0x40000000, &(0x7f0000000440)={0x11, 0x1c, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x14)
r2 = socket(0x1, 0x803, 0x0)
getpeername$packet(r2, 0x0, 0x0) (async)
getpeername$packet(r2, 0x0, 0x0)
unshare(0xc040480)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a91e9cd38fbd9bbe52b5a0c5c7d19aa8a853e20c7a5d0eecfbf538f60516334160012c9ca3ec31833885dd7eeee7daa225a112af8bb7160d2bea31c62961064b46da9797b11fcb84fd44923accb71c830031957822d3469136fd969746e0e8b242fa164965e18cc5b798072237a83f3b82e1b36851c2348bc9f073b7dbd22f7b9b41d5b8db13821460b5c4e4e3f7345769c2d8b41edfa5591fb82d7e4b07ad286b689fb3e3e5209f5394bffdba7e91f7fdd929dd07de049cf77ed966f53f6f2b7b3f3fc9c513b5", @ANYRES16=r3, @ANYBLOB="0100feffffff0000000001000000100007800c00018008000100", @ANYRES32=r4, @ANYBLOB="0c000200ffff0000000000000c0004000200000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan0\x00'})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0500000001f01f00008000007b00000001"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r6}, 0x0, 0x0, 0x7b}, 0x20)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x48, r7, 0x1, 0x70bd28, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}]}, 0x48}}, 0x0) (async)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x48, r7, 0x1, 0x70bd28, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}]}, 0x48}}, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb4, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x878}]}, @NL802154_ATTR_SEC_DEVKEY={0x54, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x4000895)
socket(0x40000000015, 0x5, 0x0) (async)
r9 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r9, 0x0, 0x0) (async)
connect$inet(r9, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, "4526000000927650", '\x00', "c406b192"}, 0x28)
socket$nl_crypto(0x10, 0x3, 0x15) (async)
socket$nl_crypto(0x10, 0x3, 0x15)
socket$inet6(0x10, 0x2, 0x4)

1.094951866s ago: executing program 34 (id=543):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25ffdbfd, {0x0, 0x0, 0x0, r1, {0xffff, 0xf}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f00000002c0)=[{0x20, 0x2, 0x40, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000000380)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x6, 0x24, 0x64, 0x0, 0x6, 0x21, 0x0, @private=0xa010100, @private=0xa010101}, {{0x4e21, 0x4e22, 0x4, 0x1, 0x8, 0x0, 0x0, 0x3, 0x4, "020a99", 0x4, "289d21"}}}}}}, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x3c, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '(\\'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8}, 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711206000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r6, &(0x7f0000002b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)='h', 0x1}, {0x0}], 0x2}}], 0x1, 0x2000c044)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000070000000000000013d380009111bb000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x58}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x40000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x7, 0x5}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x81}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0xfffffffc}}, 0x10)
bind$tipc(r7, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x40, 0x801}}}, 0x10)
bind$tipc(r7, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}}}, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x138, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x10c, 0x4, 0x0, 0x1, [{0x108, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xfc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x1a}, @NFTA_CMP_DATA={0xe8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc5, 0x1, "7408c8db2141adc160d37e2f1df40f8e62192bf7ffffffa83b5c2a3816ebdc487d9f5d1d8ca84e7f4e244b226fec776168a1a0f58639f915c6cc480d7a05c371dcc36d4ae65016f63437e0a0394e20ade44eacad24eb7fdf0b20aadb481d2c864c6627d7c9a75720d92c22796e507f112d77faaf5a860b839950a2d93e5ce33e3d53be0b32b2d080c48d1ec3b0e96306e4af5f27f1229e1105cff97b8d404013713f9526755f173fbf0e3719266dbe6b3e29ce2ef699f45b50328685fc617f6810"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x160}, 0x1, 0x0, 0x0, 0x6040850}, 0x20004080)

67.743242ms ago: executing program 35 (id=552):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)={0x18, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x818}, 0xc044)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x42004}, 0x80000)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, <r5=>0x0, 0x0}}, 0x10)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000e40)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000001240)={r6, 0xa66, 0x8})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000001000000000000000000850000002e00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x80, 0x0, 0x1, 0x3, '\x00', 0x0, r1, 0x2, 0x1}, 0x50)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r10, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xe, 0x19, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x843}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x27}}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r7, 0x0, 0x0, 0x0, 0x10, 0x80000007}, 0x94)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r12, 0x0, 0x16, 0x0, &(0x7f00000008c0)="c1dfb080cd21d308098e000081007e2288a8849088a8", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000b49bc36022a8e10ee12ab3fa5502c6ad5fe74eed2441b2304e3e9a02db15897274e1b5bff87833104529b1b84c410398f5df389456b4f6b7d870a5eaa7952e07bcc10c5ef4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES64=r11, @ANYRESHEX=r4, @ANYRES32, @ANYRES8=0x0, @ANYRES32=r13, @ANYBLOB="b2b0d42047058b0b6d924005af671c16e5e491af8eb3706818765215d6a907d22bba8cecfa909ab290079cc684f25a594c0fcdb3", @ANYRESHEX=r5, @ANYRES16=r7, @ANYRESOCT=r4, @ANYRESHEX=0x0], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x10, 0x28c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x408, 0x0, 0x0, 0x0, 0x2}, [@generic={0x91, 0x1, 0x1, 0x8}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94)

0s ago: executing program 36 (id=553):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 64)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="62d3d00100fdffffff0000000501000000100007080000018008", @ANYRES32=r3, @ANYBLOB="08000100000000000c000200ff7f000000000000"], 0x38}}, 0x20000000) (async, rerun: 64)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)={0x20, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x51}, 0x4000811) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
r6 = socket$kcm(0x1e, 0x4, 0x0) (rerun: 64)
setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async)
r7 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x101d0) (async)
sendmsg$kcm(r7, &(0x7f00000001c0)={&(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x1458}, 0x20048811) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008666dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async)
r8 = socket$netlink(0x10, 0x3, 0x0) (async)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xd9}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x4d, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) (async)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r11)
sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r12, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b800800"], 0x250}}, 0x2000c000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.31' (ED25519) to the list of known hosts.
[   80.156939][ T5605] cgroup: Unknown subsys name 'net'
[   80.271759][ T5605] cgroup: Unknown subsys name 'cpuset'
[   80.275484][ T5605] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   81.980611][ T5605] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   84.462184][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   84.462517][ T5620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   84.485147][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   84.496838][ T5631] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   84.497193][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   84.497522][ T5631] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   84.500097][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   84.501282][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   84.502939][ T5631] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   84.511197][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   84.511839][ T5631] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   84.512543][ T5631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   84.513372][ T5631] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   84.514525][ T5631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   84.515059][ T5631] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   84.523393][ T5631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   84.532479][ T5635] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   84.540166][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   84.541447][ T5635] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   84.541735][ T5635] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   84.551842][ T5631] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   84.571689][ T5632] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   84.573725][ T5632] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   84.582434][ T5631] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   84.582546][ T5631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   86.548581][ T5620] Bluetooth: hci0: command tx timeout
[   86.571106][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.571288][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.571459][ T5626] bridge_slave_0: entered allmulticast mode
[   86.573263][ T5626] bridge_slave_0: entered promiscuous mode
[   86.628064][ T5629] Bluetooth: hci3: command tx timeout
[   86.628314][ T5620] Bluetooth: hci1: command tx timeout
[   86.640861][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.642023][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.642444][ T5626] bridge_slave_1: entered allmulticast mode
[   86.648178][ T5626] bridge_slave_1: entered promiscuous mode
[   86.707912][ T5629] Bluetooth: hci2: command tx timeout
[   86.708156][ T5620] Bluetooth: hci4: command tx timeout
[   86.800480][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.800592][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.801017][ T5621] bridge_slave_0: entered allmulticast mode
[   86.803678][ T5621] bridge_slave_0: entered promiscuous mode
[   86.846369][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.877014][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.877128][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.877542][ T5621] bridge_slave_1: entered allmulticast mode
[   86.884894][ T5621] bridge_slave_1: entered promiscuous mode
[   86.919628][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.973613][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.974097][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.974578][ T5623] bridge_slave_0: entered allmulticast mode
[   86.976503][ T5623] bridge_slave_0: entered promiscuous mode
[   87.069510][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.069623][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.070603][ T5623] bridge_slave_1: entered allmulticast mode
[   87.073698][ T5623] bridge_slave_1: entered promiscuous mode
[   87.118743][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.118872][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.119299][ T5617] bridge_slave_0: entered allmulticast mode
[   87.122885][ T5617] bridge_slave_0: entered promiscuous mode
[   87.130268][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.130539][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.130906][ T5618] bridge_slave_0: entered allmulticast mode
[   87.142239][ T5618] bridge_slave_0: entered promiscuous mode
[   87.175857][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.208979][ T5626] team0: Port device team_slave_0 added
[   87.209186][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.209293][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.209429][ T5617] bridge_slave_1: entered allmulticast mode
[   87.212749][ T5617] bridge_slave_1: entered promiscuous mode
[   87.219204][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.219321][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.219730][ T5618] bridge_slave_1: entered allmulticast mode
[   87.224522][ T5618] bridge_slave_1: entered promiscuous mode
[   87.244745][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.290808][ T5626] team0: Port device team_slave_1 added
[   87.367055][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.419150][ T5621] team0: Port device team_slave_0 added
[   87.421910][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.460188][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.463045][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.465203][ T5621] team0: Port device team_slave_1 added
[   87.495740][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.495754][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.495772][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.508234][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.516881][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.598566][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.598586][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.598618][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.658957][ T5623] team0: Port device team_slave_0 added
[   87.698897][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.698914][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.698937][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.702175][ T5623] team0: Port device team_slave_1 added
[   87.704231][ T5617] team0: Port device team_slave_0 added
[   87.706330][ T5618] team0: Port device team_slave_0 added
[   87.746673][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.746725][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.746799][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.803301][ T5617] team0: Port device team_slave_1 added
[   87.818589][ T5618] team0: Port device team_slave_1 added
[   87.891204][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.891218][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.891237][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.974487][ T5626] hsr_slave_0: entered promiscuous mode
[   87.975442][ T5626] hsr_slave_1: entered promiscuous mode
[   87.977003][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.977016][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.977040][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.027202][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.027255][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.027364][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.043703][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.043748][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.043832][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.135937][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.135955][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.135979][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.151263][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.151332][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.151399][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.201978][ T5621] hsr_slave_0: entered promiscuous mode
[   88.205315][ T5621] hsr_slave_1: entered promiscuous mode
[   88.213617][ T5621] debugfs: 'hsr0' already exists in 'hsr'
[   88.213879][ T5621] Cannot create hsr debugfs directory
[   88.375163][ T5623] hsr_slave_0: entered promiscuous mode
[   88.376373][ T5623] hsr_slave_1: entered promiscuous mode
[   88.377017][ T5623] debugfs: 'hsr0' already exists in 'hsr'
[   88.377037][ T5623] Cannot create hsr debugfs directory
[   88.427178][ T5618] hsr_slave_0: entered promiscuous mode
[   88.433822][ T5618] hsr_slave_1: entered promiscuous mode
[   88.434383][ T5618] debugfs: 'hsr0' already exists in 'hsr'
[   88.434404][ T5618] Cannot create hsr debugfs directory
[   88.473161][ T5617] hsr_slave_0: entered promiscuous mode
[   88.474003][ T5617] hsr_slave_1: entered promiscuous mode
[   88.474565][ T5617] debugfs: 'hsr0' already exists in 'hsr'
[   88.474587][ T5617] Cannot create hsr debugfs directory
[   88.628980][ T5620] Bluetooth: hci0: command tx timeout
[   88.708453][ T5629] Bluetooth: hci3: command tx timeout
[   88.708761][ T5620] Bluetooth: hci1: command tx timeout
[   88.791153][ T5629] Bluetooth: hci2: command tx timeout
[   88.791521][ T5620] Bluetooth: hci4: command tx timeout
[   89.089418][ T5626] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   89.110622][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   89.112335][ T5626] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   89.132978][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   89.134899][ T5626] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   89.155470][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   89.156414][ T5626] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   89.176348][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   89.267274][ T5621] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   89.283044][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   89.284042][ T5621] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   89.306276][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   89.316828][ T5621] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   89.329988][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   89.350715][ T5621] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   89.354066][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   89.464033][ T5623] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   89.467509][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   89.473794][ T5623] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   89.491357][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   89.492356][ T5623] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   89.497140][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   89.527935][ T5623] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   89.533175][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   89.629986][ T5618] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   89.633838][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   89.637208][ T5618] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   89.664096][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   89.665550][ T5618] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   89.676259][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   89.691456][ T5618] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   89.695590][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   89.816282][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.816590][ T5617] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   89.830324][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   89.849056][ T5617] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   89.852922][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   89.853749][ T5617] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   89.856628][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   89.901083][ T5617] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   89.904046][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   89.976989][ T5626] 8021q: adding VLAN 0 to HW filter on device team0
[   90.002740][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.002856][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.063416][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.066002][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.066081][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.144215][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.166092][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.184855][ T5621] 8021q: adding VLAN 0 to HW filter on device team0
[   90.215455][ T5618] 8021q: adding VLAN 0 to HW filter on device team0
[   90.231926][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.232038][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.248999][ T3356] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.249287][ T3356] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.276269][ T5623] 8021q: adding VLAN 0 to HW filter on device team0
[   90.300894][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.300972][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.326833][ T3356] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.326908][ T3356] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.364079][ T3356] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.364158][ T3356] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.395183][ T3356] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.395270][ T3356] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.526279][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.655795][ T5617] 8021q: adding VLAN 0 to HW filter on device team0
[   90.712720][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.712832][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.720646][ T5620] Bluetooth: hci0: command tx timeout
[   90.761578][  T159] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.761690][  T159] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.791470][ T5629] Bluetooth: hci3: command tx timeout
[   90.791569][ T5620] Bluetooth: hci1: command tx timeout
[   90.878510][ T5629] Bluetooth: hci2: command tx timeout
[   90.878611][ T5620] Bluetooth: hci4: command tx timeout
[   91.727909][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.911754][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.926803][  T990] cfg80211: failed to load regulatory.db
[   91.960720][ T5626] veth0_vlan: entered promiscuous mode
[   92.024735][ T5626] veth1_vlan: entered promiscuous mode
[   92.081375][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.107550][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.174399][ T5621] veth0_vlan: entered promiscuous mode
[   92.216356][ T5626] veth0_macvtap: entered promiscuous mode
[   92.224628][ T5621] veth1_vlan: entered promiscuous mode
[   92.260696][ T5626] veth1_macvtap: entered promiscuous mode
[   92.296401][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.371168][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.394132][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.396997][ T5621] veth0_macvtap: entered promiscuous mode
[   92.412649][ T5621] veth1_macvtap: entered promiscuous mode
[   92.424666][ T5623] veth0_vlan: entered promiscuous mode
[   92.469252][ T3374] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.472381][ T5623] veth1_vlan: entered promiscuous mode
[   92.555719][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.569520][ T3374] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.569589][ T3374] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.569629][ T3374] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.634145][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.636012][ T5617] veth0_vlan: entered promiscuous mode
[   92.669705][ T5617] veth1_vlan: entered promiscuous mode
[   92.768534][ T5623] veth0_macvtap: entered promiscuous mode
[   92.785706][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.785728][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.790373][ T5620] Bluetooth: hci0: command tx timeout
[   92.865722][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.865745][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.868077][ T5620] Bluetooth: hci1: command tx timeout
[   92.868109][ T5620] Bluetooth: hci3: command tx timeout
[   92.903577][ T5623] veth1_macvtap: entered promiscuous mode
[   92.958711][ T5629] Bluetooth: hci4: command tx timeout
[   92.958749][ T5629] Bluetooth: hci2: command tx timeout
[   92.982939][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.982961][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.018143][ T5618] veth0_vlan: entered promiscuous mode
[   93.034166][ T5617] veth0_macvtap: entered promiscuous mode
[   93.050290][ T5626] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   93.050706][  T159] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.053133][ T3374] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.103095][ T5617] veth1_macvtap: entered promiscuous mode
[   93.127123][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.149858][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.149882][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.201654][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.207115][ T5618] veth1_vlan: entered promiscuous mode
[   93.260897][ T5815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.267044][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.303026][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.328572][ T3407] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.328886][ T3407] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.328935][ T3407] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.328975][ T3407] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.329014][ T3407] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.329058][ T3407] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.452786][   T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.452848][   T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.452891][   T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.578886][ T3374] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.628799][ T5618] veth0_macvtap: entered promiscuous mode
[   93.716490][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.716514][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.742838][ T5618] veth1_macvtap: entered promiscuous mode
[   93.881935][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.881960][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.943431][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.015723][ T3374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.015745][ T3374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.040873][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.229927][   T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.234235][  T159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.234259][  T159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.268227][   T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.268413][   T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.268563][   T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.642910][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.642934][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.849084][  T159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.849109][  T159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.978844][ T5838] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'.
[   95.308021][ T5837] Zero length message leads to an empty skb
[   95.635715][ T5848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7'.
[   95.783327][ T5848] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   95.947047][ T5862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12'.
[   96.159286][ T5869] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13'.
[   96.182736][ T5862] sch_tbf: peakrate 4 is lower than or equals to rate 16 !
[   96.252942][ T5862] syzkaller0: entered promiscuous mode
[   96.252966][ T5862] syzkaller0: entered allmulticast mode
[   96.846888][ T5869] syz.3.13 (5869) used greatest stack depth: 18048 bytes left
[   96.911379][ T5899] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15'.
[   96.911542][ T5899] netlink: 64 bytes leftover after parsing attributes in process `syz.1.15'.
[   96.911558][ T5899] tipc: Invalid UDP bearer configuration
[   96.911601][ T5899] tipc: Enabling of bearer <udp:sy{±> rejected, failed to enable media
[   97.026149][ T5901] netlink: 'syz.3.16': attribute type 12 has an invalid length.
[   97.026173][ T5901] netlink: 'syz.3.16': attribute type 29 has an invalid length.
[   97.026188][ T5901] netlink: 148 bytes leftover after parsing attributes in process `syz.3.16'.
[   97.026218][ T5901] netlink: 'syz.3.16': attribute type 1 has an invalid length.
[   97.026231][ T5901] netlink: 'syz.3.16': attribute type 2 has an invalid length.
[   97.055512][ T5890] netlink: 'syz.1.15': attribute type 10 has an invalid length.
[   97.223659][ T5890] team0: Port device dummy0 added
[   97.359735][ T5906] geneve1: entered promiscuous mode
[   97.497023][ T5911] tipc: Started in network mode
[   97.497055][ T5911] tipc: Node identity 1, cluster identity 4711
[   97.497069][ T5911] tipc: Node number set to 1
[   97.524204][ T5911] tipc: Enabled bearer <ib:veth1_to_team>, priority 10
[   97.616357][ T5909] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18'.
[   97.635435][ T5915] netlink: 'syz.2.22': attribute type 9 has an invalid length.
[   97.694325][ T5913] tc_dump_action: action bad kind
[   97.775401][ T5923] Illegal XDP return value 4294967262 on prog  (id 14) dev N/A, expect packet loss!
[   97.838759][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23'.
[   97.838812][ T5918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23'.
[   98.033550][ T5929] netlink: 'syz.0.25': attribute type 2 has an invalid length.
[   98.160149][ T5931] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[   98.591502][ T5950] Bluetooth: MGMT ver 1.23
[   99.110808][ T5970] tipc: Started in network mode
[   99.110833][ T5970] tipc: Node identity 2000004, cluster identity 4711
[   99.110847][ T5970] tipc: Node number set to 33554436
[   99.158285][ T5972] tipc: Started in network mode
[   99.158312][ T5972] tipc: Node identity 2000004, cluster identity 4711
[   99.158327][ T5972] tipc: Node number set to 33554436
[   99.785539][ T5978] ip6gre1: entered promiscuous mode
[   99.785566][ T5978] ip6gre1: entered allmulticast mode
[  100.331240][ T6008] FAULT_INJECTION: forcing a failure.
[  100.331240][ T6008] name failslab, interval 1, probability 0, space 0, times 0
[  100.331297][ T6008] CPU: 1 UID: 0 PID: 6008 Comm: syz.4.48 Not tainted syzkaller #0 PREEMPT(full) 
[  100.331323][ T6008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026
[  100.331345][ T6008] Call Trace:
[  100.331360][ T6008]  <TASK>
[  100.331371][ T6008]  dump_stack_lvl+0xe8/0x150
[  100.331418][ T6008]  should_fail_ex+0x410/0x560
[  100.331448][ T6008]  ? __alloc_skb+0x1db/0x7a0
[  100.331473][ T6008]  should_failslab+0xa8/0x100
[  100.331503][ T6008]  ? __alloc_skb+0x1db/0x7a0
[  100.331526][ T6008]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  100.331565][ T6008]  ? __alloc_skb+0x1db/0x7a0
[  100.331598][ T6008]  __alloc_skb+0x1db/0x7a0
[  100.331629][ T6008]  tipc_msg_create+0x4c/0x4c0
[  100.331652][ T6008]  ? tipc_own_addr+0x45/0x2a0
[  100.331675][ T6008]  ? tipc_own_addr+0x45/0x2a0
[  100.331704][ T6008]  tipc_group_proto_xmit+0xce/0x790
[  100.331739][ T6008]  tipc_group_proto_rcv+0x10e6/0x1e60
[  100.331785][ T6008]  tipc_sk_proto_rcv+0x281/0x1810
[  100.331826][ T6008]  ? tipc_group_filter_msg+0x228/0x1630
[  100.331853][ T6008]  ? tipc_loopback_trace+0x48/0x1b0
[  100.331879][ T6008]  ? __pfx_tipc_sk_proto_rcv+0x10/0x10
[  100.331909][ T6008]  ? __raw_spin_lock_init+0x45/0x100
[  100.331942][ T6008]  ? tipc_node_xmit+0x205/0xf10
[  100.331962][ T6008]  ? tipc_sk_filtering+0x13c/0x510
[  100.331998][ T6008]  tipc_sk_filter_rcv+0x2fd7/0x3210
[  100.332029][ T6008]  ? __pfx_tipc_node_xmit+0x10/0x10
[  100.332075][ T6008]  ? __alloc_skb+0x27a/0x7a0
[  100.332099][ T6008]  ? trace_kmem_cache_alloc+0x29/0xe0
[  100.332152][ T6008]  ? tipc_node_distr_xmit+0x39e/0x400
[  100.332177][ T6008]  ? __pfx_tipc_node_distr_xmit+0x10/0x10
[  100.332201][ T6008]  ? __pfx_tipc_sk_filter_rcv+0x10/0x10
[  100.332232][ T6008]  ? __pfx_tipc_node_distr_xmit+0x10/0x10
[  100.332278][ T6008]  tipc_sk_backlog_rcv+0x13b/0x270
[  100.332314][ T6008]  ? __pfx_tipc_sk_backlog_rcv+0x10/0x10
[  100.332357][ T6008]  ? __release_sock+0xa9/0x390
[  100.332389][ T6008]  ? __local_bh_enable_ip+0xd6/0x140
[  100.332424][ T6008]  ? __pfx_tipc_sk_backlog_rcv+0x10/0x10
[  100.332455][ T6008]  __release_sock+0x28b/0x390
[  100.332497][ T6008]  release_sock+0x190/0x260
[  100.332524][ T6008]  tipc_setsockopt+0x7a9/0x9a0
[  100.332565][ T6008]  ? __pfx_tipc_setsockopt+0x10/0x10
[  100.332600][ T6008]  ? aa_sock_opt_perm+0x142/0x1e0
[  100.332632][ T6008]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  100.332661][ T6008]  ? __pfx_tipc_setsockopt+0x10/0x10
[  100.332697][ T6008]  do_sock_setsockopt+0x17c/0x1b0
[  100.332731][ T6008]  __x64_sys_setsockopt+0x13d/0x1b0
[  100.332776][ T6008]  do_syscall_64+0x166/0x520
[  100.332801][ T6008]  ? trace_irq_disable+0x3b/0x140
[  100.332822][ T6008]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.332845][ T6008]  ? clear_bhb_loop+0x70/0xc0
[  100.332873][ T6008]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.332896][ T6008] RIP: 0033:0x7f706e19e159
[  100.332927][ T6008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  100.332945][ T6008] RSP: 002b:00007f706f011028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  100.332975][ T6008] RAX: ffffffffffffffda RBX: 00007f706e425fa0 RCX: 00007f706e19e159
[  100.332991][ T6008] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000006
[  100.333005][ T6008] RBP: 00007f706f011090 R08: 0000000000000010 R09: 0000000000000000
[  100.333019][ T6008] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000002
[  100.333033][ T6008] R13: 00007f706e426038 R14: 00007f706e425fa0 R15: 00007ffc45afcbc8
[  100.333070][ T6008]  </TASK>
[  100.489071][ T6014] netlink: 'syz.1.49': attribute type 3 has an invalid length.
[  100.489218][ T6014] __nla_validate_parse: 5 callbacks suppressed
[  100.489259][ T6014] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.49'.
[  100.662962][ T6014] tipc: Started in network mode
[  100.662986][ T6014] tipc: Node identity 2000004, cluster identity 4711
[  100.662999][ T6014] tipc: Node number set to 33554436
[  100.665344][ T6013] syz.0.50 uses obsolete (PF_INET,SOCK_PACKET)
[  101.249699][ T6025] netlink: 60 bytes leftover after parsing attributes in process `syz.2.51'.
[  101.274578][ T6027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.54'.
[  101.274647][ T6027] netlink: 32 bytes leftover after parsing attributes in process `syz.4.54'.
[  101.905404][ T6051] ip6erspan0: entered allmulticast mode
[  101.905875][ T6050] syzkaller1: entered promiscuous mode
[  101.905895][ T6050] syzkaller1: entered allmulticast mode
[  102.037895][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.62'.
[  102.037927][ T6062] netlink: 20 bytes leftover after parsing attributes in process `syz.2.62'.
[  102.253554][ T6053] netlink: 24 bytes leftover after parsing attributes in process `syz.4.61'.
[  102.640091][ T6080] netlink: 24 bytes leftover after parsing attributes in process `syz.3.64'.
[  102.773900][ T6083] netlink: 'syz.4.65': attribute type 1 has an invalid length.
[  102.941846][ T6086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.65'.
[  104.545888][ T6041] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  104.806290][ T6114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.147490][ T6130] Cannot find del_set index 4 as target
[  105.374789][ T6140] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  105.568877][   T13] IPVS: starting estimator thread 0...
[  105.589500][ T6140] netlink: 36 bytes leftover after parsing attributes in process `syz.3.78'.
[  105.592970][ T6147] netlink: 60 bytes leftover after parsing attributes in process `syz.4.80'.
[  105.658756][ T6148] IPVS: using max 26 ests per chain, 62400 per kthread
[  106.102420][ T6158] netlink: 20 bytes leftover after parsing attributes in process `syz.4.82'.
[  106.378134][ T6126] netlink: 24 bytes leftover after parsing attributes in process `syz.0.76'.
[  107.042093][ T6180] netlink: 'syz.3.90': attribute type 10 has an invalid length.
[  107.042114][ T6180] netlink: 55 bytes leftover after parsing attributes in process `syz.3.90'.
[  107.107796][ T6184] netlink: 60 bytes leftover after parsing attributes in process `syz.4.92'.
[  107.301345][ T6198] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1
[  107.661671][ T6207] netlink: 'syz.2.97': attribute type 1 has an invalid length.
[  107.783352][ T6206] x_tables: unsorted underflow at hook 2
[  107.861011][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.98'.
[  107.880530][ T6207] 8021q: adding VLAN 0 to HW filter on device bond1
[  107.998705][ T6226] netlink: 172 bytes leftover after parsing attributes in process `syz.4.100'.
[  108.209121][ T6235] netlink: 'syz.0.102': attribute type 10 has an invalid length.
[  108.327365][ T6235] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  108.421480][ T6235] team0: Port device netdevsim1 added
[  108.479462][ T6241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.104'.
[  108.615185][ T6229] netlink: 24 bytes leftover after parsing attributes in process `syz.3.101'.
[  108.616730][ T6251] openvswitch: netlink: Message has 8 unknown bytes.
[  109.157543][ T6272] tipc: Started in network mode
[  109.157568][ T6272] tipc: Node identity 2000004, cluster identity 4711
[  109.157582][ T6272] tipc: Node number set to 33554436
[  109.707655][ T6294] netlink: 'syz.0.118': attribute type 29 has an invalid length.
[  110.372688][ T6314] dvmrp0: entered allmulticast mode
[  110.481374][ T6314] dvmrp0: left allmulticast mode
[  110.681538][ T6326] syzkaller0: entered promiscuous mode
[  110.681563][ T6326] syzkaller0: entered allmulticast mode
[  110.954527][ T6315] __nla_validate_parse: 7 callbacks suppressed
[  110.954548][ T6315] netlink: 24 bytes leftover after parsing attributes in process `syz.1.123'.
[  111.232700][ T6338] netlink: 'syz.3.130': attribute type 2 has an invalid length.
[  111.363756][ T6341] netlink: 32 bytes leftover after parsing attributes in process `syz.0.128'.
[  111.576096][ T6355] netlink: 60 bytes leftover after parsing attributes in process `syz.3.132'.
[  111.698600][ T6360] netlink: 'syz.3.136': attribute type 16 has an invalid length.
[  111.707469][ T6360] warning: `syz.3.136' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  111.854687][ T6370] batadv_slave_1: entered promiscuous mode
[  112.123920][ T6378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.139'.
[  112.153774][ T6378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.139'.
[  112.411034][ T6390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.141'.
[  112.579277][ T6405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.143'.
[  112.609585][ T6405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.143'.
[  112.715587][ T6374] batadv_slave_1: left promiscuous mode
[  112.971542][ T6413] netlink: 60 bytes leftover after parsing attributes in process `syz.1.146'.
[  113.339417][ T6428] netlink: 100 bytes leftover after parsing attributes in process `syz.4.147'.
[  113.623741][ T6445] netlink: 'syz.1.152': attribute type 2 has an invalid length.
[  113.670704][ T6416] sctp: [Deprecated]: syz.4.147 (pid 6416) Use of struct sctp_assoc_value in delayed_ack socket option.
[  113.670704][ T6416] Use struct sctp_sack_info instead
[  114.322675][ T6473] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.795866][ T6496] IPVS: rr: UDP [::1]:8080 - no destination available
[  115.113083][ T6509] netlink: 'syz.2.173': attribute type 1 has an invalid length.
[  115.228571][ T6509] veth3: entered allmulticast mode
[  115.280469][ T6511] macvlan2: entered promiscuous mode
[  115.280496][ T6511] macvlan2: entered allmulticast mode
[  115.281479][ T6511] bond2: entered promiscuous mode
[  115.299176][ T6511] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  115.320146][ T6511] bond2: left promiscuous mode
[  116.276480][ T6524] batadv_slave_1: entered promiscuous mode
[  116.286682][ T6526] batadv_slave_1: left promiscuous mode
[  116.585497][   T13] IPVS: starting estimator thread 0...
[  116.593884][ T6535] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available
[  116.617231][ T6534] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.663300][ T6534] bridge_slave_0 (unregistering): left allmulticast mode
[  116.663331][ T6534] bridge_slave_0 (unregistering): left promiscuous mode
[  116.663425][ T6534] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.678882][ T6545] IPVS: using max 27 ests per chain, 64800 per kthread
[  116.766471][ T6548] netlink: 'syz.4.178': attribute type 1 has an invalid length.
[  116.811600][ T6556] IPVS: set_ctl: invalid protocol: 10 0.0.0.0:0
[  116.925654][ T6544] __nla_validate_parse: 25 callbacks suppressed
[  116.925671][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.181'.
[  116.954216][ T6553] netlink: 'syz.3.182': attribute type 3 has an invalid length.
[  116.997347][ T6548] IPVS: Scheduler module ip_vs_sip not found
[  117.428964][ T6576] netlink: 20 bytes leftover after parsing attributes in process `syz.2.189'.
[  117.429044][ T6576] openvswitch: netlink: Missing key (keys=c0, expected=100)
[  117.532747][ T6573] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  117.553124][ T6573] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  117.585348][ T6579] netlink: 40 bytes leftover after parsing attributes in process `syz.3.190'.
[  117.755454][ T6585] netlink: 72 bytes leftover after parsing attributes in process `syz.4.193'.
[  117.903615][ T6592] netlink: 'syz.0.195': attribute type 1 has an invalid length.
[  117.972495][ T6592] 8021q: adding VLAN 0 to HW filter on device bond2
[  118.016732][ T6592] netlink: 'syz.0.195': attribute type 10 has an invalid length.
[  118.016766][ T6592] netlink: 40 bytes leftover after parsing attributes in process `syz.0.195'.
[  118.016851][ T6592] dummy0: entered promiscuous mode
[  118.050214][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.195'.
[  118.050239][ T6604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.195'.
[  118.106513][ T6605] veth1_to_hsr: entered allmulticast mode
[  118.370154][ T6615] sctp: [Deprecated]: syz.2.199 (pid 6615) Use of int in max_burst socket option.
[  118.370154][ T6615] Use struct sctp_assoc_value instead
[  118.582824][ T6627] netlink: 96 bytes leftover after parsing attributes in process `syz.2.199'.
[  118.672132][ T6627] vlan2: entered allmulticast mode
[  118.672160][ T6627] syz_tun: entered allmulticast mode
[  118.764638][ T6615] sctp: [Deprecated]: syz.2.199 (pid 6615) Use of int in max_burst socket option.
[  118.764638][ T6615] Use struct sctp_assoc_value instead
[  119.865728][ T6667] netlink: 44 bytes leftover after parsing attributes in process `syz.0.207'.
[  119.952121][ T6671] syzkaller0: entered promiscuous mode
[  119.952147][ T6671] syzkaller0: entered allmulticast mode
[  120.050525][ T6678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.212'.
[  120.166664][ T6678] 8021q: adding VLAN 0 to HW filter on device bond2
[  120.309809][ T6679] 8021q: adding VLAN 0 to HW filter on device bond3
[  120.572096][ T6699] Bluetooth: MGMT ver 1.23
[  120.619703][ T6703] IPv6: NLM_F_CREATE should be specified when creating new route
[  120.991203][ T6731] netlink: zone id is out of range
[  120.991221][ T6731] netlink: get zone limit has 4 unknown bytes
[  121.847615][ T6741] macsec1: entered promiscuous mode
[  121.847643][ T6741] bridge0: entered promiscuous mode
[  122.188273][ T6788] __nla_validate_parse: 4 callbacks suppressed
[  122.188300][ T6788] netlink: 20 bytes leftover after parsing attributes in process `syz.2.227'.
[  122.227806][ T6788] netlink: 20 bytes leftover after parsing attributes in process `syz.2.227'.
[  122.504010][ T6795] netlink: 16 bytes leftover after parsing attributes in process `syz.3.228'.
[  122.535603][ T6795] veth1_to_team: entered promiscuous mode
[  122.547323][ T6795] veth1_to_team: left promiscuous mode
[  122.571798][ T6800] netlink: 32 bytes leftover after parsing attributes in process `syz.3.228'.
[  122.576955][ T6804] netlink: 16 bytes leftover after parsing attributes in process `syz.0.231'.
[  122.673299][ T6805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.231'.
[  122.733838][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.233'.
[  122.816905][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.233'.
[  123.002388][ T6829] syzkaller0: entered promiscuous mode
[  123.002413][ T6829] syzkaller0: entered allmulticast mode
[  123.834331][ T6856] syzkaller0: entered promiscuous mode
[  123.834358][ T6856] syzkaller0: entered allmulticast mode
[  124.689257][ T6758] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  125.347249][ T6889] netlink: 20 bytes leftover after parsing attributes in process `syz.4.250'.
[  126.424021][ T6909] netlink: 'syz.4.252': attribute type 1 has an invalid length.
[  126.424046][ T6909] netlink: 244 bytes leftover after parsing attributes in process `syz.4.252'.
[  126.661331][ T6925] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  126.709528][ T6930] netlink: 'syz.1.256': attribute type 21 has an invalid length.
[  126.804105][ T6925] openvswitch: netlink: Flow actions attr not present in new flow.
[  126.878006][ T6940] Bluetooth: hci0: unsupported parameter 5135
[  126.878031][ T6940] Bluetooth: hci0: unsupported parameter 8192
[  126.878050][ T6940] Bluetooth: hci0: unsupported parameter 5135
[  126.878064][ T6940] Bluetooth: hci0: unsupported parameter 8192
[  126.976418][ T6916] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.976670][ T6930] netlink: 'syz.1.256': attribute type 1 has an invalid length.
[  126.977294][ T6920] syzkaller0: entered promiscuous mode
[  126.977317][ T6920] syzkaller0: entered allmulticast mode
[  127.224580][ T6920] tipc: Resetting bearer <eth:syzkaller0>
[  127.263984][ T6948] __nla_validate_parse: 3 callbacks suppressed
[  127.264009][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.258'.
[  127.264048][ T6948] netlink: 'syz.0.258': attribute type 20 has an invalid length.
[  127.264063][ T6948] netlink: 'syz.0.258': attribute type 21 has an invalid length.
[  127.549633][ T6914] tipc: Resetting bearer <eth:syzkaller0>
[  127.594217][ T6914] tipc: Disabling bearer <eth:syzkaller0>
[  127.675534][ T6960] netlink: 24 bytes leftover after parsing attributes in process `syz.0.261'.
[  127.796389][ T6958] netlink: 32 bytes leftover after parsing attributes in process `syz.1.260'.
[  127.927900][ T6977] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.983178][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.263'.
[  127.984966][ T6977] netlink: 32 bytes leftover after parsing attributes in process `syz.3.263'.
[  128.655517][ T7007] batman_adv: batadv0: Adding interface: gretap1
[  128.655537][ T7007] batman_adv: batadv0: The MTU of interface gretap1 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  128.655568][ T7007] batman_adv: batadv0: Interface activated: gretap1
[  128.754026][ T7013] netlink: 'syz.4.269': attribute type 1 has an invalid length.
[  128.900875][ T7018] veth3: entered allmulticast mode
[  129.043254][ T7037] netlink: 'syz.4.269': attribute type 1 has an invalid length.
[  129.284968][ T7016] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.285686][ T7016] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.837013][ T7016] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  129.854767][ T7016] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  129.984699][ T7037] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  130.070349][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.070405][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.070442][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.070479][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.262993][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.273'.
[  130.284464][ T7071] netlink: 'syz.4.273': attribute type 1 has an invalid length.
[  130.284486][ T7071] netlink: 'syz.4.273': attribute type 7 has an invalid length.
[  130.284500][ T7071] netlink: 'syz.4.273': attribute type 8 has an invalid length.
[  130.284515][ T7071] netlink: 208 bytes leftover after parsing attributes in process `syz.4.273'.
[  130.284559][ T7071] NCSI netlink: No device for ifindex 1073545264
[  130.419276][ T7071] netlink: 8183 bytes leftover after parsing attributes in process `syz.4.273'.
[  130.753616][ T7087] netlink: 276 bytes leftover after parsing attributes in process `syz.3.277'.
[  130.826225][ T7089] xt_hashlimit: overflow, try lower: 18446744073709551614/255
[  130.886943][ T7094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.279'.
[  130.949634][ T7095] x_tables: unsorted underflow at hook 4
[  132.881566][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  132.881658][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  133.107298][ T7179] netlink: 1 bytes leftover after parsing attributes in process `syz.0.292'.
[  133.191256][ T7180] netlink: 'syz.0.292': attribute type 1 has an invalid length.
[  133.191281][ T7180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.292'.
[  133.494929][ T7192] netlink: 20 bytes leftover after parsing attributes in process `syz.2.296'.
[  133.555861][ T7185] netlink: 24 bytes leftover after parsing attributes in process `syz.4.294'.
[  133.556235][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.296'.
[  133.926009][ T7200] vxcan0: tx drop: invalid sa for name 0x0000000000000003
[  133.969758][ T7202] bond3 (unregistering): Released all slaves
[  134.201920][ T7201] bond3 (unregistering): Released all slaves
[  134.224676][ T7219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.302'.
[  134.250997][ T7210] syz_tun: entered allmulticast mode
[  134.252901][ T7219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.302'.
[  134.371412][ T7221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.304'.
[  134.371728][ T7221] bridge_slave_1: left allmulticast mode
[  134.371752][ T7221] bridge_slave_1: left promiscuous mode
[  134.372178][ T7221] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.409355][ T7221] bridge_slave_0: left allmulticast mode
[  134.409382][ T7221] bridge_slave_0: left promiscuous mode
[  134.409618][ T7221] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.438262][ T7224] netlink: 52 bytes leftover after parsing attributes in process `syz.4.303'.
[  134.748268][ T7200] syz_tun: left allmulticast mode
[  135.203785][ T7246] netlink: 24 bytes leftover after parsing attributes in process `syz.2.313'.
[  135.521162][ T7234] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  135.725767][ T7264] netlink: 'syz.4.316': attribute type 1 has an invalid length.
[  135.860365][ T7264] 8021q: adding VLAN 0 to HW filter on device bond4
[  136.094246][ T7281] netlink: 'syz.2.319': attribute type 29 has an invalid length.
[  136.236165][ T7284] ovs-system: entered promiscuous mode
[  136.931810][ T7314] netlink: 'syz.0.327': attribute type 1 has an invalid length.
[  137.165157][ T7309] syzkaller1: entered promiscuous mode
[  137.165184][ T7309] syzkaller1: entered allmulticast mode
[  137.233236][ T7318] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  137.470309][ T7329] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  140.441445][ T7344] __nla_validate_parse: 4 callbacks suppressed
[  140.441466][ T7344] netlink: 20 bytes leftover after parsing attributes in process `syz.2.336'.
[  140.515368][ T7351] netlink: 20 bytes leftover after parsing attributes in process `syz.2.336'.
[  140.791217][ T7359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.339'.
[  140.810606][ T7361] netlink: 'syz.3.340': attribute type 1 has an invalid length.
[  140.810630][ T7361] netlink: 64399 bytes leftover after parsing attributes in process `syz.3.340'.
[  140.843831][ T7366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.339'.
[  140.863648][ T7363] ip_tables: iptables: counters copy to user failed while replacing table
[  141.157280][ T7378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.345'.
[  141.201843][ T7378] netlink: 'syz.1.345': attribute type 4 has an invalid length.
[  141.245063][ T7378] netlink: 'syz.1.345': attribute type 4 has an invalid length.
[  141.429660][ T7388] netlink: 72 bytes leftover after parsing attributes in process `syz.2.347'.
[  141.539829][ T7392] netlink: 36 bytes leftover after parsing attributes in process `syz.0.348'.
[  141.766355][ T7402] openvswitch: netlink: Key type 285 is out of range max 32
[  142.035617][ T7386] netlink: 24 bytes leftover after parsing attributes in process `syz.3.346'.
[  142.382113][ T7418] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  142.654329][ T7422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.357'.
[  142.790060][ T7434] syzkaller0: entered promiscuous mode
[  142.790087][ T7434] syzkaller0: entered allmulticast mode
[  142.793778][ T7434] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  142.834655][ T7431] bond4 (unregistering): Released all slaves
[  142.915746][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880687edc00: rx timeout, send abort
[  142.917549][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880687edc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  142.964573][ T7433] tipc: Resetting bearer <eth:syzkaller0>
[  143.056457][ T7433] tipc: Disabling bearer <eth:syzkaller0>
[  143.146932][ T7448] syzkaller1: entered promiscuous mode
[  143.146958][ T7448] syzkaller1: entered allmulticast mode
[  144.140983][ T7485] af_packet: packet size is too long (65554 > 2016)
[  144.203153][ T7491] af_packet: packet size is too long (65554 > 2016)
[  144.493324][ T7503] vlan0: entered allmulticast mode
[  144.493344][ T7503] bond0: entered allmulticast mode
[  144.493355][ T7503] bond_slave_0: entered allmulticast mode
[  144.493368][ T7503] bond_slave_1: entered allmulticast mode
[  144.667213][ T7507] netlink: 'syz.3.379': attribute type 10 has an invalid length.
[  144.686397][ T7507] team0: Port device dummy0 added
[  144.695610][ T7507] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  144.895895][ T7515] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  144.912898][ T7515] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  146.134858][ T7447] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  146.262673][ T3407] IPVS: starting estimator thread 0...
[  146.349208][ T7522] IPVS: using max 28 ests per chain, 67200 per kthread
[  146.381972][ T7527] x_tables: duplicate underflow at hook 2
[  146.443427][ T7527] __nla_validate_parse: 11 callbacks suppressed
[  146.443450][ T7527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.388'.
[  146.603408][ T7536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.390'.
[  146.732086][ T7536] 8021q: adding VLAN 0 to HW filter on device bond4
[  146.780404][ T7540] syzkaller0: entered promiscuous mode
[  146.780431][ T7540] syzkaller0: entered allmulticast mode
[  147.036751][ T7547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.393'.
[  148.086533][ T7585] netlink: 'syz.3.404': attribute type 1 has an invalid length.
[  148.293720][ T7585] 8021q: adding VLAN 0 to HW filter on device bond4
[  148.438966][ T7586] bond4: (slave veth3): Enslaving as an active interface with a down link
[  148.559283][ T7588] team0: Port device dummy0 removed
[  148.588980][ T7588] bond4: (slave dummy0): Enslaving as an active interface with a down link
[  148.612930][ T7594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.408'.
[  148.905011][ T7586] bond4: (slave veth5): Enslaving as an active interface with a down link
[  148.942021][ T7582] netlink: 24 bytes leftover after parsing attributes in process `syz.0.403'.
[  149.034214][ T7606] ip6_vti0: entered allmulticast mode
[  149.131833][ T7616] netlink: 'syz.3.409': attribute type 2 has an invalid length.
[  149.131858][ T7616] netlink: 224 bytes leftover after parsing attributes in process `syz.3.409'.
[  149.178092][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  149.179188][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  149.179365][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  149.212521][ T3356] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  149.291738][ T7614] netlink: 'syz.3.409': attribute type 10 has an invalid length.
[  149.306700][ T7614] bond4: (slave dummy0): Releasing active interface
[  149.352028][ T7614] team0: Port device dummy0 added
[  149.474847][ T7624] netlink: 20 bytes leftover after parsing attributes in process `syz.3.413'.
[  149.474887][ T7624] openvswitch: netlink: Invalid VLAN frame
[  149.475749][ T7624] syzkaller1: entered promiscuous mode
[  149.475772][ T7624] syzkaller1: entered allmulticast mode
[  149.680651][ T5620] Bluetooth: hci4: link tx timeout
[  149.680988][ T5620] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  149.683956][ T5620] Bluetooth: hci4: link tx timeout
[  149.683974][ T5620] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  149.685251][ T5620] Bluetooth: hci4: link tx timeout
[  149.685268][ T5620] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  149.685294][ T5620] Bluetooth: hci4: link tx timeout
[  149.685305][ T5620] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  149.685690][ T5620] Bluetooth: hci4: link tx timeout
[  149.685703][ T5620] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  149.685724][ T5620] Bluetooth: hci4: link tx timeout
[  149.685735][ T5620] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  149.685802][ T5620] Bluetooth: hci4: link tx timeout
[  149.685814][ T5620] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  149.686009][ T5620] Bluetooth: hci4: link tx timeout
[  149.686022][ T5620] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  149.687603][ T5620] Bluetooth: hci4: link tx timeout
[  149.687621][ T5620] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  149.687873][ T5620] Bluetooth: hci4: link tx timeout
[  149.687887][ T5620] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  149.979210][ T7644] batadv0: entered allmulticast mode
[  149.982776][ T7644] 8021q: adding VLAN 0 to HW filter on device batadv0
[  149.983763][ T7644] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  150.020049][ T7644] netlink: 36 bytes leftover after parsing attributes in process `syz.2.415'.
[  150.034297][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.416'.
[  150.075154][ T7642] netlink: 24 bytes leftover after parsing attributes in process `syz.0.416'.
[  150.634589][ T5620] Bluetooth: hci1: SCO packet too small
[  151.470418][ T7694] __nla_validate_parse: 4 callbacks suppressed
[  151.470443][ T7694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.430'.
[  151.594214][ T7701] netlink: 68 bytes leftover after parsing attributes in process `syz.4.433'.
[  151.659338][ T7705] netlink: 16 bytes leftover after parsing attributes in process `syz.4.433'.
[  151.759787][ T5620] Bluetooth: hci4: command 0x0406 tx timeout
[  152.702527][ T7722] netlink: 100 bytes leftover after parsing attributes in process `syz.1.437'.
[  153.114190][ T7744] netlink: 'syz.0.444': attribute type 40 has an invalid length.
[  153.140581][ T7746] netlink: 24 bytes leftover after parsing attributes in process `syz.2.443'.
[  153.215410][ T7744] netlink: 5 bytes leftover after parsing attributes in process `syz.0.444'.
[  153.215439][ T7744] netlink: 5 bytes leftover after parsing attributes in process `syz.0.444'.
[  153.215457][ T7744] netlink: 32 bytes leftover after parsing attributes in process `syz.0.444'.
[  153.215536][ T7744] netlink: 116 bytes leftover after parsing attributes in process `syz.0.444'.
[  153.292832][ T7744] bridge2: entered promiscuous mode
[  153.303622][ T7753] IPVS: ip_vs_add_dest(): server weight less than zero
[  153.304798][ T7753] IPVS: rr: UDP 127.0.0.1:10000 - no destination available
[  153.354491][ T7751] netlink: 32 bytes leftover after parsing attributes in process `syz.2.443'.
[  153.628770][ T7759] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  153.700131][ T7774] Unsupported ieee802154 address type: 0
[  154.749506][ T7770] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  154.779031][ T7797] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004
[  155.784333][ T7826] debugfs: 'netdev:syzkaller0' already exists in 'phy6'
[  155.859553][ T7828] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96
[  156.491067][ T7842] __nla_validate_parse: 7 callbacks suppressed
[  156.491091][ T7842] netlink: 16 bytes leftover after parsing attributes in process `syz.3.467'.
[  156.496518][ T7842] netlink: Invalid conntrack helper
[  156.496553][ T7842] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  156.523800][ T7842] IPVS: mh: UDP 127.0.0.1:20000 - no destination available
[  156.577581][ T7845] veth1_macvtap: left promiscuous mode
[  156.577614][ T7845] macsec0: entered allmulticast mode
[  156.651934][ T7845] veth1_macvtap: entered promiscuous mode
[  156.651962][ T7845] veth1_macvtap: entered allmulticast mode
[  156.652145][ T7845] macsec0: left allmulticast mode
[  156.652166][ T7845] veth1_macvtap: left allmulticast mode
[  156.783977][ T7851] netlink: 128 bytes leftover after parsing attributes in process `syz.1.469'.
[  156.967538][ T7856] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000
[  157.081476][ T7861] syzkaller0: entered promiscuous mode
[  157.081503][ T7861] syzkaller0: entered allmulticast mode
[  157.105692][ T7861] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.141718][ T7856] netlink: 40 bytes leftover after parsing attributes in process `syz.0.473'.
[  157.190118][ T7863] netlink: 116 bytes leftover after parsing attributes in process `syz.1.476'.
[  157.247310][ T7864] tipc: Resetting bearer <eth:syzkaller0>
[  157.272803][ T7869] netlink: 60 bytes leftover after parsing attributes in process `syz.0.477'.
[  157.483061][ T7876] ªªªªªª: renamed from vlan0
[  157.571130][ T7879] nbd4: detected capacity change from 0 to 63
[  157.704577][ T7879] netlink: 'syz.4.481': attribute type 1 has an invalid length.
[  157.763710][ T7879] 8021q: adding VLAN 0 to HW filter on device bond5
[  157.835545][ T7889] bond5: (slave veth3): Enslaving as an active interface with a down link
[  157.848572][ T7879] netlink: 328 bytes leftover after parsing attributes in process `syz.4.481'.
[  157.848651][ T7879] netlink: 'syz.4.481': attribute type 9 has an invalid length.
[  157.848667][ T7879] netlink: 108 bytes leftover after parsing attributes in process `syz.4.481'.
[  157.848697][ T7879] netlink: 32 bytes leftover after parsing attributes in process `syz.4.481'.
[  157.898312][ T5629] block nbd4: Receive control failed (result -104)
[  157.902886][ T7860] tipc: Resetting bearer <eth:syzkaller0>
[  157.989464][ T7860] tipc: Disabling bearer <eth:syzkaller0>
[  158.057597][ T7896] ovs-s: entered promiscuous mode
[  158.078199][ T7896] openvswitch: ovs-s: Dropping previously announced user features
[  158.365947][ T7907] netlink: 279 bytes leftover after parsing attributes in process `syz.0.488'.
[  158.365973][ T7907] veth0_to_bond: default FDB implementation only supports local addresses
[  158.607338][ T7920] vcan0: tx drop: invalid da for name 0x0000000000000003
[  158.777194][ T7928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.492'.
[  160.982692][ T7992] No such timeout policy "s	"
[  160.982715][ T7992] netlink: Failed to associated timeout policy 's	'
[  161.495656][ T8020] geneve2: entered promiscuous mode
[  161.785793][ T8028] ip6t_hbh: unknown flags AD
[  161.786207][ T8028] __nla_validate_parse: 4 callbacks suppressed
[  161.786225][ T8028] netlink: 32 bytes leftover after parsing attributes in process `syz.2.514'.
[  162.192885][ T8043] team0: Device xfrm0 is of different type
[  162.406576][ T8069] netlink: 40 bytes leftover after parsing attributes in process `syz.1.524'.
[  162.491543][ T8069] ip6tnl1: entered allmulticast mode
[  162.974664][ T8096] bridge0: port 3(wlan1) entered blocking state
[  162.977147][ T8096] bridge0: port 3(wlan1) entered disabled state
[  162.977434][ T8096] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  163.027145][ T8096] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[  163.095183][ T8097] mac80211_hwsim hwsim11 wlan1 (unregistering): left allmulticast mode
[  163.095209][ T8097] mac80211_hwsim hwsim11 wlan1 (unregistering): left promiscuous mode
[  163.095347][ T8097] bridge0: port 3(wlan1) entered disabled state
[  163.429145][ T8112] netlink: 20 bytes leftover after parsing attributes in process `syz.3.534'.
[  163.431229][ T8112] netlink: 72 bytes leftover after parsing attributes in process `syz.3.534'.
[  163.916495][ T8130] netlink: 20 bytes leftover after parsing attributes in process `syz.0.541'.
[  163.928822][ T8133] ieee802154 phy0 wpan0: encryption failed: -22
[  164.025685][ T8130] syzkaller1: entered promiscuous mode
[  164.025710][ T8130] syzkaller1: entered allmulticast mode
[  164.047384][ T8130] syzkaller1: left promiscuous mode
[  164.399929][ T8156] netlink: 'syz.2.546': attribute type 10 has an invalid length.
[  164.405154][ T8156] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  164.431117][ T8156] team0: Port device netdevsim1 added
[  164.716438][ T8175] netlink: 20 bytes leftover after parsing attributes in process `syz.0.550'.
[  164.732943][ T8175] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  164.733748][ T8175] netlink: 16 bytes leftover after parsing attributes in process `syz.0.550'.
[  164.758659][ T8178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.551'.
[  164.794542][ T8178] netlink: 112 bytes leftover after parsing attributes in process `syz.2.551'.
[  164.975444][ T8186] netlink: 'syz.2.553': attribute type 1 has an invalid length.
[  165.075675][ T8186] 8021q: adding VLAN 0 to HW filter on device bond6
[  179.879592][ T5620] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  179.882574][ T5620] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  179.885219][ T5620] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  179.894895][ T5620] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  179.902753][ T5620] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  179.986216][ T5629] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  179.995592][ T5629] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  179.996788][ T5629] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  180.021673][ T5629] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  180.022381][ T5629] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  180.125759][ T5629] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  180.136374][ T5629] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  180.137099][ T5629] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  180.143335][ T5629] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  180.156774][ T5629] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  181.057572][ T5629] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  181.067115][ T5629] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  181.076620][ T5629] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  181.086477][ T5629] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  181.095275][ T5629] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  181.205952][ T5629] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  181.216048][ T5629] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  181.226002][ T5629] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  181.239905][ T5629] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  181.249616][ T5629] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  181.624223][ T8198] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.624411][ T8198] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.624557][ T8198] bridge_slave_0: entered allmulticast mode
[  181.626503][ T8198] bridge_slave_0: entered promiscuous mode
[  181.728537][ T8198] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.728725][ T8198] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.728884][ T8198] bridge_slave_1: entered allmulticast mode
[  181.734123][ T8198] bridge_slave_1: entered promiscuous mode
[  181.861110][ T8198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  181.902379][ T8198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  181.992603][ T5629] Bluetooth: hci5: command tx timeout
[  182.023925][ T8198] team0: Port device team_slave_0 added
[  182.044839][ T8196] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.045032][ T8196] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.045184][ T8196] bridge_slave_0: entered allmulticast mode
[  182.047273][ T8196] bridge_slave_0: entered promiscuous mode
[  182.069033][ T5629] Bluetooth: hci6: command tx timeout
[  182.082887][ T8198] team0: Port device team_slave_1 added
[  182.134361][ T8196] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.134560][ T8196] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.134670][ T8196] bridge_slave_1: entered allmulticast mode
[  182.135959][ T8196] bridge_slave_1: entered promiscuous mode
[  182.170053][ T8198] batman_adv: batadv0: Adding interface: batadv_slave_0
[  182.170071][ T8198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  182.170098][ T8198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  182.228260][ T5629] Bluetooth: hci7: command tx timeout
[  182.248341][ T8198] batman_adv: batadv0: Adding interface: batadv_slave_1
[  182.248359][ T8198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  182.248397][ T8198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  182.256576][ T8196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  182.264894][ T8196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  182.411649][ T8196] team0: Port device team_slave_0 added
[  182.430107][ T8203] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.430343][ T8203] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.430463][ T8203] bridge_slave_0: entered allmulticast mode
[  182.431878][ T8203] bridge_slave_0: entered promiscuous mode
[  182.477354][ T8196] team0: Port device team_slave_1 added
[  182.493171][ T8203] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.493348][ T8203] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.493845][ T8203] bridge_slave_1: entered allmulticast mode
[  182.495555][ T8203] bridge_slave_1: entered promiscuous mode
[  182.550118][ T8198] hsr_slave_0: entered promiscuous mode
[  182.550952][ T8198] hsr_slave_1: entered promiscuous mode
[  182.551506][ T8198] debugfs: 'hsr0' already exists in 'hsr'
[  182.551527][ T8198] Cannot create hsr debugfs directory
[  182.606568][ T8196] batman_adv: batadv0: Adding interface: batadv_slave_0
[  182.606589][ T8196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  182.606616][ T8196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  182.671555][ T8196] batman_adv: batadv0: Adding interface: batadv_slave_1
[  182.671575][ T8196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  182.671602][ T8196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  182.730391][ T8203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  182.744618][ T8203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  182.847065][ T8203] team0: Port device team_slave_0 added
[  182.888635][ T8196] hsr_slave_0: entered promiscuous mode
[  182.889436][ T8196] hsr_slave_1: entered promiscuous mode
[  182.890023][ T8196] debugfs: 'hsr0' already exists in 'hsr'
[  182.890050][ T8196] Cannot create hsr debugfs directory
[  182.892464][ T8203] team0: Port device team_slave_1 added
[  183.005471][ T8203] batman_adv: batadv0: Adding interface: batadv_slave_0
[  183.005489][ T8203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  183.005512][ T8203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  183.073261][ T8203] batman_adv: batadv0: Adding interface: batadv_slave_1
[  183.073279][ T8203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  183.073333][ T8203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  183.187960][ T5629] Bluetooth: hci8: command tx timeout
[  183.316101][ T8203] hsr_slave_0: entered promiscuous mode
[  183.317337][ T8203] hsr_slave_1: entered promiscuous mode
[  183.321311][ T8203] debugfs: 'hsr0' already exists in 'hsr'
[  183.321368][ T8203] Cannot create hsr debugfs directory
[  183.350604][ T5629] Bluetooth: hci9: command tx timeout
[  183.754855][ T8232] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.755015][ T8232] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.755317][ T8232] bridge_slave_0: entered allmulticast mode
[  183.756737][ T8232] bridge_slave_0: entered promiscuous mode
[  183.802335][ T8232] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.802510][ T8232] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.802669][ T8232] bridge_slave_1: entered allmulticast mode
[  183.805125][ T8232] bridge_slave_1: entered promiscuous mode
[  183.849602][ T8236] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.849705][ T8236] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.849846][ T8236] bridge_slave_0: entered allmulticast mode
[  183.851515][ T8236] bridge_slave_0: entered promiscuous mode
[  183.900631][ T8236] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.900802][ T8236] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.900972][ T8236] bridge_slave_1: entered allmulticast mode
[  183.902656][ T8236] bridge_slave_1: entered promiscuous mode
[  183.975726][ T8232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  183.990477][ T8232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  183.993437][ T8236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  184.032738][ T8236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  184.068256][ T5629] Bluetooth: hci5: command tx timeout
[  184.102739][ T8236] team0: Port device team_slave_0 added
[  184.105059][ T8232] team0: Port device team_slave_0 added
[  184.121892][ T8232] team0: Port device team_slave_1 added
[  184.134778][ T8236] team0: Port device team_slave_1 added
[  184.148229][ T5629] Bluetooth: hci6: command tx timeout
[  184.197954][ T8232] batman_adv: batadv0: Adding interface: batadv_slave_0
[  184.197971][ T8232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  184.197994][ T8232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  184.200636][ T8236] batman_adv: batadv0: Adding interface: batadv_slave_0
[  184.200651][ T8236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  184.200674][ T8236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  184.202721][ T8232] batman_adv: batadv0: Adding interface: batadv_slave_1
[  184.202735][ T8232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  184.202757][ T8232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  184.340963][ T5629] Bluetooth: hci7: command tx timeout
[  184.370199][ T8236] batman_adv: batadv0: Adding interface: batadv_slave_1
[  184.370217][ T8236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  184.370240][ T8236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  184.452164][ T8232] hsr_slave_0: entered promiscuous mode
[  184.453245][ T8232] hsr_slave_1: entered promiscuous mode
[  184.453807][ T8232] debugfs: 'hsr0' already exists in 'hsr'
[  184.453827][ T8232] Cannot create hsr debugfs directory
[  184.540298][ T8236] hsr_slave_0: entered promiscuous mode
[  184.541098][ T8236] hsr_slave_1: entered promiscuous mode
[  184.541635][ T8236] debugfs: 'hsr0' already exists in 'hsr'
[  184.541657][ T8236] Cannot create hsr debugfs directory
[  185.268071][ T5629] Bluetooth: hci8: command tx timeout
[  185.427998][ T5629] Bluetooth: hci9: command tx timeout
[  186.148032][ T5629] Bluetooth: hci5: command tx timeout
[  186.228116][ T5629] Bluetooth: hci6: command tx timeout
[  186.388039][ T5629] Bluetooth: hci7: command tx timeout
[  187.348080][ T5629] Bluetooth: hci8: command tx timeout
[  187.508121][ T5629] Bluetooth: hci9: command tx timeout
[  187.910741][ T1737] block nbd4: Possible stuck request ffff888027dbe000: control (read@0,1024B). Runtime 30 seconds
[  187.911207][ T1737] block nbd4: Possible stuck request ffff888027dbe1c0: control (read@1024,1024B). Runtime 30 seconds
[  187.911232][ T1737] block nbd4: Possible stuck request ffff888027dbe380: control (read@2048,1024B). Runtime 30 seconds
[  187.911252][ T1737] block nbd4: Possible stuck request ffff888027dbe540: control (read@3072,1024B). Runtime 30 seconds
[  188.227996][ T5629] Bluetooth: hci5: command tx timeout
[  188.308170][ T5629] Bluetooth: hci6: command tx timeout
[  188.468260][ T5629] Bluetooth: hci7: command tx timeout
[  189.428027][ T5629] Bluetooth: hci8: command tx timeout
[  189.588020][ T5629] Bluetooth: hci9: command tx timeout
[  194.309965][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  194.310029][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  211.759608][ T5629] Bluetooth: hci2: command 0x0406 tx timeout
[  211.760210][ T5629] Bluetooth: hci1: command 0x0406 tx timeout
[  211.760416][ T5629] Bluetooth: hci0: command 0x0406 tx timeout
[  211.760445][ T5629] Bluetooth: hci3: command 0x0406 tx timeout
[  217.874296][ T4983] udevd[4983]: worker [5717] /devices/virtual/block/nbd4 is taking a long time
[  217.988241][ T1737] block nbd4: Possible stuck request ffff888027dbe000: control (read@0,1024B). Runtime 60 seconds
[  217.988288][ T1737] block nbd4: Possible stuck request ffff888027dbe1c0: control (read@1024,1024B). Runtime 60 seconds
[  217.988318][ T1737] block nbd4: Possible stuck request ffff888027dbe380: control (read@2048,1024B). Runtime 60 seconds
[  217.988347][ T1737] block nbd4: Possible stuck request ffff888027dbe540: control (read@3072,1024B). Runtime 60 seconds
[  240.490375][ T4933] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  240.492822][ T4933] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  240.505382][ T4933] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  240.514478][ T4933] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  240.522741][ T4933] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  240.569085][ T4933] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  240.577016][ T4933] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  240.588164][ T4933] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  240.604439][ T4933] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  240.605080][ T4933] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  240.670691][ T5632] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  240.675281][ T5632] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  240.693803][ T5632] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  240.695611][ T5632] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  240.696373][ T5632] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  242.041648][ T4933] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  242.046107][ T4933] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  242.046818][ T4933] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  242.059187][ T4933] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  242.071735][ T4933] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  242.141469][ T5632] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  242.143266][ T5632] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  242.145357][ T5632] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  242.146359][ T5632] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  242.147021][ T5632] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  242.265389][ T8292] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.265499][ T8292] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.265946][ T8292] bridge_slave_0: entered allmulticast mode
[  242.272810][ T8292] bridge_slave_0: entered promiscuous mode
[  242.343247][ T8292] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.343704][ T8292] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.343879][ T8292] bridge_slave_1: entered allmulticast mode
[  242.345962][ T8292] bridge_slave_1: entered promiscuous mode
[  242.532525][ T8292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  242.564687][ T8290] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.564925][ T8290] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.565463][ T8290] bridge_slave_0: entered allmulticast mode
[  242.593167][ T8290] bridge_slave_0: entered promiscuous mode
[  242.609749][ T8292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  242.629365][ T4933] Bluetooth: hci11: command tx timeout
[  242.629374][ T5632] Bluetooth: hci10: command tx timeout
[  242.656001][ T8296] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.656113][ T8296] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.656275][ T8296] bridge_slave_0: entered allmulticast mode
[  242.679269][ T8296] bridge_slave_0: entered promiscuous mode
[  242.689165][ T8290] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.689875][ T8290] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.690059][ T8290] bridge_slave_1: entered allmulticast mode
[  242.693231][ T8290] bridge_slave_1: entered promiscuous mode
[  242.745737][ T8296] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.745914][ T8296] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.746083][ T8296] bridge_slave_1: entered allmulticast mode
[  242.770544][ T8296] bridge_slave_1: entered promiscuous mode
[  242.788481][ T4933] Bluetooth: hci12: command tx timeout
[  242.842564][ T8292] team0: Port device team_slave_0 added
[  242.888862][ T8290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  242.893764][ T8292] team0: Port device team_slave_1 added
[  242.896907][ T8296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  242.925922][ T8290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  242.938793][ T8296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  243.016091][ T8292] batman_adv: batadv0: Adding interface: batadv_slave_0
[  243.016112][ T8292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  243.016140][ T8292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  243.100680][ T8292] batman_adv: batadv0: Adding interface: batadv_slave_1
[  243.100699][ T8292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  243.100726][ T8292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  243.165141][ T8296] team0: Port device team_slave_0 added
[  243.174315][ T8296] team0: Port device team_slave_1 added
[  243.186122][ T8290] team0: Port device team_slave_0 added
[  243.211880][ T8290] team0: Port device team_slave_1 added
[  243.279610][ T8296] batman_adv: batadv0: Adding interface: batadv_slave_0
[  243.279631][ T8296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  243.279659][ T8296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  243.281975][ T8296] batman_adv: batadv0: Adding interface: batadv_slave_1
[  243.281993][ T8296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  243.282020][ T8296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  243.379891][ T8292] hsr_slave_0: entered promiscuous mode
[  243.380808][ T8292] hsr_slave_1: entered promiscuous mode
[  243.381363][ T8292] debugfs: 'hsr0' already exists in 'hsr'
[  243.381384][ T8292] Cannot create hsr debugfs directory
[  243.429585][ T8290] batman_adv: batadv0: Adding interface: batadv_slave_0
[  243.429604][ T8290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  243.429629][ T8290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  243.435948][ T8290] batman_adv: batadv0: Adding interface: batadv_slave_1
[  243.435965][ T8290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  243.435989][ T8290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  243.596870][ T8296] hsr_slave_0: entered promiscuous mode
[  243.602457][ T8296] hsr_slave_1: entered promiscuous mode
[  243.604712][ T8296] debugfs: 'hsr0' already exists in 'hsr'
[  243.604780][ T8296] Cannot create hsr debugfs directory
[  243.788481][ T8290] hsr_slave_0: entered promiscuous mode
[  243.789385][ T8290] hsr_slave_1: entered promiscuous mode
[  243.790215][ T8290] debugfs: 'hsr0' already exists in 'hsr'
[  243.790236][ T8290] Cannot create hsr debugfs directory
[  244.148060][ T4933] Bluetooth: hci13: command tx timeout
[  244.228416][ T4933] Bluetooth: hci14: command tx timeout
[  244.522023][ T8337] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.522150][ T8337] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.522328][ T8337] bridge_slave_0: entered allmulticast mode
[  244.532707][ T8337] bridge_slave_0: entered promiscuous mode
[  244.600155][ T8337] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.600274][ T8337] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.600428][ T8337] bridge_slave_1: entered allmulticast mode
[  244.602355][ T8337] bridge_slave_1: entered promiscuous mode
[  244.641426][ T8340] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.641546][ T8340] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.641657][ T8340] bridge_slave_0: entered allmulticast mode
[  244.643007][ T8340] bridge_slave_0: entered promiscuous mode
[  244.650922][ T8340] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.651209][ T8340] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.651385][ T8340] bridge_slave_1: entered allmulticast mode
[  244.657276][ T8340] bridge_slave_1: entered promiscuous mode
[  244.708268][ T5632] Bluetooth: hci11: command tx timeout
[  244.708369][ T4933] Bluetooth: hci10: command tx timeout
[  244.757141][ T8337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  244.771625][ T8340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  244.775586][ T8337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  244.806713][ T8340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  244.865475][ T8337] team0: Port device team_slave_0 added
[  244.870054][ T4933] Bluetooth: hci12: command tx timeout
[  244.880727][ T8340] team0: Port device team_slave_0 added
[  244.883648][ T8337] team0: Port device team_slave_1 added
[  244.894409][ T8340] team0: Port device team_slave_1 added
[  244.942417][ T8337] batman_adv: batadv0: Adding interface: batadv_slave_0
[  244.942435][ T8337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  244.942459][ T8337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  245.003640][ T8337] batman_adv: batadv0: Adding interface: batadv_slave_1
[  245.003663][ T8337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  245.003684][ T8337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  245.004723][ T8340] batman_adv: batadv0: Adding interface: batadv_slave_0
[  245.004743][ T8340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  245.004766][ T8340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  245.029549][ T8340] batman_adv: batadv0: Adding interface: batadv_slave_1
[  245.029603][ T8340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  245.029757][ T8340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  245.193278][ T8337] hsr_slave_0: entered promiscuous mode
[  245.194136][ T8337] hsr_slave_1: entered promiscuous mode
[  245.194684][ T8337] debugfs: 'hsr0' already exists in 'hsr'
[  245.194705][ T8337] Cannot create hsr debugfs directory
[  245.243622][ T8340] hsr_slave_0: entered promiscuous mode
[  245.244440][ T8340] hsr_slave_1: entered promiscuous mode
[  245.245014][ T8340] debugfs: 'hsr0' already exists in 'hsr'
[  245.245038][ T8340] Cannot create hsr debugfs directory
[  246.227981][ T4933] Bluetooth: hci13: command tx timeout
[  246.307973][ T4933] Bluetooth: hci14: command tx timeout
[  246.788039][ T5632] Bluetooth: hci11: command tx timeout
[  246.788994][ T4933] Bluetooth: hci10: command tx timeout
[  246.948517][ T4933] Bluetooth: hci12: command tx timeout
[  248.071359][ T1737] block nbd4: Possible stuck request ffff888027dbe000: control (read@0,1024B). Runtime 90 seconds
[  248.071394][ T1737] block nbd4: Possible stuck request ffff888027dbe1c0: control (read@1024,1024B). Runtime 90 seconds
[  248.071415][ T1737] block nbd4: Possible stuck request ffff888027dbe380: control (read@2048,1024B). Runtime 90 seconds
[  248.071434][ T1737] block nbd4: Possible stuck request ffff888027dbe540: control (read@3072,1024B). Runtime 90 seconds
[  248.308244][ T4933] Bluetooth: hci13: command tx timeout
[  248.388156][ T4933] Bluetooth: hci14: command tx timeout
[  248.868142][ T4933] Bluetooth: hci10: command tx timeout
[  248.868153][ T5632] Bluetooth: hci11: command tx timeout
[  249.028225][ T5632] Bluetooth: hci12: command tx timeout
[  250.388003][ T5632] Bluetooth: hci13: command tx timeout
[  250.468046][ T5632] Bluetooth: hci14: command tx timeout
[  255.749994][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  255.750057][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  273.188341][ T4933] Bluetooth: hci4: command 0x0406 tx timeout
[  278.148410][ T1737] block nbd4: Possible stuck request ffff888027dbe000: control (read@0,1024B). Runtime 120 seconds
[  278.148456][ T1737] block nbd4: Possible stuck request ffff888027dbe1c0: control (read@1024,1024B). Runtime 120 seconds
[  278.148486][ T1737] block nbd4: Possible stuck request ffff888027dbe380: control (read@2048,1024B). Runtime 120 seconds
[  278.148516][ T1737] block nbd4: Possible stuck request ffff888027dbe540: control (read@3072,1024B). Runtime 120 seconds
[  300.507219][ T4933] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  300.515993][ T4933] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  300.520310][ T4933] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  300.532998][ T4933] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  300.533620][ T4933] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  300.575843][ T4933] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  300.585841][ T4933] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  300.586560][ T4933] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  300.604838][ T4933] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  300.605553][ T4933] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  301.438883][ T8383] bridge0: port 1(bridge_slave_0) entered blocking state
[  301.439047][ T8383] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.439520][ T8383] bridge_slave_0: entered allmulticast mode
[  301.441916][ T8383] bridge_slave_0: entered promiscuous mode
[  301.497334][ T8383] bridge0: port 2(bridge_slave_1) entered blocking state
[  301.497851][ T8383] bridge0: port 2(bridge_slave_1) entered disabled state
[  301.498006][ T8383] bridge_slave_1: entered allmulticast mode
[  301.500024][ T8383] bridge_slave_1: entered promiscuous mode
[  301.585864][ T4933] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  301.596426][ T4933] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  301.607424][ T4933] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  301.615649][ T4933] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  301.616412][ T4933] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  301.659524][ T8383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  301.686224][ T8383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  301.686419][ T8385] bridge0: port 1(bridge_slave_0) entered blocking state
[  301.686606][ T8385] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.686758][ T8385] bridge_slave_0: entered allmulticast mode
[  301.691970][ T8385] bridge_slave_0: entered promiscuous mode
[  301.699819][ T8385] bridge0: port 2(bridge_slave_1) entered blocking state
[  301.700096][ T8385] bridge0: port 2(bridge_slave_1) entered disabled state
[  301.701327][ T8385] bridge_slave_1: entered allmulticast mode
[  301.705928][ T8385] bridge_slave_1: entered promiscuous mode
[  301.811015][ T8383] team0: Port device team_slave_0 added
[  301.815293][ T8385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  301.844326][ T8383] team0: Port device team_slave_1 added
[  301.854672][ T8385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  301.934292][ T8383] batman_adv: batadv0: Adding interface: batadv_slave_0
[  301.934313][ T8383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  301.934342][ T8383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  301.940660][ T8385] team0: Port device team_slave_0 added
[  301.945826][ T8383] batman_adv: batadv0: Adding interface: batadv_slave_1
[  301.945879][ T8383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  301.945946][ T8383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  301.954744][ T8385] team0: Port device team_slave_1 added
[  302.062689][ T8385] batman_adv: batadv0: Adding interface: batadv_slave_0
[  302.062709][ T8385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  302.062736][ T8385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  302.064800][ T8385] batman_adv: batadv0: Adding interface: batadv_slave_1
[  302.064817][ T8385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  302.064851][ T8385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  302.211165][ T8383] hsr_slave_0: entered promiscuous mode
[  302.212316][ T8383] hsr_slave_1: entered promiscuous mode
[  302.213125][ T8383] debugfs: 'hsr0' already exists in 'hsr'
[  302.213147][ T8383] Cannot create hsr debugfs directory
[  302.302934][ T8385] hsr_slave_0: entered promiscuous mode
[  302.303878][ T8385] hsr_slave_1: entered promiscuous mode
[  302.304438][ T8385] debugfs: 'hsr0' already exists in 'hsr'
[  302.304458][ T8385] Cannot create hsr debugfs directory
[  302.628152][ T8422] Bluetooth: hci15: command tx timeout
[  302.696743][ T5635] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  302.707951][ T5632] Bluetooth: hci16: command tx timeout
[  302.708780][ T5635] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  302.712718][ T5635] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  302.713686][ T5635] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  302.714340][ T5635] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  302.848513][ T5635] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1
[  302.850547][ T5635] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9
[  302.851569][ T5635] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9
[  302.853114][ T5635] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4
[  302.853813][ T5635] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2
[  303.623013][ T8417] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.623152][ T8417] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.623268][ T8417] bridge_slave_0: entered allmulticast mode
[  303.624726][ T8417] bridge_slave_0: entered promiscuous mode
[  303.668111][ T8422] Bluetooth: hci17: command tx timeout
[  303.672987][ T8417] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.673162][ T8417] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.673301][ T8417] bridge_slave_1: entered allmulticast mode
[  303.674984][ T8417] bridge_slave_1: entered promiscuous mode
[  303.769857][ T8417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  303.779616][ T8417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  303.860132][ T8417] team0: Port device team_slave_0 added
[  303.884990][ T8417] team0: Port device team_slave_1 added
[  303.928751][ T8422] Bluetooth: hci8: command 0x0406 tx timeout
[  303.928783][ T5635] Bluetooth: hci5: command 0x0406 tx timeout
[  303.928794][ T8422] Bluetooth: hci7: command 0x0406 tx timeout
[  303.928815][ T5635] Bluetooth: hci6: command 0x0406 tx timeout
[  303.928845][ T5635] Bluetooth: hci9: command 0x0406 tx timeout
[  304.071747][ T8417] batman_adv: batadv0: Adding interface: batadv_slave_0
[  304.071765][ T8417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  304.071790][ T8417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  304.102011][ T8417] batman_adv: batadv0: Adding interface: batadv_slave_1
[  304.102065][ T8417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  304.102140][ T8417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  304.312305][ T8417] hsr_slave_0: entered promiscuous mode
[  304.313199][ T8417] hsr_slave_1: entered promiscuous mode
[  304.313823][ T8417] debugfs: 'hsr0' already exists in 'hsr'
[  304.313844][ T8417] Cannot create hsr debugfs directory
[  304.677392][ T8431] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.678734][ T8431] bridge0: port 1(bridge_slave_0) entered disabled state
[  304.679232][ T8431] bridge_slave_0: entered allmulticast mode
[  304.684945][ T8431] bridge_slave_0: entered promiscuous mode
[  304.708184][ T5620] Bluetooth: hci15: command tx timeout
[  304.736600][ T8431] bridge0: port 2(bridge_slave_1) entered blocking state
[  304.736777][ T8431] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.736920][ T8431] bridge_slave_1: entered allmulticast mode
[  304.747349][ T8431] bridge_slave_1: entered promiscuous mode
[  304.787991][ T5620] Bluetooth: hci18: command tx timeout
[  304.788559][ T5631] Bluetooth: hci16: command tx timeout
[  304.854485][ T8431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  304.885387][ T8431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  304.908912][ T8434] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.909067][ T8434] bridge0: port 1(bridge_slave_0) entered disabled state
[  304.909172][ T8434] bridge_slave_0: entered allmulticast mode
[  304.910613][ T8434] bridge_slave_0: entered promiscuous mode
[  304.922759][ T8434] bridge0: port 2(bridge_slave_1) entered blocking state
[  304.923040][ T8434] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.924262][ T8434] bridge_slave_1: entered allmulticast mode
[  304.930060][ T8434] bridge_slave_1: entered promiscuous mode
[  304.960570][ T5631] Bluetooth: hci19: command tx timeout
[  305.015566][ T8431] team0: Port device team_slave_0 added
[  305.037101][ T8431] team0: Port device team_slave_1 added
[  305.045468][ T8434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  305.073551][ T8434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  305.109781][ T8431] batman_adv: batadv0: Adding interface: batadv_slave_0
[  305.109802][ T8431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  305.109829][ T8431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  305.174141][ T8431] batman_adv: batadv0: Adding interface: batadv_slave_1
[  305.174162][ T8431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  305.174190][ T8431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  305.176516][ T8434] team0: Port device team_slave_0 added
[  305.234784][ T8434] team0: Port device team_slave_1 added
[  305.288024][ T8434] batman_adv: batadv0: Adding interface: batadv_slave_0
[  305.288044][ T8434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  305.288071][ T8434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  305.309015][ T8434] batman_adv: batadv0: Adding interface: batadv_slave_1
[  305.309100][ T8434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  305.309181][ T8434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  305.391315][ T8431] hsr_slave_0: entered promiscuous mode
[  305.392539][ T8431] hsr_slave_1: entered promiscuous mode
[  305.393362][ T8431] debugfs: 'hsr0' already exists in 'hsr'
[  305.393383][ T8431] Cannot create hsr debugfs directory
[  305.510735][ T8434] hsr_slave_0: entered promiscuous mode
[  305.511876][ T8434] hsr_slave_1: entered promiscuous mode
[  305.512711][ T8434] debugfs: 'hsr0' already exists in 'hsr'
[  305.512733][ T8434] Cannot create hsr debugfs directory
[  305.747962][ T5631] Bluetooth: hci17: command tx timeout
[  306.788039][ T5631] Bluetooth: hci15: command tx timeout
[  306.868066][ T5620] Bluetooth: hci16: command tx timeout
[  306.868515][ T5631] Bluetooth: hci18: command tx timeout
[  307.027851][ T5631] Bluetooth: hci19: command tx timeout
[  307.828127][ T5631] Bluetooth: hci17: command tx timeout
[  308.234097][ T1737] block nbd4: Possible stuck request ffff888027dbe000: control (read@0,1024B). Runtime 150 seconds
[  308.234135][ T1737] block nbd4: Possible stuck request ffff888027dbe1c0: control (read@1024,1024B). Runtime 150 seconds
[  308.234155][ T1737] block nbd4: Possible stuck request ffff888027dbe380: control (read@2048,1024B). Runtime 150 seconds
[  308.234175][ T1737] block nbd4: Possible stuck request ffff888027dbe540: control (read@3072,1024B). Runtime 150 seconds
[  308.868056][ T5631] Bluetooth: hci15: command tx timeout
[  308.948095][ T5620] Bluetooth: hci16: command tx timeout
[  308.951708][ T5631] Bluetooth: hci18: command tx timeout
[  309.107799][ T5631] Bluetooth: hci19: command tx timeout
[  309.907967][ T5631] Bluetooth: hci17: command tx timeout
[  311.027957][ T5631] Bluetooth: hci18: command tx timeout
[  311.187955][ T5631] Bluetooth: hci19: command tx timeout
[  317.190368][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  317.190433][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  325.509698][   T32] INFO: task syz.4.543:8135 blocked for more than 143 seconds.
[  325.509727][   T32]       Not tainted syzkaller #0
[  325.509739][   T32] "echo 0 > /proc/sys/kernel/hung_task_time
** replaying previous printk message **
[  325.509739][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  325.509749][   T32] task:syz.4.543       state:D stack:26240 pid:8135  tgid:8132  ppid:5618   task_flags:0x480140 flags:0x00080002
[  325.509837][   T32] Call Trace:
[  325.509846][   T32]  <TASK>
[  325.509862][   T32]  __schedule+0x17db/0x58f0
[  325.509907][   T32]  ? __lock_acquire+0x747/0x2de0
[  325.509963][   T32]  ? __pfx___schedule+0x10/0x10
[  325.509996][   T32]  ? lock_acquire+0x115/0x350
[  325.510031][   T32]  ? schedule+0x90/0x2b0
[  325.510057][   T32]  schedule+0x164/0x2b0
[  325.510081][   T32]  blk_mq_freeze_queue_wait+0x101/0x180
[  325.510116][   T32]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[  325.510151][   T32]  ? __pfx_autoremove_wake_function+0x10/0x10
[  325.510197][   T32]  queue_limits_commit_update_frozen+0x55/0xd0
[  325.510230][   T32]  nbd_set_size+0x4c5/0x7d0
[  325.510251][   T32]  ? __pfx_nbd_set_size+0x10/0x10
[  325.510284][   T32]  ? nla_memcpy+0x5b/0xc0
[  325.510313][   T32]  nbd_genl_reconfigure+0x7e1/0x1040
[  325.510340][   T32]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  325.510369][   T32]  ? __kmalloc_noprof+0x38c/0x720
[  325.510387][   T32]  ? __nla_parse+0x40/0x60
[  325.510411][   T32]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  325.510437][   T32]  genl_family_rcv_msg_doit+0x233/0x340
[  325.510462][   T32]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  325.510489][   T32]  ? __lock_acquire+0x747/0x2de0
[  325.510513][   T32]  genl_rcv_msg+0x614/0x7a0
[  325.510536][   T32]  ? __pfx_genl_rcv_msg+0x10/0x10
[  325.510554][   T32]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  325.510591][   T32]  netlink_rcv_skb+0x226/0x4a0
[  325.510616][   T32]  ? __pfx_genl_rcv_msg+0x10/0x10
[  325.510635][   T32]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  325.510676][   T32]  ? down_read+0x2be/0x330
[  325.510699][   T32]  genl_rcv+0x28/0x40
[  325.510715][   T32]  netlink_unicast+0x7bd/0x940
[  325.510746][   T32]  netlink_sendmsg+0x813/0xb40
[  325.510778][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[  325.510809][   T32]  ? apparmor_socket_sendmsg+0x98/0x360
[  325.510829][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[  325.510852][   T32]  sock_sendmsg_nosec+0x13a/0x180
[  325.510881][   T32]  ____sys_sendmsg+0x54e/0x850
[  325.510921][   T32]  ? __pfx_____sys_sendmsg+0x10/0x10
[  325.510950][   T32]  ? import_iovec+0x73/0xa0
[  325.511036][   T32]  ___sys_sendmsg+0x2a5/0x360
[  325.511058][   T32]  ? __lock_acquire+0x747/0x2de0
[  325.511077][   T32]  ? __pfx____sys_sendmsg+0x10/0x10
[  325.511108][   T32]  ? futex_wait+0x2a2/0x390
[  325.511157][   T32]  ? __fget_files+0x2a/0x420
[  325.511181][   T32]  ? __fget_files+0x3a2/0x420
[  325.511211][   T32]  __x64_sys_sendmsg+0x1b1/0x290
[  325.511234][   T32]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  325.511273][   T32]  do_syscall_64+0x166/0x520
[  325.511290][   T32]  ? trace_irq_disable+0x3b/0x140
[  325.511307][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.511323][   T32]  ? clear_bhb_loop+0x70/0xc0
[  325.511343][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.511359][   T32] RIP: 0033:0x7f706e19e159
[  325.511382][   T32] RSP: 002b:00007f706f011028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  325.511400][   T32] RAX: ffffffffffffffda RBX: 00007f706e425fa0 RCX: 00007f706e19e159
[  325.511411][   T32] RDX: 0000000000000040 RSI: 0000200000000500 RDI: 0000000000000005
[  325.511422][   T32] RBP: 00007f706e23503b R08: 0000000000000000 R09: 0000000000000000
[  325.511431][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  325.511441][   T32] R13: 00007f706e426038 R14: 00007f706e425fa0 R15: 00007ffc45afcbc8
[  325.511467][   T32]  </TASK>
[  325.511476][   T32] INFO: task syz.3.545:8140 blocked for more than 143 seconds.
[  325.511488][   T32]       Not tainted syzkaller #0
[  325.511495][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  325.511502][   T32] task:syz.3.545       state:D stack:26408 pid:8140  tgid:8138  ppid:5623   task_flags:0x400140 flags:0x00080002
[  325.511549][   T32] Call Trace:
[  325.511554][   T32]  <TASK>
[  325.511564][   T32]  __schedule+0x17db/0x58f0
[  325.511612][   T32]  ? __pfx___schedule+0x10/0x10
[  325.511645][   T32]  ? schedule+0x90/0x2b0
[  325.511670][   T32]  schedule+0x164/0x2b0
[  325.511687][   T32]  schedule_preempt_disabled+0x13/0x30
[  325.511702][   T32]  __mutex_lock+0x7c1/0x1550
[  325.511725][   T32]  ? __mutex_lock+0x5d4/0x1550
[  325.511748][   T32]  ? genl_rcv_msg+0x10b/0x7a0
[  325.511768][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  325.511791][   T32]  ? __dev_queue_xmit+0x29b/0x3820
[  325.511819][   T32]  ? radix_tree_lookup+0x240/0x290
[  325.511846][   T32]  genl_rcv_msg+0x10b/0x7a0
[  325.511868][   T32]  ? __pfx_genl_rcv_msg+0x10/0x10
[  325.511900][   T32]  netlink_rcv_skb+0x226/0x4a0
[  325.511929][   T32]  ? __pfx_genl_rcv_msg+0x10/0x10
[  325.511949][   T32]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  325.511984][   T32]  ? down_read+0x2be/0x330
[  325.512007][   T32]  genl_rcv+0x28/0x40
[  325.512028][   T32]  netlink_unicast+0x7bd/0x940
[  325.512064][   T32]  netlink_sendmsg+0x813/0xb40
[  325.512095][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[  325.512126][   T32]  ? apparmor_socket_sendmsg+0x98/0x360
[  325.512146][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[  325.512171][   T32]  sock_sendmsg_nosec+0x13a/0x180
[  325.512198][   T32]  __sys_sendto+0x408/0x5a0
[  325.512222][   T32]  ? __pfx___sys_sendto+0x10/0x10
[  325.512264][   T32]  ? do_user_addr_fault+0xc4c/0x1340
[  325.512284][   T32]  __x64_sys_sendto+0xde/0x100
[  325.512306][   T32]  do_syscall_64+0x166/0x520
[  325.512322][   T32]  ? trace_irq_disable+0x3b/0x140
[  325.512338][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.512354][   T32]  ? clear_bhb_loop+0x70/0xc0
[  325.512374][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.512390][   T32] RIP: 0033:0x7fb361f5e98e
[  325.512403][   T32] RSP: 002b:00007fb362edae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  325.512418][   T32] RAX: ffffffffffffffda RBX: 00007fb362edc6c0 RCX: 00007fb361f5e98e
[  325.512430][   T32] RDX: 000000000000001c RSI: 00007fb362edb000 RDI: 0000000000000006
[  325.512439][   T32] RBP: 0000000000000000 R08: 00007fb362edaf04 R09: 000000000000000c
[  325.512449][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  325.512459][   T32] R13: 00007fb362edaf58 R14: 00007fb362edb000 R15: 0000000000000000
[  325.512484][   T32]  </TASK>
[  325.512490][   T32] INFO: task syz.3.545:8141 blocked for more than 143 seconds.
[  325.512501][   T32]       Not tainted syzkaller #0
[  325.512508][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  325.512515][   T32] task:syz.3.545       state:D stack:27872 pid:8141  tgid:8138  ppid:5623   task_flags:0x400040 flags:0x00080002
[  325.512559][   T32] Call Trace:
[  325.512565][   T32]  <TASK>
[  325.512574][   T32]  __schedule+0x17db/0x58f0
[  325.512622][   T32]  ? __pfx___schedule+0x10/0x10
[  325.512655][   T32]  ? schedule+0x90/0x2b0
[  325.512678][   T32]  schedule+0x164/0x2b0
[  325.512694][   T32]  schedule_preempt_disabled+0x13/0x30
[  325.512709][   T32]  __mutex_lock+0x7c1/0x1550
[  325.512731][   T32]  ? __mutex_lock+0x5d4/0x1550
[  325.512751][   T32]  ? genl_rcv_msg+0x10b/0x7a0
[  325.512770][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  325.512793][   T32]  ? __dev_queue_xmit+0x29b/0x3820
[  325.512820][   T32]  ? radix_tree_lookup+0x240/0x290
[  325.512847][   T32]  genl_rcv_msg+0x10b/0x7a0
[  325.512869][   T32]  ? __pfx_genl_rcv_msg+0x10/0x10
[  325.512900][   T32]  netlink_rcv_skb+0x226/0x4a0
[  325.512924][   T32]  ? __pfx_genl_rcv_msg+0x10/0x10
[  325.512943][   T32]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  325.512979][   T32]  ? down_read+0x2be/0x330
[  325.513001][   T32]  genl_rcv+0x28/0x40
[  325.513017][   T32]  netlink_unicast+0x7bd/0x940
[  325.513047][   T32]  netlink_sendmsg+0x813/0xb40
[  325.513078][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[  325.513109][   T32]  ? apparmor_socket_sendmsg+0x98/0x360
[  325.513128][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[  325.513151][   T32]  sock_sendmsg_nosec+0x13a/0x180
[  325.513181][   T32]  __sys_sendto+0x408/0x5a0
[  325.513204][   T32]  ? __pfx___sys_sendto+0x10/0x10
[  325.513220][   T32]  ? errseq_sample+0x40/0x70
[  325.513259][   T32]  ? fd_install+0x94/0x3d0
[  325.513279][   T32]  ? fd_install+0x309/0x3d0
[  325.513307][   T32]  __x64_sys_sendto+0xde/0x100
[  325.513328][   T32]  do_syscall_64+0x166/0x520
[  325.513344][   T32]  ? trace_irq_disable+0x3b/0x140
[  325.513360][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.513376][   T32]  ? clear_bhb_loop+0x70/0xc0
[  325.513396][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.513411][   T32] RIP: 0033:0x7fb361f5e98e
[  325.513424][   T32] RSP: 002b:00007fb362eb9e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  325.513439][   T32] RAX: ffffffffffffffda RBX: 00007fb362ebb6c0 RCX: 00007fb361f5e98e
[  325.513450][   T32] RDX: 0000000000000024 RSI: 00007fb362eba000 RDI: 000000000000000b
[  325.513460][   T32] RBP: 0000000000000000 R08: 00007fb362eb9f04 R09: 000000000000000c
[  325.513470][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b
[  325.513479][   T32] R13: 00007fb362eb9f58 R14: 00007fb362eba000 R15: 0000000000000000
[  325.513504][   T32]  </TASK>
[  325.513510][   T32] INFO: task syz.3.545:8152 blocked for more than 143 seconds.
[  325.513520][   T32]       Not tainted syzkaller #0
[  325.513528][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  325.513534][   T32] task:syz.3.545       state:D stack:27872 pid:8152  tgid:8138  ppid:5623   task_flags:0x400040 flags:0x00080002
[  325.513578][   T32] Call Trace:
[  325.513584][   T32]  <TASK>
[  325.513593][   T32]  __schedule+0x17db/0x58f0
[  325.513641][   T32]  ? __pfx___schedule+0x10/0x10
[  325.513680][   T32]  ? schedule+0x90/0x2b0
[  325.513698][   T32]  schedule+0x164/0x2b0
[  325.513714][   T32]  schedule_preempt_disabled+0x13/0x30
[  325.513729][   T32]  __mutex_lock+0x7c1/0x1550
[  325.513751][   T32]  ? __mutex_lock+0x5d4/0x1550
[  325.513771][   T32]  ? genl_rcv_msg+0x10b/0x7a0
[  325.513790][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  325.513813][   T32]  ? __dev_queue_xmit+0x29b/0x3820
[  325.513839][   T32]  ? radix_tree_lookup+0x240/0x290
[  325.513866][   T32]  genl_rcv_msg+0x10b/0x7a0
[  325.513889][   T32]  ? __pfx_genl_rcv_msg+0x10/0x10
[  325.513920][   T32]  netlink_rcv_skb+0x226/0x4a0
[  325.513944][   T32]  ? __pfx_genl_rcv_msg+0x10/0x10
[  325.513963][   T32]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  325.513999][   T32]  ? down_read+0x2be/0x330
[  325.514021][   T32]  genl_rcv+0x28/0x40
[  325.514037][   T32]  netlink_unicast+0x7bd/0x940
[  325.514067][   T32]  netlink_sendmsg+0x813/0xb40
[  325.514098][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[  325.514129][   T32]  ? apparmor_socket_sendmsg+0x98/0x360
[  325.514148][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[  325.514173][   T32]  sock_sendmsg_nosec+0x13a/0x180
[  325.514201][   T32]  __sys_sendto+0x408/0x5a0
[  325.514224][   T32]  ? __pfx___sys_sendto+0x10/0x10
[  325.514241][   T32]  ? errseq_sample+0x40/0x70
[  325.514280][   T32]  ? fd_install+0x94/0x3d0
[  325.514300][   T32]  ? fd_install+0x309/0x3d0
[  325.514338][   T32]  __x64_sys_sendto+0xde/0x100
[  325.514360][   T32]  do_syscall_64+0x166/0x520
[  325.514376][   T32]  ? trace_irq_disable+0x3b/0x140
[  325.514392][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.514408][   T32]  ? clear_bhb_loop+0x70/0xc0
[  325.514428][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.514443][   T32] RIP: 0033:0x7fb361f5e98e
[  325.514456][   T32] RSP: 002b:00007fb362e98e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  325.514471][   T32] RAX: ffffffffffffffda RBX: 00007fb362e9a6c0 RCX: 00007fb361f5e98e
[  325.514482][   T32] RDX: 0000000000000024 RSI: 00007fb362e99000 RDI: 000000000000000a
[  325.514492][   T32] RBP: 0000000000000000 R08: 00007fb362e98f04 R09: 000000000000000c
[  325.514502][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a
[  325.514511][   T32] R13: 00007fb362e98f58 R14: 00007fb362e99000 R15: 0000000000000000
[  325.514536][   T32]  </TASK>
[  325.514542][   T32] INFO: task syz.3.545:8154 blocked for more than 143 seconds.
[  325.514553][   T32]       Not tainted syzkaller #0
[  325.514560][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  325.514566][   T32] task:syz.3.545       state:D stack:27872 pid:8154  tgid:8138  ppid:5623   task_flags:0x400040 flags:0x00080002
[  325.514610][   T32] Call Trace:
[  325.514615][   T32]  <TASK>
[  325.514624][   T32]  __schedule+0x17db/0x58f0
[  325.514677][   T32]  ? __pfx___schedule+0x10/0x10
[  325.514710][   T32]  ? schedule+0x90/0x2b0
[  325.514728][   T32]  schedule+0x164/0x2b0
[  325.514745][   T32]  schedule_preempt_disabled+0x13/0x30
[  325.514760][   T32]  __mutex_lock+0x7c1/0x1550
[  325.514781][   T32]  ? __mutex_lock+0x5d4/0x1550
[  325.514801][   T32]  ? genl_rcv_msg+0x10b/0x7a0
[  325.514820][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  325.514843][   T32]  ? __dev_queue_xmit+0x29b/0x3820
[  325.514870][   T32]  ? radix_tree_lookup+0x240/0x290
[  325.514897][   T32]  genl_rcv_msg+0x10b/0x7a0
[  325.514919][   T32]  ? __pfx_genl_rcv_msg+0x10/0x10
[  325.514956][   T32]  netlink_rcv_skb+0x226/0x4a0
[  325.514980][   T32]  ? __pfx_genl_rcv_msg+0x10/0x10
[  325.514999][   T32]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  325.515035][   T32]  ? down_read+0x2be/0x330
[  325.515057][   T32]  genl_rcv+0x28/0x40
[  325.515073][   T32]  netlink_unicast+0x7bd/0x940
[  325.515104][   T32]  netlink_sendmsg+0x813/0xb40
[  325.515135][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[  325.515168][   T32]  ? apparmor_socket_sendmsg+0x98/0x360
[  325.515187][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[  325.515210][   T32]  sock_sendmsg_nosec+0x13a/0x180
[  325.515237][   T32]  __sys_sendto+0x408/0x5a0
[  325.515261][   T32]  ? __pfx___sys_sendto+0x10/0x10
[  325.515277][   T32]  ? errseq_sample+0x40/0x70
[  325.515316][   T32]  ? fd_install+0x94/0x3d0
[  325.515336][   T32]  ? fd_install+0x309/0x3d0
[  325.515363][   T32]  __x64_sys_sendto+0xde/0x100
[  325.515385][   T32]  do_syscall_64+0x166/0x520
[  325.515401][   T32]  ? trace_irq_disable+0x3b/0x140
[  325.515416][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.515432][   T32]  ? clear_bhb_loop+0x70/0xc0
[  325.515452][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.515468][   T32] RIP: 0033:0x7fb361f5e98e
[  325.515481][   T32] RSP: 002b:00007fb362e77e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  325.515496][   T32] RAX: ffffffffffffffda RBX: 00007fb362e796c0 RCX: 00007fb361f5e98e
[  325.515507][   T32] RDX: 0000000000000024 RSI: 00007fb362e78000 RDI: 000000000000000c
[  325.515517][   T32] RBP: 0000000000000000 R08: 00007fb362e77f04 R09: 000000000000000c
[  325.515527][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c
[  325.515536][   T32] R13: 00007fb362e77f58 R14: 00007fb362e78000 R15: 0000000000000000
[  325.515561][   T32]  </TASK>
[  325.515567][   T32] INFO: task syz.1.548:8167 blocked for more than 143 seconds.
[  325.515578][   T32]       Not tainted syzkaller #0
[  325.515585][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  325.515592][   T32] task:syz.1.548       state:D stack:27872 pid:8167  tgid:8166  ppid:5621   task_flags:0x400040 flags:0x00080002
[  325.515636][   T32] Call Trace:
[  325.515641][   T32]  <TASK>
[  325.515650][   T32]  __schedule+0x17db/0x58f0
[  325.515704][   T32]  ? __pfx___schedule+0x10/0x10
[  325.515743][   T32]  ? schedule+0x90/0x2b0
[  325.515760][   T32]  schedule+0x164/0x2b0
[  325.515777][   T32]  schedule_preempt_disabled+0x13/0x30
[  325.515792][   T32]  __mutex_lock+0x7c1/0x1550
[  325.515813][   T32]  ? __mutex_lock+0x5d4/0x1550
[  325.515833][   T32]  ? genl_rcv_msg+0x10b/0x7a0
[  325.515852][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  325.515875][   T32]  ? __dev_queue_xmit+0x29b/0x3820
[  325.515902][   T32]  ? radix_tree_lookup+0x240/0x290
[  325.515928][   T32]  genl_rcv_msg+0x10b/0x7a0
[  325.515951][   T32]  ? __pfx_genl_rcv_msg+0x10/0x10
[  325.515982][   T32]  netlink_rcv_skb+0x226/0x4a0
[  325.516006][   T32]  ? __pfx_genl_rcv_msg+0x10/0x10
[  325.516025][   T32]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  325.516060][   T32]  ? down_read+0x2be/0x330
[  325.516082][   T32]  genl_rcv+0x28/0x40
[  325.516098][   T32]  netlink_unicast+0x7bd/0x940
[  325.516128][   T32]  netlink_sendmsg+0x813/0xb40
[  325.516159][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[  325.516190][   T32]  ? apparmor_socket_sendmsg+0x98/0x360
[  325.516209][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[  325.516231][   T32]  sock_sendmsg_nosec+0x13a/0x180
[  325.516259][   T32]  __sys_sendto+0x408/0x5a0
[  325.516282][   T32]  ? __pfx___sys_sendto+0x10/0x10
[  325.516324][   T32]  ? do_user_addr_fault+0xc4c/0x1340
[  325.516344][   T32]  __x64_sys_sendto+0xde/0x100
[  325.516365][   T32]  do_syscall_64+0x166/0x520
[  325.516381][   T32]  ? trace_irq_disable+0x3b/0x140
[  325.516397][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.516413][   T32]  ? clear_bhb_loop+0x70/0xc0
[  325.516433][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.516448][   T32] RIP: 0033:0x7f3d6155e98e
[  325.516462][   T32] RSP: 002b:00007f3d62390e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  325.516477][   T32] RAX: ffffffffffffffda RBX: 00007f3d623926c0 RCX: 00007f3d6155e98e
[  325.516489][   T32] RDX: 0000000000000020 RSI: 00007f3d62391000 RDI: 0000000000000004
[  325.516499][   T32] RBP: 0000000000000000 R08: 00007f3d62390f04 R09: 000000000000000c
[  325.516509][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  325.516525][   T32] R13: 00007f3d62390f58 R14: 00007f3d62391000 R15: 0000000000000000
[  325.516551][   T32]  </TASK>
[  325.516557][   T32] INFO: task syz.0.552:8181 blocked for more than 143 seconds.
[  325.516568][   T32]       Not tainted syzkaller #0
[  325.516576][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  325.516583][   T32] task:syz.0.552       state:D stack:27200 pid:8181  tgid:8180  ppid:5617   task_flags:0x400140 flags:0x00080002
[  325.516626][   T32] Call Trace:
[  325.516631][   T32]  <TASK>
[  325.516641][   T32]  __schedule+0x17db/0x58f0
[  325.516694][   T32]  ? __pfx___schedule+0x10/0x10
[  325.516727][   T32]  ? schedule+0x90/0x2b0
[  325.516745][   T32]  schedule+0x164/0x2b0
[  325.516762][   T32]  schedule_preempt_disabled+0x13/0x30
[  325.516777][   T32]  __mutex_lock+0x7c1/0x1550
[  325.516799][   T32]  ? __mutex_lock+0x5d4/0x1550
[  325.516820][   T32]  ? genl_rcv_msg+0x10b/0x7a0
[  325.516839][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  325.516862][   T32]  ? __dev_queue_xmit+0x29b/0x3820
[  325.516889][   T32]  ? radix_tree_lookup+0x240/0x290
[  325.516916][   T32]  genl_rcv_msg+0x10b/0x7a0
[  325.516939][   T32]  ? __pfx_genl_rcv_msg+0x10/0x10
[  325.516970][   T32]  netlink_rcv_skb+0x226/0x4a0
[  325.516994][   T32]  ? __pfx_genl_rcv_msg+0x10/0x10
[  325.517013][   T32]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  325.517050][   T32]  ? down_read+0x2be/0x330
[  325.517072][   T32]  genl_rcv+0x28/0x40
[  325.517088][   T32]  netlink_unicast+0x7bd/0x940
[  325.517118][   T32]  netlink_sendmsg+0x813/0xb40
[  325.517150][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[  325.517181][   T32]  ? apparmor_socket_sendmsg+0x98/0x360
[  325.517200][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[  325.517224][   T32]  sock_sendmsg_nosec+0x13a/0x180
[  325.517251][   T32]  ____sys_sendmsg+0x54e/0x850
[  325.517277][   T32]  ? __pfx_____sys_sendmsg+0x10/0x10
[  325.517305][   T32]  ? import_iovec+0x73/0xa0
[  325.517328][   T32]  ___sys_sendmsg+0x2a5/0x360
[  325.517348][   T32]  ? __lock_acquire+0x747/0x2de0
[  325.517368][   T32]  ? __pfx____sys_sendmsg+0x10/0x10
[  325.517392][   T32]  ? futex_wait+0x2a2/0x390
[  325.517440][   T32]  ? __fget_files+0x2a/0x420
[  325.517462][   T32]  ? __fget_files+0x3a2/0x420
[  325.517493][   T32]  __x64_sys_sendmsg+0x1b1/0x290
[  325.517517][   T32]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  325.517556][   T32]  do_syscall_64+0x166/0x520
[  325.517669][   T32]  ? trace_irq_disable+0x3b/0x140
[  325.517694][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.517716][   T32]  ? clear_bhb_loop+0x70/0xc0
[  325.517744][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.517767][   T32] RIP: 0033:0x7fc8ac59e159
[  325.517786][   T32] RSP: 002b:00007fc8ad3a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  325.517808][   T32] RAX: ffffffffffffffda RBX: 00007fc8ac825fa0 RCX: 00007fc8ac59e159
[  325.517825][   T32] RDX: 0000000000080000 RSI: 0000200000000400 RDI: 0000000000000004
[  325.517839][   T32] RBP: 00007fc8ac63503b R08: 0000000000000000 R09: 0000000000000000
[  325.517912][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  325.517954][   T32] R13: 00007fc8ac826038 R14: 00007fc8ac825fa0 R15: 00007fff75043418
[  325.518056][   T32]  </TASK>
[  325.518089][   T32] INFO: task syz.2.553:8184 blocked for more than 143 seconds.
[  325.518133][   T32]       Not tainted syzkaller #0
[  325.518171][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  325.518195][   T32] task:syz.2.553       state:D stack:28528 pid:8184  tgid:8182  ppid:5626   task_flags:0x400140 flags:0x00080002
[  325.518371][   T32] Call Trace:
[  325.518392][   T32]  <TASK>
[  325.518426][   T32]  __schedule+0x17db/0x58f0
[  325.518613][   T32]  ? __pfx___schedule+0x10/0x10
[  325.518745][   T32]  ? schedule+0x90/0x2b0
[  325.518811][   T32]  schedule+0x164/0x2b0
[  325.518877][   T32]  schedule_preempt_disabled+0x13/0x30
[  325.518934][   T32]  __mutex_lock+0x7c1/0x1550
[  325.519018][   T32]  ? __mutex_lock+0x5d4/0x1550
[  325.519096][   T32]  ? genl_rcv_msg+0x10b/0x7a0
[  325.519176][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  325.519245][   T32]  ? stack_trace_save+0xa9/0x100
[  325.519362][   T32]  ? __lock_acquire+0x747/0x2de0
[  325.519454][   T32]  ? radix_tree_lookup+0x240/0x290
[  325.519563][   T32]  genl_rcv_msg+0x10b/0x7a0
[  325.519651][   T32]  ? __pfx_genl_rcv_msg+0x10/0x10
[  325.519786][   T32]  netlink_rcv_skb+0x226/0x4a0
[  325.519874][   T32]  ? __pfx_genl_rcv_msg+0x10/0x10
[  325.519961][   T32]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  325.520093][   T32]  ? down_read+0x2be/0x330
[  325.520167][   T32]  genl_rcv+0x28/0x40
[  325.520233][   T32]  netlink_unicast+0x7bd/0x940
[  325.520343][   T32]  netlink_sendmsg+0x813/0xb40
[  325.520456][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[  325.520575][   T32]  ? apparmor_socket_sendmsg+0x98/0x360
[  325.520645][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[  325.520741][   T32]  sock_sendmsg_nosec+0x13a/0x180
[  325.520870][   T32]  __sys_sendto+0x408/0x5a0
[  325.520958][   T32]  ? __pfx___sys_sendto+0x10/0x10
[  325.521115][   T32]  ? do_user_addr_fault+0xc4c/0x1340
[  325.521185][   T32]  __x64_sys_sendto+0xde/0x100
[  325.521264][   T32]  do_syscall_64+0x166/0x520
[  325.521330][   T32]  ? trace_irq_disable+0x3b/0x140
[  325.521387][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.521451][   T32]  ? clear_bhb_loop+0x70/0xc0
[  325.521520][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.521584][   T32] RIP: 0033:0x7f633395e98e
[  325.521637][   T32] RSP: 002b:00007f6331bd3e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  325.521703][   T32] RAX: ffffffffffffffda RBX: 00007f6331bd56c0 RCX: 00007f633395e98e
[  325.521748][   T32] RDX: 000000000000001c RSI: 00007f6331bd4000 RDI: 0000000000000009
[  325.521782][   T32] RBP: 0000000000000000 R08: 00007f6331bd3f04 R09: 000000000000000c
[  325.521817][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009
[  325.521858][   T32] R13: 00007f6331bd3f58 R14: 00007f6331bd4000 R15: 0000000000000000
[  325.521948][   T32]  </TASK>
[  325.521977][   T32] INFO: task syz.2.553:8189 blocked for more than 143 seconds.
[  325.522014][   T32]       Not tainted syzkaller #0
[  325.522045][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  325.522070][   T32] task:syz.2.553       state:D stack:28808 pid:8189  tgid:8182  ppid:5626   task_flags:0x400040 flags:0x00080002
[  325.522279][   T32] Call Trace:
[  325.522293][   T32]  <TASK>
[  325.522335][   T32]  __schedule+0x17db/0x58f0
[  325.522516][   T32]  ? __pfx___schedule+0x10/0x10
[  325.522638][   T32]  ? schedule+0x90/0x2b0
[  325.522715][   T32]  schedule+0x164/0x2b0
[  325.522781][   T32]  schedule_preempt_disabled+0x13/0x30
[  325.522836][   T32]  __mutex_lock+0x7c1/0x1550
[  325.522916][   T32]  ? __mutex_lock+0x5d4/0x1550
[  325.522993][   T32]  ? genl_rcv_msg+0x10b/0x7a0
[  325.523062][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  325.523138][   T32]  ? stack_trace_save+0xa9/0x100
[  325.523242][   T32]  ? __lock_acquire+0x747/0x2de0
[  325.523319][   T32]  ? radix_tree_lookup+0x240/0x290
[  325.523420][   T32]  genl_rcv_msg+0x10b/0x7a0
[  325.523516][   T32]  ? __pfx_genl_rcv_msg+0x10/0x10
[  325.523673][   T32]  netlink_rcv_skb+0x226/0x4a0
[  325.523762][   T32]  ? __pfx_genl_rcv_msg+0x10/0x10
[  325.523837][   T32]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  325.523969][   T32]  ? down_read+0x2be/0x330
[  325.524056][   T32]  genl_rcv+0x28/0x40
[  325.524121][   T32]  netlink_unicast+0x7bd/0x940
[  325.524227][   T32]  netlink_sendmsg+0x813/0xb40
[  325.524346][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[  325.524458][   T32]  ? apparmor_socket_sendmsg+0x98/0x360
[  325.524535][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[  325.524616][   T32]  sock_sendmsg_nosec+0x13a/0x180
[  325.524734][   T32]  __sys_sendto+0x408/0x5a0
[  325.524826][   T32]  ? __pfx___sys_sendto+0x10/0x10
[  325.524992][   T32]  ? do_user_addr_fault+0xc4c/0x1340
[  325.525069][   T32]  __x64_sys_sendto+0xde/0x100
[  325.525148][   T32]  do_syscall_64+0x166/0x520
[  325.525203][   T32]  ? trace_irq_disable+0x3b/0x140
[  325.525267][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.525331][   T32]  ? clear_bhb_loop+0x70/0xc0
[  325.525402][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.525423][   T32] RIP: 0033:0x7f633395e98e
[  325.525441][   T32] RSP: 002b:00007f6331b4fe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  325.525463][   T32] RAX: ffffffffffffffda RBX: 00007f6331b516c0 RCX: 00007f633395e98e
[  325.525479][   T32] RDX: 0000000000000028 RSI: 00007f6331b50000 RDI: 0000000000000081
[  325.525494][   T32] RBP: 0000000000000000 R08: 00007f6331b4ff04 R09: 000000000000000c
[  325.525509][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000081
[  325.525524][   T32] R13: 00007f6331b4ff58 R14: 00007f6331b50000 R15: 0000000000000000
[  325.525562][   T32]  </TASK>
[  325.525635][   T32] 
[  325.525635][   T32] Showing all locks held in the system:
[  325.525645][   T32] locks held by pr/ttyS0/16: 1, last CPU#0:
[  325.525667][   T32]  #0: ffffffff8ec364b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60
[  325.525725][   T32] locks held by khungtaskd/32: 1, last CPU#1:
[  325.525740][   T32]  #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  325.525818][   T32] locks held by klogd/4972: 1, last CPU#0:
[  325.525833][   T32]  #0: ffffffff8eeac370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  325.525884][   T32] locks held by getty/5374: 2, on CPU#0:
[  325.525898][   T32]  #0: ffff888032b8e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  325.525959][   T32]  #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  325.526021][   T32] locks held by udevd/5717: 1, on CPU#0:
[  325.526036][   T32]  #0: ffff888027cc2350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[  325.526098][   T32] locks held by syz.4.543/8135: 6, on CPU#1:
[  325.526113][   T32]  #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  325.526168][   T32]  #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  325.526220][   T32]  #2: ffff888027cba260 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4a6/0x1040
[  325.526274][   T32]  #3: ffff888027bba288 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x284/0x7d0
[  325.526330][   T32]  #4: ffff888027bb9c50 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  325.526393][   T32]  #5: ffff888027bb9c88 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  325.526458][   T32] locks held by syz.3.545/8140: 2, on CPU#1:
[  325.526473][   T32]  #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  325.526526][   T32]  #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  325.526580][   T32] locks held by syz.3.545/8141: 2, on CPU#1:
[  325.526596][   T32]  #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  325.526647][   T32]  #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  325.526706][   T32] locks held by syz.3.545/8152: 2, on CPU#0:
[  325.527074][   T32]  #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  325.527257][   T32]  #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  325.527414][   T32] locks held by syz.3.545/8154: 2, on CPU#1:
[  325.527458][   T32]  #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  325.527755][   T32]  #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  325.527920][   T32] locks held by syz.1.548/8167: 2, on CPU#0:
[  325.527955][   T32]  #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  325.528102][   T32]  #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  325.528243][   T32] locks held by syz.0.552/8181: 2, on CPU#1:
[  325.528286][   T32]  #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  325.528431][   T32]  #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  325.528689][   T32] locks held by syz.2.553/8184: 2, on CPU#1:
[  325.528733][   T32]  #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  325.528862][   T32]  #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  325.529023][   T32] locks held by syz.2.553/8189: 2, on CPU#1:
[  325.529066][   T32]  #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  325.529203][   T32]  #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  325.529362][   T32] locks held by syz-executor/8196: 2, on CPU#1:
[  325.529405][   T32]  #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  325.529552][   T32]  #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  325.529709][   T32] locks held by syz-executor/8198: 2, on CPU#0:
[  325.529753][   T32]  #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  325.529910][   T32]  #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  325.530078][   T32] locks held by syz-executor/8203: 2, on CPU#1:
[  325.530114][   T32]  #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  325.530253][   T32]  #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  325.530410][   T32] locks held by syz-executor/8232: 2, on CPU#0:
[  325.530452][   T32]  #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  325.530588][   T32]  #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  325.530748][   T32] locks held by syz-executor/8236: 2, on CPU#0:
[  325.530791][   T32]  #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  325.530926][   T32]  #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  325.531090][   T32] locks held by syz-executor/8290: 2, on CPU#0:
[  325.531126][   T32]  #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  325.531312][   T32]  #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  325.531458][   T32] locks held by syz-executor/8292: 2, on CPU#1:
[  325.531500][   T32]  #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  325.531642][   T32]  #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  325.531792][   T32] locks held by syz-executor/8296: 2, on CPU#1:
[  325.531828][   T32]  #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  325.531931][   T32]  #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  325.531987][   T32] locks held by syz-executor/8337: 2, on CPU#1:
[  325.532003][   T32]  #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  325.532138][   T32]  #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  325.532288][   T32] locks held by syz-executor/8340: 2, on CPU#1:
[  325.532330][   T32]  #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  325.532472][   T32]  #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  325.532639][   T32] locks held by syz-executor/8383: 2, on CPU#0:
[  325.532693][   T32]  #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  325.532836][   T32]  #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  325.532982][   T32] locks held by syz-executor/8385: 2, on CPU#0:
[  325.533025][   T32]  #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  325.533162][   T32]  #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  325.533310][   T32] locks held by syz-executor/8417: 2, on CPU#1:
[  325.533353][   T32]  #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  325.533530][   T32]  #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  325.533708][   T32] locks held by syz-executor/8431: 2, on CPU#0:
[  325.533752][   T32]  #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  325.533897][   T32]  #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  325.534062][   T32] locks held by syz-executor/8434: 2, on CPU#1:
[  325.534097][   T32]  #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  325.534245][   T32]  #1: ffffffff902c3320 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  325.534409][   T32] 
[  325.534423][   T32] =============================================
[  325.534423][   T32] 
[  325.534464][   T32] NMI backtrace for cpu 1
[  325.534507][   T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  325.534564][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026
[  325.534606][   T32] Call Trace:
[  325.534629][   T32]  <TASK>
[  325.534652][   T32]  dump_stack_lvl+0xe8/0x150
[  325.534759][   T32]  nmi_cpu_backtrace+0x274/0x2d0
[  325.534848][   T32]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  325.534964][   T32]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  325.535070][   T32]  sys_info+0x135/0x170
[  325.535148][   T32]  watchdog+0xfd7/0x1030
[  325.535221][   T32]  ? watchdog+0x1c7/0x1030
[  325.535301][   T32]  kthread+0x38b/0x480
[  325.535368][   T32]  ? __pfx_watchdog+0x10/0x10
[  325.535416][   T32]  ? __pfx_kthread+0x10/0x10
[  325.535482][   T32]  ret_from_fork+0x514/0xb70
[  325.535550][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  325.535648][   T32]  ? __switch_to+0xc89/0x1420
[  325.535748][   T32]  ? __pfx_kthread+0x10/0x10
[  325.535806][   T32]  ret_from_fork_asm+0x1a/0x30
[  325.535946][   T32]  </TASK>
[  325.535961][   T32] Sending NMI from CPU 1 to CPUs 0:
[  325.536034][    C0] NMI backtrace for cpu 0
[  325.536047][    C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) 
[  325.536069][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026
[  325.536080][    C0] RIP: 0010:io_serial_in+0x77/0xc0
[  325.536113][    C0] Code: e8 fe 24 55 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ef 24 c5 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07
[  325.536130][    C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002
[  325.536146][    C0] RAX: 1ffffffff35a7400 RBX: 00000000000003fd RCX: 0000000000000000
[  325.536165][    C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020
[  325.536177][    C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  325.536189][    C0] R10: dffffc0000000000 R11: ffffffff8572a560 R12: dffffc0000000000
[  325.536203][    C0] R13: 0000000000000000 R14: ffffffff9ad3a0c0 R15: 0000000000000000
[  325.536216][    C0] FS:  0000000000000000(0000) GS:ffff888124cd1000(0000) knlGS:0000000000000000
[  325.536232][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  325.536245][    C0] CR2: 000055d5e587f168 CR3: 000000007f43c000 CR4: 00000000003526f0
[  325.536262][    C0] Call Trace:
[  325.536269][    C0]  <TASK>
[  325.536278][    C0]  wait_for_lsr+0x184/0x2f0
[  325.536301][    C0]  __serial8250_console_fifo_write+0xcd/0x3e0
[  325.536333][    C0]  serial8250_console_write+0xaa1/0x1200
[  325.536360][    C0]  ? __pfx_serial8250_console_write+0x10/0x10
[  325.536379][    C0]  ? __schedule+0x17f1/0x58f0
[  325.536418][    C0]  nbcon_emit_next_record+0xef5/0x1a90
[  325.536449][    C0]  ? __pfx_nbcon_emit_next_record+0x10/0x10
[  325.536474][    C0]  ? nbcon_context_try_acquire+0x819/0xbd0
[  325.536504][    C0]  ? _raw_spin_lock_irqsave+0x4c/0x60
[  325.536535][    C0]  nbcon_kthread_func+0x679/0x880
[  325.536560][    C0]  ? nbcon_kthread_func+0x163/0x880
[  325.536578][    C0]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  325.536603][    C0]  ? __kthread_parkme+0x71/0x1f0
[  325.536631][    C0]  ? __kthread_parkme+0x199/0x1f0
[  325.536662][    C0]  kthread+0x38b/0x480
[  325.536679][    C0]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  325.536697][    C0]  ? __pfx_kthread+0x10/0x10
[  325.536716][    C0]  ret_from_fork+0x514/0xb70
[  325.536734][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  325.536763][    C0]  ? __switch_to+0xc89/0x1420
[  325.536791][    C0]  ? __pfx_kthread+0x10/0x10
[  325.536809][    C0]  ret_from_fork_asm+0x1a/0x30
[  325.536848][    C0]  </TASK>
[  325.537058][   T32] Kernel panic - not syncing: hung_task: blocked tasks
[  329.079378][   T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  329.088504][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026
[  329.098571][   T32] Call Trace:
[  329.101867][   T32]  <TASK>
[  329.104812][   T32]  vpanic+0x56d/0xa60
[  329.108836][   T32]  ? __pfx_vpanic+0x10/0x10
[  329.113371][   T32]  ? console_srcu_read_unlock+0x3a/0x60
[  329.118950][   T32]  panic+0xc5/0xd0
[  329.122722][   T32]  ? __pfx_panic+0x10/0x10
[  329.127192][   T32]  ? wq_watchdog_touch+0xf9/0x160
[  329.132236][   T32]  ? nmi_trigger_cpumask_backtrace+0x24d/0x390
[  329.138421][   T32]  watchdog+0x1030/0x1030
[  329.142770][   T32]  ? watchdog+0x1c7/0x1030
[  329.147203][   T32]  kthread+0x38b/0x480
[  329.151380][   T32]  ? __pfx_watchdog+0x10/0x10
[  329.156115][   T32]  ? __pfx_kthread+0x10/0x10
[  329.160727][   T32]  ret_from_fork+0x514/0xb70
[  329.165353][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  329.170505][   T32]  ? __switch_to+0xc89/0x1420
[  329.175201][   T32]  ? __pfx_kthread+0x10/0x10
[  329.179807][   T32]  ret_from_fork_asm+0x1a/0x30
[  329.184696][   T32]  </TASK>
[  329.188430][   T32] Kernel Offset: disabled
[  329.192777][   T32] Rebooting in 86400 seconds..