last executing test programs:

19.172972624s ago: executing program 4 (id=2472):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0xfffff673, 0x0, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, <r1=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000480)={'ip_vti0\x00', <r2=>0x0, 0x7, 0x40, 0x3, 0x7f, {{0x1e, 0x4, 0x2, 0x3e, 0x78, 0x64, 0x0, 0xfd, 0x2f, 0x0, @broadcast, @local, {[@ssrr={0x89, 0xf, 0xce, [@remote, @private=0xa010100, @local]}, @timestamp_addr={0x44, 0x54, 0xbc, 0x1, 0x1, [{@broadcast, 0x1}, {@multicast2, 0x7}, {@local, 0x2}, {@multicast2, 0x7}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x100}, {@dev={0xac, 0x14, 0x14, 0x42}}, {@multicast2, 0x9}, {@rand_addr=0x64010100, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}]}]}}}}})
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
preadv(r5, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0)
pread64(r5, &(0x7f0000000240)=""/5, 0x5, 0xcd32)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000100), &(0x7f0000000040)}, 0x20)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0xffffffff, 0xfffffffe}, 0x1b)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x17, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0xc}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x6, 0x1, 0x0, r1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1008}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x9d, &(0x7f00000003c0)=""/157, 0x41100, 0x1, '\x00', r2, 0x18, r3, 0x8, &(0x7f00000005c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0xe, 0x2, 0x4}, 0x10, 0x2df5, r5, 0x6, &(0x7f0000000640)=[r6, 0xffffffffffffffff, r7, 0x1], &(0x7f0000000680)=[{0x5, 0x2, 0xa}, {0x5, 0x5, 0xb, 0x4}, {0x0, 0x3, 0x6, 0x5}, {0x5, 0x3, 0xa, 0x7}, {0x3, 0x1, 0xf, 0xc}, {0x5, 0x4, 0x2, 0x1}], 0x10, 0xb59d}, 0x94)

18.978563094s ago: executing program 4 (id=2476):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x24, 0x3, "d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452"}, @NFTA_MATCH_NAME={0xe, 0x1, 'connlimit\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}}, 0x4048010)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0)
recvmmsg(r1, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000280)=""/125, 0x7d}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000001700)=""/4090, 0xffa}], 0x5}, 0x2}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x9201})
write$tun(r5, 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv6_newaddr={0x48, 0x14, 0x101, 0x70bd26, 0x25dffbf8, {0xa, 0x38, 0x78, 0xff, r3}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004051}, 0x0)

18.422744234s ago: executing program 4 (id=2482):
socket$unix(0x1, 0x1, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
write(r0, &(0x7f0000000200)="749dc8f402018a319d2c06edc4e3ce0c7367b70a5ef1c76ee52e88b42f167f9dca7a337ce46254dd9176a07953be2103547169b0bb4beed8212f09bce89e05c9313f12be05f08fc38f87c6e565708193aa6867cdf34d", 0x56)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2400c841}, 0x1000)
recvmmsg(r1, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}], 0x1}, 0x3f}], 0x1, 0x60, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$kcm(r1, &(0x7f0000003540)={&(0x7f0000000600)=@ethernet={0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000680)="f02fad7fbd9e126ec60000f9c7ce93a65a3d34e3c055696dcbf1d2d835bf8c900a63", 0x22}, {&(0x7f00000006c0)="dfc4f35725", 0x5}, {&(0x7f0000000700)="e153f0987723db8d6a972726fa8d75e5cef09bc098b5a54f03f529654a9ee415946e62191e52f51584", 0x29}, {&(0x7f0000000840)="eb07ffe249e57725fb73e24eda99c4b0af41623b63b85eae2fef121e57296d5fc2775a893897791afc49af8b4bfe1375ac2b50be813a1e2e610e965a59b3e41717a16f2b1ebc5c80704be3750ac223f81db32a2207af4bdc66c1eeb81eb783aba9dcb0e5c7eb55810c8231a8c3704536dfb7b1dd0a24f44c05db3100d245015ced0745dbb35ed078f72917", 0x8b}, {&(0x7f0000000900)="ba8f4f0faaa4f467902ab6bd92088d503892b92fc1370cf39c0b22473c31bac500f5b4af29539e1fe028ee13cad681a89395826aab873349ff47bb35d2f666edef41b24ee7e2f68da4a3eaa7b3973abf682c6965760b33519a816a60421fe6df375a77c0a3687dc249be3e3f0796e812d5dd021eed724c1a725404fdc8f0bfc531394d943868ae0ecb8d4dc848667357da885efd1299e9cfc7df73ca42d9626b0f0a04bc39118a1c7fee906b5a94f1835c2b20e1b010dbd39e60053b5f714d9de090cec6ae4cde4a2003d5c67c1d9dc4e5b5e7", 0xd3}, {&(0x7f0000000a00)}, {&(0x7f0000000a40)="70e39e4e9cb83e5daf88038bd85d9bc2d6fee13175ff35749bad99d4d13ed2bc395f6eeab585d5e2e830a1e3e863d6fe44c43dd5745d439b6fe45f6e19a01aa2e06d977381350ce899690a404c29adf7ededf3445e0e8f22d213a9f9d1cef291d7b1976b8b067c77e9a84cb777869db6c14748d918cb8d996c81aec94959b5ada419a9c0dfdbcceab2965c461e1a479ad2c3", 0x92}, {&(0x7f0000000b00)="44a547db325a032deb9fb2796bbdfca6a856d8d6defce5bc05f375b088e7be1d5a2d90230c26caf8f43e192fb75ecd282a66aeffcb0127f3ed", 0x39}], 0x8, &(0x7f00000021c0)=[{0x18, 0x3a, 0xc, "0125dc17a436bb5d"}, {0x1010, 0x103, 0x4, "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"}, {0x28, 0x29, 0x7fff, "b011ddb3a6bcdf54bf122b6d68212e19ce8837"}, {0x20, 0x114, 0x2, "fcff8d69d7f2a5d21c"}, {0x98, 0x3a, 0x6, "a12067310277a57d5a229a64d13a34da12452a875d23738044447d042a1b4119d83014f64b12d866801bb4373f0024ed64787febd004b7cd1ad79c824211634be8e0d4097c55f4c49c5919bbf2f92171788ec0ab166661a7628180c4b9512fc77b79d89a376029376ac1032708b6d92a21a4323c8fe28706114995824a670fb696638dea58ad0113"}, {0xc8, 0x114, 0x4, "4b5aae466cfcc5aff283d6176ee4a17d0898e253dc7c121421534e265e012e07e80bef2b933468be706e25214f3dddd503ed1078d1ba7859ffa7b12d7332baa45aa6dafc0961cf0fc37508c538cf1892a7f3aa3daeae5fb64cd3eb4373c9734d292e4f28b011f807fbac1d98945812806c3e7922157b56b6d3d09d60fc73d3fd540b332206c884959e09b30f5873f9f6d1c99c5675f1899b315fce83d754f237425d4655c97f280ffab2d8e8456e52690c94949567d2"}, {0xd8, 0x10a, 0x3, "4a2b02a3be933195c2ee3971bdb986c998655bf7d88b5eb0f7181565298b7cdf28c8371df4c08414e597383601b73fc7a5617f7d42371b24c29be167fd125da2013e672b47a0b17682b6ccfe3fa13b6a4abe36f5f1d3a616dcf49e9c873ff8b3667c3ced836b9c15b552ed58e297127230a03d3b417288b880f39f6d588b3ed4af88f70c91d60e91e12ad6c11a5b655e671c737c5c7d2596d29899ca756fc6139565f7bdff70b5473e98ebf48c3e6e13022f6c3a6289d449630fd0e527b2c6cb21e61bba9142cad1"}, {0x38, 0x113, 0xe, "3a24f2090e23c060230984d6a978857bab3403b5099a81fc9da5dc29587830a50804eb7ea104"}, {0x68, 0x104, 0x8, "a1e6597e586d69d8f17505f2f94da3a82119b5cbfa94296e4ccfffb151f589ce771ccfdcb52234577f02bb91d573db108375dc384b24985d236630beb27565364a5c0fb8a704ac44b2e5f332ac7e945befe4faca3275afed"}], 0x1348}, 0x20004840)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000104fcffffff8000080000000000", @ANYRES32=0x0, @ANYBLOB="03150000000000001c0012800b00010067656e65766500000c00028008000200ac1414aa08000a002da03dbd08c682033b45aebf82c54252bb", @ANYRES32=r4, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000280)={'tunl0\x00', r4, 0x8, 0x7, 0x0, 0x9, {{0xf, 0x4, 0x2, 0x20, 0x3c, 0x68, 0x0, 0x7, 0x2f, 0x0, @empty, @rand_addr=0x64010102, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0x22, 0x1, 0xf, [{@multicast2, 0x8}, {@loopback, 0x8}, {@local}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}]}]}}}}})
bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
accept4(r2, 0x0, 0x0, 0x800)
socket$kcm(0x11, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xb, 0x8}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0xd, 0x6, 0x2, 0xfffd, 0x7, 0x9, 0x200, 0x8, [{0x80, 0x575e, 0x0, 0x9}, {0x1, 0xf, 0xfffffffe, 0xd5bd}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000040)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r10)

17.514575987s ago: executing program 1 (id=2493):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', <r2=>0x0})
socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a80)=@newqdisc={0x44, 0x24, 0xf0b, 0x3fff, 0x25dfdbfc, {0x0, 0x0, 0x12, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}]}}]}, 0x44}}, 0x4c094)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x40000000)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000090400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x5c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0)

17.475611644s ago: executing program 3 (id=2494):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000014000028000000"], 0x14}}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r8, 0x7d4165c9)
setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9)
listen(r7, 0x0)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r9, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r10, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8)
r11 = socket$netlink(0x10, 0x3, 0x8000000004)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r12, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4)
bind$inet6(r12, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0x4}, 0x1c)
writev(r11, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)
write$nci(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7103b3"], 0xb6)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

17.419978957s ago: executing program 4 (id=2495):
pipe(&(0x7f0000000600)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(r0, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
splice(r1, 0x0, r0, 0x0, 0x2, 0x2)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000003240)={0x1, 0x8, 0x10001, 0xc, 0x800}, 0x14)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x328, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x228, 0x250, 0x0, {}, [@common=@ipv6header={{0x28}, {0x1a, 0x1, 0x1}}, @common=@inet=@policy={{0x188}, {[{@ipv4=@local, [0xff], @ipv6=@remote, [0x0, 0xff000000, 0xff000000, 0xffffff00], 0x4d3, 0x34ff, 0x1, 0x1, 0x15, 0x10}, {@ipv4=@multicast1, [0x0, 0xffffffff, 0xffffffff, 0xff], @ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff], 0x4d6, 0x3503, 0x87, 0x0, 0x2, 0x10}, {@ipv4=@empty, [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x11}, [0xff000000, 0x0, 0xff, 0xff000000], 0x4d6, 0x3500, 0x3a, 0x0, 0x0, 0x4}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0xffffff00, 0x0, 0xffffff00], @ipv6=@mcast1, [0xff000000, 0xffffffff, 0xff000000, 0xffffffff], 0x4d3, 0x0, 0x2f, 0x0, 0x4, 0x1a}], 0x1, 0x3}}]}, @common=@inet=@SET1={0x0, 'SET\x00', 0x1, {{0x4, 0x2, 0x1}, {0x2, 0x6}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62, 0x0, 0x2}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="620ac42006e8e58fb6531b0000000000850000005d0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip6tnl0\x00'})

17.334631745s ago: executing program 0 (id=2497):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d100"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x14000000}, @TCA_FQ_PLIMIT={0x1300, 0x1, 0x5}]}}]}, 0x48}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)

17.282101376s ago: executing program 1 (id=2498):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x2)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$kcm(0x11, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$phonet(0x23, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00', <r13=>0x0})
sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r13, 0x1c17}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$SMC_PNETID_ADD(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4)
r14 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r10)
sendmsg$TIPC_NL_NET_SET(r10, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)={0x28c, r14, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3800000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0x94, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdb44}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x100, @private0, 0xfff}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x400, @empty, 0xff}}}}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3987}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x4000810}, 0x0)

17.16074919s ago: executing program 0 (id=2500):
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, 'P#\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000100001040000000000000000000000445042b8798003777c467ce8efc66169fc88b2812eea3fd4eab430", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677265000c00028006000e0012000000"], 0x38}}, 0x0)

17.030622413s ago: executing program 3 (id=2502):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="7c5331fc9356b5b1000600008100", 0x0, 0xd5a5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

17.009738239s ago: executing program 0 (id=2503):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x301, 0x270bd24, 0x25dfdbfa, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xc048)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000002000010000000000000000000a00000000000000000000001400110064596d7270310000000100000000000008000a00", @ANYRES32=r2], 0x38}}, 0x20000000)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32, @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c000014000600fc"], 0x94}}, 0x0)
bind$bt_hci(r1, &(0x7f0000001ac0), 0x6)
ioctl$sock_bt_hci(r1, 0x400448dc, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0xc, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x301, 0x270bd24, 0x25dfdbfa, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xc048) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000002000010000000000000000000a00000000000000000000001400110064596d7270310000000100000000000008000a00", @ANYRES32=r2], 0x38}}, 0x20000000) (async)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32, @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c000014000600fc"], 0x94}}, 0x0) (async)
bind$bt_hci(r1, &(0x7f0000001ac0), 0x6) (async)
ioctl$sock_bt_hci(r1, 0x400448dc, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0xc, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async)

16.958993822s ago: executing program 1 (id=2504):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe80000000000000000000aae000400100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe880000000000000000000000000001"], 0xf8}}, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket(0xa, 0x3, 0x87)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@private1, 0x78, r2})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0xfffffffffffffc24, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8916, &(0x7f0000000000))
sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280000000000000029000000040000002b011002ff0004"], 0x28}, 0x4004004)
openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)

16.806424907s ago: executing program 3 (id=2505):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @rand_addr=0x400}]}, &(0x7f0000000240)=0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
setsockopt(r2, 0x84, 0x835c, &(0x7f0000000000)='\x00\f\x00\x00\x00\x00\x00\x00', 0xfffffffffffffe76)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000030900010073797a3100000000ec000000030a01040000000000000000010000040900030073797a3100000000bf000c00c618f03400f09419583ff7685919f0568119d9d14430cd4cf58c1dfd7388628bf5f3de6a380f8d8125bd18f3fc2da65ca40a2e034f2effc6760206b9fa54c9a3bb56d2de7b0e1f812b220dbbf2f19e5b8cda6b41301252936b3cfb63639324267c6755e81c6c85de1f625f5c68ac073ecc7689e762b96ba9e9bdf03192cb04a68b01dd12ceadde690d698e276d9df2338382acb1645661d568c7cd968849149f88a064133899c1b91ade7186461131748ba7b73bbfa3ded72096e0000900010073797a310000000014000000110001"], 0x134}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c000280080001800000000014000000020a01"], 0xf4}}, 0x0)

16.785278992s ago: executing program 0 (id=2506):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, 0x0, 0x0, 0x748, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
close(0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="00000806aaaaaaaaaaaaffffffffffff81002d000800451f00d600650000bf2f9078e0000001ac1e00010420880b0007000009c6292f25200f07610500810036"], 0xec)

16.672700954s ago: executing program 1 (id=2508):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x6c93191a70b7789d}, 0x20000050)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x46, &(0x7f0000000380), 0x4)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x300, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x6}, {0xffff, 0xf}, {0xffe0, 0xc}}}, 0x24}}, 0x800)
sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)=@newtfilter={0x64, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0x2c, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r7}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x4c}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xe9}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff2, 0xf}}, @TCA_ROUTE4_IIF={0x8, 0x4, r3}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r4)
sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r10, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x33}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20006090}, 0x24000041)
r11 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r11, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r11, &(0x7f0000000440)={0x0, 0x34, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000400800000008000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001000000030000e0030200005e3dba8ae862e81ca8d5b0668a99d3fd6cd1389f9983000449a11afaf8d0cc4e1c902b2b"], 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
connect$pppl2tp(r9, 0x0, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=@ipv6_newrule={0xfffffffffffffec2, 0x20, 0x8, 0x70bd29, 0x25dfdbfd, {0xa, 0x14, 0x0, 0xcd, 0x4, 0x0, 0x0, 0x8, 0x8008}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x0, 0x13, 0x8}, @FRA_DST={0xfffffffffffffe47, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x44840)

16.490807254s ago: executing program 3 (id=2510):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) (async)
r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NET_DM_CMD_STOP(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400}, 0x26d7735414c69dc8) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$tipc(r7, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$inet(r7, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) (async)
recvmsg(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002214000000110001"], 0xd8}, 0x1, 0x0, 0x0, 0x2004c011}, 0x90) (async)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r8=>0xffffffffffffffff}) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$int_in(r9, 0x5452, &(0x7f00000000c0)=0x400)
r11 = getpid()
ioctl$sock_SIOCSPGRP(r9, 0x8902, &(0x7f0000000140)=r11)
r12 = socket(0x40000000015, 0x805, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r12) (async)
sendmsg$nl_generic(r8, &(0x7f0000000c80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c40)={&(0x7f0000001340)=ANY=[@ANYBLOB="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", @ANYRES64=r10, @ANYBLOB="33aa708c579b1c6b44713cd1466a47b13d5f84994271f3519357dc1606146fe97e782ce115ef102b9ef1fc73d6432b66111ba62b6fa676a0d29339a2456f00"], 0x2dc}, 0x1, 0x0, 0x0, 0x40000}, 0x4009050)

16.404999088s ago: executing program 4 (id=2511):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000140)={<r1=>r0, &(0x7f0000000040)='(\x00', 0x10000, &(0x7f0000000080)={@_ha_fsid={[0x4, 0x8]}, {0x1, 0x1, 0xdc2, 0x1}}, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x7}) (async)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8000}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000001) (async)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000340)) (async)
setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r4=>0x0})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$can_raw(r3, &(0x7f00000000c0)={&(0x7f0000000180)={0x1d, r4}, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=@can={{}, 0xfe, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d"], 0x2c}}, 0x0)

16.397338957s ago: executing program 2 (id=2512):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000000))
ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0xf0ff1f00000017)

16.306487405s ago: executing program 1 (id=2513):
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
close(r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x24}, 0x1, 0x620b}, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x24}, 0x1, 0x620b}, 0x0)
r3 = socket$rxrpc(0x21, 0x2, 0x2)
getsockopt(r3, 0x110, 0x9, 0x0, &(0x7f0000000280))
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710441000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710441000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

16.216353141s ago: executing program 3 (id=2514):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x11c, 0x2f, 0x1, 0x40000000, 0x25dfdbfc, "", [@nested={0x10b, 0xf2, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @typed={0x14, 0x4, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cdaec58754734be31d750351dc076eb43f9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad7481d8cc1bea8dc978402a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8b06c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
close(r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x3, 0x2d, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800"], 0x18, 0x40045}], 0x1, 0x0)
r2 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000800}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r4, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [""]}, 0x1c}}, 0x8000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x14, r7, 0x401}, 0x14}}, 0x0)
sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x40, r7, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9d}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3447}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a0000000000006111a400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)

16.171630789s ago: executing program 1 (id=2515):
r0 = socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x100, 0x20, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x100, 0x7, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4006}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$bt_hci(r2, &(0x7f0000000000)=ANY=[], 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r2, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', 0x0, &(0x7f0000000700)}}, 0x40)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f0000000380))
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES16=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x10)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000020605000000000000000000000000b38149e43da519e131000000000d000300686173683a6e6574000000000500040000000000050005000a00000005000100060000000c0007800800060000000000"], 0x54}}, 0x0)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x4000000)
sendmsg$nl_route_sched(r3, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)=@gettclass={0x24, 0x2a, 0x4, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x4, 0x5}, {0xc, 0xfff1}, {0x8, 0x2}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24}, 0x4000000)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newtaction={0x190, 0x30, 0x114, 0x70bd28, 0x0, {}, [{0x17c, 0x1, [@m_tunnel_key={0x178, 0x3, 0x0, 0x0, {{0xf}, {0xa0, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffffe, 0x283, 0xffffffffffffffff, 0x6, 0x8}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0xfffffff9, 0x20000000, 0xff, 0x80000000}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0xa9, 0x6, "b731dd4c48e2b265cd28471db0372a7ad251baac7165c118d79e08b44cde081710b721760692e11ba513741226995fca8fc5918d0ef89d100f5a1e37fb81bbbc0f618033c7cbb2e5309f07d432443b1852559a75295e38461b902968ab08208f9de5663196f9875bc9bb436c586155970a6067b7528f8b92cccb78fbf4fab355ce0cf90b9f67edab07652eb9197bb9302e6cf6e319366b5f2dbbd3d12acac0e2c0126b3bc9"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x50)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000500000018"], 0x44}}, 0x0)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0500fdffffff020000000600000008000300b4f073892cc1b2195ec4ee7d4851fec705d1879ce34750ad7b1363bc350874cf5551f0408b168e959675ea72202b6093ea41bd04564f773f4e3f991cf7a66fb99e8bcecf2ef5465d40d4d93fa84d449e23bd8a99cf547e343cb3d262072b2d7c3376ec0a3026eb4fab9485d07ee2ec6ee202e86f6764face08bb09f18d83df9a9747c83376d4866f7d7686c4be816b8c81686f178aa499317ed498935ba94ba98071f668732dd925", @ANYRES32=r11, @ANYBLOB="0800050009000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4810)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r12, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x9, 0x79}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x4040404)
socket$inet6_sctp(0xa, 0x1, 0x84)

15.671596473s ago: executing program 2 (id=2516):
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000140)={{<r0=>0xffffffffffffffff, &(0x7f0000000000)='\xd0\x00', 0x80040, &(0x7f0000000040)={@_ha_fsid={[0x5, 0x6]}, {0x5, 0x7, 0x3000000}}, 0x5, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x9}, {[0x4, 0x1, 0x5, 0x97a]}, 0x6, 0x6, &(0x7f0000000100)=""/6})
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f00000001c0)=""/253, 0x112000, 0x1000, 0x8b63, 0x1}, 0x20)
ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f00000018c0)={0x7, &(0x7f00000017c0)=[{0xc, 0x7a, &(0x7f0000000300)="b90d15f6d2ebe2ff29296e52e6702bc99b9add6b70c69110840a4e26b3c7253a2ca18d9d89b971fa04394b6b987744ecda43b57592cc1ba300f003179c97d0aa826c8ac13a88ddc9a66d80a0d696e7f770fce264ea26accddfccec698e72a2645031478f36313c0e5f15ab159e6109d195ea2d0203b916d8b615", 0x1}, {0x3, 0xe7, &(0x7f0000000380)="ccae6ca94ec579d9b6b9e2468e8d1b62b898bdd7d5e0d1c8bddde2ef3d7fb0962236e60281ac2d72628c938dd06455f31eb930e93ef9f957ed2a5f9bd547d4b980556c61676e3485ee60c933f58385cd1832452526a34976a08332f45d149076ab4be76f7dc628ab1a25dd97ebbab1218401bbe23f41829dfe6a4921331c4083be9ff0d5fcdcd782e3f7dcbd78d56193dbbfb308a7620f7a84d6569527de05ecac6df2ed7c5cae927b93aa5c8146e93fe7c8724fb0f21fda497cd081b7f2d8776c22a5e2e7a7b20f72922dc3888b5e198ec6f0a246cc6247d5a062815d293fea8eceb7a30d8a56", 0x1}, {0x6, 0xec, &(0x7f0000000480)="0e1c78b55a74e29ddf304615f440b3e4e64cedb07302626016e6916bb3cd17769c5275bb40468a0e5360036d38254cce69d8868108b24cd46d692fa74f4b8c6a8c83635c81a1739a1ef85d997f6917254455765866d4faf32a8ce4ee7144df061c3977b21eabd0c4d7b7cd7e98973131ca3b9a5590ad726dbb835b3ace21257fedc11be4d26a14402a205ad33cc88f640271082e6f793e05f4564eb55df71a8f55fb884be59f2421122a7e8c245609231a1b3f6789281184d722473b00313d56c8231b6490540073f984cb62f73fddaf3eee41a523b2f48935372bc66160bf25696418a687b58788e1ac61cd"}, {0xcb8, 0xb7, &(0x7f0000000580)="f7cd1310443fa43ab0e907be0de92b71a21c61a1e994595a65e6b47cc817c077ad3ea520d5ca7a1a70e301ec7d796324c9f9da867821881f137678e1d3a5d18956935ea009c29067c8f8ea0bcb3879e535ba6c8f3d7a3537b61a75391dc4031001c0c4f4e185464da0a85fd4dba9684afa99e963c804cd81636982af8cae5060550f13ba79190526d0a854bd0408674084b1137b917f39c688ce71135f53cc93b5b9c49d464f0228fa937155bdbceae3e57a5988f10bd0", 0x1, 0x1}, {0x1, 0x53, &(0x7f0000000640)="f7ffd35c6c46a00e64ab4c6334600fd516b1d8012edbc40ce5943d47f95f225de5a771937a0a33079de344b60127ddee081a90473ce954c3dd8aecd47bd63807185a5bb72ba2fedb77da338a786f928a28e322", 0x1, 0x1}, {0x6, 0x1000, &(0x7f00000006c0)="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", 0x0, 0x1}, {0x9, 0xf6, &(0x7f00000016c0)="aedaeb2237851bc6f16ccc7cf682456438c260d595497660c2844d75d9ada5278362a29146943ec2618dfa2fdd7b196d151b8ed305d772e33328ee5763f34ae792ccbbc3fb7c44f7775eb0c11ed10e65a1624782c34cdbe7336837224d5a2f090c10b89e2a6ebd4b919f18c5afd3eae0f0703870adfb9d11e012946eac3dcb3531dd63dcc76ed89026f86478a75004f50beddd2b7bbc7fcd664d86944ccaf33f8824df6c3ee65edf62c8b5252ea16a5bc2508ecb42b3402dc0e452960aac3c51c7b678712155f26d042912549c9800869b76668ca310d83a1414b5f597907ad6cc80cf53fdc7cc0014d57f35c0d07daacaef88c51b19"}]})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001900)={'wg2\x00', <r1=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001a00)={'syztnl0\x00', &(0x7f0000001940)={'gre0\x00', <r2=>r1, 0x8000, 0x700, 0x6, 0x0, {{0x1c, 0x4, 0x3, 0x3, 0x70, 0x64, 0x0, 0x2, 0x2f, 0x0, @multicast1, @remote, {[@generic={0x83, 0xf, "c76d09689d2aab04063a010541"}, @noop, @end, @ssrr={0x89, 0x7, 0x72, [@local]}, @end, @cipso={0x86, 0x40, 0xffffffffffffffff, [{0x0, 0xb, "79385dbdcc5735c786"}, {0x7, 0x6, "d1e97c7a"}, {0x0, 0xa, "2f2fdb93b67711e3"}, {0x5, 0xe, "d58045fdde1dfb07fb762b82"}, {0x6, 0xa, "a7c59f07b9c6a278"}, {0x0, 0x7, '6\"<=f'}]}]}}}}})
ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000001a40)=0x2008)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001a80))
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001b00), r0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x34, r3, 0x12, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0xa, 0x0, @udp='udp:syz0\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000014}, 0x20000041)
getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000001c00), &(0x7f0000001c80)=0x80)
bind$xdp(r0, &(0x7f0000001cc0)={0x2c, 0xa, r2, 0x28, r0}, 0x10)
r4 = accept4$tipc(r0, &(0x7f0000001d00), &(0x7f0000001d40)=0x10, 0x80000)
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r4, 0x10f, 0x84, &(0x7f0000001d80), &(0x7f0000001dc0)=0x4)
r5 = openat$cgroup_ro(r0, &(0x7f0000001e00)='cpuacct.usage_sys\x00', 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000001f00)={'syztnl1\x00', &(0x7f0000001e40)={'sit0\x00', r2, 0x7, 0x7, 0x8, 0x9, {{0x21, 0x4, 0x1, 0x7, 0x84, 0x68, 0x0, 0x1, 0x29, 0x0, @multicast1, @multicast1, {[@rr={0x7, 0x1f, 0xc2, [@multicast2, @private=0xa010100, @empty, @loopback, @private=0xa010101, @loopback, @dev={0xac, 0x14, 0x14, 0x20}]}, @timestamp_addr={0x44, 0x24, 0x33, 0x1, 0x9, [{@multicast2, 0x2}, {@dev={0xac, 0x14, 0x14, 0x15}, 0xfffffff7}, {@local, 0x6ff2}, {@multicast2, 0x3}]}, @cipso={0x86, 0x2b, 0x3, [{0x5, 0xe, "b00f8192a14ce0f3cac5faf6"}, {0x0, 0x8, "5977fb08055e"}, {0x1, 0xf, "88cb7fb1a456574b09478cd43e"}]}]}}}}})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCGIFDSTADDR(r6, 0x8917, &(0x7f0000001f40)={'bond0\x00', {0x2, 0x0, @local}})
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000001f80)=0x1)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r7, 0x11, 0x1, &(0x7f0000001fc0)=""/168, &(0x7f0000002080)=0xa8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000020c0)={0x6, 0x1, 0x1ff, 0x13, <r8=>0x0}, &(0x7f0000002100)=0x10)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000002140)={r8, @in={{0x2, 0x4e23, @multicast1}}}, 0x84)
openat$cgroup_freezer_state(r5, &(0x7f0000002200), 0x2, 0x0)
ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000003240)=@get={0x1, &(0x7f0000002240)=""/4096, 0xffffffffffff246e})
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000003280)={{<r9=>0x0, 0x0, 0x6, 0x4, 0xe, 0x0, 0x8, 0x2, 0xb79, 0x7ff, 0x4, 0x7, 0x5, 0x4, 0x6}})
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000004280)={r9, 0x2})
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000005280), &(0x7f00000052c0)=0x4)
socket$unix(0x1, 0x5, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x5, 0x4000010, r0, 0xace8d000)
ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000005300)={0x0, r6, 0x7, 0x8001, 0x2, 0x1})

15.671091659s ago: executing program 4 (id=2517):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000000013"], 0x24}}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c)
connect$inet6(r1, &(0x7f0000000600)={0xa, 0x4c23, 0x800e5, @ipv4={'\x00', '\xff\xff', @local}, 0xffefffff}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710ffffefffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xc}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$igmp(0x2, 0x3, 0x2)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000540)={{<r3=>r0, &(0x7f0000000080)='+\x00', 0x8000, &(0x7f00000000c0)={@align=0x4d4b, {0x9, 0x6, 0x4, 0x14c6}}, 0x1, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x2}, 0x2, &(0x7f0000000500)=[{0x1, 0x8000, &(0x7f0000000180)='}!,.&[\x00', &(0x7f0000000340)="394821bc31ecf2c507b6fded02714d61e600ebc505b7b53db62596b9688c59fbda62ec021a865b10bd1651f208f1e669f207b3581aea6a5541e6a14c1ccabc6ee56c469b44f3848ac27d1627e5bea58df91b1dda23b87e615af6296bbed72b9d5af84ad901e7f232aa60d6a0a69bfaa48ef12eb03a7a07dc820bb27d99f52b0c9f575914b9919cfccada19770c98560fab53e73af3e22dda953a56d31c3b5d0571b0d46f88fe83285e5621", 0xab, 0x8}, {0x2, 0x10000, &(0x7f0000000400)='%-@\xc5\'\x00', &(0x7f0000000440)="9414efb00168401bd3dcec9403196506898fa08a588c431b2354779490387803caa10d1da18a1c57af2c658ea0f27f571718c125fa41e47e564500bb464747862b0c001750151183bdf89071ca8297f6255ad59bb3a01081279a5ad46816252861b20d4a5851b70919757d823328cb8b5bde885f13248acc684c94bd820828c12a0c0aaca7ace5b62cee651752a5d2601ee38e2b803e03f0f8e186", 0x9b, 0x10}]})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x644}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x200}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)

15.67046781s ago: executing program 0 (id=2518):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70b529, 0x25dfdbfe, {0x7, 0x0, 0x0, r3, 0x80, 0x0, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x0, 0x0, 0x240008d4}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macvtap0\x00', <r4=>0x0})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000010080000900010073797a30000000002c000000030a01010000000000000000010000030900010073797a30000000000900030073797a320300000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000003b08000440000000220500020007000000340001800c00010062697477697365002400028008000340000000040800014000000014080002400000001208000640000000070900010073797a30"], 0x108}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r4], 0x68}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x1, 0xffe0}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004894}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x1, 0xffe0}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004894}, 0x0)
socket$inet6(0xa, 0x3, 0x5) (async)
r6 = socket$inet6(0xa, 0x3, 0x5)
sendmmsg(r6, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x4000000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX=r6], 0x18}}], 0x2, 0x0)

15.670158665s ago: executing program 2 (id=2519):
r0 = socket(0x10, 0x3, 0x0)
ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0)

15.669261151s ago: executing program 3 (id=2520):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x15, r1, 0x800, 0x70bd2e, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x24040044)

15.668565909s ago: executing program 2 (id=2521):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0xa, 0x2, 0x0) (async)
socket$inet_sctp(0x2, 0x1, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, <r1=>0xffffffffffffffff}, 0x4) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'sit0\x00', &(0x7f00000005c0)={'syztnl0\x00', r2, 0x20, 0x8, 0x45, 0x7286, {{0x25, 0x4, 0x3, 0x3f, 0x94, 0x67, 0x0, 0xb5, 0x2f, 0x0, @broadcast, @multicast2, {[@cipso={0x86, 0x21, 0x1, [{0x2, 0x3, "06"}, {0x0, 0xc, "29823c03cc3482fd37a1"}, {0x2, 0xc, "a9e442c242eb599402a7"}]}, @generic={0x89, 0x9, "604b41826484ec"}, @cipso={0x86, 0x35, 0xffffffffffffffff, [{0x5, 0xd, "d08bd88f606f3270fea15d"}, {0x0, 0x12, "a6e5fe2c46ee2f7776f08c236a9a4a57"}, {0x1, 0x10, "9199cf0a3bf5785619349a2b2507"}]}, @ssrr={0x89, 0x1f, 0x96, [@broadcast, @dev={0xac, 0x14, 0x14, 0x3b}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x11}, @loopback, @local, @broadcast]}]}}}}})
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket$netlink(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x801, 0x84) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async, rerun: 64)
syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
recvmsg$can_j1939(r4, &(0x7f00000019c0)={&(0x7f00000006c0)=@ieee802154, 0x80, &(0x7f0000001880)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)}], 0x2, &(0x7f00000018c0)=""/249, 0xf9}, 0x10000) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async, rerun: 32)
r5 = socket$tipc(0x1e, 0x2, 0x0) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r5], 0xc4}}, 0x0)

15.663992472s ago: executing program 0 (id=2522):
r0 = socket$inet6(0xa, 0x802, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x5, &(0x7f0000000480)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5068, 0x0, 0x0, 0x0, 0x4}], {0x95, 0x0, 0x74}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000340)={'syztnl2\x00', <r3=>0x0, 0xff50, 0x80, 0x9, 0x0, {{0x1e, 0x4, 0x1, 0x8, 0x78, 0x67, 0x0, 0xc1, 0x4, 0x0, @empty, @multicast2, {[@timestamp={0x44, 0x18, 0x32, 0x0, 0x7, [0x200, 0x81, 0x5, 0x6, 0x0]}, @noop, @noop, @timestamp_addr={0x44, 0x14, 0xcd, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@rand_addr=0x64010101, 0xfffffff8}]}, @timestamp_prespec={0x44, 0x34, 0xc3, 0x3, 0xf, [{@empty, 0xb09}, {@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x7fff}, {@empty, 0x7}, {@broadcast, 0x5}, {@remote, 0x9}]}]}}}}})
bind$xdp(r1, &(0x7f0000000440)={0x2c, 0x3972bc92ac87c6e, r3, 0x11, r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r5=>0x0})
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000c00000108000500000000000800060300000000"], 0x24}}, 0x0)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x10000, 0x4)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d40)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x44}}, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, &(0x7f0000000200)={r0})
getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f0000000240))

15.663562247s ago: executing program 2 (id=2523):
r0 = socket$l2tp(0x2, 0x2, 0x73)
sendto(r0, &(0x7f0000000100)="90ccd1c9b98207d0b89c2c4383b0429530d0d38a2a4f8082aa6367737f753e271238aa6170832111879d81c6a8c265ab46f05465aad18800572282795dfb1cfc09961e949857677104d8c85ca151c0f26319f913b7f3c6802ceacdc3a16799c4816420583a32f554aacb0836b9f985acdc2a37825e24adac1a1192b17f9af3ea9ceef9eb2d445087db63051349a268d23aea6141", 0x94, 0x20000810, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004680)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000010080000900010073797a30000000002c000000030a01010000000000000000010000030900010073797a30000000000900030073797a320000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000003b08000440000000220500020007000000340001800c00010062697477697365002400028008000340000000040800014000000014080002400000001208000840000000040900010073797a30"], 0x108}}, 0x0)

15.598839923s ago: executing program 2 (id=2524):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000580)={0x20, 0x1, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="00006488bd4693451e0737f6a90754ac000001000000000000000000"], 0x48)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$NL80211_CMD_LEAVE_IBSS(r6, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x14, r7, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x480c1)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x9, &(0x7f0000000180)=0x1, 0x4)
r9 = socket(0x2, 0x80805, 0x0)
r10 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
preadv(r10, &(0x7f0000000680)=[{&(0x7f0000000340)=""/174, 0xae}, {&(0x7f00000004c0)=""/27, 0x1b}, {&(0x7f00000005c0)=""/191, 0xbf}], 0x3, 0x0, 0x5f5b)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r9, 0x84, 0x7a, &(0x7f0000000080)={0x0, 0x4, "179da51e"}, &(0x7f00000000c0)=0xc)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$IEEE802154_ASSOCIATE_RESP(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x34, r11, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0xe}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xfd}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94)

230.220587ms ago: executing program 32 (id=2522):
r0 = socket$inet6(0xa, 0x802, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x5, &(0x7f0000000480)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5068, 0x0, 0x0, 0x0, 0x4}], {0x95, 0x0, 0x74}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000340)={'syztnl2\x00', <r3=>0x0, 0xff50, 0x80, 0x9, 0x0, {{0x1e, 0x4, 0x1, 0x8, 0x78, 0x67, 0x0, 0xc1, 0x4, 0x0, @empty, @multicast2, {[@timestamp={0x44, 0x18, 0x32, 0x0, 0x7, [0x200, 0x81, 0x5, 0x6, 0x0]}, @noop, @noop, @timestamp_addr={0x44, 0x14, 0xcd, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@rand_addr=0x64010101, 0xfffffff8}]}, @timestamp_prespec={0x44, 0x34, 0xc3, 0x3, 0xf, [{@empty, 0xb09}, {@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x7fff}, {@empty, 0x7}, {@broadcast, 0x5}, {@remote, 0x9}]}]}}}}})
bind$xdp(r1, &(0x7f0000000440)={0x2c, 0x3972bc92ac87c6e, r3, 0x11, r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r5=>0x0})
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000c00000108000500000000000800060300000000"], 0x24}}, 0x0)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x10000, 0x4)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d40)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x44}}, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, &(0x7f0000000200)={r0})
getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f0000000240))

195.677632ms ago: executing program 33 (id=2515):
r0 = socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x100, 0x20, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x100, 0x7, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4006}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$bt_hci(r2, &(0x7f0000000000)=ANY=[], 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r2, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', 0x0, &(0x7f0000000700)}}, 0x40)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f0000000380))
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES16=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x10)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000020605000000000000000000000000b38149e43da519e131000000000d000300686173683a6e6574000000000500040000000000050005000a00000005000100060000000c0007800800060000000000"], 0x54}}, 0x0)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x4000000)
sendmsg$nl_route_sched(r3, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)=@gettclass={0x24, 0x2a, 0x4, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x4, 0x5}, {0xc, 0xfff1}, {0x8, 0x2}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24}, 0x4000000)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newtaction={0x190, 0x30, 0x114, 0x70bd28, 0x0, {}, [{0x17c, 0x1, [@m_tunnel_key={0x178, 0x3, 0x0, 0x0, {{0xf}, {0xa0, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffffe, 0x283, 0xffffffffffffffff, 0x6, 0x8}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0xfffffff9, 0x20000000, 0xff, 0x80000000}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0xa9, 0x6, "b731dd4c48e2b265cd28471db0372a7ad251baac7165c118d79e08b44cde081710b721760692e11ba513741226995fca8fc5918d0ef89d100f5a1e37fb81bbbc0f618033c7cbb2e5309f07d432443b1852559a75295e38461b902968ab08208f9de5663196f9875bc9bb436c586155970a6067b7528f8b92cccb78fbf4fab355ce0cf90b9f67edab07652eb9197bb9302e6cf6e319366b5f2dbbd3d12acac0e2c0126b3bc9"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x50)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000500000018"], 0x44}}, 0x0)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0500fdffffff020000000600000008000300b4f073892cc1b2195ec4ee7d4851fec705d1879ce34750ad7b1363bc350874cf5551f0408b168e959675ea72202b6093ea41bd04564f773f4e3f991cf7a66fb99e8bcecf2ef5465d40d4d93fa84d449e23bd8a99cf547e343cb3d262072b2d7c3376ec0a3026eb4fab9485d07ee2ec6ee202e86f6764face08bb09f18d83df9a9747c83376d4866f7d7686c4be816b8c81686f178aa499317ed498935ba94ba98071f668732dd925", @ANYRES32=r11, @ANYBLOB="0800050009000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4810)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r12, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x9, 0x79}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x4040404)
socket$inet6_sctp(0xa, 0x1, 0x84)

134.529783ms ago: executing program 34 (id=2524):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000580)={0x20, 0x1, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="00006488bd4693451e0737f6a90754ac000001000000000000000000"], 0x48)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$NL80211_CMD_LEAVE_IBSS(r6, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x14, r7, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x480c1)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x9, &(0x7f0000000180)=0x1, 0x4)
r9 = socket(0x2, 0x80805, 0x0)
r10 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
preadv(r10, &(0x7f0000000680)=[{&(0x7f0000000340)=""/174, 0xae}, {&(0x7f00000004c0)=""/27, 0x1b}, {&(0x7f00000005c0)=""/191, 0xbf}], 0x3, 0x0, 0x5f5b)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r9, 0x84, 0x7a, &(0x7f0000000080)={0x0, 0x4, "179da51e"}, &(0x7f00000000c0)=0xc)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$IEEE802154_ASSOCIATE_RESP(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x34, r11, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0xe}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xfd}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94)

92.317451ms ago: executing program 35 (id=2520):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x15, r1, 0x800, 0x70bd2e, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x24040044)

0s ago: executing program 36 (id=2517):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000000013"], 0x24}}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c)
connect$inet6(r1, &(0x7f0000000600)={0xa, 0x4c23, 0x800e5, @ipv4={'\x00', '\xff\xff', @local}, 0xffefffff}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710ffffefffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xc}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$igmp(0x2, 0x3, 0x2)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000540)={{<r3=>r0, &(0x7f0000000080)='+\x00', 0x8000, &(0x7f00000000c0)={@align=0x4d4b, {0x9, 0x6, 0x4, 0x14c6}}, 0x1, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x2}, 0x2, &(0x7f0000000500)=[{0x1, 0x8000, &(0x7f0000000180)='}!,.&[\x00', &(0x7f0000000340)="394821bc31ecf2c507b6fded02714d61e600ebc505b7b53db62596b9688c59fbda62ec021a865b10bd1651f208f1e669f207b3581aea6a5541e6a14c1ccabc6ee56c469b44f3848ac27d1627e5bea58df91b1dda23b87e615af6296bbed72b9d5af84ad901e7f232aa60d6a0a69bfaa48ef12eb03a7a07dc820bb27d99f52b0c9f575914b9919cfccada19770c98560fab53e73af3e22dda953a56d31c3b5d0571b0d46f88fe83285e5621", 0xab, 0x8}, {0x2, 0x10000, &(0x7f0000000400)='%-@\xc5\'\x00', &(0x7f0000000440)="9414efb00168401bd3dcec9403196506898fa08a588c431b2354779490387803caa10d1da18a1c57af2c658ea0f27f571718c125fa41e47e564500bb464747862b0c001750151183bdf89071ca8297f6255ad59bb3a01081279a5ad46816252861b20d4a5851b70919757d823328cb8b5bde885f13248acc684c94bd820828c12a0c0aaca7ace5b62cee651752a5d2601ee38e2b803e03f0f8e186", 0x9b, 0x10}]})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x644}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x200}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)

kernel console output (not intermixed with test programs):

e
[  189.486891][ T9316] syzkaller0: entered allmulticast mode
[  189.516558][ T9300] lo speed is unknown, defaulting to 1000
[  189.662100][  T607] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  189.681335][  T607] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  189.706662][  T607] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  189.812729][ T9329] netlink: 'syz.2.947': attribute type 1 has an invalid length.
[  189.891013][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  189.922307][   T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  189.943445][   T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.100183][  T607] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  190.130703][  T607] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.159182][  T607] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  190.185494][  T607] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.260047][   T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  190.287907][   T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.425430][ T9343] netlink: 'syz.2.952': attribute type 1 has an invalid length.
[  190.438892][ T9343] netlink: 228 bytes leftover after parsing attributes in process `syz.2.952'.
[  190.454679][ T9342] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  190.472993][ T9342] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.672355][ T9342] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  190.693779][ T9342] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.738321][ T9326] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  190.789711][ T9342] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  190.812955][ T9342] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.002025][ T9342] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  191.028772][ T9342] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.154129][ T9360] syzkaller0: entered promiscuous mode
[  191.180242][ T9360] syzkaller0: entered allmulticast mode
[  192.030494][ T9403] netlink: 'syz.2.969': attribute type 83 has an invalid length.
[  192.045153][ T9401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.968'.
[  192.073592][ T9405] xt_hashlimit: size too large, truncated to 1048576
[  192.141619][ T9408] netlink: 24 bytes leftover after parsing attributes in process `syz.1.967'.
[  192.178010][ T9408] netlink: 56 bytes leftover after parsing attributes in process `syz.1.967'.
[  192.705463][ T9429] netlink: 'syz.0.977': attribute type 30 has an invalid length.
[  192.721367][ T9429] netlink: 56 bytes leftover after parsing attributes in process `syz.0.977'.
[  193.168213][ T9454] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  193.502152][ T9468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.988'.
[  193.589481][ T9469] netlink: 'syz.1.983': attribute type 2 has an invalid length.
[  193.645771][ T9452] netlink: 'syz.1.983': attribute type 2 has an invalid length.
[  193.686241][ T9452] netlink: 67 bytes leftover after parsing attributes in process `syz.1.983'.
[  193.726727][ T9452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.983'.
[  193.752017][ T9452] netlink: 176 bytes leftover after parsing attributes in process `syz.1.983'.
[  193.775733][ T9452] netlink: 'syz.1.983': attribute type 5 has an invalid length.
[  193.793384][ T9469] netlink: 156 bytes leftover after parsing attributes in process `syz.1.983'.
[  194.040465][   T36] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  194.064577][   T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  194.100755][   T36] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  194.123331][   T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  194.220285][  T607] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  194.243551][  T607] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  194.289927][  T607] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  194.315546][  T607] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  194.432868][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  194.558123][ T9492] netlink: 'syz.0.995': attribute type 1 has an invalid length.
[  194.746572][ T9501] netlink: 'syz.1.998': attribute type 32 has an invalid length.
[  194.835364][ T9501] gtp0: entered promiscuous mode
[  194.869675][ T9501] gtp0: entered allmulticast mode
[  194.879571][ T9505] openvswitch: netlink: Flow actions attr not present in new flow.
[  195.457456][ T9534] netlink: 'syz.4.1007': attribute type 11 has an invalid length.
[  195.485953][ T9534] __nla_validate_parse: 9 callbacks suppressed
[  195.485980][ T9534] netlink: 4312 bytes leftover after parsing attributes in process `syz.4.1007'.
[  195.547970][ T9535] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1007'.
[  195.914243][ T9555] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1013'.
[  195.948946][ T9555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  196.126147][ T9559] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1015'.
[  196.168356][ T9559] pim6reg: entered allmulticast mode
[  197.337632][ T9607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1030'.
[  197.360287][ T9610] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  197.718356][ T9627] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.1038'.
[  197.793317][ T9629] netlink: 'syz.0.1037': attribute type 1 has an invalid length.
[  198.169398][ T9650] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1043'.
[  198.399759][ T9657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1048'.
[  198.416542][ T9658] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1047'.
[  198.433917][ T9657] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1048'.
[  198.649230][ T9667] syzkaller0: entered promiscuous mode
[  198.661753][ T9667] syzkaller0: entered allmulticast mode
[  198.729033][ T9667] netlink: 'syz.1.1051': attribute type 1 has an invalid length.
[  198.749876][ T9667] netlink: 'syz.1.1051': attribute type 2 has an invalid length.
[  198.776459][ T9673] netlink: 'syz.2.1054': attribute type 11 has an invalid length.
[  199.143759][ T9690] xt_bpf: check failed: parse error
[  200.432309][ T9744] syzkaller1: entered promiscuous mode
[  200.451215][ T9744] syzkaller1: entered allmulticast mode
[  201.001203][ T9783] __nla_validate_parse: 6 callbacks suppressed
[  201.001226][ T9783] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1076'.
[  201.057094][ T9786] xt_CT: You must specify a L4 protocol and not use inversions on it
[  201.217792][ T9789] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1079'.
[  201.342357][ T9804] netlink: 'syz.3.1082': attribute type 10 has an invalid length.
[  201.442935][ T9804] team0: Port device dummy0 added
[  201.483472][ T9808] netlink: 'syz.4.1083': attribute type 11 has an invalid length.
[  201.501339][ T9811] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1084'.
[  201.755976][ T9820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1086'.
[  201.805269][ T9820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1086'.
[  201.820023][ T9765] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  201.840291][ T9765] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  201.891635][   T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  201.913941][   T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  201.963002][ T9828] tipc: Started in network mode
[  201.978258][ T9828] tipc: Node identity ac141441, cluster identity 4711
[  201.993737][ T9828] tipc: Enabled bearer <udp:syz2>, priority 10
[  202.094824][ T9831] openvswitch: netlink: Flow key attr not present in new flow.
[  202.121919][ T9831] bridge: RTM_NEWNEIGH with invalid state 0x20
[  202.354122][ T9837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1093'.
[  202.421368][ T9838] ip6gre2: entered allmulticast mode
[  202.448277][  T176] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  202.537696][ T9844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1094'.
[  202.556428][ T9844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1094'.
[  202.854876][ T9854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1096'.
[  204.884132][ T9862] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1098'.
[  204.895504][ T9850] syzkaller1: entered allmulticast mode
[  204.910307][ T5841] tipc: Node number set to 2886997057
[  205.255572][ T9890] geneve2: entered promiscuous mode
[  205.302252][ T9900] netlink: zone id is out of range
[  205.311827][ T9900] netlink: zone id is out of range
[  205.318751][ T9900] netlink: del zone limit has 4 unknown bytes
[  205.931136][ T9931] netlink: 'syz.2.1117': attribute type 1 has an invalid length.
[  206.270023][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  206.282250][ T9947] __nla_validate_parse: 5 callbacks suppressed
[  206.282287][ T9947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1120'.
[  206.305724][ T9947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1120'.
[  206.322937][ T9949] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1121'.
[  206.376691][ T9950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1121'.
[  206.430162][ T9950] block nbd0: not configured, cannot reconfigure
[  206.453113][ T9949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1121'.
[  206.480300][ T9949] block nbd0: not configured, cannot reconfigure
[  206.663404][ T9957] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  206.729715][ T9959] 8021q: adding VLAN 0 to HW filter on device bond6
[  206.755685][  T187] lo speed is unknown, defaulting to 1000
[  206.776882][  T187] syú2: Port: 1 Link DOWN
[  207.004810][ T9973] block nbd0: Unsupported socket: should be TCP or UNIX.
[  207.197868][ T9979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1130'.
[  207.228328][ T9982] netlink: 'syz.0.1131': attribute type 1 has an invalid length.
[  207.277408][ T9985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1132'.
[  207.293429][ T9985] netlink: 'syz.1.1132': attribute type 10 has an invalid length.
[  207.345451][ T9991] netlink: 'syz.1.1132': attribute type 18 has an invalid length.
[  207.412232][ T9982] 8021q: adding VLAN 0 to HW filter on device bond7
[  207.422759][ T9985] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.430811][ T9985] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.445454][ T9985] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.452863][ T9985] bridge0: port 2(bridge_slave_1) entered forwarding state
[  207.460549][ T9985] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.467870][ T9985] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.482610][ T9985] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  207.718995][T10004] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1135'.
[  207.732188][T10004] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1135'.
[  207.984311][T10015] veth1_to_bond: entered allmulticast mode
[  208.006196][T10016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1140'.
[  208.031207][T10015] veth1_to_bond: left allmulticast mode
[  208.570728][T10048] 8021q: VLANs not supported on ipvlan0
[  208.791942][ T9771] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  208.846688][T10062] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  209.306878][T10083] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  209.319962][T10083] batman_adv: batadv0: Removing interface: batadv_slave_0
[  209.341396][T10083] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  209.357866][T10083] batman_adv: batadv0: Removing interface: batadv_slave_1
[  209.677520][T10094] veth1_to_bond: Caught tx_queue_len zero misconfig
[  209.724895][T10094] netlink: 'syz.0.1162': attribute type 3 has an invalid length.
[  209.808352][T10096] Unsupported xt match
[  209.808376][T10096] unable to load match
[  210.260860][T10108] netlink: 'syz.1.1169': attribute type 24 has an invalid length.
[  210.805516][T10122] lo: entered promiscuous mode
[  210.828190][T10122] tunl0: entered promiscuous mode
[  210.856081][T10122] gre0: entered promiscuous mode
[  210.904079][T10122] gretap0: entered promiscuous mode
[  210.944601][T10122] erspan0: entered promiscuous mode
[  210.983685][T10122] ip_vti0: entered promiscuous mode
[  211.012512][  T187] lo speed is unknown, defaulting to 1000
[  211.526769][T10151] __nla_validate_parse: 16 callbacks suppressed
[  211.526789][T10151] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1185'.
[  211.844934][T10163] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1189'.
[  211.937654][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1190'.
[  211.969492][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1190'.
[  212.057124][T10174] batadv_slave_0: entered promiscuous mode
[  212.094230][T10174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1193'.
[  212.219683][T10180] sctp: [Deprecated]: syz.1.1195 (pid 10180) Use of int in maxseg socket option.
[  212.219683][T10180] Use struct sctp_assoc_value instead
[  212.260454][T10179] sctp: [Deprecated]: syz.1.1195 (pid 10179) Use of int in maxseg socket option.
[  212.260454][T10179] Use struct sctp_assoc_value instead
[  213.069279][T10214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1204'.
[  213.081380][T10214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1204'.
[  213.435618][T10216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  213.469196][T10216] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  213.510064][T10216] bond0 (unregistering): Released all slaves
[  213.944091][T10242] netlink: 'syz.2.1212': attribute type 2 has an invalid length.
[  214.100941][T10247] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1214'.
[  214.157442][T10247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1214'.
[  214.270264][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  214.584199][T10282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1222'.
[  214.846701][T10289] ipvlan0: entered promiscuous mode
[  214.875148][T10294] netlink: 'syz.0.1227': attribute type 1 has an invalid length.
[  215.108918][T10309] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  215.261793][T10317] netlink: 'syz.1.1232': attribute type 1 has an invalid length.
[  215.829948][T10342] xt_TCPMSS: Only works on TCP SYN packets
[  215.845332][T10346] xt_TCPMSS: Only works on TCP SYN packets
[  216.078919][T10355] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  216.098732][T10360] netlink: 'syz.4.1244': attribute type 3 has an invalid length.
[  216.426488][T10366] 8021q: adding VLAN 0 to HW filter on device bond11
[  216.486750][T10366] bridge0: port 3(bond11) entered blocking state
[  216.520096][T10366] bridge0: port 3(bond11) entered disabled state
[  216.527127][T10366] bond11: entered allmulticast mode
[  216.537135][T10366] bond11: entered promiscuous mode
[  216.551400][T10366] bridge0: port 3(bond11) entered blocking state
[  216.559728][T10366] bridge0: port 3(bond11) entered forwarding state
[  216.881780][T10397] __nla_validate_parse: 10 callbacks suppressed
[  216.881802][T10397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1251'.
[  216.906405][T10400] ip6t_srh: unknown srh match flags  4000
[  216.928752][T10400] netlink: 'syz.0.1254': attribute type 1 has an invalid length.
[  216.929343][T10397] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.179737][T10413] --map-set only usable from mangle table
[  217.379239][ T9771] bridge0: port 3(bond11) entered disabled state
[  217.574408][T10421] tun0: tun_chr_ioctl cmd 1074025675
[  217.590774][T10421] tun0: persist disabled
[  217.696663][T10435] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1264'.
[  217.735071][T10435] netlink: 'syz.0.1264': attribute type 7 has an invalid length.
[  217.775618][T10435] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1264'.
[  217.790409][T10436] netlink: 'syz.1.1267': attribute type 39 has an invalid length.
[  217.886753][T10435] netlink: 'syz.0.1264': attribute type 11 has an invalid length.
[  217.898666][T10435] netlink: 4320 bytes leftover after parsing attributes in process `syz.0.1264'.
[  218.117958][T10459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1273'.
[  218.141080][T10457] pim6reg: entered allmulticast mode
[  218.168593][T10458] pim6reg: left allmulticast mode
[  218.177964][T10452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1273'.
[  218.230995][T10459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1273'.
[  218.552985][T10466] bond1: entered allmulticast mode
[  218.570489][T10466] 8021q: adding VLAN 0 to HW filter on device bond1
[  218.917957][T10485] ip6gre2: entered allmulticast mode
[  218.934087][  T176] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  218.946841][T10484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1282'.
[  219.061995][T10494] netlink: 'syz.3.1289': attribute type 6 has an invalid length.
[  219.602100][T10522] netlink: 'syz.3.1297': attribute type 2 has an invalid length.
[  219.645166][T10522] netlink: 'syz.3.1297': attribute type 2 has an invalid length.
[  219.684766][T10522] netlink: 'syz.3.1297': attribute type 2 has an invalid length.
[  219.708840][T10522] netlink: 'syz.3.1297': attribute type 2 has an invalid length.
[  219.739207][T10528] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1299'.
[  219.749330][T10522] netlink: 'syz.3.1297': attribute type 2 has an invalid length.
[  219.762514][T10528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1299'.
[  219.772942][T10522] netlink: 'syz.3.1297': attribute type 2 has an invalid length.
[  219.794184][T10522] netlink: 'syz.3.1297': attribute type 2 has an invalid length.
[  219.813414][T10522] netlink: 'syz.3.1297': attribute type 2 has an invalid length.
[  219.880493][T10534] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0
[  219.889390][T10522] netlink: 'syz.3.1297': attribute type 2 has an invalid length.
[  220.122768][T10539] bond5: option lacp_active: mode dependency failed, not supported in mode active-backup(1)
[  220.137021][T10539] bond5 (unregistering): Released all slaves
[  220.322788][T10562] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  220.661192][T10573] unsupported nla_type 55330
[  221.014524][T10593] bond0: entered promiscuous mode
[  221.039982][T10593] bond_slave_0: entered promiscuous mode
[  221.066153][T10593] bond_slave_1: entered promiscuous mode
[  221.077795][T10593] gretap0: entered promiscuous mode
[  221.084344][T10593] team0: entered promiscuous mode
[  221.100288][T10593] team_slave_0: entered promiscuous mode
[  221.112115][T10593] team_slave_1: entered promiscuous mode
[  221.132268][T10593] hsr1: entered promiscuous mode
[  221.708835][T10616] syzkaller0: entered promiscuous mode
[  221.750595][T10616] syzkaller0: entered allmulticast mode
[  221.944405][T10631] __nla_validate_parse: 12 callbacks suppressed
[  221.944425][T10631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1325'.
[  222.015466][T10645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1329'.
[  222.030358][T10639] lo speed is unknown, defaulting to 1000
[  222.115622][T10624] xt_ecn: cannot match TCP bits for non-tcp packets
[  222.389303][T10657] kthread_run failed with err -4
[  223.070165][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  223.330912][T10726] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  223.339207][T10726] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  223.544317][T10738] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1354'.
[  223.661608][T10735] 8021q: adding VLAN 0 to HW filter on device bond2
[  223.717533][T10742] bond2: (slave veth0_to_bond): making interface the new active one
[  223.747239][T10742] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  223.896065][T10746] 8021q: adding VLAN 0 to HW filter on device bond3
[  223.943700][T10746] bond2: (slave bond3): Enslaving as an active interface with a down link
[  224.156718][T10773] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1361'.
[  224.197422][T10773] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1361'.
[  224.440715][T10783] validate_nla: 65 callbacks suppressed
[  224.440736][T10783] netlink: 'syz.1.1364': attribute type 1 has an invalid length.
[  224.458105][T10783] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1364'.
[  224.486002][T10783] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1364'.
[  224.545387][T10789] openvswitch: netlink: Missing key (keys=c0, expected=480)
[  224.559440][T10785] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1365'.
[  224.733956][T10794] Bluetooth: hci1: Opcode 0x0401 failed: -22
[  224.873049][T10801] lo: entered promiscuous mode
[  224.894467][T10801] lo: entered allmulticast mode
[  224.918782][T10801] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  225.053364][T10813] netlink: 'syz.1.1375': attribute type 12 has an invalid length.
[  225.076899][T10813] netlink: 'syz.1.1375': attribute type 29 has an invalid length.
[  225.108031][T10813] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1375'.
[  225.136599][T10813] netlink: 'syz.1.1375': attribute type 3 has an invalid length.
[  225.145784][T10813] netlink: 'syz.1.1375': attribute type 2 has an invalid length.
[  225.173962][T10813] netlink: 35 bytes leftover after parsing attributes in process `syz.1.1375'.
[  225.188775][T10812] netlink: 'syz.1.1375': attribute type 12 has an invalid length.
[  225.198199][T10812] netlink: 'syz.1.1375': attribute type 29 has an invalid length.
[  225.209030][T10812] netlink: 'syz.1.1375': attribute type 3 has an invalid length.
[  225.217321][T10812] netlink: 'syz.1.1375': attribute type 2 has an invalid length.
[  225.250164][T10823] netlink: 'syz.4.1377': attribute type 3 has an invalid length.
[  225.283868][T10825] tipc: Started in network mode
[  225.288992][T10825] tipc: Node identity a2a3250e667, cluster identity 4711
[  225.299606][T10825] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  225.312264][T10825] syzkaller0: MTU too low for tipc bearer
[  225.320527][T10825] tipc: Disabling bearer <eth:syzkaller0>
[  225.677365][T10831] syzkaller0: entered promiscuous mode
[  225.691618][T10831] syzkaller0: entered allmulticast mode
[  228.860456][T10908] __nla_validate_parse: 5 callbacks suppressed
[  228.860477][T10908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1399'.
[  228.878331][T10907] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1402'.
[  228.943314][T10909] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1401'.
[  228.984350][T10909] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1401'.
[  229.232051][T10932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1403'.
[  229.297714][T10920] 8021q: adding VLAN 0 to HW filter on device bond4
[  229.631879][T10951] netdevsim netdevsim2: Firmware load for './file0/file0/../file0' refused, path contains '..' component
[  229.781465][T10955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1411'.
[  229.806843][T10959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1410'.
[  229.836231][T10955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1411'.
[  229.858506][T10955] validate_nla: 3 callbacks suppressed
[  229.858525][T10955] netlink: 'syz.0.1411': attribute type 3 has an invalid length.
[  229.935087][T10961] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  229.948378][T10961] bond5 (unregistering): Released all slaves
[  230.006420][T10952] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1410'.
[  230.074482][T10968] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  230.088324][T10970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1416'.
[  230.286540][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  230.544623][ T5738] lo speed is unknown, defaulting to 1000
[  230.909991][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  231.109085][T11015] lo speed is unknown, defaulting to 1000
[  231.369024][T11031] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  231.404675][T11032] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  231.915626][T11059] netlink: 'syz.4.1443': attribute type 10 has an invalid length.
[  231.955187][T11059] team0: Port device dummy0 added
[  231.987128][T11060] netlink: 'syz.4.1443': attribute type 10 has an invalid length.
[  232.069172][T11062] openvswitch: netlink: Missing valid actions attribute.
[  232.078103][T11060] team0: Port device dummy0 removed
[  232.116884][T11062] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.317329][T11075] syzkaller1: entered promiscuous mode
[  232.324048][T11075] syzkaller1: entered allmulticast mode
[  232.392013][T11080] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.476104][T11077] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  232.584917][T11094] tipc: Trying to set illegal importance in message
[  232.650426][T11097] block nbd0: Unsupported socket: should be TCP or UNIX.
[  232.786816][T11095] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  232.834927][T11095] bond5: (slave lo): Enslaving as an active interface with an up link
[  232.854884][T11095] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  233.039458][ T5622] lo speed is unknown, defaulting to 1000
[  233.045812][   T24] lo speed is unknown, defaulting to 1000
[  233.057979][   T24] syú2: Port: 1 Link ACTIVE
[  233.126553][T11109] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  233.139084][T11109] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  233.283711][T11115] bond6: option fail_over_mac: invalid value (16)
[  233.326382][T11115] bond6 (unregistering): Released all slaves
[  233.725610][T11140] ipvlan0: entered allmulticast mode
[  233.746154][T11140] batadv_slave_1: entered allmulticast mode
[  233.772597][T11140] batman_adv: batadv0: Adding interface: ipvlan0
[  233.789427][T11140] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  233.856056][T11140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  233.898944][T11140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.904751][T11152] netlink: 'syz.2.1465': attribute type 83 has an invalid length.
[  233.927980][T11140] batman_adv: batadv0: Interface activated: ipvlan0
[  234.062069][T11143] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  234.086593][T11152] __nla_validate_parse: 8 callbacks suppressed
[  234.086617][T11152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1465'.
[  234.196166][T11145] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  234.537002][T11170] bond8: option mode: invalid value (10)
[  234.584595][T11170] bond8 (unregistering): Released all slaves
[  234.688382][T11168] syzkaller0: entered promiscuous mode
[  234.698623][T11168] syzkaller0: entered allmulticast mode
[  234.918551][T11192] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1472'.
[  234.940778][T11197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1473'.
[  235.112903][ T5286] netdevsim netdevsim0 netdevsim3: default qdisc (pfifo_fast) fail, fallback to noqueue
[  235.126405][T11206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1476'.
[  235.171169][ T5286] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  235.426104][T11221] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  235.552605][T11232] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1481'.
[  235.909447][T11245] sctp: [Deprecated]: syz.3.1485 (pid 11245) Use of int in max_burst socket option deprecated.
[  235.909447][T11245] Use struct sctp_assoc_value instead
[  235.995975][T11247] raw_sendmsg: syz.0.1486 forgot to set AF_INET. Fix it!
[  236.430327][T11267] syz_tun: entered allmulticast mode
[  236.447109][T11267] dvmrp8: entered allmulticast mode
[  236.568884][T11274] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  236.611027][T11266] syz_tun: left allmulticast mode
[  236.641419][T11273] ip6t_rpfilter: unknown options
[  236.850923][T11285] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1498'.
[  236.878414][T11288] netlink: 'syz.3.1499': attribute type 1 has an invalid length.
[  236.888093][T11288] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1499'.
[  237.113069][T11293] syzkaller1: entered promiscuous mode
[  237.132681][T11293] syzkaller1: entered allmulticast mode
[  237.169125][T11302] netlink: 'syz.4.1503': attribute type 4 has an invalid length.
[  237.178435][T11302] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1503'.
[  237.192813][T11302] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.1503'.
[  237.336379][    C0] vcan0: j1939_tp_rxtimer: 0xffff88806a3a0c00: rx timeout, send abort
[  237.345183][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806a3a0c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  237.407145][T11309] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1506'.
[  237.549598][T11320] Cannot find add_set index 65532 as target
[  237.600867][T11321] bond5: option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  237.618217][T11321] bond5 (unregistering): Released all slaves
[  237.775292][T11325] syzkaller0: entered promiscuous mode
[  237.799896][T11325] syzkaller0: entered allmulticast mode
[  240.878270][T11379] bridge0: port 4(ipvlan0) entered blocking state
[  240.900516][T11379] bridge0: port 4(ipvlan0) entered disabled state
[  240.921827][T11379] ipvlan0: entered allmulticast mode
[  240.935787][T11379] bridge0: entered allmulticast mode
[  240.957144][T11379] ipvlan0: left allmulticast mode
[  240.974528][T11381] netlink: 'syz.1.1523': attribute type 1 has an invalid length.
[  240.979246][T11379] bridge0: left allmulticast mode
[  241.185359][T11393] __nla_validate_parse: 1 callbacks suppressed
[  241.185379][T11393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1526'.
[  241.289305][T11398] xt_connbytes: Forcing CT accounting to be enabled
[  241.326996][T11398] xt_CT: You must specify a L4 protocol and not use inversions on it
[  241.417001][T11412] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1529'.
[  241.556335][T11396] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  241.666584][T11396] syzkaller0: entered promiscuous mode
[  241.672653][T11396] syzkaller0: entered allmulticast mode
[  241.679186][T11396] tipc: Resetting bearer <eth:syzkaller0>
[  241.712629][T11422] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1533'.
[  241.750437][T11395] tipc: Resetting bearer <eth:syzkaller0>
[  244.012918][T11395] tipc: Disabling bearer <eth:syzkaller0>
[  244.298983][T11447] netlink: 'syz.3.1541': attribute type 1 has an invalid length.
[  244.311623][T11448] sctp: [Deprecated]: syz.1.1543 (pid 11448) Use of int in max_burst socket option deprecated.
[  244.311623][T11448] Use struct sctp_assoc_value instead
[  244.436095][T11456] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1545'.
[  244.461299][T11459] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1542'.
[  244.484103][T11447] 8021q: adding VLAN 0 to HW filter on device bond0
[  244.491182][T11460] Unsupported ieee802154 address type: 0
[  244.518613][T11442] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1542'.
[  244.565570][T11463] netdevsim netdevsim0: Firmware load for './file0/file0/../file0' refused, path contains '..' component
[  244.616143][T11454] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  244.672426][T11457] macvlan2: entered promiscuous mode
[  244.690687][T11457] macvlan2: entered allmulticast mode
[  244.704955][T11457] bond0: entered promiscuous mode
[  244.716128][T11457] veth0_to_bond: entered promiscuous mode
[  244.725515][T11457] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  244.734851][T11457] bond0: left promiscuous mode
[  244.739725][T11457] veth0_to_bond: left promiscuous mode
[  244.764936][T11460] tc_dump_action: action bad kind
[  245.225811][T11495] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1553'.
[  245.237807][T11487] 8021q: adding VLAN 0 to HW filter on device ipvlan1
[  245.262948][T11487] team0: Device ipvlan1 is already an upper device of the team interface
[  245.379197][T11501] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1553'.
[  245.510824][T11504] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1560'.
[  245.568968][T11496] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  245.620327][T11496] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.961924][T11496] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  245.972871][T11496] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.043402][T11522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1563'.
[  246.157854][T11496] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  246.171863][T11496] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.306294][T11496] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  246.340107][T11496] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.740053][   T36] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  246.760408][   T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  246.853587][ T9768] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  246.884148][ T9768] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  246.918540][ T9768] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  246.932336][T11561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1576'.
[  246.937598][ T9768] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  246.965284][T11558] smc: net device lo applied user defined pnetid SYZ0
[  246.979291][ T9768] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  247.007093][ T9768] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  247.203337][T11574] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1580'.
[  247.550035][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  247.643523][T11590] netlink: 'syz.2.1583': attribute type 26 has an invalid length.
[  247.668283][T11595] netlink: 'syz.3.1584': attribute type 21 has an invalid length.
[  248.027748][T11610] x_tables: duplicate underflow at hook 1
[  248.100270][T11604] tc action pedit offset must be on 32 bit boundaries
[  248.108428][T11604] tc action pedit offset must be on 32 bit boundaries
[  248.115354][T11604] tc action pedit offset must be on 32 bit boundaries
[  248.122221][T11604] tc action pedit offset must be on 32 bit boundaries
[  248.129065][T11604] tc action pedit offset must be on 32 bit boundaries
[  248.135936][T11604] tc action pedit offset must be on 32 bit boundaries
[  248.142801][T11604] tc action pedit offset must be on 32 bit boundaries
[  248.149656][T11604] tc action pedit offset must be on 32 bit boundaries
[  248.156525][T11604] tc action pedit offset must be on 32 bit boundaries
[  248.163387][T11604] tc action pedit offset must be on 32 bit boundaries
[  248.170266][T11604] TC_ACT_REPEAT abuse ?
[  248.375354][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1593'.
[  248.556550][T11633] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1596'.
[  248.705763][T11648] netlink: 'syz.1.1597': attribute type 3 has an invalid length.
[  248.754609][T11648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1597'.
[  249.158733][T11665] openvswitch: netlink: Multiple metadata blocks provided
[  249.396048][T11677] batadv_slave_0: entered promiscuous mode
[  249.451915][T11677] gre2: entered promiscuous mode
[  249.488490][T11682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1603'.
[  249.539650][T11682] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  249.571878][T11682] batman_adv: batadv0: Removing interface: batadv_slave_0
[  249.785927][T11691] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1608'.
[  249.822404][T11692] netlink: 'syz.3.1609': attribute type 29 has an invalid length.
[  249.836099][T11692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1609'.
[  249.848256][T11692] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1609'.
[  249.866583][T11694] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1608'.
[  249.879362][T11692] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.886990][T11692] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.972149][T11697] bond12 (unregistering): Released all slaves
[  250.601564][T11738] netlink: 'syz.4.1619': attribute type 5 has an invalid length.
[  250.696911][T11741] netlink: 'syz.2.1620': attribute type 1 has an invalid length.
[  251.191712][T11762] syzkaller0: entered promiscuous mode
[  251.205282][T11762] syzkaller0: entered allmulticast mode
[  251.233779][T11769] netlink: 'syz.4.1632': attribute type 1 has an invalid length.
[  251.243657][T11769] netlink: 'syz.4.1632': attribute type 2 has an invalid length.
[  251.821395][T11798] netlink: 'syz.0.1636': attribute type 21 has an invalid length.
[  251.972909][T11805] __nla_validate_parse: 12 callbacks suppressed
[  251.972929][T11805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1640'.
[  252.197328][T11815] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  252.222983][T11815] batman_adv: batadv0: Removing interface: batadv_slave_1
[  252.297561][T11819] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  252.558096][T11834] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1649'.
[  252.615301][T11836] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1650'.
[  252.624708][T11838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1651'.
[  252.707181][T11842] batadv_slave_0: entered promiscuous mode
[  252.748209][T11841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1653'.
[  252.760156][T11841] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  252.865940][T11841] batman_adv: batadv0: Removing interface: batadv_slave_0
[  253.285999][T11874] nftables ruleset with unbound chain
[  253.447153][T11888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1662'.
[  253.600952][T11894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1665'.
[  254.136829][T11921] netlink: 3648 bytes leftover after parsing attributes in process `syz.0.1673'.
[  254.151540][T11921] netlink: 3648 bytes leftover after parsing attributes in process `syz.0.1673'.
[  254.366211][T11934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1676'.
[  254.383379][T11925] syzkaller0: entered promiscuous mode
[  254.388941][T11925] syzkaller0: entered allmulticast mode
[  254.559277][T11904] netlink: 'syz.2.1668': attribute type 29 has an invalid length.
[  256.593839][T11930] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  256.892425][T11952] netlink: 'syz.4.1681': attribute type 2 has an invalid length.
[  256.918833][T11951] syzkaller0: entered promiscuous mode
[  256.928338][T11951] syzkaller0: entered allmulticast mode
[  256.934898][T11952] netlink: 'syz.4.1681': attribute type 2 has an invalid length.
[  257.377076][T11975] __nla_validate_parse: 1 callbacks suppressed
[  257.377095][T11975] netlink: 199784 bytes leftover after parsing attributes in process `syz.4.1688'.
[  257.414640][T11975] netlink: 'syz.4.1688': attribute type 1 has an invalid length.
[  257.616353][T11984] IPv6: addrconf: prefix option has invalid lifetime
[  257.709198][T11989] vcan1: entered promiscuous mode
[  257.718938][T11989] vcan1: entered allmulticast mode
[  258.015496][T12003] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  258.338625][T12026] netlink: 'syz.2.1705': attribute type 1 has an invalid length.
[  258.749690][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1711'.
[  258.791113][T12052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1712'.
[  258.837406][T12052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1712'.
[  259.214060][T12096] x_tables: duplicate underflow at hook 1
[  259.735957][T12121] bridge2: entered allmulticast mode
[  260.333123][T12150] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  260.554855][T12161] netlink: 'syz.3.1736': attribute type 5 has an invalid length.
[  260.781015][T12173] sctp: [Deprecated]: syz.3.1738 (pid 12173) Use of int in maxseg socket option.
[  260.781015][T12173] Use struct sctp_assoc_value instead
[  261.146756][T12187] lo speed is unknown, defaulting to 1000
[  261.175672][T12187] syzkaller0: entered promiscuous mode
[  261.191343][T12187] syzkaller0: entered allmulticast mode
[  261.231152][T12189] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1744'.
[  261.241954][T12191] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1745'.
[  261.495081][T12208] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  261.508389][T12208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1750'.
[  261.544874][T12208] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1750'.
[  261.602384][T12211] xt_NFQUEUE: number of total queues is 0
[  261.630184][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  261.850677][T12215] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.858336][T12215] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.028511][T12237] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1754'.
[  262.261177][T12079] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  262.350290][T12076] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  262.360823][T12076] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  262.377143][T12247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1759'.
[  262.410658][T12247] veth1_macvtap: entered promiscuous mode
[  262.418832][T12247] macsec1: entered promiscuous mode
[  262.591284][T12250] netlink: 'syz.3.1760': attribute type 4 has an invalid length.
[  262.811649][T12260] netlink: 'syz.1.1764': attribute type 4 has an invalid length.
[  262.845044][T12260] netlink: 'syz.1.1764': attribute type 4 has an invalid length.
[  263.023120][T12268] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  263.097730][T12275] syzkaller1: entered promiscuous mode
[  263.107386][T12275] syzkaller1: entered allmulticast mode
[  263.453636][T12294] ip6tnl1: entered allmulticast mode
[  263.992414][T12324] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1784'.
[  264.095470][T12329] netlink: 'syz.4.1785': attribute type 11 has an invalid length.
[  264.160930][T12331] netlink: 'syz.4.1785': attribute type 11 has an invalid length.
[  264.363987][T12296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1776'.
[  264.374904][T12334] team0: Port device syz_tun added
[  264.388385][T12296] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1776'.
[  264.986718][T12376] netlink: 'syz.1.1797': attribute type 1 has an invalid length.
[  265.018709][T12376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1797'.
[  265.044083][T12380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1798'.
[  265.055610][T12376] netlink: 'syz.1.1797': attribute type 10 has an invalid length.
[  265.083915][T12376] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1797'.
[  265.202429][T12386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1800'.
[  265.279408][T12389] syzkaller0: entered promiscuous mode
[  265.307204][T12389] syzkaller0: entered allmulticast mode
[  265.337409][T12390] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1801'.
[  265.393918][T12390] openvswitch: netlink: Message has 512 unknown bytes.
[  265.426482][T12401] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1802'.
[  265.478653][T12401] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1802'.
[  265.515308][T12403] vxcan1 speed is unknown, defaulting to 1000
[  265.575694][T12401] veth9: entered promiscuous mode
[  265.605598][T12403] vxcan1 speed is unknown, defaulting to 1000
[  265.647581][T12403] vxcan1 speed is unknown, defaulting to 1000
[  265.788016][T12412] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  265.795597][T12412] IPv6: NLM_F_CREATE should be set when creating new route
[  265.802959][T12412] IPv6: NLM_F_CREATE should be set when creating new route
[  265.821212][T12412] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  265.962405][T12418] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  266.232798][T12436] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  266.348394][T12403] infiniband syz2: set active
[  266.353328][    T9] vxcan1 speed is unknown, defaulting to 1000
[  266.372558][T12403] infiniband syz2: added vxcan1
[  266.389638][T12403] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  266.404924][T12403] infiniband syz2: Couldn't open port 1
[  266.442372][T12403] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  266.497177][T12403] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  266.529427][T12403] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  266.537706][T12444] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  266.556073][T12444] bond4 (unregistering): Released all slaves
[  266.591198][T12403] RDS/IB: syz2: added
[  266.598756][T12403] smc: adding ib device syz2 with port count 1
[  266.614413][T12403] smc:    ib device syz2 port 1 has no pnetid
[  266.714879][ T5758] vxcan1 speed is unknown, defaulting to 1000
[  266.748483][T12403] vxcan1 speed is unknown, defaulting to 1000
[  267.133406][T12475] netlink: 'syz.1.1823': attribute type 1 has an invalid length.
[  267.384749][T12403] vxcan1 speed is unknown, defaulting to 1000
[  267.629390][T12496] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes.
[  268.133444][T12403] vxcan1 speed is unknown, defaulting to 1000
[  268.220325][ T5635] block nbd0: Receive control failed (result -32)
[  268.228308][ T5647] block nbd0: Receive control failed (result -32)
[  269.001422][T12548] __nla_validate_parse: 7 callbacks suppressed
[  269.001442][T12548] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1847'.
[  269.108870][T12403] vxcan1 speed is unknown, defaulting to 1000
[  269.156352][T12551] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1847'.
[  269.188624][T12550] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1847'.
[  269.214752][T12551] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1847'.
[  269.247560][T12550] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1847'.
[  269.511759][T12571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1855'.
[  269.554727][T12573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1856'.
[  269.979639][T12403] vxcan1 speed is unknown, defaulting to 1000
[  270.184251][T12608] sctp: [Deprecated]: syz.3.1865 (pid 12608) Use of struct sctp_assoc_value in delayed_ack socket option.
[  270.184251][T12608] Use struct sctp_sack_info instead
[  270.353018][T12612] netlink: 'syz.4.1867': attribute type 1 has an invalid length.
[  270.380053][T12620] syz_tun: entered allmulticast mode
[  270.482433][T12622] bond6: Unable to set up delay as MII monitoring is disabled
[  270.507967][T12622] bond6 (unregistering): Released all slaves
[  270.779482][T12612] 8021q: adding VLAN 0 to HW filter on device bond6
[  270.819143][T12639] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8
[  270.967264][T12613] syz_tun: left allmulticast mode
[  271.126870][T12648] netlink: 'syz.2.1873': attribute type 23 has an invalid length.
[  271.365944][T12660] xfrm1: entered allmulticast mode
[  271.829483][T12692] netlink: 'syz.0.1883': attribute type 10 has an invalid length.
[  272.299663][T12712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1890'.
[  272.339376][T12712] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1890'.
[  272.419162][T12714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1891'.
[  272.663883][T12726] block nbd0: NBD_DISCONNECT
[  272.685617][T12726] block nbd0: Send disconnect failed -32
[  272.702250][T12726] block nbd0: Send disconnect failed -32
[  272.724410][T12726] block nbd0: shutting down sockets
[  273.035466][T12741] netlink: 'syz.3.1899': attribute type 4 has an invalid length.
[  273.799197][T12786] syzkaller1: entered promiscuous mode
[  273.819615][T12786] syzkaller1: entered allmulticast mode
[  273.846184][T12783] syzkaller0: entered promiscuous mode
[  273.859512][T12783] syzkaller0: entered allmulticast mode
[  274.073161][T12793] __nla_validate_parse: 4 callbacks suppressed
[  274.073185][T12793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1914'.
[  274.145687][T12795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1915'.
[  274.467803][T12809] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1919'.
[  274.564748][T12809] C: renamed from lo (while UP)
[  274.581981][T12809] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  275.092585][T12843] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  275.123884][T12843] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  275.452800][T12863] netlink: 'syz.0.1933': attribute type 2 has an invalid length.
[  275.591244][T12873] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  275.779423][T12880] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1938'.
[  275.847609][T12887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1940'.
[  275.957035][T12880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1938'.
[  276.069191][T12896] netlink: 'syz.4.1943': attribute type 1 has an invalid length.
[  276.091655][T12894] netlink: 'syz.1.1941': attribute type 3 has an invalid length.
[  276.165289][T12896] 8021q: adding VLAN 0 to HW filter on device bond7
[  276.275004][T12899] bond7: (slave geneve4): making interface the new active one
[  276.288175][T12899] bond7: (slave geneve4): Enslaving as an active interface with an up link
[  276.368357][T12906] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  276.543606][T12913] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1947'.
[  276.605012][T12919] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1947'.
[  276.663038][T12921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1950'.
[  276.757121][T12921] bond6: Invalid ad_actor_system MAC address.
[  276.763444][T12921] bond6: option ad_actor_system: invalid value (1)
[  276.775916][T12921] bond6 (unregistering): Released all slaves
[  276.857376][T12930] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1953'.
[  277.302475][T12954] netlink: ct family unspecified
[  277.321775][T12954] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  277.702268][T12975] netlink: 'syz.1.1964': attribute type 142 has an invalid length.
[  277.747328][T12975] xt_hashlimit: invalid interval
[  277.926651][T12985] netlink: 'syz.3.1967': attribute type 15 has an invalid length.
[  278.437264][T13013] syzkaller0: entered promiscuous mode
[  278.443501][T13013] syzkaller0: entered allmulticast mode
[  278.549056][T13021] netlink: 'syz.3.1978': attribute type 49 has an invalid length.
[  278.685000][T13021] ip6gretap0: entered promiscuous mode
[  278.690950][T13021] ip6gretap0: entered allmulticast mode
[  278.731558][T13022] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  278.848365][T13034] xt_hashlimit: size too large, truncated to 1048576
[  279.054418][T13040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  279.306908][T13049] netlink: 'syz.2.1986': attribute type 1 has an invalid length.
[  279.319083][T13049] __nla_validate_parse: 6 callbacks suppressed
[  279.319104][T13049] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1986'.
[  279.335759][T13049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1986'.
[  279.547835][T13067] veth1_to_bond: entered allmulticast mode
[  279.555422][T13066] netlink: 'syz.2.1991': attribute type 1 has an invalid length.
[  279.564989][T13067] veth1_to_bond: entered promiscuous mode
[  279.573207][T13066] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1991'.
[  279.583993][T13068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1991'.
[  279.599449][T13066] netlink: 'syz.2.1991': attribute type 1 has an invalid length.
[  279.618411][T13068] veth1_to_bond (unregistering): left allmulticast mode
[  279.627596][T13068] veth1_to_bond (unregistering): left promiscuous mode
[  279.649344][T13068] bond0: (slave bond_slave_1): Releasing backup interface
[  279.672760][T13068] bond_slave_1 (unregistering): left promiscuous mode
[  280.147604][T13089] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  280.190080][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  280.365759][T13098] syzkaller0: entered promiscuous mode
[  280.384673][T13098] syzkaller0: entered allmulticast mode
[  280.399271][T13098] tipc: Resetting bearer <eth:syzkaller0>
[  280.599978][T12076] tipc: Resetting bearer <eth:syzkaller0>
[  280.634623][T13098] tipc: Resetting bearer <eth:syzkaller0>
[  280.811570][T13129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2006'.
[  281.130845][ T5647] block nbd0: Receive control failed (result -1)
[  282.900562][T13098] tipc: Disabling bearer <eth:syzkaller0>
[  282.913746][T13113] syzkaller1: entered promiscuous mode
[  282.930638][T13113] syzkaller1: entered allmulticast mode
[  283.165524][T13142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2011'.
[  283.965574][T13196] netlink: 'syz.4.2025': attribute type 2 has an invalid length.
[  284.180011][T13208] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2028'.
[  284.274663][T13216] netlink: 'syz.0.2031': attribute type 4 has an invalid length.
[  284.342651][T13218] nbd: socks must be embedded in a SOCK_ITEM attr
[  284.358570][T13219] nbd: socks must be embedded in a SOCK_ITEM attr
[  284.882730][T13243] nbd1: detected capacity change from 0 to 63
[  284.991468][ T5647] block nbd1: Receive control failed (result -104)
[  285.015353][T13249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2039'.
[  285.363536][T13271] netlink: 'syz.4.2045': attribute type 1 has an invalid length.
[  285.515007][T13280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2047'.
[  285.730328][T13289] netlink: 'syz.0.2051': attribute type 1 has an invalid length.
[  285.812089][T13298] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2051'.
[  285.825046][T13299] ip6t_srh: unknown srh invflags 4000
[  285.834658][T13295] netlink: 576 bytes leftover after parsing attributes in process `syz.2.2053'.
[  285.907392][T13289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2051'.
[  285.925873][T13289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2051'.
[  285.994329][T13289] bridge4: entered promiscuous mode
[  286.051807][T13289] bond10: (slave bridge4): making interface the new active one
[  286.079715][T13289] bond10: (slave bridge4): Enslaving as an active interface with an up link
[  286.283623][T13311] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2057'.
[  286.333039][T13318] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2060'.
[  286.365871][T13319] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2060'.
[  286.905265][T13330] veth0: Caught tx_queue_len zero misconfig
[  287.117721][T13338] bond0 (unregistering): Released all slaves
[  287.465705][T13351] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2068'.
[  287.808869][T13360] syzkaller0: entered promiscuous mode
[  287.827798][T13360] syzkaller0: entered allmulticast mode
[  287.924460][T13369] netlink: 'syz.3.2075': attribute type 1 has an invalid length.
[  287.979660][T13372] netlink: 'syz.0.2076': attribute type 1 has an invalid length.
[  288.092074][T13369] bond4: entered promiscuous mode
[  288.104901][T13369] 8021q: adding VLAN 0 to HW filter on device bond4
[  288.145271][T13373] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  288.166211][T13373] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  288.176994][T13373] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  288.294584][T13375] macvtap1: entered allmulticast mode
[  288.306630][T13376] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  288.319589][T13376] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  288.370414][T13378] bond13: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-xor(2)
[  288.387227][T13378] bond13 (unregistering): Released all slaves
[  288.428687][T13379] macvtap2: entered allmulticast mode
[  288.448911][T13388] bond0: (slave bridge5): making interface the new active one
[  288.459270][T13388] bond0: (slave bridge5): Enslaving as an active interface with an up link
[  288.475185][T13392] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.482519][T13392] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.935257][T13416] netlink: 'syz.3.2086': attribute type 1 has an invalid length.
[  289.172047][T13424] bond5: (slave bridge5): Enslaving as a backup interface with an up link
[  289.298302][T13435] netlink: 'syz.0.2089': attribute type 7 has an invalid length.
[  289.331190][T13435] IPVS: stopping backup sync thread 6032 ...
[  289.854049][T13461] bond8: entered promiscuous mode
[  289.876702][T13461] bond8: entered allmulticast mode
[  290.219683][T13450] __nla_validate_parse: 5 callbacks suppressed
[  290.219704][T13450] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2094'.
[  290.482759][T13490] netlink: 'syz.4.2101': attribute type 12 has an invalid length.
[  291.234351][T13521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2110'.
[  291.250692][T13521] netlink: 'syz.2.2110': attribute type 11 has an invalid length.
[  292.097614][T13563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2121'.
[  292.433525][T13581] netlink: 'syz.0.2127': attribute type 2 has an invalid length.
[  292.617612][T13587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2129'.
[  292.706446][T13591] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2131'.
[  292.959148][T13605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2135'.
[  292.999494][T13605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2135'.
[  293.413098][T13619] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.799001][T13645] sctp: [Deprecated]: syz.0.2150 (pid 13645) Use of struct sctp_assoc_value in delayed_ack socket option.
[  293.799001][T13645] Use struct sctp_sack_info instead
[  293.974393][T13658] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2155'.
[  294.116914][T13671] xt_hl: Unknown Hop Limit match mode: 206
[  294.398224][T13690] netlink: 'syz.3.2165': attribute type 2 has an invalid length.
[  294.412571][T13690] netlink: 'syz.3.2165': attribute type 2 has an invalid length.
[  294.424166][T13690] Bluetooth: hci0: Opcode 0x080f failed: -22
[  294.498058][T13690] Bluetooth: hci0: Opcode 0x080f failed: -22
[  294.596616][T13698] netlink: 'syz.3.2165': attribute type 2 has an invalid length.
[  294.614475][T13698] netlink: 'syz.3.2165': attribute type 2 has an invalid length.
[  294.768930][T13711] netlink: zone id is out of range
[  294.799952][T13711] netlink: zone id is out of range
[  294.818740][T13711] netlink: zone id is out of range
[  294.847933][T13711] netlink: zone id is out of range
[  294.880441][T13711] netlink: zone id is out of range
[  294.890034][T13711] netlink: zone id is out of range
[  294.916518][T13711] netlink: zone id is out of range
[  294.942040][T13711] netlink: zone id is out of range
[  294.955654][T13711] netlink: zone id is out of range
[  294.976544][T13711] netlink: zone id is out of range
[  295.253852][   T30] audit: type=1800 audit(1785585983.317:8): pid=13731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2176" name=0A dev="tmpfs" ino=2248 res=0 errno=0
[  295.460656][T13744] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2180'.
[  295.484279][T13744] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2180'.
[  295.522556][T13744] netlink: 'syz.4.2180': attribute type 6 has an invalid length.
[  295.598268][T13744] netlink: 'syz.4.2180': attribute type 5 has an invalid length.
[  295.634977][T13744] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2180'.
[  295.664785][T13750] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2182'.
[  295.676245][T13750] gretap0: entered promiscuous mode
[  295.729253][T13745] smbdirect: ib_dev[syú2] removed
[  295.881251][T13757] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2184'.
[  296.257105][T13777] netlink: 'syz.2.2191': attribute type 1 has an invalid length.
[  296.404254][T13777] bond13: option mode: invalid value (7)
[  296.414795][T13777] bond13 (unregistering): Released all slaves
[  296.470776][T13792] netlink: 'syz.2.2191': attribute type 10 has an invalid length.
[  296.478930][T13792] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2191'.
[  296.530227][T13787] dummy0: left promiscuous mode
[  296.566114][T13792] dummy0: entered promiscuous mode
[  296.663860][T13794] 8021q: adding VLAN 0 to HW filter on device ipvlan1
[  296.698649][T13803] netlink: 'syz.3.2197': attribute type 10 has an invalid length.
[  296.727943][T13803] macsec0: left allmulticast mode
[  296.811238][T13808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2200'.
[  297.249267][T13830] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2205'.
[  297.272471][T13830] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2205'.
[  297.315664][T13838] netlink: 'syz.3.2207': attribute type 1 has an invalid length.
[  297.335584][T13837] syzkaller0: entered promiscuous mode
[  297.354955][T13837] syzkaller0: entered allmulticast mode
[  297.364277][T13838] netlink: 332 bytes leftover after parsing attributes in process `syz.3.2207'.
[  297.616104][T13853] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  297.815815][T13862] macsec2: entered promiscuous mode
[  297.840690][T13862] bridge0: entered promiscuous mode
[  297.865517][T13850] nbd: device at index 64 is going down
[  297.874158][T13862] macsec2: entered allmulticast mode
[  297.920685][T13862] bridge0: entered allmulticast mode
[  297.965084][T13862] bridge0: port 4(macsec2) entered blocking state
[  298.001203][T13862] bridge0: port 4(macsec2) entered disabled state
[  298.097190][T13862] bridge0: left allmulticast mode
[  298.112552][T13862] bridge0: left promiscuous mode
[  298.443339][ T5617] udevd[5617]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  298.878217][T13917] ip6gre2: entered allmulticast mode
[  299.456128][T13950] ipt_REJECT: ECHOREPLY no longer supported.
[  299.558360][T13959] netlink: 'syz.3.2239': attribute type 1 has an invalid length.
[  300.025138][T13984] netlink: 'syz.4.2246': attribute type 3 has an invalid length.
[  300.199446][T13991] syzkaller0: entered promiscuous mode
[  300.205229][T13991] syzkaller0: entered allmulticast mode
[  300.612201][T14010] netlink: 'syz.1.2253': attribute type 5 has an invalid length.
[  300.715885][T14022] __nla_validate_parse: 17 callbacks suppressed
[  300.715917][T14022] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2258'.
[  300.818858][T14023] bond5: option mode: unable to set because the bond device has slaves
[  301.082659][T14038] Cannot find set identified by id 65534 to match
[  301.098638][T14040] netlink: 'syz.2.2263': attribute type 8 has an invalid length.
[  301.116829][T14040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2263'.
[  301.151413][T14040] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  301.158799][T14040] IPv6: NLM_F_CREATE should be set when creating new route
[  301.160993][T14042] net_ratelimit: 496 callbacks suppressed
[  301.161045][T14042] openvswitch: netlink: Key type 31 is not supported
[  301.324825][T14049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2267'.
[  301.453992][T14056] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2269'.
[  301.514343][T14058] openvswitch: netlink: Tunnel attr 68 out of range max 16
[  301.548286][T14059] openvswitch: netlink: Missing key (keys=40, expected=100)
[  301.571994][T14059] openvswitch: netlink: Missing key (keys=40, expected=100)
[  301.590420][T14059] openvswitch: netlink: Missing key (keys=40, expected=100)
[  301.634413][T14059] openvswitch: netlink: Missing key (keys=40, expected=100)
[  301.658527][T14063] netlink: 'syz.0.2273': attribute type 2 has an invalid length.
[  301.677551][T14059] openvswitch: netlink: Missing key (keys=40, expected=100)
[  301.726301][T14059] openvswitch: netlink: Missing key (keys=40, expected=100)
[  301.773164][T14059] openvswitch: netlink: Missing key (keys=40, expected=100)
[  301.786805][T14059] openvswitch: netlink: Missing key (keys=40, expected=100)
[  301.828460][T14072] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  302.228743][T14087] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2280'.
[  302.291803][T14099] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2284'.
[  302.384692][T14104] syzkaller1: entered promiscuous mode
[  302.392551][T14104] syzkaller1: entered allmulticast mode
[  302.680394][T14116] x_tables: duplicate underflow at hook 3
[  303.047171][T14135] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2296'.
[  305.411495][T14146] syzkaller0: entered promiscuous mode
[  305.437673][T14146] syzkaller0: entered allmulticast mode
[  305.590706][T14151] lo: left promiscuous mode
[  305.617735][T14151] tunl0: left promiscuous mode
[  305.673688][T14151] gre0: left promiscuous mode
[  305.728905][T14151] gretap0: left promiscuous mode
[  305.791933][T14151] erspan0: left promiscuous mode
[  305.815570][T14151] ip_vti0: left promiscuous mode
[  305.820742][T14174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2305'.
[  305.908742][T14176] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2307'.
[  305.989122][T14151] 8021q: adding VLAN 0 to HW filter on device bond0
[  306.014409][T14151] 8021q: adding VLAN 0 to HW filter on device team0
[  306.108963][T14151] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  306.123114][T14151] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  306.208693][T12061] bridge0: port 1(bridge_slave_0) entered blocking state
[  306.216005][T12061] bridge0: port 1(bridge_slave_0) entered forwarding state
[  306.248849][T12061] bridge0: port 2(bridge_slave_1) entered blocking state
[  306.256151][T12061] bridge0: port 2(bridge_slave_1) entered forwarding state
[  306.418801][T14190] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.457669][T14190] bridge_slave_0 (unregistering): left allmulticast mode
[  306.477194][T14190] bridge_slave_0 (unregistering): left promiscuous mode
[  306.538972][T14190] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.676143][T14199] tipc: New replicast peer: 0.0.0.0
[  306.693941][T14199] tipc: Enabled bearer <udp:syz2>, priority 10
[  306.968070][T14228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2321'.
[  307.022738][T14228] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2321'.
[  307.236487][T14246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2325'.
[  307.312275][T14246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2325'.
[  307.383522][T14257] net_ratelimit: 26 callbacks suppressed
[  307.383543][T14257] openvswitch: netlink: IP tunnel dst address not specified
[  307.397251][T14257] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  307.409140][T14257] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2328'.
[  307.708453][T14262] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2330'.
[  307.806817][T14262] team0: Port device team_slave_0 removed
[  307.913314][T14279] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  307.921965][T14279] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  308.202183][T14291] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  308.407347][T14300] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  308.422177][T14300] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  308.439911][T14311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2343'.
[  308.623812][T14320] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  308.648330][T14318] netlink: 'syz.1.2345': attribute type 15 has an invalid length.
[  308.658719][T14318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2345'.
[  308.751591][T14318] netlink: 'syz.1.2345': attribute type 15 has an invalid length.
[  308.774447][  T607] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0
[  308.806956][  T607] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0
[  308.850875][  T607] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0
[  309.122686][T14332] 8021q: adding VLAN 0 to HW filter on device bond6
[  309.179374][T14337] bond6: (slave batadv0): Opening slave failed
[  309.317674][T14352] veth7: entered allmulticast mode
[  309.847278][T14376] syzkaller1: entered promiscuous mode
[  309.858858][T14376] syzkaller1: entered allmulticast mode
[  309.907155][T14384] x_tables: ip6_tables: cgroup match: used from hooks FORWARD, but only valid from INPUT/OUTPUT/POSTROUTING
[  310.365595][T14388] bond13: option xmit_hash_policy: invalid value (64)
[  310.375649][T14388] bond13 (unregistering): Released all slaves
[  310.406694][T14396] syzkaller1: entered promiscuous mode
[  310.413107][T14396] syzkaller1: entered allmulticast mode
[  311.057052][T14440] __nla_validate_parse: 8 callbacks suppressed
[  311.057073][T14440] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2381'.
[  311.081800][T14444] IPv6: NLM_F_CREATE should be specified when creating new route
[  311.279031][T14457] IPVS: set_ctl: invalid protocol: 43 10.1.1.1:20004
[  311.736513][T14469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2390'.
[  311.906601][T14485] netlink: 'syz.1.2395': attribute type 1 has an invalid length.
[  311.926138][T14494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2398'.
[  311.947896][T14494] batadv_slave_0: entered promiscuous mode
[  311.958758][T14494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2398'.
[  312.091795][T14504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2399'.
[  312.259933][T14509] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2401'.
[  312.860813][T14550] netlink: 'syz.2.2413': attribute type 11 has an invalid length.
[  312.868974][T14548] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2412'.
[  312.980696][T14556] netlink: 'syz.0.2412': attribute type 83 has an invalid length.
[  313.395979][T14569] netlink: 'syz.4.2417': attribute type 1 has an invalid length.
[  313.404767][T14569] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2417'.
[  313.606880][T14578] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  313.787579][T14586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2422'.
[  313.855539][T14594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2422'.
[  313.902222][T14597] netlink: 'syz.4.2425': attribute type 1 has an invalid length.
[  314.084733][T14597] bond9: entered promiscuous mode
[  314.103484][T14597] 8021q: adding VLAN 0 to HW filter on device bond9
[  314.144371][T14601] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  314.145119][T14604] veth0_macvtap: Caught tx_queue_len zero misconfig
[  314.950625][T14651] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  314.999185][T14647] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  315.072648][T14647] openvswitch: netlink: Missing key (keys=c0, expected=1100)
[  315.119535][T14657] sit0: entered promiscuous mode
[  315.162985][T14657] netlink: 'syz.0.2440': attribute type 1 has an invalid length.
[  315.403056][ T1590] block nbd1: Possible stuck request ffff8880279d7000: control (read@0,1024B). Runtime 30 seconds
[  315.415938][ T1590] block nbd1: Possible stuck request ffff8880279d71c0: control (read@1024,1024B). Runtime 30 seconds
[  315.426987][ T1590] block nbd1: Possible stuck request ffff8880279d7380: control (read@2048,1024B). Runtime 30 seconds
[  315.437982][ T1590] block nbd1: Possible stuck request ffff8880279d7540: control (read@3072,1024B). Runtime 30 seconds
[  315.482140][T14675] netlink: 'syz.4.2446': attribute type 11 has an invalid length.
[  315.509166][T14675] netlink: 'syz.4.2446': attribute type 11 has an invalid length.
[  327.551646][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  342.911410][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  345.470716][ T1590] block nbd1: Possible stuck request ffff8880279d7000: control (read@0,1024B). Runtime 60 seconds
[  345.481937][ T1590] block nbd1: Possible stuck request ffff8880279d71c0: control (read@1024,1024B). Runtime 60 seconds
[  345.492965][ T1590] block nbd1: Possible stuck request ffff8880279d7380: control (read@2048,1024B). Runtime 60 seconds
[  345.503989][ T1590] block nbd1: Possible stuck request ffff8880279d7540: control (read@3072,1024B). Runtime 60 seconds
[  345.829205][ T4991] udevd[4991]: worker [9996] /devices/virtual/block/nbd1 is taking a long time
[  369.786079][T14698] __nla_validate_parse: 5 callbacks suppressed
[  369.786131][T14698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2448'.
[  369.855984][T14701] tipc: Enabled bearer <eth:veth0>, priority 10
[  370.069662][T14714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2454'.
[  370.496270][T14729] netlink: 'syz.1.2459': attribute type 4 has an invalid length.
[  370.657870][T14732] syzkaller0: entered promiscuous mode
[  370.670470][T14732] syzkaller0: entered allmulticast mode
[  370.755669][T14732] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  370.781199][T14731] tipc: Resetting bearer <eth:syzkaller0>
[  370.843098][T14731] tipc: Disabling bearer <eth:syzkaller0>
[  370.876125][T14741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2463'.
[  370.900629][T14741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2463'.
[  370.938403][T14746] netlink: 'syz.0.2464': attribute type 11 has an invalid length.
[  371.421006][T14769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2470'.
[  371.493692][T14779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2475'.
[  371.511804][T14781] syzkaller0: entered promiscuous mode
[  371.528892][T14781] syzkaller0: entered allmulticast mode
[  371.544644][T14779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2475'.
[  371.739145][T14796] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2479'.
[  371.758592][T14796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2479'.
[  371.777644][T14795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2478'.
[  372.120042][T14809] bridge3: entered promiscuous mode
[  372.132565][T14809] bridge3: entered allmulticast mode
[  372.179057][T14812] bridge4: entered promiscuous mode
[  372.195590][T14812] bridge4: entered allmulticast mode
[  372.251616][T14810] geneve5: entered promiscuous mode
[  372.436672][T14835] xt_hashlimit: size too large, truncated to 1048576
[  373.210438][T14870] netlink: 'syz.2.2499': attribute type 1 has an invalid length.
[  373.356307][T14873] smc: net device team0 applied user defined pnetid SYZ2
[  373.378757][T14877] netlink: 'syz.2.2501': attribute type 15 has an invalid length.
[  373.461771][T14877] netlink: 'syz.2.2501': attribute type 15 has an invalid length.
[  373.634877][T12061] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  373.671860][ T5731] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  373.684828][T12061] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  373.890103][ T5731] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  374.376857][T14928] netlink: 'syz.1.2515': attribute type 1 has an invalid length.
[  374.424183][T14933] veth0_macvtap: left promiscuous mode
[  374.430420][   T24] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  374.753990][T14957] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  374.761386][T14957] IPv6: NLM_F_CREATE should be set when creating new route
[  374.768706][T14957] IPv6: NLM_F_CREATE should be set when creating new route
[  374.816249][T14960] netlink: 'syz.2.2524': attribute type 2 has an invalid length.
[  375.554083][ T1590] block nbd1: Possible stuck request ffff8880279d7000: control (read@0,1024B). Runtime 90 seconds
[  375.565308][ T1590] block nbd1: Possible stuck request ffff8880279d71c0: control (read@1024,1024B). Runtime 90 seconds
[  375.576686][ T1590] block nbd1: Possible stuck request ffff8880279d7380: control (read@2048,1024B). Runtime 90 seconds
[  375.587821][ T1590] block nbd1: Possible stuck request ffff8880279d7540: control (read@3072,1024B). Runtime 90 seconds
[  378.030893][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  387.070261][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  390.436991][ T5635] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  390.451177][ T5635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  390.464871][ T5635] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  390.478484][ T5635] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  390.486538][ T5635] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  390.554456][ T5635] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  390.570297][ T5635] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  390.580183][ T5635] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  390.590680][ T5635] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  390.602364][ T5635] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  390.658278][ T5647] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  390.668812][ T5647] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  390.682057][ T5647] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  390.694505][ T5647] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  390.702620][ T5635] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  390.715998][ T5647] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  390.718325][ T5635] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  390.735633][ T5635] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  390.751508][ T5647] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  390.759294][ T5647] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  390.796014][ T5645] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  390.809197][ T5645] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  390.821146][ T5645] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  390.853439][ T5645] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  390.885267][ T5647] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  390.904088][ T5649] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  390.927984][ T5649] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  390.944254][ T5649] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  390.955581][ T5649] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  390.964025][ T5649] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  391.082205][ T5649] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  391.094700][ T5649] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  391.104731][ T5649] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  391.117593][ T5649] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  391.128038][ T5649] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  392.129255][T14972] vxcan1 speed is unknown, defaulting to 1000
[  392.382642][T14977] vxcan1 speed is unknown, defaulting to 1000
[  392.789070][T14978] vxcan1 speed is unknown, defaulting to 1000
[  392.910005][ T5642] Bluetooth: hci5: command tx timeout
[  392.910030][ T5649] Bluetooth: hci6: command tx timeout
[  392.965446][T14972] bridge0: port 1(bridge_slave_0) entered blocking state
[  392.973407][T14972] bridge0: port 1(bridge_slave_0) entered disabled state
[  392.982169][T14972] bridge_slave_0: entered allmulticast mode
[  392.991382][T14972] bridge_slave_0: entered promiscuous mode
[  393.000132][ T5642] Bluetooth: hci7: command tx timeout
[  393.066445][T14972] bridge0: port 2(bridge_slave_1) entered blocking state
[  393.075715][ T5642] Bluetooth: hci8: command tx timeout
[  393.083496][T14972] bridge0: port 2(bridge_slave_1) entered disabled state
[  393.110200][T14972] bridge_slave_1: entered allmulticast mode
[  393.127193][T14972] bridge_slave_1: entered promiscuous mode
[  393.230612][T14972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  393.230691][ T5642] Bluetooth: hci9: command tx timeout
[  393.254166][T14972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  393.263832][T14975] vxcan1 speed is unknown, defaulting to 1000
[  393.409557][T14972] team0: Port device team_slave_0 added
[  393.433543][T14972] team0: Port device team_slave_1 added
[  393.587077][T14972] batman_adv: batadv0: Adding interface: batadv_slave_0
[  393.594757][T14972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  393.620949][T14972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  393.665386][T14972] batman_adv: batadv0: Adding interface: batadv_slave_1
[  393.672908][T14972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  393.701819][T14972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  393.732215][T14988] vxcan1 speed is unknown, defaulting to 1000
[  393.887647][T14972] hsr_slave_0: entered promiscuous mode
[  393.895156][T14972] hsr_slave_1: entered promiscuous mode
[  393.902805][T14972] debugfs: 'hsr0' already exists in 'hsr'
[  393.908619][T14972] Cannot create hsr debugfs directory
[  394.178847][T14977] bridge0: port 1(bridge_slave_0) entered blocking state
[  394.187524][T14977] bridge0: port 1(bridge_slave_0) entered disabled state
[  394.196206][T14977] bridge_slave_0: entered allmulticast mode
[  394.205347][T14977] bridge_slave_0: entered promiscuous mode
[  394.237706][T14977] bridge0: port 2(bridge_slave_1) entered blocking state
[  394.245740][T14977] bridge0: port 2(bridge_slave_1) entered disabled state
[  394.254054][T14977] bridge_slave_1: entered allmulticast mode
[  394.262397][T14977] bridge_slave_1: entered promiscuous mode
[  394.393944][T14977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  394.449399][T14977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  394.633459][T14977] team0: Port device team_slave_0 added
[  394.684294][T14977] team0: Port device team_slave_1 added
[  394.792866][T14977] batman_adv: batadv0: Adding interface: batadv_slave_0
[  394.801028][T14977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  394.833940][T14977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  394.907881][T14977] batman_adv: batadv0: Adding interface: batadv_slave_1
[  394.915820][T14977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  394.942855][T14977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  394.961836][T14978] bridge0: port 1(bridge_slave_0) entered blocking state
[  394.969112][T14978] bridge0: port 1(bridge_slave_0) entered disabled state
[  394.977029][T14978] bridge_slave_0: entered allmulticast mode
[  394.985009][T14978] bridge_slave_0: entered promiscuous mode
[  394.991747][ T5642] Bluetooth: hci5: command tx timeout
[  394.992013][ T5642] Bluetooth: hci6: command tx timeout
[  395.042271][T14978] bridge0: port 2(bridge_slave_1) entered blocking state
[  395.050436][T14978] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.057891][T14978] bridge_slave_1: entered allmulticast mode
[  395.070006][T14978] bridge_slave_1: entered promiscuous mode
[  395.070009][ T5642] Bluetooth: hci7: command tx timeout
[  395.153034][ T5642] Bluetooth: hci8: command tx timeout
[  395.186324][T14978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  395.254687][T14978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  395.280568][T14977] hsr_slave_0: entered promiscuous mode
[  395.287248][T14977] hsr_slave_1: entered promiscuous mode
[  395.294111][T14977] debugfs: 'hsr0' already exists in 'hsr'
[  395.299913][T14977] Cannot create hsr debugfs directory
[  395.311091][ T5642] Bluetooth: hci9: command tx timeout
[  395.367517][T14975] bridge0: port 1(bridge_slave_0) entered blocking state
[  395.374896][T14975] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.382761][T14975] bridge_slave_0: entered allmulticast mode
[  395.391002][T14975] bridge_slave_0: entered promiscuous mode
[  395.415512][T14978] team0: Port device team_slave_0 added
[  395.452404][T14975] bridge0: port 2(bridge_slave_1) entered blocking state
[  395.459653][T14975] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.467494][T14975] bridge_slave_1: entered allmulticast mode
[  395.475159][T14975] bridge_slave_1: entered promiscuous mode
[  395.497981][T14978] team0: Port device team_slave_1 added
[  395.575147][T14975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  395.614565][T14975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  395.624526][T14978] batman_adv: batadv0: Adding interface: batadv_slave_0
[  395.631847][T14978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  395.658570][T14978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  395.700952][T14978] batman_adv: batadv0: Adding interface: batadv_slave_1
[  395.708056][T14978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  395.735381][T14978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  395.784380][T14988] bridge0: port 1(bridge_slave_0) entered blocking state
[  395.792536][T14988] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.800413][T14988] bridge_slave_0: entered allmulticast mode
[  395.807887][T14988] bridge_slave_0: entered promiscuous mode
[  395.825413][T14975] team0: Port device team_slave_0 added
[  395.835400][T14975] team0: Port device team_slave_1 added
[  395.841455][T14988] bridge0: port 2(bridge_slave_1) entered blocking state
[  395.848695][T14988] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.856607][T14988] bridge_slave_1: entered allmulticast mode
[  395.864232][T14988] bridge_slave_1: entered promiscuous mode
[  395.985619][T14975] batman_adv: batadv0: Adding interface: batadv_slave_0
[  395.992993][T14975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  396.019703][T14975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  396.039292][T14988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  396.055329][T14978] hsr_slave_0: entered promiscuous mode
[  396.063704][T14978] hsr_slave_1: entered promiscuous mode
[  396.070434][T14978] debugfs: 'hsr0' already exists in 'hsr'
[  396.076296][T14978] Cannot create hsr debugfs directory
[  396.089531][T14975] batman_adv: batadv0: Adding interface: batadv_slave_1
[  396.096947][T14975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  396.124054][T14975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  396.137972][T14988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  396.197025][T14988] team0: Port device team_slave_0 added
[  396.208466][T14988] team0: Port device team_slave_1 added
[  396.304661][T14988] batman_adv: batadv0: Adding interface: batadv_slave_0
[  396.311967][T14988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  396.338601][T14988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  396.372692][T14988] batman_adv: batadv0: Adding interface: batadv_slave_1
[  396.380162][T14988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  396.406586][T14988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  396.423686][T14975] hsr_slave_0: entered promiscuous mode
[  396.431132][T14975] hsr_slave_1: entered promiscuous mode
[  396.437471][T14975] debugfs: 'hsr0' already exists in 'hsr'
[  396.443307][T14975] Cannot create hsr debugfs directory
[  396.553614][T14988] hsr_slave_0: entered promiscuous mode
[  396.560586][T14988] hsr_slave_1: entered promiscuous mode
[  396.567046][T14988] debugfs: 'hsr0' already exists in 'hsr'
[  396.573374][T14988] Cannot create hsr debugfs directory
[  397.071047][ T5642] Bluetooth: hci6: command tx timeout
[  397.071088][ T5649] Bluetooth: hci5: command tx timeout
[  397.150214][ T5649] Bluetooth: hci7: command tx timeout
[  397.230377][ T5649] Bluetooth: hci8: command tx timeout
[  397.392763][ T5649] Bluetooth: hci9: command tx timeout
[  399.150023][ T5649] Bluetooth: hci6: command tx timeout
[  399.151156][ T5642] Bluetooth: hci5: command tx timeout
[  399.231948][ T5642] Bluetooth: hci7: command tx timeout
[  399.309979][ T5642] Bluetooth: hci8: command tx timeout
[  399.470016][ T5642] Bluetooth: hci9: command tx timeout
[  404.350031][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  405.633245][ T1590] block nbd1: Possible stuck request ffff8880279d7000: control (read@0,1024B). Runtime 120 seconds
[  405.644100][ T1590] block nbd1: Possible stuck request ffff8880279d71c0: control (read@1024,1024B). Runtime 120 seconds
[  405.655274][ T1590] block nbd1: Possible stuck request ffff8880279d7380: control (read@2048,1024B). Runtime 120 seconds
[  405.666572][ T1590] block nbd1: Possible stuck request ffff8880279d7540: control (read@3072,1024B). Runtime 120 seconds
[  435.710387][ T1590] block nbd1: Possible stuck request ffff8880279d7000: control (read@0,1024B). Runtime 150 seconds
[  435.721275][ T1590] block nbd1: Possible stuck request ffff8880279d71c0: control (read@1024,1024B). Runtime 150 seconds
[  435.732696][ T1590] block nbd1: Possible stuck request ffff8880279d7380: control (read@2048,1024B). Runtime 150 seconds
[  435.743862][ T1590] block nbd1: Possible stuck request ffff8880279d7540: control (read@3072,1024B). Runtime 150 seconds
[  437.630141][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  450.394546][ T5649] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  450.405994][ T5649] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  450.415929][ T5649] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  450.439633][ T5641] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  450.441019][ T5649] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  450.452177][ T5641] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  450.464756][ T5649] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  450.478650][ T5649] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  450.502348][ T5649] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  450.515680][ T5649] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  451.055725][T15066] vxcan1 speed is unknown, defaulting to 1000
[  451.317550][T15068] vxcan1 speed is unknown, defaulting to 1000
[  451.607724][ T5649] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  451.621565][ T5649] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  451.635370][ T5649] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  451.643837][ T5649] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  451.654859][ T5649] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  451.740564][ T5649] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  451.753735][ T5649] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  451.764727][ T5649] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  451.777243][ T5649] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  451.785551][ T5649] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  451.905809][ T5649] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  451.920172][ T5649] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  451.931357][ T5649] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  451.958065][ T5649] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  451.976000][ T5649] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  452.511404][ T5649] Bluetooth: hci10: command tx timeout
[  452.593190][ T5649] Bluetooth: hci11: command tx timeout
[  452.656012][T15066] bridge0: port 1(bridge_slave_0) entered blocking state
[  452.664909][T15066] bridge0: port 1(bridge_slave_0) entered disabled state
[  452.672720][T15066] bridge_slave_0: entered allmulticast mode
[  452.681059][T15066] bridge_slave_0: entered promiscuous mode
[  452.697170][T15066] bridge0: port 2(bridge_slave_1) entered blocking state
[  452.705128][T15066] bridge0: port 2(bridge_slave_1) entered disabled state
[  452.714797][T15066] bridge_slave_1: entered allmulticast mode
[  452.723782][T15066] bridge_slave_1: entered promiscuous mode
[  452.874092][T15066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  452.904791][T15066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  453.019102][T15066] team0: Port device team_slave_0 added
[  453.055881][T15066] team0: Port device team_slave_1 added
[  453.108430][T15091] vxcan1 speed is unknown, defaulting to 1000
[  453.145136][T15066] batman_adv: batadv0: Adding interface: batadv_slave_0
[  453.160427][T15066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  453.200234][T15066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  453.262367][T15068] bridge0: port 1(bridge_slave_0) entered blocking state
[  453.269669][T15068] bridge0: port 1(bridge_slave_0) entered disabled state
[  453.278071][T15068] bridge_slave_0: entered allmulticast mode
[  453.287186][T15068] bridge_slave_0: entered promiscuous mode
[  453.296294][T15066] batman_adv: batadv0: Adding interface: batadv_slave_1
[  453.320073][T15066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  453.346840][T15066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  453.358624][T15068] bridge0: port 2(bridge_slave_1) entered blocking state
[  453.366597][T15068] bridge0: port 2(bridge_slave_1) entered disabled state
[  453.375023][T15068] bridge_slave_1: entered allmulticast mode
[  453.383864][T15068] bridge_slave_1: entered promiscuous mode
[  453.509063][T15066] hsr_slave_0: entered promiscuous mode
[  453.516519][T15066] hsr_slave_1: entered promiscuous mode
[  453.525522][T15066] debugfs: 'hsr0' already exists in 'hsr'
[  453.531850][T15066] Cannot create hsr debugfs directory
[  453.569335][T15068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  453.602106][T15068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  453.646250][T15093] vxcan1 speed is unknown, defaulting to 1000
[  453.710039][ T5649] Bluetooth: hci12: command tx timeout
[  453.785691][T15068] team0: Port device team_slave_0 added
[  453.795669][T15068] team0: Port device team_slave_1 added
[  453.870002][ T5649] Bluetooth: hci13: command tx timeout
[  453.933611][T15068] batman_adv: batadv0: Adding interface: batadv_slave_0
[  453.941642][T15068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  453.972815][T15068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  454.018268][T15068] batman_adv: batadv0: Adding interface: batadv_slave_1
[  454.026393][T15068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  454.053315][ T5649] Bluetooth: hci14: command tx timeout
[  454.053616][T15068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  454.089186][T15098] vxcan1 speed is unknown, defaulting to 1000
[  454.346994][T15068] hsr_slave_0: entered promiscuous mode
[  454.354076][T15068] hsr_slave_1: entered promiscuous mode
[  454.361585][T15068] debugfs: 'hsr0' already exists in 'hsr'
[  454.367379][T15068] Cannot create hsr debugfs directory
[  454.590065][ T5649] Bluetooth: hci10: command tx timeout
[  454.670241][ T5649] Bluetooth: hci11: command tx timeout
[  455.086569][T15091] bridge0: port 1(bridge_slave_0) entered blocking state
[  455.094284][T15091] bridge0: port 1(bridge_slave_0) entered disabled state
[  455.102589][T15091] bridge_slave_0: entered allmulticast mode
[  455.111146][T15091] bridge_slave_0: entered promiscuous mode
[  455.130835][T15093] bridge0: port 1(bridge_slave_0) entered blocking state
[  455.138023][T15093] bridge0: port 1(bridge_slave_0) entered disabled state
[  455.145939][T15093] bridge_slave_0: entered allmulticast mode
[  455.153960][T15093] bridge_slave_0: entered promiscuous mode
[  455.184295][T15091] bridge0: port 2(bridge_slave_1) entered blocking state
[  455.191896][T15091] bridge0: port 2(bridge_slave_1) entered disabled state
[  455.199192][T15091] bridge_slave_1: entered allmulticast mode
[  455.209107][T15091] bridge_slave_1: entered promiscuous mode
[  455.233043][T15093] bridge0: port 2(bridge_slave_1) entered blocking state
[  455.240965][T15093] bridge0: port 2(bridge_slave_1) entered disabled state
[  455.248471][T15093] bridge_slave_1: entered allmulticast mode
[  455.256981][T15093] bridge_slave_1: entered promiscuous mode
[  455.337745][T15098] bridge0: port 1(bridge_slave_0) entered blocking state
[  455.345213][T15098] bridge0: port 1(bridge_slave_0) entered disabled state
[  455.352650][T15098] bridge_slave_0: entered allmulticast mode
[  455.360401][T15098] bridge_slave_0: entered promiscuous mode
[  455.372371][T15091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  455.385696][T15091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  455.406849][T15098] bridge0: port 2(bridge_slave_1) entered blocking state
[  455.414456][T15098] bridge0: port 2(bridge_slave_1) entered disabled state
[  455.422593][T15098] bridge_slave_1: entered allmulticast mode
[  455.432343][T15098] bridge_slave_1: entered promiscuous mode
[  455.477136][T15093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  455.502240][T15098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  455.526864][T15093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  455.541833][T15098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  455.551273][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  455.590509][T15091] team0: Port device team_slave_0 added
[  455.634231][T15091] team0: Port device team_slave_1 added
[  455.689317][T15098] team0: Port device team_slave_0 added
[  455.737532][T15093] team0: Port device team_slave_0 added
[  455.746832][T15093] team0: Port device team_slave_1 added
[  455.755746][T15098] team0: Port device team_slave_1 added
[  455.788254][T15091] batman_adv: batadv0: Adding interface: batadv_slave_0
[  455.795420][ T5649] Bluetooth: hci12: command tx timeout
[  455.805085][T15091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  455.831760][T15091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  455.891704][T15091] batman_adv: batadv0: Adding interface: batadv_slave_1
[  455.909127][T15091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  455.951275][ T5649] Bluetooth: hci13: command tx timeout
[  455.961330][T15091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  455.990996][T15098] batman_adv: batadv0: Adding interface: batadv_slave_0
[  455.998018][T15098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  456.024660][T15098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  456.041345][T15098] batman_adv: batadv0: Adding interface: batadv_slave_1
[  456.048354][T15098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  456.074677][T15098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  456.103916][T15093] batman_adv: batadv0: Adding interface: batadv_slave_0
[  456.111406][ T5649] Bluetooth: hci14: command tx timeout
[  456.118393][T15093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  456.144774][T15093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  456.160105][T15093] batman_adv: batadv0: Adding interface: batadv_slave_1
[  456.167136][T15093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  456.194013][T15093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  456.332325][T15091] hsr_slave_0: entered promiscuous mode
[  456.339079][T15091] hsr_slave_1: entered promiscuous mode
[  456.345701][T15091] debugfs: 'hsr0' already exists in 'hsr'
[  456.352334][T15091] Cannot create hsr debugfs directory
[  456.366878][T15098] hsr_slave_0: entered promiscuous mode
[  456.374229][T15098] hsr_slave_1: entered promiscuous mode
[  456.380986][T15098] debugfs: 'hsr0' already exists in 'hsr'
[  456.386763][T15098] Cannot create hsr debugfs directory
[  456.434751][T15093] hsr_slave_0: entered promiscuous mode
[  456.441995][T15093] hsr_slave_1: entered promiscuous mode
[  456.448379][T15093] debugfs: 'hsr0' already exists in 'hsr'
[  456.454415][T15093] Cannot create hsr debugfs directory
[  456.669917][ T5649] Bluetooth: hci10: command tx timeout
[  456.750832][ T5649] Bluetooth: hci11: command tx timeout
[  457.870159][ T5649] Bluetooth: hci12: command tx timeout
[  458.032218][ T5649] Bluetooth: hci13: command tx timeout
[  458.190248][ T5649] Bluetooth: hci14: command tx timeout
[  458.759945][ T5649] Bluetooth: hci10: command tx timeout
[  458.829968][ T5649] Bluetooth: hci11: command tx timeout
[  459.950278][ T5649] Bluetooth: hci12: command tx timeout
[  460.109990][ T5649] Bluetooth: hci13: command tx timeout
[  460.270265][ T5649] Bluetooth: hci14: command tx timeout
[  465.790787][ T1590] block nbd1: Possible stuck request ffff8880279d7000: control (read@0,1024B). Runtime 180 seconds
[  465.801901][ T1590] block nbd1: Possible stuck request ffff8880279d71c0: control (read@1024,1024B). Runtime 180 seconds
[  465.813007][ T1590] block nbd1: Possible stuck request ffff8880279d7380: control (read@2048,1024B). Runtime 180 seconds
[  465.824191][ T1590] block nbd1: Possible stuck request ffff8880279d7540: control (read@3072,1024B). Runtime 180 seconds
[  466.710343][ T4991] udevd[4991]: worker [9996] /devices/virtual/block/nbd1 timeout; kill it
[  466.719417][ T4991] udevd[4991]: seq 17745 '/devices/virtual/block/nbd1' killed
[  470.910047][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  495.870869][ T1590] block nbd1: Possible stuck request ffff8880279d7000: control (read@0,1024B). Runtime 210 seconds
[  495.882074][ T1590] block nbd1: Possible stuck request ffff8880279d71c0: control (read@1024,1024B). Runtime 210 seconds
[  495.894089][ T1590] block nbd1: Possible stuck request ffff8880279d7380: control (read@2048,1024B). Runtime 210 seconds
[  495.905433][ T1590] block nbd1: Possible stuck request ffff8880279d7540: control (read@3072,1024B). Runtime 210 seconds
[  506.750016][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  511.048194][ T5647] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  511.064383][ T5647] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  511.073741][ T5647] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  511.084786][ T5647] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  511.095466][ T5647] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  511.102973][ T5642] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  511.117800][ T5642] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  511.140740][ T5642] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  511.153204][ T5642] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  511.164561][ T5642] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  511.707084][T15160] vxcan1 speed is unknown, defaulting to 1000
[  512.027584][T15162] vxcan1 speed is unknown, defaulting to 1000
[  512.263874][ T5635] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  512.286391][ T5635] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  512.298847][ T5635] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  512.314300][ T5635] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  512.322434][ T5635] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  512.405242][ T5635] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  512.441294][T15187] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  512.452897][T15195] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1
[  512.466840][T15187] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  512.475172][T15195] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9
[  512.486146][T15187] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9
[  512.494569][T15195] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  512.511156][T15187] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  512.521151][T15195] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4
[  512.542845][T15187] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2
[  513.151168][T15181] Bluetooth: hci15: command tx timeout
[  513.232274][T15181] Bluetooth: hci16: command tx timeout
[  513.334259][T15160] bridge0: port 1(bridge_slave_0) entered blocking state
[  513.342616][T15160] bridge0: port 1(bridge_slave_0) entered disabled state
[  513.350587][T15160] bridge_slave_0: entered allmulticast mode
[  513.358294][T15160] bridge_slave_0: entered promiscuous mode
[  513.369016][T15160] bridge0: port 2(bridge_slave_1) entered blocking state
[  513.377222][T15160] bridge0: port 2(bridge_slave_1) entered disabled state
[  513.386459][T15160] bridge_slave_1: entered allmulticast mode
[  513.395175][T15160] bridge_slave_1: entered promiscuous mode
[  513.481036][T15160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  513.504968][T15160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  513.558783][T15160] team0: Port device team_slave_0 added
[  513.582216][T15160] team0: Port device team_slave_1 added
[  513.673823][T15160] batman_adv: batadv0: Adding interface: batadv_slave_0
[  513.681208][T15160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  513.708211][T15160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  513.737424][T15160] batman_adv: batadv0: Adding interface: batadv_slave_1
[  513.751525][T15160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  513.799449][T15160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  513.819864][T15192] vxcan1 speed is unknown, defaulting to 1000
[  513.950167][ T5635] Bluetooth: hci8: command 0x0406 tx timeout
[  513.958160][T15195] Bluetooth: hci6: command 0x0406 tx timeout
[  513.962545][T15187] Bluetooth: hci9: command 0x0406 tx timeout
[  513.964731][T15199] Bluetooth: hci7: command 0x0406 tx timeout
[  513.971385][T15181] Bluetooth: hci5: command 0x0406 tx timeout
[  514.010642][T15160] hsr_slave_0: entered promiscuous mode
[  514.022528][T15160] hsr_slave_1: entered promiscuous mode
[  514.038924][T15160] debugfs: 'hsr0' already exists in 'hsr'
[  514.052528][T15160] Cannot create hsr debugfs directory
[  514.321111][T15162] bridge0: port 1(bridge_slave_0) entered blocking state
[  514.339907][T15162] bridge0: port 1(bridge_slave_0) entered disabled state
[  514.347277][T15162] bridge_slave_0: entered allmulticast mode
[  514.352613][ T5641] Bluetooth: hci17: command tx timeout
[  514.359973][T15162] bridge_slave_0: entered promiscuous mode
[  514.387192][T15191] vxcan1 speed is unknown, defaulting to 1000
[  514.387657][T15162] bridge0: port 2(bridge_slave_1) entered blocking state
[  514.420267][T15162] bridge0: port 2(bridge_slave_1) entered disabled state
[  514.441555][T15162] bridge_slave_1: entered allmulticast mode
[  514.462459][T15162] bridge_slave_1: entered promiscuous mode
[  514.590387][ T5641] Bluetooth: hci19: command tx timeout
[  514.592484][ T5645] Bluetooth: hci18: command tx timeout
[  514.657529][T15162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  514.674159][T15162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  514.803640][T15185] vxcan1 speed is unknown, defaulting to 1000
[  514.834648][T15162] team0: Port device team_slave_0 added
[  514.874670][T15162] team0: Port device team_slave_1 added
[  515.028769][T15162] batman_adv: batadv0: Adding interface: batadv_slave_0
[  515.049981][T15162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  515.078139][T15162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  515.129111][T15162] batman_adv: batadv0: Adding interface: batadv_slave_1
[  515.136434][T15162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  515.163299][T15162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  515.231539][ T5645] Bluetooth: hci15: command tx timeout
[  515.310037][ T5645] Bluetooth: hci16: command tx timeout
[  515.333248][T15162] hsr_slave_0: entered promiscuous mode
[  515.341330][T15162] hsr_slave_1: entered promiscuous mode
[  515.348190][T15162] debugfs: 'hsr0' already exists in 'hsr'
[  515.355882][T15162] Cannot create hsr debugfs directory
[  515.864498][T15192] bridge0: port 1(bridge_slave_0) entered blocking state
[  515.873012][T15192] bridge0: port 1(bridge_slave_0) entered disabled state
[  515.882349][T15192] bridge_slave_0: entered allmulticast mode
[  515.891237][T15192] bridge_slave_0: entered promiscuous mode
[  515.900183][T15192] bridge0: port 2(bridge_slave_1) entered blocking state
[  515.907354][T15192] bridge0: port 2(bridge_slave_1) entered disabled state
[  515.915201][T15192] bridge_slave_1: entered allmulticast mode
[  515.923681][T15192] bridge_slave_1: entered promiscuous mode
[  516.045008][T15192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  516.060678][T15192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  516.080697][T15191] bridge0: port 1(bridge_slave_0) entered blocking state
[  516.087961][T15191] bridge0: port 1(bridge_slave_0) entered disabled state
[  516.095828][T15191] bridge_slave_0: entered allmulticast mode
[  516.103992][T15191] bridge_slave_0: entered promiscuous mode
[  516.143907][T15191] bridge0: port 2(bridge_slave_1) entered blocking state
[  516.151783][T15191] bridge0: port 2(bridge_slave_1) entered disabled state
[  516.159304][T15191] bridge_slave_1: entered allmulticast mode
[  516.167693][T15191] bridge_slave_1: entered promiscuous mode
[  516.231439][T15192] team0: Port device team_slave_0 added
[  516.242800][T15192] team0: Port device team_slave_1 added
[  516.322999][T15191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  516.337298][T15191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  516.347587][T15192] batman_adv: batadv0: Adding interface: batadv_slave_0
[  516.356732][T15192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  516.384139][T15192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  516.397446][T15192] batman_adv: batadv0: Adding interface: batadv_slave_1
[  516.404766][T15192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  516.431978][ T5645] Bluetooth: hci17: command tx timeout
[  516.432208][T15192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  516.527328][T15191] team0: Port device team_slave_0 added
[  516.534774][T15185] bridge0: port 1(bridge_slave_0) entered blocking state
[  516.542306][T15185] bridge0: port 1(bridge_slave_0) entered disabled state
[  516.550268][T15185] bridge_slave_0: entered allmulticast mode
[  516.557851][T15185] bridge_slave_0: entered promiscuous mode
[  516.570681][T15191] team0: Port device team_slave_1 added
[  516.602599][T15185] bridge0: port 2(bridge_slave_1) entered blocking state
[  516.611718][T15185] bridge0: port 2(bridge_slave_1) entered disabled state
[  516.619094][T15185] bridge_slave_1: entered allmulticast mode
[  516.628466][T15185] bridge_slave_1: entered promiscuous mode
[  516.660930][T15191] batman_adv: batadv0: Adding interface: batadv_slave_0
[  516.667932][T15191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  516.671814][ T5645] Bluetooth: hci19: command tx timeout
[  516.701117][ T5641] Bluetooth: hci18: command tx timeout
[  516.707269][T15191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  516.720014][T15191] batman_adv: batadv0: Adding interface: batadv_slave_1
[  516.727914][T15191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  516.755057][T15191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  516.814405][T15185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  516.827950][T15185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  516.846493][T15192] hsr_slave_0: entered promiscuous mode
[  516.853824][T15192] hsr_slave_1: entered promiscuous mode
[  516.860868][T15192] debugfs: 'hsr0' already exists in 'hsr'
[  516.866668][T15192] Cannot create hsr debugfs directory
[  516.940180][T15185] team0: Port device team_slave_0 added
[  516.992100][T15185] team0: Port device team_slave_1 added
[  517.052020][T15191] hsr_slave_0: entered promiscuous mode
[  517.059353][T15191] hsr_slave_1: entered promiscuous mode
[  517.068820][T15191] debugfs: 'hsr0' already exists in 'hsr'
[  517.074755][T15191] Cannot create hsr debugfs directory
[  517.122376][T15185] batman_adv: batadv0: Adding interface: batadv_slave_0
[  517.132107][T15185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  517.159833][T15185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  517.201098][T15185] batman_adv: batadv0: Adding interface: batadv_slave_1
[  517.208613][T15185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  517.238031][T15185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  517.312296][ T5641] Bluetooth: hci15: command tx timeout
[  517.390946][ T5641] Bluetooth: hci16: command tx timeout
[  517.483693][T15185] hsr_slave_0: entered promiscuous mode
[  517.491584][T15185] hsr_slave_1: entered promiscuous mode
[  517.498430][T15185] debugfs: 'hsr0' already exists in 'hsr'
[  517.505497][T15185] Cannot create hsr debugfs directory
[  518.510559][ T5641] Bluetooth: hci17: command tx timeout
[  518.750563][ T5645] Bluetooth: hci19: command tx timeout
[  518.756197][ T5641] Bluetooth: hci18: command tx timeout
[  518.910667][   T31] INFO: task syz.1.2515:14928 blocked for more than 143 seconds.
[  518.918590][   T31]       Not tainted syzkaller #0
[  518.923793][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  518.932746][   T31] task:syz.1.2515      state:D stack:25552 pid:14928 tgid:14927 ppid:5633   task_flags:0x480140 flags:0x00080002
[  518.944865][   T31] Call Trace:
[  518.948247][   T31]  <TASK>
[  518.951358][   T31]  __schedule+0x17d9/0x56c0
[  518.956106][   T31]  ? __lock_acquire+0x683/0x2cf0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  518.961484][   T31]  ? __pfx___schedule+0x10/0x10
[  518.966441][   T31]  ? schedule+0x90/0x2b0
[  518.972489][   T31]  schedule+0x164/0x2b0
[  518.976760][   T31]  blk_mq_freeze_queue_wait+0x101/0x180
[  518.982995][   T31]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[  518.989142][   T31]  ? queue_limits_commit_update_frozen+0x55/0xd0
[  518.996601][   T31]  ? __pfx_autoremove_wake_function+0x10/0x10
[  519.003418][   T31]  queue_limits_commit_update_frozen+0x55/0xd0
[  519.010980][   T31]  nbd_set_size+0x454/0x680
[  519.015692][   T31]  ? __pfx_nbd_set_size+0x10/0x10
[  519.021447][   T31]  ? nla_memcpy+0x5b/0xc0
[  519.025978][   T31]  nbd_genl_reconfigure+0x7e9/0x1e80
[  519.031644][   T31]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  519.056389][   T31]  ? rcu_is_watching+0x15/0xb0
[  519.061481][   T31]  ? trace_kmalloc+0x2a/0xf0
[  519.066207][   T31]  ? __kmalloc_noprof+0x396/0x720
[  519.082713][   T31]  ? __nla_parse+0x40/0x60
[  519.088554][   T31]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  519.102213][   T31]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  519.108633][   T31]  genl_family_rcv_msg_doit+0x233/0x340
[  519.116125][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  519.123808][   T31]  ? __lock_acquire+0x683/0x2cf0
[  519.128845][   T31]  genl_rcv_msg+0x614/0x7a0
[  519.137006][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  519.142788][   T31]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  519.148643][   T31]  netlink_rcv_skb+0x226/0x4a0
[  519.154770][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  519.165444][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  519.170926][   T31]  ? down_read+0x2be/0x330
[  519.175471][   T31]  genl_rcv+0x28/0x40
[  519.179508][   T31]  netlink_unicast+0x7bb/0x940
[  519.184544][   T31]  netlink_sendmsg+0x813/0xb40
[  519.189377][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  519.194870][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  519.200127][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  519.205495][   T31]  sock_sendmsg_nosec+0x13a/0x180
[  519.210799][   T31]  ____sys_sendmsg+0x54e/0x850
[  519.216626][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  519.222085][   T31]  ? import_iovec+0x73/0xa0
[  519.226733][   T31]  ___sys_sendmsg+0x2a5/0x360
[  519.231685][   T31]  ? __lock_acquire+0x683/0x2cf0
[  519.236727][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  519.242103][   T31]  ? futex_wait+0x2a2/0x390
[  519.246755][   T31]  ? __fget_files+0x2a/0x420
[  519.251504][   T31]  ? __fget_files+0x3a2/0x420
[  519.256254][   T31]  __x64_sys_sendmsg+0x1b1/0x290
[  519.261344][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  519.266878][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.273190][   T31]  do_syscall_64+0x174/0x580
[  519.277933][   T31]  ? trace_irq_disable+0x3b/0x140
[  519.283194][   T31]  ? clear_bhb_loop+0x40/0x90
[  519.287925][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.293952][   T31] RIP: 0033:0x7fa739b9e019
[  519.298496][   T31] RSP: 002b:00007fa73aa15028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  519.307203][   T31] RAX: ffffffffffffffda RBX: 00007fa739e25fa0 RCX: 00007fa739b9e019
[  519.315428][   T31] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 0000000000000008
[  519.323603][   T31] RBP: 00007fa739c3500c R08: 0000000000000000 R09: 0000000000000000
[  519.331680][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  519.339925][   T31] R13: 00007fa739e26038 R14: 00007fa739e25fa0 R15: 00007ffd615d00a8
[  519.348000][   T31]  </TASK>
[  519.351254][   T31] INFO: task syz.1.2515:14936 blocked for more than 143 seconds.
[  519.359081][   T31]       Not tainted syzkaller #0
[  519.364215][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  519.372963][   T31] task:syz.1.2515      state:D stack:26784 pid:14936 tgid:14927 ppid:5633   task_flags:0x400140 flags:0x00080002
[  519.385004][   T31] Call Trace:
[  519.388324][   T31]  <TASK>
[  519.391629][   T31]  __schedule+0x17d9/0x56c0
[  519.396215][   T31]  ? __lock_acquire+0x683/0x2cf0
[  519.401214][ T5641] Bluetooth: hci15: command tx timeout
[  519.406776][   T31]  ? __lock_acquire+0x683/0x2cf0
[  519.411849][   T31]  ? unwind_next_frame+0x8f/0x2550
[  519.417048][   T31]  ? __pfx___schedule+0x10/0x10
[  519.422154][   T31]  ? schedule+0x90/0x2b0
[  519.426464][   T31]  schedule+0x164/0x2b0
[  519.430772][   T31]  schedule_preempt_disabled+0x13/0x30
[  519.436274][   T31]  __mutex_lock+0x7bf/0x1550
[  519.440990][   T31]  ? __mutex_lock+0x5d4/0x1550
[  519.445800][   T31]  ? genl_rcv_msg+0x10b/0x7a0
[  519.450680][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  519.455784][   T31]  ? stack_trace_save+0xa9/0x100
[  519.460893][   T31]  ? __lock_acquire+0x683/0x2cf0
[  519.465928][   T31]  ? radix_tree_lookup+0x240/0x290
[  519.471405][   T31]  genl_rcv_msg+0x10b/0x7a0
[  519.476173][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  519.480945][ T5641] Bluetooth: hci16: command tx timeout
[  519.481486][   T31]  ? __lock_acquire+0x683/0x2cf0
[  519.491775][   T31]  netlink_rcv_skb+0x226/0x4a0
[  519.496607][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  519.501790][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  519.507132][   T31]  ? down_read+0x2be/0x330
[  519.511687][   T31]  genl_rcv+0x28/0x40
[  519.515712][   T31]  netlink_unicast+0x7bb/0x940
[  519.520672][   T31]  netlink_sendmsg+0x813/0xb40
[  519.525517][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  519.531047][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  519.536057][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  519.541479][   T31]  sock_sendmsg_nosec+0x13a/0x180
[  519.546554][   T31]  ____sys_sendmsg+0x54e/0x850
[  519.551874][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  519.557255][   T31]  ? import_iovec+0x73/0xa0
[  519.562263][   T31]  ___sys_sendmsg+0x2a5/0x360
[  519.567252][   T31]  ? __lock_acquire+0x683/0x2cf0
[  519.572626][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  519.577911][   T31]  ? futex_wake+0x51b/0x5f0
[  519.582562][   T31]  ? __fget_files+0x2a/0x420
[  519.587197][   T31]  ? __fget_files+0x3a2/0x420
[  519.592032][   T31]  __x64_sys_sendmsg+0x1b1/0x290
[  519.597031][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  519.602621][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.608726][   T31]  do_syscall_64+0x174/0x580
[  519.613468][   T31]  ? trace_irq_disable+0x3b/0x140
[  519.618536][   T31]  ? clear_bhb_loop+0x40/0x90
[  519.623376][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.629311][   T31] RIP: 0033:0x7fa739b9e019
[  519.634275][   T31] RSP: 002b:00007fa73a9f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  519.642912][   T31] RAX: ffffffffffffffda RBX: 00007fa739e26090 RCX: 00007fa739b9e019
[  519.651325][   T31] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000a
[  519.659378][   T31] RBP: 00007fa739c3500c R08: 0000000000000000 R09: 0000000000000000
[  519.667487][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  519.675630][   T31] R13: 00007fa739e26128 R14: 00007fa739e26090 R15: 00007ffd615d00a8
[  519.683835][   T31]  </TASK>
[  519.686940][   T31] INFO: task syz.1.2515:14940 blocked for more than 144 seconds.
[  519.694771][   T31]       Not tainted syzkaller #0
[  519.699814][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  519.708525][   T31] task:syz.1.2515      state:D stack:27872 pid:14940 tgid:14927 ppid:5633   task_flags:0x400040 flags:0x00080002
[  519.721097][   T31] Call Trace:
[  519.724492][   T31]  <TASK>
[  519.727470][   T31]  __schedule+0x17d9/0x56c0
[  519.732128][   T31]  ? __lock_acquire+0x683/0x2cf0
[  519.737121][   T31]  ? __lock_acquire+0x683/0x2cf0
[  519.742214][   T31]  ? __pfx___schedule+0x10/0x10
[  519.747114][   T31]  ? schedule+0x90/0x2b0
[  519.751576][   T31]  schedule+0x164/0x2b0
[  519.755801][   T31]  schedule_preempt_disabled+0x13/0x30
[  519.761436][   T31]  __mutex_lock+0x7bf/0x1550
[  519.766076][   T31]  ? __mutex_lock+0x5d4/0x1550
[  519.770968][   T31]  ? genl_rcv_msg+0x10b/0x7a0
[  519.775705][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  519.780983][   T31]  ? __dev_queue_xmit+0x29b/0x3820
[  519.786296][   T31]  ? __lock_acquire+0x683/0x2cf0
[  519.791539][   T31]  ? radix_tree_lookup+0x240/0x290
[  519.796716][   T31]  genl_rcv_msg+0x10b/0x7a0
[  519.801334][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  519.806430][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  519.812041][   T31]  netlink_rcv_skb+0x226/0x4a0
[  519.816866][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  519.822042][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  519.827384][   T31]  ? down_read+0x2be/0x330
[  519.831925][   T31]  genl_rcv+0x28/0x40
[  519.835957][   T31]  netlink_unicast+0x7bb/0x940
[  519.840871][   T31]  netlink_sendmsg+0x813/0xb40
[  519.845692][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  519.851084][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  519.856046][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  519.861562][   T31]  sock_sendmsg_nosec+0x13a/0x180
[  519.866683][   T31]  __sys_sendto+0x408/0x5a0
[  519.871768][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  519.876932][   T31]  ? do_user_addr_fault+0xc4a/0x1340
[  519.882400][   T31]  __x64_sys_sendto+0xde/0x100
[  519.887238][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.893601][   T31]  do_syscall_64+0x174/0x580
[  519.898317][   T31]  ? trace_irq_disable+0x3b/0x140
[  519.903587][   T31]  ? clear_bhb_loop+0x40/0x90
[  519.908348][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.914439][   T31] RIP: 0033:0x7fa739b5e84e
[  519.918910][   T31] RSP: 002b:00007fa73a9d1e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  519.927484][   T31] RAX: ffffffffffffffda RBX: 00007fa73a9d36c0 RCX: 00007fa739b5e84e
[  519.935580][   T31] RDX: 0000000000000020 RSI: 00007fa73a9d2000 RDI: 000000000000000b
[  519.943709][   T31] RBP: 0000000000000000 R08: 00007fa73a9d1f04 R09: 000000000000000c
[  519.951908][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b
[  519.960038][   T31] R13: 00007fa73a9d1f58 R14: 00007fa73a9d2000 R15: 0000000000000000
[  519.968088][   T31]  </TASK>
[  519.971371][   T31] INFO: task syz.4.2517:14935 blocked for more than 144 seconds.
[  519.979160][   T31]       Not tainted syzkaller #0
[  519.989871][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  519.998631][   T31] task:syz.4.2517      state:D stack:25760 pid:14935 tgid:14932 ppid:5632   task_flags:0x400140 flags:0x00080002
[  520.011299][   T31] Call Trace:
[  520.014636][   T31]  <TASK>
[  520.017583][   T31]  __schedule+0x17d9/0x56c0
[  520.022346][   T31]  ? __lock_acquire+0x683/0x2cf0
[  520.027335][   T31]  ? __lock_acquire+0x683/0x2cf0
[  520.032694][   T31]  ? __pfx___schedule+0x10/0x10
[  520.037674][   T31]  ? schedule+0x90/0x2b0
[  520.042182][   T31]  schedule+0x164/0x2b0
[  520.046403][   T31]  schedule_preempt_disabled+0x13/0x30
[  520.052116][   T31]  __mutex_lock+0x7bf/0x1550
[  520.056784][   T31]  ? __mutex_lock+0x5d4/0x1550
[  520.061683][   T31]  ? genl_rcv_msg+0x10b/0x7a0
[  520.066409][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  520.071629][   T31]  ? __dev_queue_xmit+0x29b/0x3820
[  520.076815][   T31]  ? radix_tree_lookup+0x240/0x290
[  520.084998][   T31]  genl_rcv_msg+0x10b/0x7a0
[  520.089609][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  520.094840][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  520.100726][   T31]  netlink_rcv_skb+0x226/0x4a0
[  520.105581][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  520.111169][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  520.116564][   T31]  ? down_read+0x2be/0x330
[  520.122292][   T31]  genl_rcv+0x28/0x40
[  520.126327][   T31]  netlink_unicast+0x7bb/0x940
[  520.131415][   T31]  netlink_sendmsg+0x813/0xb40
[  520.136256][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  520.141739][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  520.146739][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  520.152193][   T31]  sock_sendmsg_nosec+0x13a/0x180
[  520.157288][   T31]  __sys_sendto+0x408/0x5a0
[  520.161975][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  520.167105][   T31]  ? do_user_addr_fault+0xc4a/0x1340
[  520.172630][   T31]  __x64_sys_sendto+0xde/0x100
[  520.177468][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  520.183669][   T31]  do_syscall_64+0x174/0x580
[  520.188314][   T31]  ? trace_irq_disable+0x3b/0x140
[  520.193732][   T31]  ? clear_bhb_loop+0x40/0x90
[  520.198478][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  520.204543][   T31] RIP: 0033:0x7fb491d5e84e
[  520.209040][   T31] RSP: 002b:00007fb492c04e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  520.217668][   T31] RAX: ffffffffffffffda RBX: 00007fb492c066c0 RCX: 00007fb491d5e84e
[  520.226158][   T31] RDX: 0000000000000020 RSI: 00007fb492c05000 RDI: 0000000000000008
[  520.234550][   T31] RBP: 0000000000000000 R08: 00007fb492c04f04 R09: 000000000000000c
[  520.242813][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[  520.251009][   T31] R13: 00007fb492c04f58 R14: 00007fb492c05000 R15: 0000000000000000
[  520.259074][   T31]  </TASK>
[  520.262305][   T31] INFO: task syz.3.2520:14944 blocked for more than 144 seconds.
[  520.270176][   T31]       Not tainted syzkaller #0
[  520.275209][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  520.284077][   T31] task:syz.3.2520      state:D stack:27872 pid:14944 tgid:14942 ppid:5630   task_flags:0x400040 flags:0x00080002
[  520.296216][   T31] Call Trace:
[  520.299545][   T31]  <TASK>
[  520.302735][   T31]  __schedule+0x17d9/0x56c0
[  520.307314][   T31]  ? __lock_acquire+0x683/0x2cf0
[  520.312403][   T31]  ? __lock_acquire+0x683/0x2cf0
[  520.317407][   T31]  ? fq_dequeue+0x157/0x21c0
[  520.322288][   T31]  ? __pfx___schedule+0x10/0x10
[  520.327235][   T31]  ? schedule+0x90/0x2b0
[  520.331782][   T31]  schedule+0x164/0x2b0
[  520.336018][   T31]  schedule_preempt_disabled+0x13/0x30
[  520.341729][   T31]  __mutex_lock+0x7bf/0x1550
[  520.346393][   T31]  ? __mutex_lock+0x5d4/0x1550
[  520.351401][   T31]  ? genl_rcv_msg+0x10b/0x7a0
[  520.356158][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  520.361371][   T31]  ? __dev_queue_xmit+0x29b/0x3820
[  520.366561][   T31]  ? radix_tree_lookup+0x240/0x290
[  520.371924][   T31]  genl_rcv_msg+0x10b/0x7a0
[  520.376489][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  520.381686][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  520.387141][   T31]  netlink_rcv_skb+0x226/0x4a0
[  520.392053][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  520.397123][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  520.402588][   T31]  ? down_read+0x2be/0x330
[  520.407073][   T31]  genl_rcv+0x28/0x40
[  520.411261][   T31]  netlink_unicast+0x7bb/0x940
[  520.416095][   T31]  netlink_sendmsg+0x813/0xb40
[  520.421048][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  520.426400][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  520.431557][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  520.436924][   T31]  sock_sendmsg_nosec+0x13a/0x180
[  520.442249][   T31]  __sys_sendto+0x408/0x5a0
[  520.446826][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  520.452105][   T31]  ? do_user_addr_fault+0xc4a/0x1340
[  520.457466][   T31]  __x64_sys_sendto+0xde/0x100
[  520.462398][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  520.468546][   T31]  do_syscall_64+0x174/0x580
[  520.473262][   T31]  ? trace_irq_disable+0x3b/0x140
[  520.478349][   T31]  ? clear_bhb_loop+0x40/0x90
[  520.483245][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  520.489294][   T31] RIP: 0033:0x7fe437f5e84e
[  520.493862][   T31] RSP: 002b:00007fe438f17e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  520.502484][   T31] RAX: ffffffffffffffda RBX: 00007fe438f196c0 RCX: 00007fe437f5e84e
[  520.511118][   T31] RDX: 0000000000000020 RSI: 00007fe438f18000 RDI: 0000000000000004
[  520.519143][   T31] RBP: 0000000000000000 R08: 00007fe438f17f04 R09: 000000000000000c
[  520.527429][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  520.535535][   T31] R13: 00007fe438f17f58 R14: 00007fe438f18000 R15: 0000000000000000
[  520.543712][   T31]  </TASK>
[  520.546815][   T31] INFO: task syz.0.2522:14957 blocked for more than 144 seconds.
[  520.554896][   T31]       Not tainted syzkaller #0
[  520.561106][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  520.570191][   T31] task:syz.0.2522      state:D stack:25416 pid:14957 tgid:14955 ppid:5631   task_flags:0x400140 flags:0x00080002
[  520.582353][   T31] Call Trace:
[  520.585700][   T31]  <TASK>
[  520.588669][   T31]  __schedule+0x17d9/0x56c0
[  520.594055][ T5641] Bluetooth: hci17: command tx timeout
[  520.599755][   T31]  ? __lock_acquire+0x683/0x2cf0
[  520.604789][   T31]  ? __lock_acquire+0x683/0x2cf0
[  520.610072][   T31]  ? __pfx___schedule+0x10/0x10
[  520.615013][   T31]  ? schedule+0x90/0x2b0
[  520.619298][   T31]  schedule+0x164/0x2b0
[  520.623952][   T31]  schedule_preempt_disabled+0x13/0x30
[  520.629537][   T31]  __mutex_lock+0x7bf/0x1550
[  520.634341][   T31]  ? __mutex_lock+0x5d4/0x1550
[  520.639179][   T31]  ? genl_rcv_msg+0x10b/0x7a0
[  520.643960][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  520.649037][   T31]  ? __dev_queue_xmit+0x29b/0x3820
[  520.654813][   T31]  ? radix_tree_lookup+0x240/0x290
[  520.660268][   T31]  genl_rcv_msg+0x10b/0x7a0
[  520.664831][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  520.670262][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  520.675789][   T31]  netlink_rcv_skb+0x226/0x4a0
[  520.681279][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  520.686397][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  520.691818][   T31]  ? down_read+0x2be/0x330
[  520.696294][   T31]  genl_rcv+0x28/0x40
[  520.700377][   T31]  netlink_unicast+0x7bb/0x940
[  520.705213][   T31]  netlink_sendmsg+0x813/0xb40
[  520.710395][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  520.715719][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  520.720768][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  520.726086][   T31]  sock_sendmsg_nosec+0x13a/0x180
[  520.731231][   T31]  __sys_sendto+0x408/0x5a0
[  520.735774][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  520.741309][   T31]  ? do_user_addr_fault+0xc4a/0x1340
[  520.746675][   T31]  __x64_sys_sendto+0xde/0x100
[  520.752464][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  520.758602][   T31]  do_syscall_64+0x174/0x580
[  520.763447][   T31]  ? trace_irq_disable+0x3b/0x140
[  520.768546][   T31]  ? clear_bhb_loop+0x40/0x90
[  520.773619][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  520.779558][   T31] RIP: 0033:0x7eff7ab5e84e
[  520.784080][   T31] RSP: 002b:00007eff7ba4ce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  520.792804][   T31] RAX: ffffffffffffffda RBX: 00007eff7ba4e6c0 RCX: 00007eff7ab5e84e
[  520.801242][   T31] RDX: 0000000000000020 RSI: 00007eff7ba4d000 RDI: 000000000000000a
[  520.809254][   T31] RBP: 0000000000000000 R08: 00007eff7ba4cf04 R09: 000000000000000c
[  520.817322][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a
[  520.825455][   T31] R13: 00007eff7ba4cf58 R14: 00007eff7ba4d000 R15: 0000000000000000
[  520.834543][ T5641] Bluetooth: hci18: command tx timeout
[  520.840156][ T5645] Bluetooth: hci19: command tx timeout
[  520.840318][   T31]  </TASK>
[  520.848779][   T31] INFO: task syz.2.2524:14960 blocked for more than 145 seconds.
[  520.857275][   T31]       Not tainted syzkaller #0
[  520.862615][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  520.871932][   T31] task:syz.2.2524      state:D stack:24224 pid:14960 tgid:14959 ppid:5634   task_flags:0x400140 flags:0x00080002
[  520.884000][   T31] Call Trace:
[  520.887308][   T31]  <TASK>
[  520.890425][   T31]  __schedule+0x17d9/0x56c0
[  520.895013][   T31]  ? __lock_acquire+0x683/0x2cf0
[  520.900613][   T31]  ? __lock_acquire+0x683/0x2cf0
[  520.905675][   T31]  ? __pfx___schedule+0x10/0x10
[  520.911061][   T31]  ? schedule+0x90/0x2b0
[  520.915384][   T31]  schedule+0x164/0x2b0
[  520.919616][   T31]  schedule_preempt_disabled+0x13/0x30
[  520.925208][   T31]  __mutex_lock+0x7bf/0x1550
[  520.930228][   T31]  ? __mutex_lock+0x5d4/0x1550
[  520.935035][   T31]  ? genl_rcv_msg+0x10b/0x7a0
[  520.940082][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  520.945182][   T31]  ? __dev_queue_xmit+0x29b/0x3820
[  520.950585][   T31]  ? radix_tree_lookup+0x240/0x290
[  520.955901][   T31]  genl_rcv_msg+0x10b/0x7a0
[  520.960838][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  520.965895][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  520.971420][   T31]  netlink_rcv_skb+0x226/0x4a0
[  520.976271][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  520.981554][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  520.986923][   T31]  ? down_read+0x2be/0x330
[  520.991905][   T31]  genl_rcv+0x28/0x40
[  520.995965][   T31]  netlink_unicast+0x7bb/0x940
[  521.000832][   T31]  netlink_sendmsg+0x813/0xb40
[  521.005649][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  521.011318][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  521.016338][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  521.021999][   T31]  sock_sendmsg_nosec+0x13a/0x180
[  521.027060][   T31]  __sys_sendto+0x408/0x5a0
[  521.031692][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  521.036791][   T31]  ? do_user_addr_fault+0xc4a/0x1340
[  521.042182][   T31]  __x64_sys_sendto+0xde/0x100
[  521.046983][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  521.053510][   T31]  do_syscall_64+0x174/0x580
[  521.058198][   T31]  ? trace_irq_disable+0x3b/0x140
[  521.063387][   T31]  ? clear_bhb_loop+0x40/0x90
[  521.068131][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  521.074476][   T31] RIP: 0033:0x7f41d3f5e84e
[  521.078990][   T31] RSP: 002b:00007f41d4dd2e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  521.087931][   T31] RAX: ffffffffffffffda RBX: 00007f41d4dd46c0 RCX: 00007f41d3f5e84e
[  521.096327][   T31] RDX: 0000000000000020 RSI: 00007f41d4dd3000 RDI: 0000000000000007
[  521.104621][   T31] RBP: 0000000000000000 R08: 00007f41d4dd2f04 R09: 000000000000000c
[  521.113119][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  521.121448][   T31] R13: 00007f41d4dd2f58 R14: 00007f41d4dd3000 R15: 0000000000000000
[  521.129515][   T31]  </TASK>
[  521.132827][   T31] INFO: task syz.2.2524:14962 blocked for more than 145 seconds.
[  521.140949][   T31]       Not tainted syzkaller #0
[  521.145911][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  521.154854][   T31] task:syz.2.2524      state:D stack:27824 pid:14962 tgid:14959 ppid:5634   task_flags:0x400140 flags:0x00080002
[  521.166983][   T31] Call Trace:
[  521.170815][   T31]  <TASK>
[  521.173807][   T31]  __schedule+0x17d9/0x56c0
[  521.178326][   T31]  ? __lock_acquire+0x683/0x2cf0
[  521.183342][   T31]  ? __lock_acquire+0x683/0x2cf0
[  521.188369][   T31]  ? __pfx___schedule+0x10/0x10
[  521.193426][   T31]  ? schedule+0x90/0x2b0
[  521.197734][   T31]  schedule+0x164/0x2b0
[  521.202322][   T31]  schedule_preempt_disabled+0x13/0x30
[  521.207858][   T31]  __mutex_lock+0x7bf/0x1550
[  521.212669][   T31]  ? __mutex_lock+0x5d4/0x1550
[  521.217513][   T31]  ? genl_rcv_msg+0x10b/0x7a0
[  521.222315][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  521.227409][   T31]  ? __dev_queue_xmit+0x29b/0x3820
[  521.233317][   T31]  ? radix_tree_lookup+0x240/0x290
[  521.238544][   T31]  genl_rcv_msg+0x10b/0x7a0
[  521.243164][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  521.248244][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  521.253887][   T31]  netlink_rcv_skb+0x226/0x4a0
[  521.258834][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  521.264271][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  521.269615][   T31]  ? down_read+0x2be/0x330
[  521.274229][   T31]  genl_rcv+0x28/0x40
[  521.278282][   T31]  netlink_unicast+0x7bb/0x940
[  521.283179][   T31]  netlink_sendmsg+0x813/0xb40
[  521.287996][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  521.293849][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  521.298853][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  521.304234][   T31]  sock_sendmsg_nosec+0x13a/0x180
[  521.309308][   T31]  __sys_sendto+0x408/0x5a0
[  521.314109][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  521.319225][   T31]  ? errseq_sample+0x40/0x70
[  521.324275][   T31]  ? fd_install+0x94/0x3d0
[  521.328722][   T31]  ? fd_install+0x306/0x3d0
[  521.333459][   T31]  __x64_sys_sendto+0xde/0x100
[  521.338311][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  521.344714][   T31]  do_syscall_64+0x174/0x580
[  521.349393][   T31]  ? trace_irq_disable+0x3b/0x140
[  521.354871][   T31]  ? clear_bhb_loop+0x40/0x90
[  521.359775][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  521.365790][   T31] RIP: 0033:0x7f41d3f5e84e
[  521.370319][   T31] RSP: 002b:00007f41d4db1e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  521.378813][   T31] RAX: ffffffffffffffda RBX: 00007f41d4db36c0 RCX: 00007f41d3f5e84e
[  521.387182][   T31] RDX: 0000000000000028 RSI: 00007f41d4db2000 RDI: 000000000000000b
[  521.395673][   T31] RBP: 0000000000000000 R08: 00007f41d4db1f04 R09: 000000000000000c
[  521.403912][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b
[  521.412291][   T31] R13: 00007f41d4db1f58 R14: 00007f41d4db2000 R15: 0000000000000000
[  521.420487][   T31]  </TASK>
[  521.423748][   T31] 
[  521.423748][   T31] Showing all locks held in the system:
[  521.431606][   T31] 1 lock held by khungtaskd/31:
[  521.436493][   T31]  #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  521.446878][   T31] 2 locks held by getty/5379:
[  521.451986][   T31]  #0: ffff8880369f90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  521.461991][   T31]  #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  521.472716][   T31] 1 lock held by udevd/9996:
[  521.477349][   T31]  #0: ffff8880278f5350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[  521.486783][   T31] 4 locks held by kworker/u8:34/12075:
[  521.492401][   T31]  #0: ffff8880b873b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160
[  521.502803][   T31]  #1: ffff8880b8724440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0
[  521.511853][   T31]  #2: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  521.521644][   T31]  #3: ffff8880881acf50 (&bat_priv->forw_bat_list_lock){+...}-{3:3}, at: batadv_forw_packet_queue+0x33/0x240
[  521.533962][   T31] 6 locks held by syz.1.2515/14928:
[  521.539221][   T31]  #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  521.547606][   T31]  #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  521.556858][   T31]  #2: ffff8880278efa60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4bc/0x1e80
[  521.567907][   T31]  #3: ffff88802794be78 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680
[  521.577516][   T31]  #4: ffff88802794b840 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  521.590100][   T31]  #5: ffff88802794b878 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  521.602705][   T31] 2 locks held by syz.1.2515/14936:
[  521.607984][   T31]  #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  521.616625][   T31]  #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  521.626082][   T31] 2 locks held by syz.1.2515/14940:
[  521.631741][   T31]  #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  521.640160][   T31]  #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  521.649183][   T31] 2 locks held by syz.4.2517/14935:
[  521.654744][   T31]  #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  521.663087][   T31]  #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  521.672422][   T31] 2 locks held by syz.3.2520/14944:
[  521.677685][   T31]  #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  521.686328][   T31]  #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  521.695473][   T31] 2 locks held by syz.0.2522/14957:
[  521.700790][   T31]  #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  521.709053][   T31]  #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  521.718606][   T31] 2 locks held by syz.2.2524/14960:
[  521.723924][   T31]  #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  521.732519][   T31]  #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  521.741985][   T31] 2 locks held by syz.2.2524/14962:
[  521.747261][   T31]  #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  521.755657][   T31]  #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  521.764753][   T31] 2 locks held by syz-executor/14972:
[  521.770515][   T31]  #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  521.778865][   T31]  #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  521.788163][   T31] 2 locks held by syz-executor/14975:
[  521.794017][   T31]  #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  521.802724][   T31]  #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  521.811800][   T31] 2 locks held by syz-executor/14977:
[  521.817201][   T31]  #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  521.825555][   T31]  #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  521.834863][   T31] 2 locks held by syz-executor/14978:
[  521.840311][   T31]  #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  521.848587][   T31]  #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  521.857689][   T31] 2 locks held by syz-executor/14988:
[  521.863550][   T31]  #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  521.872190][   T31]  #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  521.881830][   T31] 2 locks held by syz-executor/15066:
[  521.887257][   T31]  #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  521.896131][   T31]  #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  521.905204][   T31] 2 locks held by syz-executor/15068:
[  521.910648][   T31]  #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  521.918861][   T31]  #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  521.928216][   T31] 2 locks held by syz-executor/15091:
[  521.933653][   T31]  #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  521.941943][   T31]  #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  521.951693][   T31] 2 locks held by syz-executor/15093:
[  521.957119][   T31]  #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  521.965456][   T31]  #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  521.974665][   T31] 2 locks held by syz-executor/15098:
[  521.980433][   T31]  #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  521.988716][   T31]  #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  521.997838][   T31] 2 locks held by syz-executor/15160:
[  522.003460][   T31]  #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  522.012082][   T31]  #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  522.021157][   T31] 2 locks held by syz-executor/15162:
[  522.026563][   T31]  #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  522.035090][   T31]  #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  522.044506][   T31] 2 locks held by syz-executor/15185:
[  522.050245][   T31]  #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  522.058508][   T31]  #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  522.067597][   T31] 2 locks held by syz-executor/15191:
[  522.073275][   T31]  #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  522.081665][   T31]  #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  522.090777][   T31] 2 locks held by syz-executor/15192:
[  522.096187][   T31]  #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  522.105062][   T31]  #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  522.114787][   T31] 
[  522.117185][   T31] =============================================
[  522.117185][   T31] 
[  522.125705][   T31] NMI backtrace for cpu 0
[  522.125728][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  522.125751][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  522.125764][   T31] Call Trace:
[  522.125773][   T31]  <TASK>
[  522.125781][   T31]  dump_stack_lvl+0xe8/0x150
[  522.125850][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  522.125949][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  522.125985][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[  522.126025][   T31]  sys_info+0x135/0x170
[  522.126056][   T31]  watchdog+0xfd7/0x1030
[  522.126092][   T31]  ? watchdog+0x1c7/0x1030
[  522.126127][   T31]  kthread+0x388/0x470
[  522.126160][   T31]  ? __pfx_watchdog+0x10/0x10
[  522.126185][   T31]  ? __pfx_kthread+0x10/0x10
[  522.126219][   T31]  ret_from_fork+0x514/0xb70
[  522.126272][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  522.126305][   T31]  ? __switch_to+0xc89/0x1420
[  522.126336][   T31]  ? __pfx_kthread+0x10/0x10
[  522.126369][   T31]  ret_from_fork_asm+0x1a/0x30
[  522.126408][   T31]  </TASK>
[  522.126417][   T31] Sending NMI from CPU 0 to CPUs 1:
[  522.237730][    C1] NMI backtrace for cpu 1
[  522.237756][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  522.237777][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  522.237788][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  522.237817][    C1] Code: 3c 7e 02 e9 93 06 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 de 17 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  522.237834][    C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000246
[  522.237851][    C1] RAX: 0000000000168753 RBX: ffffffff819b5450 RCX: 0000000080000001
[  522.237865][    C1] RDX: 0000000000000001 RSI: ffffffff8e22e488 RDI: ffffffff8c4bdd80
[  522.237878][    C1] RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b
[  522.237892][    C1] R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000
[  522.237905][    C1] R13: 1ffff11003c53000 R14: 1ffff92000032fd0 R15: dffffc0000000000
[  522.237919][    C1] FS:  0000000000000000(0000) GS:ffff88812504d000(0000) knlGS:0000000000000000
[  522.237934][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  522.237947][    C1] CR2: 000055b2c400ef40 CR3: 0000000036d54000 CR4: 00000000003526f0
[  522.237963][    C1] Call Trace:
[  522.237979][    C1]  <TASK>
[  522.237986][    C1]  default_idle+0x9/0x20
[  522.238010][    C1]  default_idle_call+0x72/0xb0
[  522.238035][    C1]  do_idle+0x2e0/0x540
[  522.238063][    C1]  ? __pfx_do_idle+0x10/0x10
[  522.238093][    C1]  cpu_startup_entry+0x43/0x60
[  522.238123][    C1]  start_secondary+0x101/0x110
[  522.238149][    C1]  common_startup_64+0x13e/0x157
[  522.238181][    C1]  </TASK>
[  522.400599][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  522.407491][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  522.416621][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  522.426702][   T31] Call Trace:
[  522.430012][   T31]  <TASK>
[  522.432970][   T31]  vpanic+0x56c/0xa60
[  522.436988][   T31]  ? __pfx___schedule+0x10/0x10
[  522.441863][   T31]  ? __pfx_vpanic+0x10/0x10
[  522.446405][   T31]  ? nmi_trigger_cpumask_backtrace+0x207/0x380
[  522.452600][   T31]  panic+0xc5/0xd0
[  522.456371][   T31]  ? __pfx_panic+0x10/0x10
[  522.460815][   T31]  ? preempt_schedule_common+0x82/0xd0
[  522.466323][   T31]  ? preempt_schedule_thunk+0x16/0x40
[  522.471729][   T31]  ? nmi_trigger_cpumask_backtrace+0x314/0x380
[  522.477941][   T31]  ? nmi_trigger_cpumask_backtrace+0x319/0x380
[  522.484135][   T31]  watchdog+0x1030/0x1030
[  522.488503][   T31]  ? watchdog+0x1c7/0x1030
[  522.492947][   T31]  kthread+0x388/0x470
[  522.497047][   T31]  ? __pfx_watchdog+0x10/0x10
[  522.501748][   T31]  ? __pfx_kthread+0x10/0x10
[  522.506443][   T31]  ret_from_fork+0x514/0xb70
[  522.511118][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  522.516375][   T31]  ? __switch_to+0xc89/0x1420
[  522.521084][   T31]  ? __pfx_kthread+0x10/0x10
[  522.525715][   T31]  ret_from_fork_asm+0x1a/0x30
[  522.530519][   T31]  </TASK>
[  522.534184][   T31] Kernel Offset: disabled
[  522.538528][   T31] Rebooting in 86400 seconds..