last executing test programs:

18.599940836s ago: executing program 2 (id=849):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0xd38, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0xc68, 0xffffffff, 0xffffffff, 0xc68, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x8e0, 0x908, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0xd8800000, 0x2}, {0xec, 0x2}, {0x6, 0x3}, {0x80}, {0x6, 0x2}, {0x10000, 0x2}, {0xd}, {0x2}, {0x4, 0x3}, {0x1, 0x1}, {0x4}], [{0x9, 0xfffffffb}, {0x7, 0x7}, {0x2, 0x80000000}, {0x9, 0x1}, {0x799, 0x8001}, {0x0, 0x2}, {0xc2, 0x5}, {0x8, 0x1000}, {0x40, 0x9}, {0xff, 0x81}, {0x636, 0x6}], 0x6}, {[{0x8, 0x2}, {0xe000}, {0xb8b4, 0x1}, {0x3c5f9b87, 0x3}, {0x3, 0x1}, {}, {0x29b5, 0x2}, {0x54a2f77, 0x3}, {0x3, 0x3}, {0x1000, 0x2}, {0x1, 0x2}], [{0x6, 0x5}, {0x5, 0x7}, {0x2, 0x3}, {0x80000000, 0x2}, {0xee84, 0x8000}, {0x9, 0x9}, {0x3800000, 0x3}, {0x800, 0x9}, {0xfffffffa, 0x1}, {0x0, 0x2}, {0x7, 0x7}], 0x4, 0x3}, {[{0x286f, 0x1}, {0x554b, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x5}, {0x9, 0x1}, {0x6000000, 0x3}, {0x400, 0x3}, {0x9, 0x2}, {0x8001, 0x2}, {0xc5bf}], [{0x6, 0x7f}, {0x5, 0xfffffff9}, {0x7, 0x8}, {0xb, 0x3}, {0x8, 0x9}, {0x2}, {0x7}, {0x7, 0x1000}, {0xfff, 0x2e4}, {0x0, 0x400}, {0x0, 0x8}], 0xb, 0x6}, {[{0x2, 0x2}, {0x2, 0x1}, {0x6, 0x3}, {0xfffffffc, 0x1}, {0x4, 0x3}, {0x10001}, {0xca0, 0x2}, {0x10, 0x1}, {0x8, 0x1}, {0x6796, 0x3}, {0x8, 0x1}], [{0x6, 0x6}, {0x1, 0x7}, {0x5, 0x9}, {0xffff, 0x2}, {0xc, 0x5}, {0x51a3, 0x3}, {0x8, 0x5}, {0xfffffff7, 0x9}, {0xd0, 0x1}, {0xfffffff8, 0x8}, {0x7656, 0x2}], 0x7}, {[{0x2, 0x2}, {0x10001}, {0x4eb}, {0x10000, 0x3}, {0x2, 0x2}, {0x3}, {0x81}, {0x4, 0x1}, {0x10001, 0x2}, {0x9, 0x3}, {0x1, 0x2}], [{0x4}, {0x0, 0x400}, {0xd9a8, 0x7}, {0x1000, 0x8f8}, {0x3, 0x10001}, {0x3, 0x7c67}, {0x6, 0x80}, {0xfffffff9, 0x2}, {0xffff, 0x2}, {0x1000, 0x9}, {0x3, 0x2}], 0x1, 0x4}, {[{0xabb918, 0x1}, {0x3, 0x1}, {0x8, 0x2}, {0x9, 0x1}, {0x2}, {0x9, 0x1}, {0x80000000, 0x3}, {0x1, 0x2}, {0x0, 0xc49aafde8229cbf1}, {0x4, 0x1}, {0x3, 0x2}], [{0x8b, 0x9}, {0x6, 0x553}, {0x1, 0xe0}, {0x3, 0x4ad}, {0x0, 0x10001}, {0x1, 0x2}, {0xd1, 0x100}, {0x6, 0x7641}, {0x3, 0xfffffffc}, {0x2, 0x4}, {0x9, 0x2}], 0x1, 0x1}, {[{0x8015, 0x3}, {0x3, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x37b, 0x3}, {0x5}, {0x2, 0x3}, {0x1, 0x2}, {0x7f}, {0x6, 0x2}, {0xfffffff6, 0x2}], [{0x9, 0x7}, {0x8, 0x7}, {0x6, 0x4}, {0x800, 0x80000001}, {0x0, 0x10000}, {0x2, 0x3b58}, {0x4ca7ea08, 0x8001}, {0x0, 0xa9b}, {0x1ff}, {0x5, 0x2}, {0x8, 0x4}], 0xa, 0xb}, {[{0x10001, 0x3}, {0x3}, {0xc, 0x1}, {0x7a, 0x3}, {0x6, 0x1}, {0x80000001, 0x3}, {0x3, 0x2}, {0xa}, {0x401, 0x1}, {0x9}, {0x1, 0x2}], [{0x200, 0x1}, {0x8, 0x1aaa}, {0x706, 0x9}, {0x9, 0x2}, {0x4, 0x7}, {0x5, 0x9}, {0x3}, {0x5, 0xbf789c5e}, {0x8, 0x3}, {0x7, 0x10001}, {0x1}], 0xa, 0x1}, {[{0xc2}, {0x5, 0x1}, {0x200}, {0x8, 0x2}, {0x400}, {0x7ff, 0x3}, {0x10001}, {0xe1a}, {0x9, 0x3}, {0xfffffffc, 0x3}, {0x9}], [{0x10, 0x4}, {0x1, 0x10000}, {0xbf9, 0x6}, {0x4}, {0x101, 0x8}, {0x100, 0x4}, {0x0, 0xb6e}, {0x7f, 0x8}, {0x9, 0x7}, {0xffff, 0x92a}, {0xd, 0x2}], 0x9, 0x2}, {[{0x8, 0x3}, {0x80000001}, {0x9, 0x3}, {0x4, 0x2}, {0x1, 0x3}, {0x4}, {0x4, 0x1}, {0x1, 0x3}, {0xc, 0x3}, {0x101, 0x2}, {0x1}], [{0x4, 0x3}, {0x0, 0x8}, {0xffffe5cb, 0x1}, {0x7f, 0xfffffff4}, {0x40, 0xffffffff}, {0x2, 0x7}, {0x7fff, 0x6}, {0x0, 0x8}, {0xffffff2e, 0x7ff}, {0x40, 0xa}, {0x3, 0x207}], 0x6, 0x2}, {[{0x1ff}, {0x5, 0x2}, {0x10001, 0x1}, {0x2, 0x2}, {0xff, 0x1}, {0x1, 0x1}, {0x800, 0x3}, {0x80000001, 0x2}, {0x1ef6, 0x2}, {0x1, 0x2}, {0xba, 0x3}], [{0x18d, 0x7}, {0x0, 0x2}, {0xdf91, 0x1}, {0xe08, 0x6}, {0x4, 0x7ff}, {0xa64, 0x101}, {0x7, 0x4}, {0x401, 0x2}, {0x7ff}, {0x0, 0xd4}, {0xef}], 0x2, 0x7}]}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x6, 0x1000, 0x4, 0x1, 'syz0\x00', 0x6}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xd98)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x6)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
recvmmsg(r0, &(0x7f0000001080)=[{{&(0x7f0000000dc0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000e40)=""/91, 0x5b}, {&(0x7f0000000ec0)}, {&(0x7f0000000f00)=""/127, 0x7f}], 0x3, &(0x7f0000000fc0)=""/171, 0xab}, 0x67d}], 0x1, 0x2100, &(0x7f00000010c0)={0x77359400})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x9, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x4000800)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300, 0x0, 0x150}, [@IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r10, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a0001000000000000000000802000000002fe00"], 0x1c}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@rand_addr=0x4, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x200000000004, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x4d3, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8, 0x1}}, 0xe8)
getsockname$packet(r1, &(0x7f0000000200), &(0x7f0000000240)=0x14)
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r11, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r9}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xf6da}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)

18.418607831s ago: executing program 4 (id=852):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000001500)=@newlink={0x30, 0x10, 0x301, 0x0, 0x0, {}, [@IFLA_NET_NS_FD={0x8}, @IFLA_NET_NS_PID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4041}, 0x0)
r2 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$sock(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000140)=0x90)
write$tun(r4, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0xfdef)
recvfrom(r2, 0x0, 0x0, 0x22, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4)
r5 = socket(0x10, 0x803, 0x0)
write(r5, &(0x7f0000000340)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000d9bffc)=0x7, 0x4)
sendto(r5, &(0x7f0000000200)="120000001a00e7efa8ff1b3fc329c94a41bc", 0x12, 0x24008000, 0x0, 0x0)
recvmmsg(r5, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10140, 0x0)
r6 = socket$kcm(0x2, 0xa, 0x2)
getsockopt$inet_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000080)=""/32, &(0x7f0000000100)=0x20)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xac, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x68, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xffffffffffffff6c}}}, {0x3c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_META_KEY={0x0, 0x2, 0x1, 0x0, 0x4}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xb}]}}}, {0x14, 0x1, 0x0, 0x1, @reject={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x0, 0x1, 0x1, 0x0, 0x3}, @NFTA_REJECT_ICMP_CODE]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}}, 0x20050800)

18.013539027s ago: executing program 3 (id=858):
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_emit_ethernet(0x82, &(0x7f0000000040)={@multicast, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @remote, @mcast1={0xff, 0x0, '\x00', 0x0}, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0xff80}}]}]}}}}}}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r2, 0x107, 0x14, 0x0, &(0x7f0000000400))
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2880}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6=r1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x48}}, 0x0)

18.012696911s ago: executing program 2 (id=859):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbf8, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r2 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r2, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x12, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @broadcast}, 0x14)

17.827368776s ago: executing program 0 (id=860):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000580)=<r3=>0x0)
sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0xc8, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_SE_APDU={0xa4, 0x19, "19e259dbbaeb67b86b0627588534fb8d9dcdf732828162d0f8ce33e895f191f81f62988a7a25c2db81d5e9b4f7d4dfafe4bda2fbb96c7a78365ccafdda671f37e41eb470eea71b23ff286d04280ff218fb00c2f0b424268a445b1513d6fc62b0b598e201022ab1032e73f0c584a9efba5b630224e98651849ed53907de8fa8a3d42f0c66c4cc42b7d29535449409ec030ade642b9623e696023ab2d4ce5e78c4"}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

17.787992593s ago: executing program 4 (id=861):
r0 = socket(0x400000000010, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0xb, 0x1, 0x400002)
listen(r1, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0}, 0x1, 0x0, 0x0, 0x42000}, 0x20000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003b80)=ANY=[@ANYBLOB="2003000043000701fefffffffcdbdf25027c0000040047800803018004030d8006005a00eb0000001400000000000000000000000000000000000000e102a6800400838004003e8008000f00", @ANYRES32=0x0, @ANYBLOB="c32bf4a76b6d80d958b215d5722da11c3329fb931578bb94bdac6efb3a00428c5b7404768247da10169e3fe65c76e1b51778a24bed80b227bf25b1161d57219ff2c4f158c59eda45c55c14cc646f0bafd0872aed47c21e0619da153ca82efda184309747037183322bb0ed24ed78cbfd93f362177ebdfef8ef35ad495044ba2ec56d1abf6df83a157c705c7b0791d7897d2e89f3f7593402e380100051800800b8800400ef800400cd801f029380c3f5c72cd0fa27fd1c6812ef8e1befc6dd66baf5ffb4010bfed22627401146e7362051466d419863ff937925f7688169ace0cfecc23d527792f6b6a7dfe6814c3ee36fcdb8fe9325ff82d35e2dce7f5147adf53307102b43dd61927df8018decd7cd814e7fe1e20c26be1a6955e1db3230ae1febf44420e698437ea4f25385ab85b2332bc76b3e869874ecb86162ced3d690c075cd44e816e360194eadc984cbdd5e66b0b9c1b7b9db2f73469e75c7eface7954cbd6148c065b49317d807e5ee8f218b482c1a480d4ed62d5e45941e335b9d3c014280352c67d5fc6fd9d898304b8fe2df42dd8add262d407a3b1e1ee8e1e806524e78c2557cf46a858819aaa7764e598cca6810d40c23597951909e8ad7054b916a31d649da23375477de43bf7dd115ea89729088681f0de11c79f4045d945728135678d570382ed4370e0bf9a99d567c05d20b0bfb2fc53c2e4f216c0af47c0e04002a80c7cf100e376fb37d2f0d5a2f57e36a36d627c64421fe11e61a0b012c0fa5905bd7b65b9439a2969a8e5ee440e3f43c38a813a5859d4b22fddfd850b4bc30152976fa710e8ab96100ecee9042eaa9d6983009c3103f263c67b3063bafadfaac3fbb9558bb194d32cfef71c926772ccf28740d1e53581e16fed2dd1ba34f7f6785298a94215ee89cc2c228cd0bbe451348090f36dde427c3fe307a08000200000000", @ANYRES32, @ANYBLOB="14000a000000000000000000000000000000000100000000"], 0x320}}, 0xc000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @empty}, 0x2, 0x2, 0x0, 0xfffffffc}}, 0x2e)
ioctl$PPPIOCGMRU(r6, 0x80047453, 0x0)
r7 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r7, &(0x7f0000000040)='FROZEN\x00', 0x7)
mkdirat$cgroup(r3, &(0x7f00000000c0)='syz1\x00', 0x1ff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
sendmsg$NL80211_CMD_GET_SCAN(r8, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="00030465000010ff04002520edd3d5f2ae0fa2f73c7eae22914b1c5539faec3c9275751a57d95ee8b4a05e43a4bc5aba605a3af1368889fb8fe4321cd7e0e0"], 0x14}, 0x1, 0x0, 0x0, 0x24000084}, 0x4)
r10 = socket(0x1f, 0x1, 0xfffffffc)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000480)=<r11=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000001fc0)={<r14=>0x0}, &(0x7f0000002000)=0xc)
sendmmsg$unix(r12, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r14, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001400000000000000010000008725c9fc8fa67ba734e0f101000000", @ANYRES32=r12, @ANYBLOB='\x00\x00\x00\x00'], 0x38}}], 0x2, 0x801)
sendmsg$nl_generic(r10, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x180, 0x26, 0x10, 0x70bd2c, 0x25dfdbfe, {0x91}, [@nested={0x16b, 0x11b, 0x0, 0x1, [@nested={0x4, 0x75}, @typed={0x8, 0xd3, 0x0, 0x0, @uid=r11}, @generic="70fc36a24b53105e3ddf4503222a218a2831c8fb4eadb967e87d1ed1b54f73d11b622867a78d164c7bb22d47d16228d577c51da45a089a8c2ee8f91d6c29378a8be1ebe119f96d4e0007d7a1ac0537e2059c66fcdb263a9217b892224e37e406c655d1eb7f05e0c8b427a7d06d96e68b499712f237c68d8a8d0d9ce1b9db45c32f18a4089d2092adae36942e759d0af2f35281d500706826ccaa963a04daa538847754f9d3543d87ad8923be403896e62ad1d4fdb16a", @typed={0x8, 0x91, 0x0, 0x0, @pid=r14}, @typed={0x8, 0x5d, 0x0, 0x0, @fd=r8}, @typed={0x14, 0x8a, 0x0, 0x0, @str=']-[]bU$^#%^}{/#\x00'}, @generic="b6deee5737a444ec472bd1e8fc493386f60f166850031bd1b058006e82764844bfcc8e657a834f6e2e", @typed={0x57, 0x1e, 0x0, 0x0, @binary="f33e170c4687e5c92eabe8fa26b95f08acdcf569a040c3cbb6bd124a24a5222db7bb0f780eb4f274702d96c8064a1cbb35b07aca06b71ed0d977151848b2ae64189771baa5b600ae14387d0fa17cc19fb2545b"}]}]}, 0x180}, 0x1, 0x0, 0x0, 0xc0080}, 0x48091)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r10)

17.638056308s ago: executing program 2 (id=863):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000000), 0x4)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000029591ab4115d888b18b7285399c0f71040632598b1d99663c24a1f975205bfb2b147276353942112d8fd702ccaf328c460f8b93f8b445cd7fcc972c0aa7a3dd9b85ebf7464940d3bc8e6cc7ae85ab81c5177097041b89b057ed20c875d0d88503105c39288a83e6a987a28fae8d27abcbf130956769d6a62274f8bcc02", @ANYRES16=r2, @ANYBLOB="030328bd7000000000000a00000008000300", @ANYRES32=r3], 0x1c}}, 0x0)

17.503897154s ago: executing program 3 (id=864):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="921fd07f", @ANYRES16=r1, @ANYBLOB="010029bd7000000000000200000008000300", @ANYRESOCT=r1, @ANYBLOB="0c009900410000002e000800080026009a030000080027005a"], 0x38}}, 0x0)

17.406720896s ago: executing program 1 (id=865):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.kill\x00', 0x275a, 0x0)

17.406096359s ago: executing program 0 (id=866):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"83fdc77fabb5808cd1d6e859602fb85b", <r1=>0x0, 0x0, {0x3, 0x7fffffff}, {0x6067febe, 0x6}, 0x80000001, [0x7ee, 0x2, 0x8, 0x0, 0xfff, 0xa9, 0x6, 0x9, 0x1, 0x140000000000, 0x2, 0x0, 0x1, 0x9, 0x1, 0x9]})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000240)={"4da3d7656e9d89fc6d0a6ae6b8bda8ee", 0x0, <r2=>0x0, {0x7ff}, {0x9, 0x5c}, 0x833, [0x4, 0x4, 0x6919, 0x1000, 0x1000, 0x46dc, 0x6, 0xf, 0x6, 0x5, 0x0, 0x7, 0x6, 0x6, 0x8000000000000001, 0xfffffffffffffff9]})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000340)={"35ad90e2d001476575b7381f4ee18720", r1, r2, {0x50ce, 0x3}, {0x3, 0x8}, 0x7, [0x1, 0x7, 0x7, 0x80000000, 0x0, 0xffffffffffffff00, 0x8b, 0xfffffffffffffff7, 0x4e, 0x3, 0xf6e, 0x4, 0x9, 0x3, 0x7b, 0x1]})
sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x34, 0x6, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0x800)
syz_emit_ethernet(0x6e, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x38, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xe, 0xc2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "7232407c80067615774fdbb46eb86cc8"}, @generic={0x0, 0x5, "111fad"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x40, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xc}]}}}}}}}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3, 0x0, 0x0, 0x81}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast1, 0x0, 0x6d}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x23c}}, 0x0)
r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f0000000700)={@none, 0x800, 0x0, 0x8, 0x800, 0xa66, "dfe3085f8737ddf61809fbc9090824bbb483ac0d658de46769a4d49c014d5dc5863630d19811d0f78e298d88bea0c4937638ec7effcaa8aad6c11aa62c13e4942b7c89c16d013e6e698b8e97834642a813452c0adfe715c5caa9f3b1cac66ec5baf15ada92598fd1eb573784ddc0ed65ae9c0eedaabc56a7e7bc529adffd4bc2"})
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000000900)={{<r5=>r0, &(0x7f0000000000)='\xff\xff\xff\xff\xff\xff', 0x4100, &(0x7f00000001c0)={@align=0x68, {0x3df4, 0x1, 0x5, 0x1000}}, 0x80000000, &(0x7f0000000440), &(0x7f00000007c0)=0x1}, {[0x6, 0x4, 0x6, 0x2]}, 0x7dc, 0xd6, &(0x7f0000000800)=""/214})
write$nci(r5, &(0x7f0000000980)=@NCI_OP_NFCEE_DISCOVER_RSP={0x2, 0x0, 0x2, 0x0, 0x3, {0x1, 0xa8}}, 0x5)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"83fdc77fabb5808cd1d6e859602fb85b", 0x0, 0x0, {0x3, 0x7fffffff}, {0x6067febe, 0x6}, 0x80000001, [0x7ee, 0x2, 0x8, 0x0, 0xfff, 0xa9, 0x6, 0x9, 0x1, 0x140000000000, 0x2, 0x0, 0x1, 0x9, 0x1, 0x9]}) (async)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000240)={"4da3d7656e9d89fc6d0a6ae6b8bda8ee", 0x0, 0x0, {0x7ff}, {0x9, 0x5c}, 0x833, [0x4, 0x4, 0x6919, 0x1000, 0x1000, 0x46dc, 0x6, 0xf, 0x6, 0x5, 0x0, 0x7, 0x6, 0x6, 0x8000000000000001, 0xfffffffffffffff9]}) (async)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000340)={"35ad90e2d001476575b7381f4ee18720", r1, r2, {0x50ce, 0x3}, {0x3, 0x8}, 0x7, [0x1, 0x7, 0x7, 0x80000000, 0x0, 0xffffffffffffff00, 0x8b, 0xfffffffffffffff7, 0x4e, 0x3, 0xf6e, 0x4, 0x9, 0x3, 0x7b, 0x1]}) (async)
sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x34, 0x6, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) (async)
syz_emit_ethernet(0x6e, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x38, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xe, 0xc2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "7232407c80067615774fdbb46eb86cc8"}, @generic={0x0, 0x5, "111fad"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x40, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xc}]}}}}}}}}, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3, 0x0, 0x0, 0x81}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast1, 0x0, 0x6d}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x23c}}, 0x0) (async)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f0000000700)={@none, 0x800, 0x0, 0x8, 0x800, 0xa66, "dfe3085f8737ddf61809fbc9090824bbb483ac0d658de46769a4d49c014d5dc5863630d19811d0f78e298d88bea0c4937638ec7effcaa8aad6c11aa62c13e4942b7c89c16d013e6e698b8e97834642a813452c0adfe715c5caa9f3b1cac66ec5baf15ada92598fd1eb573784ddc0ed65ae9c0eedaabc56a7e7bc529adffd4bc2"}) (async)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000000900)={{r0, &(0x7f0000000000)='\xff\xff\xff\xff\xff\xff', 0x4100, &(0x7f00000001c0)={@align=0x68, {0x3df4, 0x1, 0x5, 0x1000}}, 0x80000000, &(0x7f0000000440), &(0x7f00000007c0)=0x1}, {[0x6, 0x4, 0x6, 0x2]}, 0x7dc, 0xd6, &(0x7f0000000800)=""/214}) (async)
write$nci(r5, &(0x7f0000000980)=@NCI_OP_NFCEE_DISCOVER_RSP={0x2, 0x0, 0x2, 0x0, 0x3, {0x1, 0xa8}}, 0x5) (async)

17.327425963s ago: executing program 4 (id=867):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xb6}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4)
r1 = socket$pppoe(0x18, 0x1, 0x0)
close(r1)
recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x2000)
ioctl$TUNSETNOCSUM(r2, 0xc040ff0b, 0x0)
sendmsg$SOCK_DESTROY(r2, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x344}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000000)

17.316037122s ago: executing program 3 (id=868):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x80, 0x1, 0xfff, 0x8001, {{0x1b, 0x4, 0x0, 0x39, 0x6c, 0x64, 0x0, 0xf, 0x6f, 0x0, @local, @rand_addr=0x64010101, {[@end, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x3c, 0x5f, 0x1, 0x4, [{@broadcast, 0x2}, {@private=0xa010102, 0x5}, {@rand_addr=0x64010100, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10001}, {@rand_addr=0x64010102}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0xfffffe01}, {@rand_addr=0x64010100, 0x80}]}, @rr={0x7, 0x17, 0x85, [@private=0xa010101, @empty, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x24}]}]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000280)={'sit0\x00', <r1=>0x0, 0x80, 0x1, 0xfff, 0x8001, {{0x1b, 0x4, 0x0, 0x39, 0x6c, 0x64, 0x0, 0xf, 0x6f, 0x0, @local, @rand_addr=0x64010101, {[@end, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x3c, 0x5f, 0x1, 0x4, [{@broadcast, 0x2}, {@private=0xa010102, 0x5}, {@rand_addr=0x64010100, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10001}, {@rand_addr=0x64010102}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0xfffffe01}, {@rand_addr=0x64010100, 0x80}]}, @rr={0x7, 0x17, 0x85, [@private=0xa010101, @empty, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x24}]}]}}}}})
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@getsa={0x94, 0x12, 0x1, 0x70bd26, 0x25dfdbfd, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x8, 0xff}, [@encap={0x1c, 0x4, {0x1, 0x4e22, 0x4e24, @in=@rand_addr=0x64010101}}, @offload={0xc, 0x1c, {r1, 0x2}}, @replay_esn_val={0x38, 0x17, {0x7, 0x70bd2d, 0x70bd2d, 0x70bd2b, 0x70bd2a, 0x5, [0x3, 0x5, 0x0, 0x8, 0x0, 0x2, 0x9]}}, @lastused={0xc, 0xf, 0x8}]}, 0x94}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)

17.21549495s ago: executing program 1 (id=869):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$igmp(0x2, 0x3, 0x2)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001e00010400000000000000000a0000003f00000000000000080001"], 0x24}}, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)={0x14, 0x17, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x400a0}, 0x0)

17.211028066s ago: executing program 2 (id=870):
r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) (async)
r2 = socket$inet(0x2, 0x2, 0x0)
bind$inet(r2, 0x0, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x9, 0x0, 0xfffffffd, 0xfffffffd}, 0x10) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r2}, 0x20) (async, rerun: 32)
socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 32)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r2, 0x1}, 0x20) (async, rerun: 32)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001c80)=ANY=[@ANYBLOB="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"], 0x12ac}, 0x1, 0x0, 0x0, 0x20044035}, 0x0) (async, rerun: 32)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20881, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r3, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x3, 0x202, 0x14, 0x3}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x5, 0x2c, 0xfffc, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@ra={0x94, 0x4}]}}, {{0x8100, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x3a)
syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a600006c0000000000000000000000ffff0a010100fe8000000000000000000000000000aabd9c1807c66c1ee2ff2749e73f4ab7e5d7751f90e0768853fa3fbe9820a523f9382a3eb2e4bf17ae01d8c83f8238fd517cb68665e7eb8521b55ea7e7fe38a82c1ab12c767335bd43c7"], 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000140)=ANY=[@ANYRES8=r1, @ANYRESHEX=r3, @ANYRES32=r3], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x51, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) (async, rerun: 32)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000100)={r0, &(0x7f0000000000)='+]:\xc0\x00', 0x0, &(0x7f0000000040)={@_ha_fsid={[0x3, 0x2]}, {0x1, 0x3, 0x7, 0x8f50}}, 0x9cf40000, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x7}) (rerun: 32)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async)
r6 = socket$inet6(0xa, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48)
r8 = socket$kcm(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r8}, 0x20) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000040000100fcff0700040000000100000004004880180001801400108004000b8008000100ac1414bb04004e00080002"], 0x38}, 0x1, 0x0, 0x0, 0x4008801}, 0x4008094) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, 0x0) (async, rerun: 64)
setsockopt$inet6_buf(r6, 0x29, 0x3e, 0x0, 0x0) (rerun: 64)

17.167757367s ago: executing program 0 (id=871):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @remote}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x40}}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, <r1=>0xffffffffffffffff}, 0x4)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xffff, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x155, 0x155, 0x4, [@union={0xd, 0x2, 0x0, 0x5, 0x0, 0x3, [{0x1, 0x0, 0x7}, {0xc, 0x2, 0x2}]}, @func={0x10, 0x0, 0x0, 0xc, 0x4}, @ptr={0xd}, @volatile={0x4, 0x0, 0x0, 0x9, 0x2}, @float={0xa, 0x0, 0x0, 0x10, 0x4}, @datasec={0x5, 0x9, 0x0, 0xf, 0x2, [{0x2, 0x1, 0x10000}, {0x1, 0xe}, {0x3, 0x1, 0x80000001}, {0x2, 0x2, 0xd}, {0x5, 0x7, 0x6}, {0x4, 0x9, 0x3d43139f}, {0x1, 0xfffffff9, 0x101}, {0x1, 0x6, 0x3}, {0x5, 0xe, 0x7690}], "0486"}, @func={0x7, 0x0, 0x0, 0xc, 0x2}, @datasec={0x6, 0x8, 0x0, 0xf, 0x3, [{0x2, 0x9d, 0x8}, {0x3, 0x10000, 0x1}, {0x3, 0x3, 0x4}, {0x1, 0x800, 0x3}, {0x4, 0x1, 0x80000000}, {0x3, 0xfffffffc, 0x8}, {0x4, 0x9, 0xa}, {0x3, 0xb9e, 0xa}], "7a60f9"}, @volatile={0xf, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000440)=""/114, 0x174, 0x72, 0x0, 0x8, 0x10000}, 0x28)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0xda, <r6=>0x0}, 0x8)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0x1, <r7=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, [@map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f00000000c0)='syzkaller\x00', 0x80, 0xf5, &(0x7f00000001c0)=""/245, 0x41000, 0x10, '\x00', r4, 0x1b, r5, 0x8, &(0x7f0000000540)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xc, 0x3, 0x6}, 0x10, r6, 0x0, 0x2, &(0x7f0000000640)=[r7, 0x1], &(0x7f0000000680)=[{0x0, 0x1, 0x0, 0x4}, {0x2, 0x3, 0x0, 0x7}], 0x10, 0x200}, 0x94)

17.110637019s ago: executing program 3 (id=872):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r3, 0x13, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="87f1ee1930b7"}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) (async, rerun: 32)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (rerun: 32)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x20, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0xc010}, 0x0)

17.11022835s ago: executing program 1 (id=873):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbf8, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r2 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r2, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x12, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @broadcast}, 0x14)

17.061658415s ago: executing program 2 (id=874):
r0 = socket$packet(0x11, 0x3, 0x300) (async)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0xa413, @mcast1, 0x2889}, 0x1c) (async)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000000414010027bd7000fbdbdf25080001000000000008000300"], 0x30}}, 0x0) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x8, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r9=>0x0})
sendto$packet(r8, &(0x7f00000002c0)="05032200d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000240)={0x11, 0x86dd, r9, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0xb881}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x27}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24048007}, 0x4040844) (async)
sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @local}, 0x14)

16.919019603s ago: executing program 3 (id=875):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xfff, 0x0, 0x0, 0xffffffff}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0xc, 0x7, 0x0, 0x0, @u64}]}, 0x24}}, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x18, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000b8000100000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007baaf8ff00000000b6090000e4b00000dbaaf8ff07000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f0000001140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x18, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000b8000100000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007baaf8ff00000000b6090000e4b00000dbaaf8ff07000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f0000001140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)

16.78679846s ago: executing program 1 (id=876):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x48, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@typed={0x4, 0xd7}, @nested={0x2c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0xc, 0x15, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x19, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x19}}]}, @nested={0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8010743f, 0x0)

16.785572174s ago: executing program 2 (id=877):
r0 = socket(0x400000000010, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0xb, 0x1, 0x400002)
listen(r1, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0}, 0x1, 0x0, 0x0, 0x42000}, 0x20000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003b80)=ANY=[@ANYBLOB="2003000043000701fefffffffcdbdf25027c0000040047800803018004030d8006005a00eb0000001400000000000000000000000000000000000000e102a6800400838004003e8008000f00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="14000a000000000000000000000000000000000100000000"], 0x320}}, 0xc000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @empty}, 0x2, 0x2, 0x0, 0xfffffffc}}, 0x2e)
ioctl$PPPIOCGMRU(r6, 0x80047453, 0x0)
r7 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r7, &(0x7f0000000040)='FROZEN\x00', 0x7)
mkdirat$cgroup(r3, &(0x7f00000000c0)='syz1\x00', 0x1ff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
sendmsg$NL80211_CMD_GET_SCAN(r8, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="00030465000010ff04002520edd3d5f2ae0fa2f73c7eae22914b1c5539faec3c9275751a57d95ee8b4a05e43a4bc5aba605a3af1368889fb8fe4321cd7e0e0"], 0x14}, 0x1, 0x0, 0x0, 0x24000084}, 0x4)
r10 = socket(0x1f, 0x1, 0xfffffffc)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000480)=<r11=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000001fc0)={<r14=>0x0}, &(0x7f0000002000)=0xc)
sendmmsg$unix(r12, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r14, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001400000000000000010000008725c9fc8fa67ba734e0f101000000", @ANYRES32=r12, @ANYBLOB='\x00\x00\x00\x00'], 0x38}}], 0x2, 0x801)
sendmsg$nl_generic(r10, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x1a0, 0x26, 0x10, 0x70bd2c, 0x25dfdbfe, {0x91}, [@nested={0x189, 0x11b, 0x0, 0x1, [@nested={0x4, 0x75}, @typed={0x8, 0xd3, 0x0, 0x0, @uid=r11}, @generic="70fc36a24b53105e3ddf4503222a218a2831c8fb4eadb967e87d1ed1b54f73d11b622867a78d164c7bb22d47d16228d577c51da45a089a8c2ee8f91d6c29378a8be1ebe119f96d4e0007d7a1ac0537e2059c66fcdb263a9217b892224e37e406c655d1eb7f05e0c8b427a7d06d96e68b499712f237c68d8a8d0d9ce1b9db45c32f18a4089d2092adae36942e759d0af2f35281d500706826ccaa963a04daa538847754f9d3543d87ad8923be403896e62ad1d4fdb16ace39cb6cd9368e73ffbe15fee1e4ecc997f84c9e67eb265f25c502bd3bec", @typed={0x8, 0x91, 0x0, 0x0, @pid=r14}, @typed={0x8, 0x5d, 0x0, 0x0, @fd=r8}, @typed={0x14, 0x8a, 0x0, 0x0, @str=']-[]bU$^#%^}{/#\x00'}, @generic="b6deee5737a444ec472bd1e8fc493386f60f166850031bd1b058006e82764844bfcc8e657a834f6e2e", @typed={0x57, 0x1e, 0x0, 0x0, @binary="f33e170c4687e5c92eabe8fa26b95f08acdcf569a040c3cbb6bd124a24a5222db7bb0f780eb4f274702d96c8064a1cbb35b07aca06b71ed0d977151848b2ae64189771baa5b600ae14387d0fa17cc19fb2545b"}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0xc0080}, 0x48091)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r10)

16.776356444s ago: executing program 3 (id=878):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf25030000000c00060004000000000000000c00040001000000000000000c00020002000000000000000800010000000000640007800c00018008000100", @ANYRES16], 0xc0}, 0x1, 0x0, 0x0, 0x66393c82b5350394}, 0x20000804)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010028bd7000fedbdf2501000000080001005d7f66c949eb9956bbd9144c3a190863d9285655362f2ddb482728bc2bfd37b16d5c4797fc52313ae6bcb5adfdff1dc098a9b077d1ab4fa52792c6daa5ef71cbcce0041c9a698ccc8293258be28a1890451fa4b3291257d663b0f55190a858de3183ef17009a114bb751024f3952dde9c5a97b4db3", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x900, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0x9}, 0x28)
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001a006da800000000000000001c6f"], 0x24}}, 0x0)

16.776006199s ago: executing program 0 (id=879):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(khazad)\x00'}, 0x58)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r2, &(0x7f0000000240)="11", 0x1, 0x40480d0, 0x0, 0x0)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x46212}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}]}}}, @IFLA_MTU={0x8, 0x4, 0x40000500}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0)
epoll_create(0x101)
syz_emit_ethernet(0x3b6, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x4, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483be298af1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303"}, {0x21, 0x7, "b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x68, 0x30, 0x10b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800000}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0xfffa}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, 0x40, 0x107, 0x70bd2b, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x10, 0x0, 0x1, [@typed={0x14, 0xd, 0x0, 0x0, @ipv6=@empty}]}]}, @typed={0x4, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000140)=0x7, 0x4)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000204000/0x1000)=nil, 0x1000, 0x1000000, 0x12, 0xffffffffffffffff, 0x9fae0000)
unshare(0x8000400)

16.604599514s ago: executing program 1 (id=880):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, <r6=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r6}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b64087c6030"]}]}, 0x24}], 0x1}, 0x84) (async)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000500)=0xe8) (async)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000cc0)=<r8=>0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000380)={<r10=>0x0, <r11=>0x0, <r12=>0x0}, &(0x7f00000003c0)=0xc)
r13 = syz_open_procfs$namespace(r10, &(0x7f0000001780)='ns/ipc\x00') (async)
r14 = getpid()
sendmmsg$unix(r9, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r10, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r10, 0x0, r12}}}, @cred={{0x1c, 0x1, 0x2, {r14, r11}}}, @rights={{0x18, 0x1, 0x1, [r13, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) (async)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000d00)={0x0, 0x0, <r15=>0x0}, &(0x7f0000000d40)=0xc) (async)
r16 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000d80), 0x20002, 0x0)
r17 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r17, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x7}, 0x6)
r18 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
r19 = getpid() (async)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000dc0)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r20=>0x0}}, {{@in6=@private0}, 0x0, @in6=@empty}}, &(0x7f0000000ec0)=0xe8)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000f00)={0x0, 0x0, <r21=>0x0}, &(0x7f0000000f40)=0xc)
sendmsg$netlink(r0, &(0x7f0000001040)={&(0x7f0000000200)=@kern={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)=[{&(0x7f0000000580)={0x700, 0x1b, 0x8, 0x70bd27, 0x25dfdbfc, "", [@typed={0x8, 0x33, 0x0, 0x0, @u32=0x6}, @generic="d43e26569f7d0a04bbef3bc072fe68b8baf3679e8565b368218396febbad151f6377002de9be7a3e810601a7deb8d5fdd37f59bebb17d1a6c1e433814f484590adb60878914566b79e7956c0", @nested={0x1e6, 0xe9, 0x0, 0x1, [@typed={0x102, 0x51, 0x0, 0x0, @binary="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"}, @generic="fb619c998fcafcc42c45f9f1d49c2d28c46c03d97c4fe25061e02f4095185670faa0e62e39d251c7e400db96beaa28bbe579fea733c28d1b0c0b40114169ffc09810e230cdd3ab8c98c420418b9fc398c7e2e9f568b20b330ade44adb85222a17d569868c7c872319c31c84c990395ca0c0e0d6269b1e4f32444ca7c0e5fddf13259882a767165fe8fc76c2bee8cbc32a83be30005c973be8422e70bb61a0b01389c7ad0ba881587766f320f4b3be8a7304c0c51622389915c17d9c88a82cbff1501", @nested={0x4, 0xba}, @typed={0x8, 0xe3, 0x0, 0x0, @uid=r6}, @nested={0x4, 0x5}, @nested={0x4, 0x3d}, @typed={0x8, 0x6e, 0x0, 0x0, @str='htb\x00'}]}, @generic="0c3b92f967e144bc05426f54a09701172cc9133f54f1c4ed45d6a2dd5f2eea36d93369dd4ba692c5c367f3c79f7233c87cd18731be61277d8dfedefe8ade2fba650f47a0120a7e2561ad455852f92129c530d348f145dd771b71054a84d64431ed64dcd93f0b4418a5080914eb56e021e0d817dce68b73389cc5ce1869b28f2f04250b9c79f8ee645a3f59119e2afeed2f912597ea06faa2e7ba2e1db7dabc43749c1eb9c89291bdf580d2afc45add7b095db6dd293de2ae094570478380670e7109725993e4ec71c1f583162334031814e3c2a6cb1c4da8f65c5507054907cd2d2d1a40d179", @nested={0xa0, 0x55, 0x0, 0x1, [@generic="1abcc37d96f9b1fd58c73bfa1f5d046c479c810fb0d55bfd5c0d930e30a1bfa8d52314ab8d956fc96afe23ced406c0a0168db58f69ba381ab879dea85fcadf466d6050be96b8d3f91840d40875dce2528a2089d0d4f909af49466fd0f43b0dd1d89c54ac7aae98fbf1f83206c72e17dbeb22d7667c31b5bb86501e52dc82524cd5aaf49a2248925ca32b93507699b22cc3d5c290", @typed={0x8, 0x123, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}]}, @generic="1cfcfe23db4315159d60cbae5eb8541e2acd4d6558a64efdbe3a48d8e392fd79b2536e9149f40a4e1193ad3e67227176dba87ab9014418aaadb8ed5ad99eba497392e49a756e8e90037d1aa5be49eeeef4a45c9489a04978875b22b536e80586085616fa6b181e942f994c4a4cd2eef8d0f2898374b3819af1816a8ec260d43f18250ac01dee5fb73280fe6201ab33d32ed1e8df58fe2f30a20ea79fae5a067e3d56397a73f1043a01e2e6beaa44c383f9fdf14f799f2f7724297d009319bd55dc2fce0738b9e110b1bc1ded9c89fa4a3390415730dde7c4ab53d392", @generic="552c10eb30977c3dba5d893c59fb165e5ccd4720e4ea25fd401edf7a8e9312a5c3b3b2fbe0821bedecccfa0d8eb1499542a24ccf461521208c31", @typed={0x8, 0xfa, 0x0, 0x0, @uid=r7}, @nested={0x1dd, 0x34, 0x0, 0x1, [@generic="039ca77904b77c857b693177beac375d9805316390c2155c1b31066e072dd17a91c58090650df324a9facc9d740a93cecd39fc69da64e217589ff35ce70481b1f664ec54fbe7b08b3a3b07ad8ed605684bb201005bec29b1d2e3eaf8a9f420de2e31b6acceea5336376e9b34b2df3e85e63ee2e0fe6a38ecfbaedf4d7f26da0d2628edf79cd8a42b4c656fa6218687ebc057cf50f43057e4e66d517ee36e8c0cf95d9a200b565990e83bd47231835599cf1ed438b09aab0473f6d23a278ec4d403e299fec183d37dd6c7679a65f6fe87e4505c71b928bb69ec879dbee6caec665187d9085edb7fd199fe0caf3523e787578ae9b80cb62e203b", @generic="7ae0963cb0675454bb70c485f9657f443a4b627312e0b9a4772893c09a910691426c0befb1b630feb1f51bbbaa19f041b6df1064770a77d4fef756e72ff70c604bb371b53f4315a5e49466272f024dab4a41de206c3fd87f38965d1f1aca3f85c734954f563aa6a55cef76c9fb4a6a461a5e2b08e3b5390dc2c8566c54cb9d3580fd2c1073de0fd46981deec6d95a061b70ee83ae1664012025cf5928b0497f0a48487331f9385a139d3895613160f5f26821de612789af05985ca4b95223cb659ef2e995d5218d12aff134b33ea1afbb72721de9158bec9cdc8bc8d5fe67924"]}, @generic="83ecb211589850b032f19279e6a1a1a6b3e9f48e72fb0f535c96ec8e1ffee6b35831d9f0a1531e7b83275a0874a8"]}, 0x700}], 0x1, &(0x7f0000000f80)=[@cred={{0x1c, 0x1, 0x2, {r8, r11, r15}}}, @rights={{0x38, 0x1, 0x1, [r2, r4, r0, r0, r16, 0xffffffffffffffff, r17, r1, r4, r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r2, 0xffffffffffffffff, r1, r18, r1]}}, @cred={{0x1c, 0x1, 0x2, {r19, r20, r21}}}], 0xa0, 0x4000}, 0x40080)
r22 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r4)
sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r22, @ANYBLOB="0100fb19ffff0000000001000000000000000c410000004c0014"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0x30, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

16.454782768s ago: executing program 1 (id=881):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) (async)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="bc1400002e00090027bd70000000000005000000a51411804b8a9f750c996372b5b14b3a91a3ff88cca5dd0d428ddfdd02a37c0b93bcdade"], 0x14bc}, 0x1, 0x0, 0x0, 0x400a0}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async)
bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async)
connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}]}}}]}, 0x3c}}, 0x404c840)

16.350081864s ago: executing program 4 (id=882):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x60, 0x2c, 0xf3f, 0x70fc2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x86, 0x1}, {0x5, 0x7}}}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000)
mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0xffffe000)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r3, 0x100000000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
socket(0x400000000010, 0x2, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x60, 0x2c, 0xf3f, 0x70fc2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x86, 0x1}, {0x5, 0x7}}}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) (async)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) (async)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000) (async)
mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0xffffe000) (async)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r3, 0x100000000) (async)

16.150951739s ago: executing program 4 (id=883):
r0 = socket$inet(0x2, 0x3, 0x9)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x8, @broadcast}, {0x1, @broadcast}, 0x4a, {0x2, 0x102, @initdev={0xac, 0x1e, 0x2, 0x0}}, 'ip6gretap0\x00'}) (async)
socket$packet(0x11, 0x2, 0x300) (async)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) (async)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0)
pipe(&(0x7f0000002740))
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e23, @broadcast}, {0x306, @multicast}, 0xc, {0x2, 0x4e22, @loopback}, 'macsec0\x00'})

16.02475271s ago: executing program 4 (id=884):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f00000002c0))
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001fc0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002000)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x80d4) (async)
sendmsg$nl_route(r0, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="c8000000190020002dbd7000fddbdf250a808009fc01ff02000c000006001500000000000800100000020000080010000900000008001900", @ANYRES32, @ANYBLOB="8b000880db3160aa31fc87f6b219bb81b6eea11d7cf2791ac0170ba30add7ea4c3518ea858a2d7899b41f328f76cb17920e37ad0a72d7a179da98c47b7e10142d7848dbe1bc46f4b31ec28602a965b18ba31dd131ec43739e5a908ca84dd189fe682cc597408d347238235dcebcb49b676dbf31ebc737e844af18e94caa577440023a8635b5f11f10a37db00"], 0xc8}, 0x1, 0x0, 0x0, 0x40080}, 0xc000) (async)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmmsg(r6, &(0x7f0000006100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000001) (async)
connect$x25(r5, &(0x7f0000000140)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) (async, rerun: 64)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x8c}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}}, 0x0) (rerun: 64)

15.890300913s ago: executing program 0 (id=885):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x10}}, 0xc) (async)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000002c0)={0x4, {{0x2, 0x4e22, @multicast2}}}, 0x88) (async)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000380)={0x3, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e20, @rand_addr=0x64010100}}}, 0x108) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000000c0)=<r3=>0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000240)=r3)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x10448) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/137, &(0x7f0000000200)=0x89)

15.814736768s ago: executing program 0 (id=886):
r0 = socket$netlink(0x10, 0x3, 0x14)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
listen(r1, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r2=>0x0})
r3 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0)
sendto$packet(r3, &(0x7f00000000c0)="a4619f1a4b3b920f73cadb71d496730fcde79b98a0a3e27125270419e687ec21ff6531abc75a179a1deb6d022fe2fd872eb57b3ee9a24dbf2581be8b9cd5c5977ebeaeee4370178ad139649c2d8a5d63ec32915d37db468b58efb6a4debe4253ba4764821f7704fb0e4f74b8592a93caf4ad779185ec9ee9d89d447c0e4f45aa185a7a83439cd7f4961f9e48c84e9fbe0442c3178e5a8999a0db67d81f99fbe76e71d2f29fabe8ac11dfbe00c3d7a4063d3320aeeb23de4d1e4372f8dc2bc268299724af9a6c101df1552932b2052508a19b8397d3f94e7aa69fd76756d3db4e58", 0xe1, 0x10, &(0x7f00000001c0)={0x11, 0x3, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x8, [@float={0x10, 0x0, 0x0, 0x10, 0x2}, @enum64={0x8, 0x4, 0x0, 0x13, 0x1, 0x8, [{0x1, 0x8, 0xb}, {0x1, 0x4, 0x200}, {0xb, 0xfffffffc}, {0x5, 0x7, 0x3}]}]}, {0x0, [0x5f, 0x2e, 0x0, 0x0, 0x2e, 0x0]}}, &(0x7f0000000340)=""/199, 0x68, 0xc7, 0x1, 0x1000}, 0x28)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x8, <r5=>0x0}, 0x8)
r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file0\x00', 0x0, 0x8}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x2, &(0x7f0000000200)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x3}], &(0x7f0000000240)='syzkaller\x00', 0x10000, 0x11, &(0x7f0000000280)=""/17, 0x41000, 0x5d, '\x00', 0x0, @sk_msg=0x7, r4, 0x8, &(0x7f0000000480)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0xc, 0x0, 0x9}, 0x10, r5, 0xffffffffffffffff, 0x7, &(0x7f00000005c0)=[r6], &(0x7f0000000600)=[{0x0, 0x5, 0x6, 0xb}, {0x3, 0x5, 0x9, 0x7}, {0x1, 0x1, 0x7, 0x5}, {0x3, 0x5, 0x2, 0x1}, {0x5, 0x3, 0xf, 0x9}, {0x4, 0x5, 0x7, 0x5}, {0x3, 0x3, 0x10, 0x1}], 0x10, 0x1}, 0x94)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000740)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x1, 0x3, 0x1, 0x8, 0x4}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000780)={'wlan1\x00', <r8=>0x0})
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(r9, 0x0, 0x81, &(0x7f0000001800)={'nat\x00', 0x0, 0x4, 0x1000, [0x0, 0x7, 0x3, 0x9, 0x5, 0x7], 0x3, &(0x7f00000007c0)=[{}, {}, {}], &(0x7f0000000800)=""/4096}, &(0x7f0000001880)=0x78)
sendmsg$can_bcm(r1, &(0x7f00000019c0)={&(0x7f00000018c0)={0x1d, r2}, 0x10, &(0x7f0000001980)={&(0x7f0000001900)={0x2, 0x20, 0x5, {}, {}, {0x1, 0x1}, 0x1, @can={{0x3, 0x0, 0x1}, 0x0, 0x3, 0x0, 0x0, "1dc8defb674c5eba"}}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x15)
ioctl$OCFS2_IOC_GROUP_ADD64(r7, 0x40186f03, &(0x7f0000001a00)={0xfb4e, 0x800, 0x10001, 0x800f})
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001a40)=@base={0xe, 0x10001, 0xfa8, 0x5, 0x2901, r6, 0x63b0c5ce, '\x00', 0x0, r4, 0x2, 0x1, 0x5}, 0x50)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001ac0)={<r12=>0x0, 0x1}, &(0x7f0000001b00)=0x8)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r11, 0x84, 0x6d, &(0x7f0000001b40)={<r13=>r12, 0xc7, "ba701dce7ed17a6bd7c1eabf13fca0b433eed8018c506d6de66297cedb05ee2cf16ccf34ecb5363e1467a43b890ad6770fb57c9e57221e93432549aefae77c9cb44bf472d8691e54bf8d53decf77051640aa69627334480ccb625ef77a97872cc165736c6919f3aaf6e8b7fb7babe78a1125fb91673426b5b45abec2aeca7f1873e57fac9830fa7c86fd6dfe022b66cd9e002593f6b52c655c738a0a5b72b5e67eb049ed58a52062415313c7a70e65cfc6724db3f4bad054545b002e69354b60f1f5f60637d69f"}, &(0x7f0000001c40)=0xcf)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x58, 0x1406, 0x20, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000}, 0x40)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e00), r10)
sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x28, r14, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x6d}}}}, [""]}, 0x28}}, 0x4000000)
r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000001f00), 0x10881, 0x0)
ioctl$TUNSETPERSIST(r15, 0x400454cb, 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r11, 0x84, 0x22, &(0x7f0000001f40)={0x8, 0x8, 0x8, 0xdc9, r13}, 0x10)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f00000022c0)={{<r16=>r6, &(0x7f0000001f80)='wlan1\x00', 0x200000, &(0x7f0000001fc0)={@align=0x1, {0x3, 0xca66, 0x9, 0x1}}, 0x8, &(0x7f0000002000), &(0x7f0000002040)=0x2}, 0x2, &(0x7f0000002280)=[{0x1, 0x3, &(0x7f0000002080)='.*:/{.+&\x00', &(0x7f00000020c0)="378a1e327e8a7b1e59d3163ee6a3cebe1d0ce90361c83928b767284819b2825e48272cbcc254c258bb2d368852bc49abdabed743c4b5084abb1e357ccf041c60fe6452bb9947473549b043bb664c523388501037444b36c6d8de6e342267ae087678", 0x62, 0x28}, {0x1, 0x5, &(0x7f0000002140)='\x00', &(0x7f0000002180)="1d17f33e7283d4c8b50e9fa8b719cc42691b8d94810cdaaeefa39ab5ab82c8ab697e6471b74d796d7b35c875900d39bf680804bef5aff53c3f335ccfc8c7053d6a58e2be2cc0e009b44873cdb79bd8e6b55330492640e3200d2e9f8c42953bda4012062ad90872192b18ac07268fb7f1ffdd48cc174d2cca13c1d4b1bd3311bd7faca816cf66bf6e1401b0d09107d4a08360436f9090fd265463bda6d9952fdb561ac15ea36b07dfa77ec6a57fc628fb6cb037b9d4fc30cd69cae8c8dfbeab70d63411c7caea8cc1b863500cebfeff1245638b247cb2", 0xd6, 0x20}]})
ioctl$SIOCGETNODEID(r16, 0x89e1, &(0x7f0000002340)={0x3})

1.230771661s ago: executing program 32 (id=881):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) (async)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="bc1400002e00090027bd70000000000005000000a51411804b8a9f750c996372b5b14b3a91a3ff88cca5dd0d428ddfdd02a37c0b93bcdade"], 0x14bc}, 0x1, 0x0, 0x0, 0x400a0}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async)
bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async)
connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}]}}}]}, 0x3c}}, 0x404c840)

1.180302669s ago: executing program 33 (id=877):
r0 = socket(0x400000000010, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0xb, 0x1, 0x400002)
listen(r1, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0}, 0x1, 0x0, 0x0, 0x42000}, 0x20000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003b80)=ANY=[@ANYBLOB="2003000043000701fefffffffcdbdf25027c0000040047800803018004030d8006005a00eb0000001400000000000000000000000000000000000000e102a6800400838004003e8008000f00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="14000a000000000000000000000000000000000100000000"], 0x320}}, 0xc000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @empty}, 0x2, 0x2, 0x0, 0xfffffffc}}, 0x2e)
ioctl$PPPIOCGMRU(r6, 0x80047453, 0x0)
r7 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r7, &(0x7f0000000040)='FROZEN\x00', 0x7)
mkdirat$cgroup(r3, &(0x7f00000000c0)='syz1\x00', 0x1ff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
sendmsg$NL80211_CMD_GET_SCAN(r8, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="00030465000010ff04002520edd3d5f2ae0fa2f73c7eae22914b1c5539faec3c9275751a57d95ee8b4a05e43a4bc5aba605a3af1368889fb8fe4321cd7e0e0"], 0x14}, 0x1, 0x0, 0x0, 0x24000084}, 0x4)
r10 = socket(0x1f, 0x1, 0xfffffffc)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000480)=<r11=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000001fc0)={<r14=>0x0}, &(0x7f0000002000)=0xc)
sendmmsg$unix(r12, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r14, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001400000000000000010000008725c9fc8fa67ba734e0f101000000", @ANYRES32=r12, @ANYBLOB='\x00\x00\x00\x00'], 0x38}}], 0x2, 0x801)
sendmsg$nl_generic(r10, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x1a0, 0x26, 0x10, 0x70bd2c, 0x25dfdbfe, {0x91}, [@nested={0x189, 0x11b, 0x0, 0x1, [@nested={0x4, 0x75}, @typed={0x8, 0xd3, 0x0, 0x0, @uid=r11}, @generic="70fc36a24b53105e3ddf4503222a218a2831c8fb4eadb967e87d1ed1b54f73d11b622867a78d164c7bb22d47d16228d577c51da45a089a8c2ee8f91d6c29378a8be1ebe119f96d4e0007d7a1ac0537e2059c66fcdb263a9217b892224e37e406c655d1eb7f05e0c8b427a7d06d96e68b499712f237c68d8a8d0d9ce1b9db45c32f18a4089d2092adae36942e759d0af2f35281d500706826ccaa963a04daa538847754f9d3543d87ad8923be403896e62ad1d4fdb16ace39cb6cd9368e73ffbe15fee1e4ecc997f84c9e67eb265f25c502bd3bec", @typed={0x8, 0x91, 0x0, 0x0, @pid=r14}, @typed={0x8, 0x5d, 0x0, 0x0, @fd=r8}, @typed={0x14, 0x8a, 0x0, 0x0, @str=']-[]bU$^#%^}{/#\x00'}, @generic="b6deee5737a444ec472bd1e8fc493386f60f166850031bd1b058006e82764844bfcc8e657a834f6e2e", @typed={0x57, 0x1e, 0x0, 0x0, @binary="f33e170c4687e5c92eabe8fa26b95f08acdcf569a040c3cbb6bd124a24a5222db7bb0f780eb4f274702d96c8064a1cbb35b07aca06b71ed0d977151848b2ae64189771baa5b600ae14387d0fa17cc19fb2545b"}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0xc0080}, 0x48091)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r10)

1.100133452s ago: executing program 34 (id=878):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf25030000000c00060004000000000000000c00040001000000000000000c00020002000000000000000800010000000000640007800c00018008000100", @ANYRES16], 0xc0}, 0x1, 0x0, 0x0, 0x66393c82b5350394}, 0x20000804)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010028bd7000fedbdf2501000000080001005d7f66c949eb9956bbd9144c3a190863d9285655362f2ddb482728bc2bfd37b16d5c4797fc52313ae6bcb5adfdff1dc098a9b077d1ab4fa52792c6daa5ef71cbcce0041c9a698ccc8293258be28a1890451fa4b3291257d663b0f55190a858de3183ef17009a114bb751024f3952dde9c5a97b4db3", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x900, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0x9}, 0x28)
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001a006da800000000000000001c6f"], 0x24}}, 0x0)

61.855011ms ago: executing program 35 (id=886):
r0 = socket$netlink(0x10, 0x3, 0x14)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
listen(r1, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r2=>0x0})
r3 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0)
sendto$packet(r3, &(0x7f00000000c0)="a4619f1a4b3b920f73cadb71d496730fcde79b98a0a3e27125270419e687ec21ff6531abc75a179a1deb6d022fe2fd872eb57b3ee9a24dbf2581be8b9cd5c5977ebeaeee4370178ad139649c2d8a5d63ec32915d37db468b58efb6a4debe4253ba4764821f7704fb0e4f74b8592a93caf4ad779185ec9ee9d89d447c0e4f45aa185a7a83439cd7f4961f9e48c84e9fbe0442c3178e5a8999a0db67d81f99fbe76e71d2f29fabe8ac11dfbe00c3d7a4063d3320aeeb23de4d1e4372f8dc2bc268299724af9a6c101df1552932b2052508a19b8397d3f94e7aa69fd76756d3db4e58", 0xe1, 0x10, &(0x7f00000001c0)={0x11, 0x3, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x8, [@float={0x10, 0x0, 0x0, 0x10, 0x2}, @enum64={0x8, 0x4, 0x0, 0x13, 0x1, 0x8, [{0x1, 0x8, 0xb}, {0x1, 0x4, 0x200}, {0xb, 0xfffffffc}, {0x5, 0x7, 0x3}]}]}, {0x0, [0x5f, 0x2e, 0x0, 0x0, 0x2e, 0x0]}}, &(0x7f0000000340)=""/199, 0x68, 0xc7, 0x1, 0x1000}, 0x28)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x8, <r5=>0x0}, 0x8)
r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file0\x00', 0x0, 0x8}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x2, &(0x7f0000000200)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x3}], &(0x7f0000000240)='syzkaller\x00', 0x10000, 0x11, &(0x7f0000000280)=""/17, 0x41000, 0x5d, '\x00', 0x0, @sk_msg=0x7, r4, 0x8, &(0x7f0000000480)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0xc, 0x0, 0x9}, 0x10, r5, 0xffffffffffffffff, 0x7, &(0x7f00000005c0)=[r6], &(0x7f0000000600)=[{0x0, 0x5, 0x6, 0xb}, {0x3, 0x5, 0x9, 0x7}, {0x1, 0x1, 0x7, 0x5}, {0x3, 0x5, 0x2, 0x1}, {0x5, 0x3, 0xf, 0x9}, {0x4, 0x5, 0x7, 0x5}, {0x3, 0x3, 0x10, 0x1}], 0x10, 0x1}, 0x94)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000740)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x1, 0x3, 0x1, 0x8, 0x4}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000780)={'wlan1\x00', <r8=>0x0})
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(r9, 0x0, 0x81, &(0x7f0000001800)={'nat\x00', 0x0, 0x4, 0x1000, [0x0, 0x7, 0x3, 0x9, 0x5, 0x7], 0x3, &(0x7f00000007c0)=[{}, {}, {}], &(0x7f0000000800)=""/4096}, &(0x7f0000001880)=0x78)
sendmsg$can_bcm(r1, &(0x7f00000019c0)={&(0x7f00000018c0)={0x1d, r2}, 0x10, &(0x7f0000001980)={&(0x7f0000001900)={0x2, 0x20, 0x5, {}, {}, {0x1, 0x1}, 0x1, @can={{0x3, 0x0, 0x1}, 0x0, 0x3, 0x0, 0x0, "1dc8defb674c5eba"}}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x15)
ioctl$OCFS2_IOC_GROUP_ADD64(r7, 0x40186f03, &(0x7f0000001a00)={0xfb4e, 0x800, 0x10001, 0x800f})
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001a40)=@base={0xe, 0x10001, 0xfa8, 0x5, 0x2901, r6, 0x63b0c5ce, '\x00', 0x0, r4, 0x2, 0x1, 0x5}, 0x50)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001ac0)={<r12=>0x0, 0x1}, &(0x7f0000001b00)=0x8)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r11, 0x84, 0x6d, &(0x7f0000001b40)={<r13=>r12, 0xc7, "ba701dce7ed17a6bd7c1eabf13fca0b433eed8018c506d6de66297cedb05ee2cf16ccf34ecb5363e1467a43b890ad6770fb57c9e57221e93432549aefae77c9cb44bf472d8691e54bf8d53decf77051640aa69627334480ccb625ef77a97872cc165736c6919f3aaf6e8b7fb7babe78a1125fb91673426b5b45abec2aeca7f1873e57fac9830fa7c86fd6dfe022b66cd9e002593f6b52c655c738a0a5b72b5e67eb049ed58a52062415313c7a70e65cfc6724db3f4bad054545b002e69354b60f1f5f60637d69f"}, &(0x7f0000001c40)=0xcf)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x58, 0x1406, 0x20, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000}, 0x40)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e00), r10)
sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x28, r14, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x6d}}}}, [""]}, 0x28}}, 0x4000000)
r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000001f00), 0x10881, 0x0)
ioctl$TUNSETPERSIST(r15, 0x400454cb, 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r11, 0x84, 0x22, &(0x7f0000001f40)={0x8, 0x8, 0x8, 0xdc9, r13}, 0x10)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f00000022c0)={{<r16=>r6, &(0x7f0000001f80)='wlan1\x00', 0x200000, &(0x7f0000001fc0)={@align=0x1, {0x3, 0xca66, 0x9, 0x1}}, 0x8, &(0x7f0000002000), &(0x7f0000002040)=0x2}, 0x2, &(0x7f0000002280)=[{0x1, 0x3, &(0x7f0000002080)='.*:/{.+&\x00', &(0x7f00000020c0)="378a1e327e8a7b1e59d3163ee6a3cebe1d0ce90361c83928b767284819b2825e48272cbcc254c258bb2d368852bc49abdabed743c4b5084abb1e357ccf041c60fe6452bb9947473549b043bb664c523388501037444b36c6d8de6e342267ae087678", 0x62, 0x28}, {0x1, 0x5, &(0x7f0000002140)='\x00', &(0x7f0000002180)="1d17f33e7283d4c8b50e9fa8b719cc42691b8d94810cdaaeefa39ab5ab82c8ab697e6471b74d796d7b35c875900d39bf680804bef5aff53c3f335ccfc8c7053d6a58e2be2cc0e009b44873cdb79bd8e6b55330492640e3200d2e9f8c42953bda4012062ad90872192b18ac07268fb7f1ffdd48cc174d2cca13c1d4b1bd3311bd7faca816cf66bf6e1401b0d09107d4a08360436f9090fd265463bda6d9952fdb561ac15ea36b07dfa77ec6a57fc628fb6cb037b9d4fc30cd69cae8c8dfbeab70d63411c7caea8cc1b863500cebfeff1245638b247cb2", 0xd6, 0x20}]})
ioctl$SIOCGETNODEID(r16, 0x89e1, &(0x7f0000002340)={0x3})

0s ago: executing program 36 (id=884):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f00000002c0))
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001fc0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002000)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x80d4) (async)
sendmsg$nl_route(r0, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="c8000000190020002dbd7000fddbdf250a808009fc01ff02000c000006001500000000000800100000020000080010000900000008001900", @ANYRES32, @ANYBLOB="8b000880db3160aa31fc87f6b219bb81b6eea11d7cf2791ac0170ba30add7ea4c3518ea858a2d7899b41f328f76cb17920e37ad0a72d7a179da98c47b7e10142d7848dbe1bc46f4b31ec28602a965b18ba31dd131ec43739e5a908ca84dd189fe682cc597408d347238235dcebcb49b676dbf31ebc737e844af18e94caa577440023a8635b5f11f10a37db00"], 0xc8}, 0x1, 0x0, 0x0, 0x40080}, 0xc000) (async)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmmsg(r6, &(0x7f0000006100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000001) (async)
connect$x25(r5, &(0x7f0000000140)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) (async, rerun: 64)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x8c}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}}, 0x0) (rerun: 64)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.224' (ED25519) to the list of known hosts.
[   81.605386][ T5614] cgroup: Unknown subsys name 'net'
[   81.717929][ T5614] cgroup: Unknown subsys name 'cpuset'
[   81.727291][ T5614] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   83.443253][ T5614] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   85.789197][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   85.798645][ T5636] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   85.820253][ T5642] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   85.829581][ T5642] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   85.838569][ T5642] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   85.849126][ T5642] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   85.856861][ T5642] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   85.859993][ T5646] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   85.865851][ T5642] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   85.878581][ T5646] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   85.886606][ T5646] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   85.886938][ T5648] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   85.899177][ T5646] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   85.909123][ T5646] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   85.916316][ T5648] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   85.917099][ T5646] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   85.933042][ T5646] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   85.940848][ T5646] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   85.946975][ T5642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   85.956861][ T5642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   85.965240][ T5642] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   85.973588][ T5642] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   85.986840][ T5636] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   85.996438][ T5642] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   86.005039][ T5642] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   88.025809][ T5632] Bluetooth: hci1: command tx timeout
[   88.025814][ T5642] Bluetooth: hci0: command tx timeout
[   88.026230][ T5642] Bluetooth: hci4: command tx timeout
[   88.061630][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.069144][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.077456][ T5626] bridge_slave_0: entered allmulticast mode
[   88.085375][ T5626] bridge_slave_0: entered promiscuous mode
[   88.104456][   T50] Bluetooth: hci3: command tx timeout
[   88.110487][ T5642] Bluetooth: hci2: command tx timeout
[   88.169238][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.176507][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.183708][ T5626] bridge_slave_1: entered allmulticast mode
[   88.191312][ T5626] bridge_slave_1: entered promiscuous mode
[   88.204823][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.212056][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.219478][ T5627] bridge_slave_0: entered allmulticast mode
[   88.226759][ T5627] bridge_slave_0: entered promiscuous mode
[   88.276326][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.283561][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.291208][ T5627] bridge_slave_1: entered allmulticast mode
[   88.298880][ T5627] bridge_slave_1: entered promiscuous mode
[   88.381555][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.390977][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.398592][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.405877][ T5637] bridge_slave_0: entered allmulticast mode
[   88.413207][ T5637] bridge_slave_0: entered promiscuous mode
[   88.423808][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.456465][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.466132][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.473364][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.480828][ T5637] bridge_slave_1: entered allmulticast mode
[   88.488188][ T5637] bridge_slave_1: entered promiscuous mode
[   88.497877][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.510361][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.517655][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.524922][ T5628] bridge_slave_0: entered allmulticast mode
[   88.532623][ T5628] bridge_slave_0: entered promiscuous mode
[   88.584613][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.591882][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.599488][ T5628] bridge_slave_1: entered allmulticast mode
[   88.606935][ T5628] bridge_slave_1: entered promiscuous mode
[   88.614257][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.621415][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.628665][ T5629] bridge_slave_0: entered allmulticast mode
[   88.635941][ T5629] bridge_slave_0: entered promiscuous mode
[   88.687064][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.694415][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.701603][ T5629] bridge_slave_1: entered allmulticast mode
[   88.709408][ T5629] bridge_slave_1: entered promiscuous mode
[   88.718866][ T5626] team0: Port device team_slave_0 added
[   88.727289][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.738412][ T5627] team0: Port device team_slave_0 added
[   88.768345][ T5626] team0: Port device team_slave_1 added
[   88.776488][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.787481][ T5627] team0: Port device team_slave_1 added
[   88.795835][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.850846][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.862602][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.920186][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.930354][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.937517][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.963652][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.977933][ T5637] team0: Port device team_slave_0 added
[   88.985249][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.992236][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.018523][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.052126][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.059470][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.085703][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.108249][ T5637] team0: Port device team_slave_1 added
[   89.128752][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.136064][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.162171][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.175409][ T5628] team0: Port device team_slave_0 added
[   89.195271][ T5629] team0: Port device team_slave_0 added
[   89.221744][ T5628] team0: Port device team_slave_1 added
[   89.241044][ T5629] team0: Port device team_slave_1 added
[   89.247436][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.254635][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.280901][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.293645][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.300765][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.326859][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.403694][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.410928][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.437052][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.460453][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.467601][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.493756][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.506431][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.513408][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.539798][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.558246][ T5626] hsr_slave_0: entered promiscuous mode
[   89.565118][ T5626] hsr_slave_1: entered promiscuous mode
[   89.572197][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.579272][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.605319][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.657193][ T5627] hsr_slave_0: entered promiscuous mode
[   89.664666][ T5627] hsr_slave_1: entered promiscuous mode
[   89.670903][ T5627] debugfs: 'hsr0' already exists in 'hsr'
[   89.677407][ T5627] Cannot create hsr debugfs directory
[   89.715030][ T5637] hsr_slave_0: entered promiscuous mode
[   89.721655][ T5637] hsr_slave_1: entered promiscuous mode
[   89.728148][ T5637] debugfs: 'hsr0' already exists in 'hsr'
[   89.733898][ T5637] Cannot create hsr debugfs directory
[   89.833109][ T5628] hsr_slave_0: entered promiscuous mode
[   89.839555][ T5628] hsr_slave_1: entered promiscuous mode
[   89.845913][ T5628] debugfs: 'hsr0' already exists in 'hsr'
[   89.851680][ T5628] Cannot create hsr debugfs directory
[   89.875421][ T5629] hsr_slave_0: entered promiscuous mode
[   89.881941][ T5629] hsr_slave_1: entered promiscuous mode
[   89.888444][ T5629] debugfs: 'hsr0' already exists in 'hsr'
[   89.894249][ T5629] Cannot create hsr debugfs directory
[   90.105013][ T5642] Bluetooth: hci4: command tx timeout
[   90.105040][   T50] Bluetooth: hci1: command tx timeout
[   90.110533][ T5632] Bluetooth: hci0: command tx timeout
[   90.186093][ T5632] Bluetooth: hci2: command tx timeout
[   90.194986][ T5632] Bluetooth: hci3: command tx timeout
[   90.504560][ T5626] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   90.527985][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   90.537701][ T5626] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   90.549784][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   90.558095][ T5626] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   90.569720][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   90.578687][ T5626] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   90.589470][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   90.663382][ T5637] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   90.674723][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   90.682955][ T5637] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   90.693239][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   90.711978][ T5637] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   90.721352][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   90.729811][ T5637] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   90.741461][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   90.833074][ T5627] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   90.843521][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   90.860500][ T5627] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   90.870544][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   90.879377][ T5627] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   90.891187][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   90.899567][ T5627] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   90.909257][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   90.993715][ T5628] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   91.006312][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   91.024510][ T5628] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   91.036281][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   91.055689][ T5628] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   91.067853][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   91.076469][ T5628] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   91.087223][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   91.182878][ T5629] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   91.192897][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   91.202316][ T5629] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   91.213040][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   91.232488][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.239641][ T5629] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   91.249950][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   91.266971][ T5629] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   91.277359][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   91.352058][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.367907][ T5626] 8021q: adding VLAN 0 to HW filter on device team0
[   91.391115][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.398799][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.467512][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.474706][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.509347][ T5637] 8021q: adding VLAN 0 to HW filter on device team0
[   91.537406][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.544596][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.558833][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.580708][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.587919][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.650016][ T5627] 8021q: adding VLAN 0 to HW filter on device team0
[   91.680997][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.690214][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.697358][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.730175][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.737396][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.767341][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.801458][ T5628] 8021q: adding VLAN 0 to HW filter on device team0
[   91.841558][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.848778][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.878671][   T54] cfg80211: failed to load regulatory.db
[   91.900211][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.907432][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.921182][ T5629] 8021q: adding VLAN 0 to HW filter on device team0
[   91.963366][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.970598][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.009467][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.016869][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.184897][ T5632] Bluetooth: hci0: command tx timeout
[   92.184915][ T5642] Bluetooth: hci1: command tx timeout
[   92.185000][ T5642] Bluetooth: hci4: command tx timeout
[   92.267378][ T5642] Bluetooth: hci3: command tx timeout
[   92.267391][ T5632] Bluetooth: hci2: command tx timeout
[   92.922767][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.092310][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.137295][ T5626] veth0_vlan: entered promiscuous mode
[   93.188038][ T5626] veth1_vlan: entered promiscuous mode
[   93.313744][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.362933][ T5637] veth0_vlan: entered promiscuous mode
[   93.370037][ T5626] veth0_macvtap: entered promiscuous mode
[   93.401395][ T5626] veth1_macvtap: entered promiscuous mode
[   93.422470][ T5637] veth1_vlan: entered promiscuous mode
[   93.493635][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.543582][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.602015][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.612370][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.647485][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.660140][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.680856][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.702688][ T5637] veth0_macvtap: entered promiscuous mode
[   93.716009][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.753742][ T5637] veth1_macvtap: entered promiscuous mode
[   93.859449][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.883274][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.898612][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.921638][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.971737][ T5628] veth0_vlan: entered promiscuous mode
[   93.983525][ T1157] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.992862][ T1157] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.005126][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.016360][ T5628] veth1_vlan: entered promiscuous mode
[   94.030290][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.041734][ T1157] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.051047][ T1157] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.070472][ T5629] veth0_vlan: entered promiscuous mode
[   94.148383][ T5629] veth1_vlan: entered promiscuous mode
[   94.169191][ T5627] veth0_vlan: entered promiscuous mode
[   94.175162][ T5626] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   94.245828][ T5627] veth1_vlan: entered promiscuous mode
[   94.265419][ T5632] Bluetooth: hci0: command tx timeout
[   94.268247][ T5642] Bluetooth: hci1: command tx timeout
[   94.270920][   T50] Bluetooth: hci4: command tx timeout
[   94.342736][ T5628] veth0_macvtap: entered promiscuous mode
[   94.349026][ T5632] Bluetooth: hci3: command tx timeout
[   94.351780][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.363704][   T50] Bluetooth: hci2: command tx timeout
[   94.381802][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.403763][ T5828] netlink: 'syz.1.2': attribute type 1 has an invalid length.
[   94.457322][ T5628] veth1_macvtap: entered promiscuous mode
[   94.493005][ T5629] veth0_macvtap: entered promiscuous mode
[   94.537728][ T5629] veth1_macvtap: entered promiscuous mode
[   94.539815][ T1356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.551490][ T1356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.571178][ T5828] netlink: 'syz.1.2': attribute type 1 has an invalid length.
[   94.579330][ T5828] netlink: 'syz.1.2': attribute type 2 has an invalid length.
[   94.622353][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.648953][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.707635][ T5627] veth0_macvtap: entered promiscuous mode
[   94.724131][  T125] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.752048][  T125] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.782967][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.811092][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.841909][ T5627] veth1_macvtap: entered promiscuous mode
[   94.867723][ T5835] Zero length message leads to an empty skb
[   94.881763][  T125] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.902740][  T125] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.943381][  T125] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.983111][  T125] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.997365][  T125] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.007993][ T5837] bridge0: port 3(syz_tun) entered blocking state
[   95.014817][ T5837] bridge0: port 3(syz_tun) entered disabled state
[   95.021558][ T5837] syz_tun: entered allmulticast mode
[   95.029133][ T5837] syz_tun: entered promiscuous mode
[   95.036057][ T5837] bridge0: port 3(syz_tun) entered blocking state
[   95.043206][ T5837] bridge0: port 3(syz_tun) entered forwarding state
[   95.078420][  T125] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.153329][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.217280][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.292293][ T1157] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.302264][ T1157] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.328998][ T1157] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.347842][ T1157] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.420627][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.431295][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.486834][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.511225][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.613163][  T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.637744][  T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.758857][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.789153][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.809408][ T5857] netlink: 'syz.1.13': attribute type 1 has an invalid length.
[   95.826249][  T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.873386][  T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.998864][ T5862] netlink: 'syz.2.14': attribute type 1 has an invalid length.
[   96.007398][ T5862] netlink: 224 bytes leftover after parsing attributes in process `syz.2.14'.
[   96.235004][  T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.260430][ T5871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16'.
[   96.291757][  T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.571214][ T5884] netlink: 'syz.0.19': attribute type 1 has an invalid length.
[   96.593094][ T5885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'.
[   96.609672][ T5884] netlink: 'syz.0.19': attribute type 2 has an invalid length.
[   96.624790][ T5880] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   96.633768][ T5885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18'.
[   96.697758][ T5880] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   96.720663][ T5885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18'.
[   96.871214][ T5895] netlink: 20 bytes leftover after parsing attributes in process `syz.3.20'.
[   96.882564][ T5894] netlink: 'syz.4.5': attribute type 1 has an invalid length.
[   96.940248][ T5895] netlink: 'syz.3.20': attribute type 1 has an invalid length.
[   97.127165][ T5899] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'.
[   97.202966][ T5913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'.
[   97.380042][ T5925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'.
[   98.780387][ T5991] netlink: 20 bytes leftover after parsing attributes in process `syz.4.46'.
[   98.859169][ T5991] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   99.505954][ T6014] 8021q: adding VLAN 0 to HW filter on device bond1
[   99.558821][ T6021] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   99.593373][ T6021] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[   99.678041][ T6027] netlink: 'syz.3.60': attribute type 9 has an invalid length.
[   99.859991][ T6036] vcan0: tx address claim with dest, not broadcast
[  100.665103][ T6068] netlink: 'syz.1.73': attribute type 1 has an invalid length.
[  100.848117][ T6075] Unknown options in mask b7f2
[  101.358190][ T6094] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  101.378104][ T6094] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  101.432246][ T6094] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  101.487137][ T6094] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  101.528514][ T6106] netlink: 'syz.4.85': attribute type 11 has an invalid length.
[  101.538489][ T6106] netlink: 'syz.4.85': attribute type 5 has an invalid length.
[  101.550738][ T6106] __nla_validate_parse: 5 callbacks suppressed
[  101.550754][ T6106] netlink: 6548 bytes leftover after parsing attributes in process `syz.4.85'.
[  101.597495][ T6094] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  101.896590][ T6109] netlink: 24 bytes leftover after parsing attributes in process `syz.0.86'.
[  101.924798][ T6109] netlink: 'syz.0.86': attribute type 39 has an invalid length.
[  101.972498][   T13] smbdirect: ib_dev[syz2] removed
[  102.472375][ T6141] syz.2.98 uses obsolete (PF_INET,SOCK_PACKET)
[  102.850980][ T6160] netlink: 40 bytes leftover after parsing attributes in process `syz.0.100'.
[  102.955150][ T6165] netlink: zone id is out of range
[  102.971665][ T6165] netlink: zone id is out of range
[  103.011974][ T6165] netlink: zone id is out of range
[  103.022904][ T6165] netlink: zone id is out of range
[  103.039783][ T6165] netlink: zone id is out of range
[  103.045641][ T6165] netlink: zone id is out of range
[  103.052914][ T6165] netlink: zone id is out of range
[  103.069625][ T6165] netlink: zone id is out of range
[  103.077896][ T6165] netlink: zone id is out of range
[  103.083108][ T6165] netlink: zone id is out of range
[  104.475886][ T6188] warning: `syz.1.109' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  104.963514][ T6202] netlink: 'syz.2.114': attribute type 1 has an invalid length.
[  105.017431][ T6202] netlink: 224 bytes leftover after parsing attributes in process `syz.2.114'.
[  105.445437][ T6227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.122'.
[  105.463942][ T6229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.122'.
[  105.499142][ T6225] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  105.635492][ T6240] netlink: 64 bytes leftover after parsing attributes in process `syz.2.124'.
[  106.036382][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.129'.
[  107.270894][ T6237] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  107.280625][ T6240] syzkaller1: entered promiscuous mode
[  107.288380][ T6240] syzkaller1: entered allmulticast mode
[  107.415928][ T6272] netlink: 'syz.1.134': attribute type 1 has an invalid length.
[  107.611320][ T6272] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  107.619679][ T6280] netlink: 20 bytes leftover after parsing attributes in process `syz.3.136'.
[  107.736109][ T6289] netlink: 20 bytes leftover after parsing attributes in process `syz.0.137'.
[  108.039542][ T6308] net_ratelimit: 110 callbacks suppressed
[  108.039563][ T6308] netlink: zone id is out of range
[  108.086472][ T6308] netlink: zone id is out of range
[  108.104567][ T6308] netlink: zone id is out of range
[  108.141249][ T6308] netlink: zone id is out of range
[  108.151405][ T6308] netlink: zone id is out of range
[  108.161067][ T6308] netlink: zone id is out of range
[  108.169014][ T6308] netlink: zone id is out of range
[  108.175706][ T6308] netlink: zone id is out of range
[  108.181043][ T6308] netlink: zone id is out of range
[  108.198824][ T6308] netlink: zone id is out of range
[  108.461607][ T6324] tipc: Can't bind to reserved service type 0
[  109.934403][ T6346] netlink: 36 bytes leftover after parsing attributes in process `syz.1.155'.
[  110.150761][ T6359] xt_CT: You must specify a L4 protocol and not use inversions on it
[  110.408374][ T6368] Bluetooth: MGMT ver 1.23
[  110.523922][ T6375] netlink: 72 bytes leftover after parsing attributes in process `syz.2.164'.
[  110.541810][ T6375] netlink: 'syz.2.164': attribute type 1 has an invalid length.
[  110.550884][ T6375] netlink: 'syz.2.164': attribute type 1 has an invalid length.
[  110.559779][ T6375] netlink: 9172 bytes leftover after parsing attributes in process `syz.2.164'.
[  110.826838][ T6385] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.167'.
[  110.840030][ T6378] geneve2: entered promiscuous mode
[  110.860357][   T13] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 37212 - 0
[  110.874755][   T13] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 37212 - 0
[  110.887790][   T13] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 37212 - 0
[  110.897995][   T13] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 37212 - 0
[  110.934796][ T6387] xt_ecn: cannot match TCP bits for non-tcp packets
[  111.475460][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.172'.
[  111.690129][ T6404] netlink: 'syz.4.173': attribute type 1 has an invalid length.
[  111.910136][ T6404] 8021q: adding VLAN 0 to HW filter on device bond2
[  112.046309][ T6410] bond2: (slave geneve2): making interface the new active one
[  112.091164][ T6410] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  112.138125][ T1157] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  112.156886][ T1157] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  112.240567][ T1157] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  112.270369][ T1157] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  112.341080][ T6437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.184'.
[  112.562839][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.186'.
[  112.615114][ T6444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.186'.
[  113.759705][ T6500] af_packet: tpacket_rcv: packet too big, clamped from 3698 to 4294967272. macoff=96
[  113.815900][ T6504] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.201'.
[  114.065940][ T6510] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20004
[  114.162036][ T6513] netlink: 'syz.1.205': attribute type 1 has an invalid length.
[  114.177308][ T6513] netlink: 96 bytes leftover after parsing attributes in process `syz.1.205'.
[  114.195610][ T6513] netlink: 1 bytes leftover after parsing attributes in process `syz.1.205'.
[  114.216228][ T6513] netlink: 658 bytes leftover after parsing attributes in process `syz.1.205'.
[  114.490041][ T6525] netlink: 'syz.3.209': attribute type 1 has an invalid length.
[  114.498647][ T6522] syzkaller0: entered promiscuous mode
[  114.519810][ T6522] syzkaller0: entered allmulticast mode
[  114.631890][ T6525] 8021q: adding VLAN 0 to HW filter on device bond1
[  114.645150][ T6540] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  114.653621][ T6540] IPv6: NLM_F_CREATE should be set when creating new route
[  114.661047][ T6540] IPv6: NLM_F_CREATE should be set when creating new route
[  114.683756][ T6540] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  114.818134][ T6533] bond1: (slave bridge1): making interface the new active one
[  114.842235][ T6533] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  115.470830][ T6580] netlink: 'syz.3.222': attribute type 1 has an invalid length.
[  115.614973][ T6584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.224'.
[  116.403775][ T6603] netlink: 'syz.2.229': attribute type 2 has an invalid length.
[  116.420070][ T6603] tipc: Started in network mode
[  116.428765][ T6603] tipc: Node identity 8, cluster identity 4711
[  116.436291][ T6603] tipc: Node number set to 8
[  116.457827][ T6617] netlink: 16 bytes leftover after parsing attributes in process `syz.1.231'.
[  116.592786][ T6613] trusted_key: syz.1.231 sent an empty control message without MSG_MORE.
[  116.718903][ T6625] netlink: 16 bytes leftover after parsing attributes in process `syz.0.234'.
[  116.907379][ T6632] netlink: 252 bytes leftover after parsing attributes in process `syz.4.237'.
[  116.998109][ T6638] netlink: 36 bytes leftover after parsing attributes in process `syz.0.238'.
[  117.297733][ T6649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.243'.
[  117.426604][ T6649] bond3: option xmit_hash_policy: invalid value (64)
[  117.450272][ T6649] bond3 (unregistering): Released all slaves
[  117.625794][ T6667] netlink: 'syz.2.248': attribute type 1 has an invalid length.
[  117.742188][ T6667] 8021q: adding VLAN 0 to HW filter on device bond1
[  118.110485][ T6697] netlink: 'syz.2.256': attribute type 11 has an invalid length.
[  118.218444][ T6699] netlink: 'syz.4.257': attribute type 3 has an invalid length.
[  118.473336][ T6712] netlink: 'syz.3.262': attribute type 10 has an invalid length.
[  118.610131][ T6712] team0: Port device dummy0 added
[  118.793004][ T6728] netlink: 'syz.4.268': attribute type 1 has an invalid length.
[  118.828450][ T6727] Driver unsupported XDP return value 0 on prog  (id 35) dev N/A, expect packet loss!
[  118.889672][ T5769] IPVS: starting estimator thread 0...
[  118.911374][ T6720] __nla_validate_parse: 9 callbacks suppressed
[  118.911406][ T6720] netlink: 27 bytes leftover after parsing attributes in process `syz.0.267'.
[  119.024665][ T6734] IPVS: using max 31 ests per chain, 74400 per kthread
[  119.191236][ T6751] netlink: 'syz.2.275': attribute type 11 has an invalid length.
[  119.309322][ T6755] netlink: 'syz.2.278': attribute type 1 has an invalid length.
[  119.333235][ T6755] netlink: 'syz.2.278': attribute type 3 has an invalid length.
[  119.351512][ T6760] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.277'.
[  119.371414][ T6755] netlink: 172 bytes leftover after parsing attributes in process `syz.2.278'.
[  119.423905][ T6755] NCSI netlink: No device for ifindex 813332851
[  119.570278][ T6771] netlink: 60 bytes leftover after parsing attributes in process `syz.1.280'.
[  119.724806][ T6775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.282'.
[  119.762701][ T6775] netlink: 20 bytes leftover after parsing attributes in process `syz.2.282'.
[  119.860018][ T6775] geneve2: entered promiscuous mode
[  119.878427][ T6775] geneve2: entered allmulticast mode
[  120.926923][ T6808] Unsupported ieee802154 address type: 0
[  121.008895][ T6810] netlink: 'syz.2.289': attribute type 4 has an invalid length.
[  121.021821][ T6810] netlink: 17 bytes leftover after parsing attributes in process `syz.2.289'.
[  121.337025][ T6823] netlink: 'syz.1.294': attribute type 1 has an invalid length.
[  121.345581][ T6823] netlink: 228 bytes leftover after parsing attributes in process `syz.1.294'.
[  122.223805][ T6825] netlink: 24 bytes leftover after parsing attributes in process `syz.4.295'.
[  122.289143][ T6829] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20004
[  122.357167][ T6829] netlink: 'syz.3.296': attribute type 33 has an invalid length.
[  122.389379][ T6835] netlink: 68 bytes leftover after parsing attributes in process `syz.0.297'.
[  122.409428][ T6839] net_ratelimit: 170 callbacks suppressed
[  122.409448][ T6839] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  122.445539][ T6829] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  122.532722][ T6833] nbd0: detected capacity change from 0 to 127
[  122.672131][ T5632] block nbd0: Receive control failed (result -104)
[  123.100970][ T6874] xt_hashlimit: size too large, truncated to 1048576
[  123.251353][ T6882] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.470603][ T6882] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.793240][ T6901] ip6_vti0: entered promiscuous mode
[  126.103759][ T6982] sch_fq: defrate 0 ignored.
[  126.202074][ T6988] syzkaller0: entered promiscuous mode
[  126.212193][ T6988] syzkaller0: entered allmulticast mode
[  126.273005][ T6988] netlink: 'syz.2.325': attribute type 2 has an invalid length.
[  126.488747][ T7001] netlink: 'syz.1.328': attribute type 10 has an invalid length.
[  126.509440][ T7001] __nla_validate_parse: 2 callbacks suppressed
[  126.509460][ T7001] netlink: 228 bytes leftover after parsing attributes in process `syz.1.328'.
[  128.150316][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.337'.
[  128.167910][ T7032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.335'.
[  128.186600][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.334'.
[  128.311184][ T7039] netlink: 48 bytes leftover after parsing attributes in process `syz.4.338'.
[  128.322929][ T7027] team1: entered promiscuous mode
[  128.330577][ T7027] team1: entered allmulticast mode
[  128.473088][ T7045] netlink: 'syz.0.340': attribute type 39 has an invalid length.
[  128.918818][ T7065] netlink: 52 bytes leftover after parsing attributes in process `syz.0.347'.
[  129.416933][ T7091] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  129.453516][ T7095] netlink: 20 bytes leftover after parsing attributes in process `syz.0.357'.
[  129.489890][ T7097] netlink: 192 bytes leftover after parsing attributes in process `syz.4.356'.
[  129.518652][ T7097] netlink: 'syz.4.356': attribute type 1 has an invalid length.
[  129.550803][ T7097] netlink: 28 bytes leftover after parsing attributes in process `syz.4.356'.
[  129.564314][ T7098] syzkaller1: entered promiscuous mode
[  129.578663][ T7098] syzkaller1: entered allmulticast mode
[  129.922001][ T7085] xt_l2tp: unknown flags: 10
[  130.007920][ T7108] netlink: 'syz.4.361': attribute type 11 has an invalid length.
[  130.041764][ T7108] netlink: 'syz.4.361': attribute type 5 has an invalid length.
[  130.067459][ T7108] netlink: 6548 bytes leftover after parsing attributes in process `syz.4.361'.
[  131.132064][ T7155] tipc: Started in network mode
[  131.149810][ T7155] tipc: Node identity 225b6a8f4dd, cluster identity 4711
[  131.182394][ T7155] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.287202][ T7156] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  131.309630][ T7156] syzkaller0: entered promiscuous mode
[  131.315324][ T7156] syzkaller0: entered allmulticast mode
[  131.321781][ T7156] tipc: Resetting bearer <eth:syzkaller0>
[  131.386603][ T7155] tipc: Resetting bearer <eth:syzkaller0>
[  131.437525][ T7155] tipc: Disabling bearer <eth:syzkaller0>
[  131.592999][ T7176] netlink: 'syz.0.380': attribute type 2 has an invalid length.
[  131.823233][ T7185] syzkaller1: entered promiscuous mode
[  131.829504][ T7185] syzkaller1: entered allmulticast mode
[  131.846405][ T7188] __nla_validate_parse: 2 callbacks suppressed
[  131.846422][ T7188] netlink: 28 bytes leftover after parsing attributes in process `syz.2.383'.
[  131.861617][ T7185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.384'.
[  131.889633][ T7188] netlink: 'syz.2.383': attribute type 7 has an invalid length.
[  131.897462][ T7188] netlink: 'syz.2.383': attribute type 8 has an invalid length.
[  131.912287][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.383'.
[  131.929127][ T7188] gretap0: entered promiscuous mode
[  131.937983][ T7188] gretap0: left promiscuous mode
[  132.438202][ T7215] netlink: 20 bytes leftover after parsing attributes in process `syz.1.393'.
[  132.440114][ T7212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.392'.
[  132.498040][ T7212] bridge_slave_1: left allmulticast mode
[  132.509736][ T7212] bridge_slave_1: left promiscuous mode
[  132.529831][ T7212] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.577471][ T7212] bridge_slave_0: left allmulticast mode
[  132.590236][ T7212] bridge_slave_0: left promiscuous mode
[  132.603691][ T7212] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.827230][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  132.837119][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  133.018275][ T7247] netlink: 830 bytes leftover after parsing attributes in process `syz.1.402'.
[  133.209665][ T7259] netlink: 'syz.1.405': attribute type 2 has an invalid length.
[  133.492821][ T5632] block nbd1: Receive control failed (result -32)
[  133.777642][ T7292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.414'.
[  133.806092][ T7292] netlink: 176 bytes leftover after parsing attributes in process `syz.2.414'.
[  133.841506][ T7292] netlink: 'syz.2.414': attribute type 5 has an invalid length.
[  134.007547][ T7304] netlink: 24 bytes leftover after parsing attributes in process `syz.1.416'.
[  134.079799][ T7304] netlink: 36 bytes leftover after parsing attributes in process `syz.1.416'.
[  134.156536][ T7316] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  134.456441][ T7331] netlink: 'syz.0.422': attribute type 1 has an invalid length.
[  134.493192][ T7331] 8021q: adding VLAN 0 to HW filter on device bond3
[  134.517908][ T7331] bond3: (slave geneve3): making interface the new active one
[  134.527637][ T7331] bond3: (slave geneve3): Enslaving as an active interface with an up link
[  134.636498][ T7339] pim6reg527: entered allmulticast mode
[  134.969285][ T7350] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  135.131134][ T7356] sctp: [Deprecated]: syz.0.431 (pid 7356) Use of struct sctp_assoc_value in delayed_ack socket option.
[  135.131134][ T7356] Use struct sctp_sack_info instead
[  135.419119][ T7336] syz.1.424 (7336) used greatest stack depth: 15904 bytes left
[  135.814723][ T7388] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32)
[  136.257900][ T7407] netem: incorrect gi model size
[  136.288594][ T7407] netem: change failed
[  136.551327][ T7427] netlink: 'syz.4.454': attribute type 1 has an invalid length.
[  136.586460][ T7430] netlink: 'syz.4.454': attribute type 1 has an invalid length.
[  136.609197][ T7427] netlink: 'syz.4.454': attribute type 7 has an invalid length.
[  136.620572][ T7430] netlink: 'syz.4.454': attribute type 7 has an invalid length.
[  136.654327][ T7427] netlink: 'syz.4.454': attribute type 8 has an invalid length.
[  136.676755][ T7430] netlink: 'syz.4.454': attribute type 8 has an invalid length.
[  136.689399][ T7436] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  136.737823][ T7438] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  136.765912][ T7440] x_tables: ip6_tables: mh match: only valid for protocol 135
[  136.943408][ T7445] geneve3: entered promiscuous mode
[  136.964698][ T3312] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 56071 - 0
[  136.994697][   T13] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 56071 - 0
[  137.031520][   T13] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 56071 - 0
[  137.051966][   T13] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 56071 - 0
[  137.245112][ T7458] __nla_validate_parse: 13 callbacks suppressed
[  137.245132][ T7458] netlink: 56 bytes leftover after parsing attributes in process `syz.2.463'.
[  137.285146][ T7458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.463'.
[  137.320605][ T7458] netlink: 31 bytes leftover after parsing attributes in process `syz.2.463'.
[  137.340906][ T7458] netlink: 'syz.2.463': attribute type 3 has an invalid length.
[  137.361238][ T7458] netlink: 'syz.2.463': attribute type 2 has an invalid length.
[  137.372883][ T7465] netlink: 64 bytes leftover after parsing attributes in process `syz.0.466'.
[  137.387667][ T7458] netlink: 31 bytes leftover after parsing attributes in process `syz.2.463'.
[  137.406096][ T7464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.465'.
[  137.481926][ T7470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.467'.
[  137.737556][ T7470] 8021q: adding VLAN 0 to HW filter on device bond2
[  137.816507][ T7473] macvlan2: entered promiscuous mode
[  137.836391][ T7493] netlink: 44 bytes leftover after parsing attributes in process `syz.0.472'.
[  137.845411][ T7473] macvlan2: entered allmulticast mode
[  137.865864][ T7493] netlink: 43 bytes leftover after parsing attributes in process `syz.0.472'.
[  137.939815][ T7493] netlink: 43 bytes leftover after parsing attributes in process `syz.0.472'.
[  138.202702][ T7508] sctp: [Deprecated]: syz.1.475 (pid 7508) Use of int in maxseg socket option.
[  138.202702][ T7508] Use struct sctp_assoc_value instead
[  138.276586][ T5632] block nbd2: Receive control failed (result -107)
[  138.428679][ T7520] erspan0: entered allmulticast mode
[  139.372083][ T7561] vlan2: entered allmulticast mode
[  139.380989][ T7561] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  139.552593][ T7574] Cannot find add_set index 0 as target
[  139.590576][ T7577] sch_fq: defrate 0 ignored.
[  140.002528][ T7595] gretap0: entered promiscuous mode
[  140.009965][ T7595] vlan3: entered promiscuous mode
[  140.769674][ T7636] validate_nla: 4 callbacks suppressed
[  140.769694][ T7636] netlink: 'syz.3.516': attribute type 1 has an invalid length.
[  140.796583][ T7636] netlink: 'syz.3.516': attribute type 83 has an invalid length.
[  140.937854][ T7642] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  141.107285][ T7650] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  141.501176][ T7670] syzkaller0: entered promiscuous mode
[  141.519600][ T7670] syzkaller0: entered allmulticast mode
[  141.543727][ T7672] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  141.568834][ T7672] batman_adv: batadv0: Removing interface: batadv_slave_0
[  141.609377][ T7676] ip6tnl0: entered promiscuous mode
[  142.148069][ T7699] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.156846][ T7699] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.282463][ T7709] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  142.282707][ T7710] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  142.491158][ T7707] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  142.526375][ T7707] bond2: (slave lo): Enslaving as an active interface with an up link
[  142.537704][ T7707] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  142.575044][ T7729] __nla_validate_parse: 14 callbacks suppressed
[  142.575064][ T7729] netlink: 28 bytes leftover after parsing attributes in process `syz.4.539'.
[  142.838736][ T7738] netlink: 'syz.0.544': attribute type 30 has an invalid length.
[  142.914674][ T7741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.546'.
[  143.479778][ T7764] sctp: [Deprecated]: syz.0.554 (pid 7764) Use of struct sctp_assoc_value in delayed_ack socket option.
[  143.479778][ T7764] Use struct sctp_sack_info instead
[  145.335977][ T7717] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  145.536391][ T7769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.558'.
[  145.597877][ T7775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.559'.
[  145.633663][ T7770] netlink: 208 bytes leftover after parsing attributes in process `syz.1.555'.
[  145.668631][ T7777] sch_tbf: burst 12 is lower than device bridge1 mtu (1514) !
[  145.688675][ T7776] netlink: 32 bytes leftover after parsing attributes in process `syz.0.557'.
[  145.709593][ T7781] netlink: 248 bytes leftover after parsing attributes in process `syz.3.560'.
[  145.788417][ T7781] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.560'.
[  145.963704][ T7788] netlink: 'syz.0.564': attribute type 21 has an invalid length.
[  145.978475][ T7787] xt_connbytes: Forcing CT accounting to be enabled
[  146.071078][ T7792] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.562'.
[  146.132527][ T7799] syzkaller0: entered promiscuous mode
[  146.153441][ T7799] syzkaller0: entered allmulticast mode
[  146.478616][ T7813] netlink: 'syz.2.570': attribute type 4 has an invalid length.
[  146.646696][ T7823] macvlan0: entered promiscuous mode
[  146.798911][ T7833] netlink: 'syz.0.578': attribute type 5 has an invalid length.
[  146.848154][ T7834] netlink: 'syz.2.576': attribute type 1 has an invalid length.
[  146.925555][ T7842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.579'.
[  147.113685][ T7834] 8021q: adding VLAN 0 to HW filter on device bond3
[  147.369852][ T7834] bond3: (slave veth0_to_bond): making interface the new active one
[  147.405972][ T7834] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  147.446217][ T7841] bond3: entered promiscuous mode
[  147.461709][ T7841] veth0_to_bond: entered promiscuous mode
[  147.474653][ T7841] bond3: entered allmulticast mode
[  147.479952][ T7841] veth0_to_bond: entered allmulticast mode
[  147.686584][ T7879] __nla_validate_parse: 3 callbacks suppressed
[  147.686604][ T7879] netlink: 20 bytes leftover after parsing attributes in process `syz.3.589'.
[  147.725523][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.589'.
[  147.932891][ T7888] ip6gre1: entered allmulticast mode
[  148.042843][ T7893] netlink: 44 bytes leftover after parsing attributes in process `syz.2.593'.
[  148.142786][ T7901] syzkaller1: entered promiscuous mode
[  148.155350][ T7901] syzkaller1: entered allmulticast mode
[  148.418671][ T7916] netlink: 'syz.2.602': attribute type 1 has an invalid length.
[  148.489212][ T7920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.602'.
[  148.919850][ T7916] 8021q: adding VLAN 0 to HW filter on device bond4
[  149.111963][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.608'.
[  149.126153][ T7935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.608'.
[  149.137194][ T7935] netlink: 'syz.1.608': attribute type 15 has an invalid length.
[  149.142395][ T7937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'.
[  149.275003][ T7937] bond2: option xmit_hash_policy: invalid value (64)
[  149.288785][ T7937] bond2 (unregistering): Released all slaves
[  149.342086][ T7949] netlink: zone id is out of range
[  149.373336][ T7949] netlink: zone id is out of range
[  149.400318][ T7941] ¾x9ÿ: renamed from bridge_slave_0 (while UP)
[  149.409745][ T7949] netlink: zone id is out of range
[  149.416229][ T7949] netlink: zone id is out of range
[  149.422561][ T7949] netlink: zone id is out of range
[  149.432132][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0
[  149.439141][ T7949] netlink: zone id is out of range
[  149.451976][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0
[  149.492117][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0
[  149.500126][ T7949] netlink: zone id is out of range
[  149.514482][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0
[  149.543425][ T7949] netlink: zone id is out of range
[  149.566245][ T7949] netlink: zone id is out of range
[  149.586600][ T7949] netlink: zone id is out of range
[  149.863627][ T7981] netlink: 'syz.0.620': attribute type 9 has an invalid length.
[  149.909904][ T7969] syzkaller0: entered promiscuous mode
[  149.927273][ T7969] syzkaller0: entered allmulticast mode
[  150.193502][ T7994] netlink: 16 bytes leftover after parsing attributes in process `syz.0.622'.
[  150.363749][ T8004] netlink: 'syz.4.626': attribute type 32 has an invalid length.
[  150.653454][ T8017] IPVS: length: 163 != 8
[  150.802431][ T8029] netlink: 'syz.0.633': attribute type 32 has an invalid length.
[  150.882923][ T8028] netlink: 16 bytes leftover after parsing attributes in process `syz.4.631'.
[  151.197838][ T8045] netlink: 'syz.3.637': attribute type 5 has an invalid length.
[  151.223134][ T8044] dvmrp0: entered allmulticast mode
[  151.338195][ T8052] netlink: 48 bytes leftover after parsing attributes in process `syz.3.641'.
[  151.349687][ T8047] gretap1: entered promiscuous mode
[  151.377453][ T8047] batman_adv: batadv0: Adding interface: gretap1
[  151.397914][ T8047] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500.
[  151.448287][ T8047] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  152.124713][ T8089] batman_adv: batadv0: Adding interface: dummy0
[  152.144284][ T8089] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  152.231305][ T8089] batman_adv: batadv0: Interface activated: dummy0
[  152.298632][ T8102] netlink: 'syz.4.655': attribute type 1 has an invalid length.
[  152.366022][ T8110] netlink: 'syz.3.657': attribute type 6 has an invalid length.
[  152.374173][ T8110] netlink: 'syz.3.657': attribute type 5 has an invalid length.
[  152.502599][ T8102] 8021q: adding VLAN 0 to HW filter on device bond3
[  152.535511][ T8109] bond3: (slave syz_tun): Enslaving as a backup interface with an up link
[  152.668914][ T1837] block nbd0: Possible stuck request ffff888027895080: control (read@0,1024B). Runtime 30 seconds
[  152.681213][ T1837] block nbd0: Possible stuck request ffff888027895240: control (read@1024,1024B). Runtime 30 seconds
[  152.692232][ T1837] block nbd0: Possible stuck request ffff888027895400: control (read@2048,1024B). Runtime 30 seconds
[  152.706362][ T1837] block nbd0: Possible stuck request ffff8880278955c0: control (read@3072,1024B). Runtime 30 seconds
[  152.801649][ T8126] __nla_validate_parse: 4 callbacks suppressed
[  152.801669][ T8126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.663'.
[  152.946214][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.662'.
[  152.989747][ T8139] Bluetooth: MGMT ver 1.23
[  153.117653][ T8144] netlink: 92 bytes leftover after parsing attributes in process `syz.4.668'.
[  153.405273][ T8151] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  153.669014][ T8165] netlink: 148 bytes leftover after parsing attributes in process `syz.2.676'.
[  153.741111][ T8168] netlink: 'syz.1.677': attribute type 1 has an invalid length.
[  153.870705][ T8174] netlink: 54 bytes leftover after parsing attributes in process `syz.4.678'.
[  153.900295][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.678'.
[  154.203732][ T8196] netlink: 'syz.2.685': attribute type 1 has an invalid length.
[  154.471403][ T8202] lo speed is unknown, defaulting to 1000
[  154.543894][ T8202] lo speed is unknown, defaulting to 1000
[  154.557089][ T8209] net_ratelimit: 354 callbacks suppressed
[  154.557112][ T8209] netlink: zone id is out of range
[  154.573195][ T8202] lo speed is unknown, defaulting to 1000
[  154.609211][ T8209] netlink: zone id is out of range
[  154.619317][ T8209] netlink: zone id is out of range
[  154.642564][ T8209] netlink: zone id is out of range
[  154.659762][ T8209] netlink: zone id is out of range
[  154.680270][ T8209] netlink: zone id is out of range
[  154.697701][ T8209] netlink: zone id is out of range
[  154.714432][ T8209] netlink: zone id is out of range
[  154.732175][ T8209] netlink: zone id is out of range
[  154.742301][ T8209] netlink: zone id is out of range
[  154.774707][ T8220] netlink: 68 bytes leftover after parsing attributes in process `syz.3.693'.
[  154.798898][ T8220] netlink: 12 bytes leftover after parsing attributes in process `syz.3.693'.
[  155.031666][ T8233] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.695'.
[  155.275017][ T8241] sctp: [Deprecated]: syz.4.698 (pid 8241) Use of int in maxseg socket option.
[  155.275017][ T8241] Use struct sctp_assoc_value instead
[  155.651842][ T8202] infiniband syz0: set down
[  155.659415][ T1223] lo speed is unknown, defaulting to 1000
[  155.680610][ T8202] infiniband syz0: added lo
[  155.740174][ T8202] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  155.756273][ T8202] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  155.774282][ T8202] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  155.851901][ T8202] RDS/IB: syz0: added
[  155.858849][ T8202] smc: adding ib device syz0 with port count 1
[  155.869975][ T8202] smc:    ib device syz0 port 1 has no pnetid
[  155.885732][ T1223] lo speed is unknown, defaulting to 1000
[  155.906691][ T8202] lo speed is unknown, defaulting to 1000
[  156.213733][ T8286] netlink: 329 bytes leftover after parsing attributes in process `syz.0.713'.
[  156.433688][ T8298] netlink: 'syz.0.716': attribute type 1 has an invalid length.
[  156.567716][ T8298] 8021q: adding VLAN 0 to HW filter on device bond5
[  156.598661][ T8298] netlink: 'syz.0.716': attribute type 1 has an invalid length.
[  156.618904][ T8299] vlan2: entered allmulticast mode
[  156.631419][ T8299] bond5: entered allmulticast mode
[  156.660175][ T8300] bond5: (slave geneve4): making interface the new active one
[  156.668297][ T8300] geneve4: entered allmulticast mode
[  156.680202][ T8300] bond5: (slave geneve4): Enslaving as an active interface with an up link
[  156.700042][ T8298] netlink: 'syz.0.716': attribute type 1 has an invalid length.
[  156.708540][ T8202] lo speed is unknown, defaulting to 1000
[  156.749203][ T8298] netlink: 'syz.0.716': attribute type 1 has an invalid length.
[  156.764417][ T8298] netlink: 'syz.0.716': attribute type 1 has an invalid length.
[  156.787443][ T8298] netlink: 'syz.0.716': attribute type 1 has an invalid length.
[  156.808347][ T8298] netlink: 'syz.0.716': attribute type 1 has an invalid length.
[  156.837671][ T8298] netlink: 'syz.0.716': attribute type 1 has an invalid length.
[  156.851351][ T8298] netlink: 'syz.0.716': attribute type 1 has an invalid length.
[  156.879427][ T8298] netlink: 'syz.0.716': attribute type 1 has an invalid length.
[  157.579975][ T8341] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  157.663074][ T8345] .`: renamed from bond0 (while UP)
[  157.678118][ T8202] lo speed is unknown, defaulting to 1000
[  157.737403][ T8334] bond6: (slave bridge2): making interface the new active one
[  157.746708][ T8334] bond6: (slave bridge2): Enslaving as an active interface with an up link
[  157.807468][ T8334] bond6: (slave bridge3): Enslaving as an active interface with a down link
[  157.828326][ T8346] __nla_validate_parse: 5 callbacks suppressed
[  157.828345][ T8346] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.725'.
[  157.904440][ T8334] bond6: (slave bridge4): Enslaving as an active interface with a down link
[  157.929124][ T8352] netlink: 56 bytes leftover after parsing attributes in process `syz.3.730'.
[  157.986527][ T8334] bond6: (slave bridge5): Enslaving as an active interface with a down link
[  158.001466][ T8355] netlink: 56 bytes leftover after parsing attributes in process `syz.3.730'.
[  158.040394][ T8334] bond6: (slave bridge6): Enslaving as an active interface with a down link
[  158.136177][ T8334] bond6: (slave bridge7): Enslaving as an active interface with a down link
[  158.219350][ T8334] bond6: (slave bridge8): Enslaving as an active interface with a down link
[  158.279934][ T8334] bond6: (slave bridge9): Enslaving as an active interface with a down link
[  158.301288][ T8367] ref_ctr_offset mismatch. inode: 0x78 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xc
[  158.359055][ T8334] bond6: (slave bridge10): Enslaving as an active interface with a down link
[  158.398831][ T8202] lo speed is unknown, defaulting to 1000
[  158.576405][ T8369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.734'.
[  158.645734][ T8380] netlink: 16 bytes leftover after parsing attributes in process `syz.0.735'.
[  158.950785][ T8388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.740'.
[  158.985033][ T8390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.739'.
[  158.998360][ T8388] xfrm1: entered promiscuous mode
[  159.017866][ T8388] xfrm1: entered allmulticast mode
[  159.030753][ T8394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.740'.
[  159.121362][ T8387] netlink: 96 bytes leftover after parsing attributes in process `syz.3.738'.
[  159.153137][ T8387] netlink: 1 bytes leftover after parsing attributes in process `syz.3.738'.
[  159.186973][ T8202] lo speed is unknown, defaulting to 1000
[  159.487251][ T8405] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  159.603235][ T5769] IPVS: starting estimator thread 0...
[  159.715689][ T8414] IPVS: using max 25 ests per chain, 60000 per kthread
[  159.899517][ T8426] sctp: [Deprecated]: syz.0.752 (pid 8426) Use of struct sctp_assoc_value in delayed_ack socket option.
[  159.899517][ T8426] Use struct sctp_sack_info instead
[  159.993813][ T8436] sctp: [Deprecated]: syz.0.752 (pid 8436) Use of int in max_burst socket option.
[  159.993813][ T8436] Use struct sctp_assoc_value instead
[  160.009578][ T8427] bond4: entered promiscuous mode
[  160.019995][ T8427] 8021q: adding VLAN 0 to HW filter on device bond4
[  160.586528][    T9] page_pool_release_retry() stalled pool shutdown: id 26, 1 inflight 60 sec
[  160.886057][ T8481] net_ratelimit: 110 callbacks suppressed
[  160.886077][ T8481] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  161.706113][ T5632] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  161.713041][ T8525] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  162.293083][ T8567] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  162.747863][ T8589] syzkaller1: entered promiscuous mode
[  162.767917][ T8589] syzkaller1: entered allmulticast mode
[  162.792482][ T6907] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0
[  162.822981][ T6907] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0
[  162.918390][ T8593] __nla_validate_parse: 17 callbacks suppressed
[  162.918418][ T8593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.805'.
[  162.951683][ T6907] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0
[  162.994365][ T6907] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0
[  163.238481][ T8618] validate_nla: 67 callbacks suppressed
[  163.238501][ T8618] netlink: 'syz.4.812': attribute type 1 has an invalid length.
[  163.280956][ T8615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.811'.
[  163.380829][ T8625] netlink: 'syz.4.813': attribute type 1 has an invalid length.
[  163.483197][ T8631] netlink: 'syz.3.815': attribute type 1 has an invalid length.
[  163.692461][ T8643] netlink: 'syz.2.820': attribute type 10 has an invalid length.
[  163.740092][ T8643] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  163.793011][ T8650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.819'.
[  163.803104][ T8643] batman_adv: batadv0: Removing interface: batadv_slave_0
[  163.818502][ T8643] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  163.833498][ T8643] batman_adv: batadv0: Removing interface: batadv_slave_1
[  163.860088][ T8643] batman_adv: batadv0: Interface deactivated: dummy0
[  163.873169][ T8652] xt_limit: Overflow, try lower: 604147548/4200216962
[  163.880737][ T8643] batman_adv: batadv0: Removing interface: dummy0
[  163.991828][   T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  164.002434][ T8650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.819'.
[  164.013572][   T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  164.028694][   T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  164.045802][   T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  164.461128][ T8679] netlink: zone id is out of range
[  164.478487][ T8679] netlink: zone id is out of range
[  164.503901][ T8679] netlink: zone id is out of range
[  164.516278][ T8679] netlink: zone id is out of range
[  164.528063][ T8679] netlink: zone id is out of range
[  164.557306][ T8679] netlink: zone id is out of range
[  164.576687][ T8679] netlink: zone id is out of range
[  164.746133][ T8686] netlink: 'syz.1.834': attribute type 64 has an invalid length.
[  164.779314][ T8686] netlink: 5 bytes leftover after parsing attributes in process `syz.1.834'.
[  165.020455][ T8698] netlink: 32 bytes leftover after parsing attributes in process `syz.4.840'.
[  165.129712][ T8705] netlink: 'syz.0.842': attribute type 21 has an invalid length.
[  165.149918][ T8705] netlink: 128 bytes leftover after parsing attributes in process `syz.0.842'.
[  165.171271][ T8705] netlink: 'syz.0.842': attribute type 5 has an invalid length.
[  165.193062][ T8705] netlink: 3 bytes leftover after parsing attributes in process `syz.0.842'.
[  165.203725][ T8712] netlink: 16 bytes leftover after parsing attributes in process `syz.0.842'.
[  165.449940][ T8723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.848'.
[  165.505059][ T8723] xt_TCPMSS: Only works on TCP SYN packets
[  165.570545][ T8726] xt_hashlimit: invalid rate
[  165.656338][ T8732] lo: entered promiscuous mode
[  165.671927][ T8732] tunl0: entered promiscuous mode
[  165.680352][ T8732] gre0: entered promiscuous mode
[  165.736488][ T8732] gretap0: entered promiscuous mode
[  165.868728][ T8732] erspan0: entered promiscuous mode
[  165.903321][ T8732] ip_vti0: entered promiscuous mode
[  166.123340][ T8757] netlink: 'syz.0.857': attribute type 1 has an invalid length.
[  166.137665][ T8756] netlink: 'syz.3.858': attribute type 1 has an invalid length.
[  166.216492][ T8756] 8021q: adding VLAN 0 to HW filter on device bond2
[  166.260645][ T8756] bond2: (slave batadv1): Opening slave failed
[  166.438628][ T8779] net_ratelimit: 114 callbacks suppressed
[  166.438650][ T8779] netlink: zone id is out of range
[  166.461419][ T8779] netlink: zone id is out of range
[  166.468436][ T8779] netlink: zone id is out of range
[  166.473793][ T8779] netlink: zone id is out of range
[  166.486521][ T8779] netlink: zone id is out of range
[  166.491701][ T8779] netlink: zone id is out of range
[  166.498470][ T8779] netlink: zone id is out of range
[  166.503646][ T8779] netlink: zone id is out of range
[  166.509521][ T8779] netlink: zone id is out of range
[  166.565426][ T8779] netlink: zone id is out of range
[  168.135064][ T8879] netlink: 'syz.4.884': attribute type 1 has an invalid length.
[  168.169939][ T8879] bond5: entered promiscuous mode
[  168.175577][ T8879] 8021q: adding VLAN 0 to HW filter on device bond5
[  168.260348][ T8880] 8021q: adding VLAN 0 to HW filter on device bond5
[  168.270660][ T8880] bond5: (slave ip6gre2): The slave device specified does not support setting the MAC address
[  168.282376][ T8880] bond5: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode
[  168.297010][ T8880] bond5: (slave ip6gre2): making interface the new active one
[  168.306010][ T8880] ip6gre2: entered promiscuous mode
[  168.312836][ T8880] bond5: (slave ip6gre2): Enslaving as an active interface with an up link
[  182.745503][ T1837] block nbd0: Possible stuck request ffff888027895080: control (read@0,1024B). Runtime 60 seconds
[  182.756942][ T1837] block nbd0: Possible stuck request ffff888027895240: control (read@1024,1024B). Runtime 60 seconds
[  182.768440][ T1837] block nbd0: Possible stuck request ffff888027895400: control (read@2048,1024B). Runtime 60 seconds
[  182.779829][ T1837] block nbd0: Possible stuck request ffff8880278955c0: control (read@3072,1024B). Runtime 60 seconds
[  182.999749][   T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  183.010764][   T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  183.020675][   T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  183.039228][   T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  183.047962][   T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  183.150347][ T5632] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  183.167496][ T5632] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  183.178969][ T5632] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  183.190065][ T5632] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  183.199208][ T5632] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  183.247397][ T5632] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  183.261461][ T5632] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  183.273738][ T5632] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  183.285562][ T5632] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  183.298008][ T5632] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  183.818348][ T8898] lo speed is unknown, defaulting to 1000
[  184.087956][ T8904] lo speed is unknown, defaulting to 1000
[  184.273060][ T5632] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  184.287183][ T5632] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  184.304311][ T5632] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  184.312209][ T5638] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  184.324755][ T5632] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  184.328365][ T5638] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  184.339784][ T5632] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  184.349848][ T5638] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  184.361044][ T5638] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  184.369197][ T5638] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  184.642470][ T8901] lo speed is unknown, defaulting to 1000
[  185.146265][ T5638] Bluetooth: hci5: command tx timeout
[  185.183753][ T8898] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.201573][ T8898] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.209483][ T8898] bridge_slave_0: entered allmulticast mode
[  185.218359][ T8898] bridge_slave_0: entered promiscuous mode
[  185.225470][ T5638] Bluetooth: hci6: command tx timeout
[  185.261164][ T8898] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.270369][ T8898] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.278373][ T8898] bridge_slave_1: entered allmulticast mode
[  185.289012][ T8898] bridge_slave_1: entered promiscuous mode
[  185.384392][ T5638] Bluetooth: hci7: command tx timeout
[  185.400992][ T8898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  185.430386][ T8932] lo speed is unknown, defaulting to 1000
[  185.439066][ T8898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  185.519998][ T8898] team0: Port device team_slave_0 added
[  185.570645][ T8898] team0: Port device team_slave_1 added
[  185.647097][ T8904] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.657032][ T8904] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.665056][ T8904] bridge_slave_0: entered allmulticast mode
[  185.673174][ T8904] bridge_slave_0: entered promiscuous mode
[  185.681969][ T8898] batman_adv: batadv0: Adding interface: batadv_slave_0
[  185.690560][ T8898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  185.723731][ T8898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  185.739275][ T8898] batman_adv: batadv0: Adding interface: batadv_slave_1
[  185.746655][ T8898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  185.772926][ T8898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  185.785052][ T8904] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.792266][ T8904] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.800283][ T8904] bridge_slave_1: entered allmulticast mode
[  185.808344][ T8904] bridge_slave_1: entered promiscuous mode
[  185.845951][ T8931] lo speed is unknown, defaulting to 1000
[  185.852446][ T8904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  185.910639][ T8904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  186.020520][ T8904] team0: Port device team_slave_0 added
[  186.030105][ T8904] team0: Port device team_slave_1 added
[  186.121578][ T8898] hsr_slave_0: entered promiscuous mode
[  186.128736][ T8898] hsr_slave_1: entered promiscuous mode
[  186.135938][ T8898] debugfs: 'hsr0' already exists in 'hsr'
[  186.142811][ T8898] Cannot create hsr debugfs directory
[  186.167382][ T8904] batman_adv: batadv0: Adding interface: batadv_slave_0
[  186.175322][ T8904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  186.202083][ T8904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  186.220051][ T8904] batman_adv: batadv0: Adding interface: batadv_slave_1
[  186.227311][ T8904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  186.256068][ T8904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  186.377789][ T8904] hsr_slave_0: entered promiscuous mode
[  186.385244][ T8904] hsr_slave_1: entered promiscuous mode
[  186.391693][ T8904] debugfs: 'hsr0' already exists in 'hsr'
[  186.397760][ T8904] Cannot create hsr debugfs directory
[  186.424583][ T5638] Bluetooth: hci9: command tx timeout
[  186.429558][ T5642] Bluetooth: hci8: command tx timeout
[  186.741403][ T8901] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.753819][ T8901] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.763434][ T8901] bridge_slave_0: entered allmulticast mode
[  186.772618][ T8901] bridge_slave_0: entered promiscuous mode
[  186.797951][ T8901] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.809930][ T8901] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.818223][ T8901] bridge_slave_1: entered allmulticast mode
[  186.827027][ T8901] bridge_slave_1: entered promiscuous mode
[  186.971100][ T8901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  187.018682][ T8901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  187.102361][ T8901] team0: Port device team_slave_0 added
[  187.111916][ T8901] team0: Port device team_slave_1 added
[  187.214329][ T8901] batman_adv: batadv0: Adding interface: batadv_slave_0
[  187.221614][ T8901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  187.249175][ T5642] Bluetooth: hci5: command tx timeout
[  187.256076][ T8901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  187.271824][ T8901] batman_adv: batadv0: Adding interface: batadv_slave_1
[  187.279891][ T8901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  187.306828][ T5642] Bluetooth: hci6: command tx timeout
[  187.312493][ T8901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  187.355618][ T8932] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.362881][ T8932] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.372058][ T8932] bridge_slave_0: entered allmulticast mode
[  187.379707][ T8932] bridge_slave_0: entered promiscuous mode
[  187.426624][ T8932] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.433884][ T8932] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.441396][ T8932] bridge_slave_1: entered allmulticast mode
[  187.449225][ T8932] bridge_slave_1: entered promiscuous mode
[  187.464138][ T5642] Bluetooth: hci7: command tx timeout
[  187.518524][ T8901] hsr_slave_0: entered promiscuous mode
[  187.525229][ T8901] hsr_slave_1: entered promiscuous mode
[  187.531537][ T8901] debugfs: 'hsr0' already exists in 'hsr'
[  187.537435][ T8901] Cannot create hsr debugfs directory
[  187.586875][ T8932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  187.635968][ T8932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  187.669615][ T8931] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.677996][ T8931] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.685366][ T8931] bridge_slave_0: entered allmulticast mode
[  187.692723][ T8931] bridge_slave_0: entered promiscuous mode
[  187.723142][ T8931] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.731728][ T8931] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.739890][ T8931] bridge_slave_1: entered allmulticast mode
[  187.747932][ T8931] bridge_slave_1: entered promiscuous mode
[  187.791169][ T8932] team0: Port device team_slave_0 added
[  187.816501][ T8932] team0: Port device team_slave_1 added
[  187.831024][ T8931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  187.862752][ T8931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  187.922634][ T8932] batman_adv: batadv0: Adding interface: batadv_slave_0
[  187.930013][ T8932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  187.957169][ T8932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  187.982394][ T8931] team0: Port device team_slave_0 added
[  187.990742][ T8932] batman_adv: batadv0: Adding interface: batadv_slave_1
[  187.998571][ T8932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  188.025523][ T8932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  188.052978][ T8931] team0: Port device team_slave_1 added
[  188.094856][ T8931] batman_adv: batadv0: Adding interface: batadv_slave_0
[  188.101863][ T8931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  188.128672][ T8931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  188.158147][ T8931] batman_adv: batadv0: Adding interface: batadv_slave_1
[  188.165467][ T8931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  188.193360][ T8931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  188.239235][ T8932] hsr_slave_0: entered promiscuous mode
[  188.246930][ T8932] hsr_slave_1: entered promiscuous mode
[  188.253635][ T8932] debugfs: 'hsr0' already exists in 'hsr'
[  188.259619][ T8932] Cannot create hsr debugfs directory
[  188.316167][ T8931] hsr_slave_0: entered promiscuous mode
[  188.322703][ T8931] hsr_slave_1: entered promiscuous mode
[  188.329441][ T8931] debugfs: 'hsr0' already exists in 'hsr'
[  188.335370][ T8931] Cannot create hsr debugfs directory
[  188.506522][ T5642] Bluetooth: hci8: command tx timeout
[  188.512561][ T5638] Bluetooth: hci9: command tx timeout
[  189.304251][ T5638] Bluetooth: hci5: command tx timeout
[  189.384246][ T5638] Bluetooth: hci6: command tx timeout
[  189.544150][ T5638] Bluetooth: hci7: command tx timeout
[  190.584225][ T5642] Bluetooth: hci8: command tx timeout
[  190.584455][ T5638] Bluetooth: hci9: command tx timeout
[  191.385622][ T5642] Bluetooth: hci5: command tx timeout
[  191.464107][ T5642] Bluetooth: hci6: command tx timeout
[  191.624398][ T5642] Bluetooth: hci7: command tx timeout
[  191.734153][ T4995] udevd[4995]: worker [5735] /devices/virtual/block/nbd0 is taking a long time
[  192.664061][ T5642] Bluetooth: hci8: command tx timeout
[  192.674365][ T5642] Bluetooth: hci9: command tx timeout
[  194.265925][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  211.710656][ T5638] Bluetooth: hci2: command 0x0406 tx timeout
[  211.714333][ T5642] Bluetooth: hci3: command 0x0406 tx timeout
[  211.719551][ T5646] Bluetooth: hci1: command 0x0406 tx timeout
[  212.826227][ T1837] block nbd0: Possible stuck request ffff888027895080: control (read@0,1024B). Runtime 90 seconds
[  212.837092][ T1837] block nbd0: Possible stuck request ffff888027895240: control (read@1024,1024B). Runtime 90 seconds
[  212.848429][ T1837] block nbd0: Possible stuck request ffff888027895400: control (read@2048,1024B). Runtime 90 seconds
[  212.860157][ T1837] block nbd0: Possible stuck request ffff8880278955c0: control (read@3072,1024B). Runtime 90 seconds
[  227.064866][   T50] Bluetooth: hci4: command 0x0405 tx timeout
[  242.914473][ T1837] block nbd0: Possible stuck request ffff888027895080: control (read@0,1024B). Runtime 120 seconds
[  242.925842][ T1837] block nbd0: Possible stuck request ffff888027895240: control (read@1024,1024B). Runtime 120 seconds
[  242.940909][ T1837] block nbd0: Possible stuck request ffff888027895400: control (read@2048,1024B). Runtime 120 seconds
[  242.952903][ T1837] block nbd0: Possible stuck request ffff8880278955c0: control (read@3072,1024B). Runtime 120 seconds
[  243.012269][   T50] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  243.022465][   T50] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  243.031812][   T50] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  243.042101][   T50] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  243.050839][   T50] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  243.337426][ T8987] lo speed is unknown, defaulting to 1000
[  243.726854][ T8987] bridge0: port 1(bridge_slave_0) entered blocking state
[  243.734548][ T8987] bridge0: port 1(bridge_slave_0) entered disabled state
[  243.741748][ T8987] bridge_slave_0: entered allmulticast mode
[  243.749905][ T8987] bridge_slave_0: entered promiscuous mode
[  243.757899][ T8987] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.765593][ T8987] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.772995][ T8987] bridge_slave_1: entered allmulticast mode
[  243.781483][ T8987] bridge_slave_1: entered promiscuous mode
[  243.815849][ T8987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  243.828184][ T8987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  243.860862][ T8987] team0: Port device team_slave_0 added
[  243.869178][ T8987] team0: Port device team_slave_1 added
[  243.908712][ T8987] batman_adv: batadv0: Adding interface: batadv_slave_0
[  243.916065][ T8987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  243.942111][ T8987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  243.959632][ T8987] batman_adv: batadv0: Adding interface: batadv_slave_1
[  243.966817][ T8987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  243.993348][ T8987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  244.073685][ T8987] hsr_slave_0: entered promiscuous mode
[  244.088712][ T8987] hsr_slave_1: entered promiscuous mode
[  244.102371][ T8987] debugfs: 'hsr0' already exists in 'hsr'
[  244.124483][ T8987] Cannot create hsr debugfs directory
[  244.194584][   T50] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  244.205379][   T50] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  244.216792][   T50] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  244.226521][   T50] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  244.236994][   T50] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  244.319292][   T50] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  244.329662][   T50] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  244.337992][   T50] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  244.346792][   T50] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  244.356405][   T50] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  244.820172][ T9006] lo speed is unknown, defaulting to 1000
[  245.145727][ T5636] Bluetooth: hci10: command tx timeout
[  245.196217][ T9009] lo speed is unknown, defaulting to 1000
[  245.218931][   T50] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  245.238783][   T50] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  245.247798][   T50] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  245.259288][   T50] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  245.267910][   T50] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  245.427049][ T5636] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  245.442722][ T5636] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  245.459203][ T5636] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  245.475709][ T5636] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  245.485834][ T5636] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  246.080906][ T9028] lo speed is unknown, defaulting to 1000
[  246.130446][ T9006] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.144375][ T9006] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.163100][ T9006] bridge_slave_0: entered allmulticast mode
[  246.177831][ T9006] bridge_slave_0: entered promiscuous mode
[  246.203766][ T9006] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.211564][ T9006] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.221077][ T9006] bridge_slave_1: entered allmulticast mode
[  246.232146][ T9006] bridge_slave_1: entered promiscuous mode
[  246.343062][ T9006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  246.353251][ T5636] Bluetooth: hci11: command tx timeout
[  246.371278][ T9006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  246.428850][ T5636] Bluetooth: hci12: command tx timeout
[  246.476163][ T9006] team0: Port device team_slave_0 added
[  246.491861][ T9032] lo speed is unknown, defaulting to 1000
[  246.522302][ T9006] team0: Port device team_slave_1 added
[  246.642708][ T9006] batman_adv: batadv0: Adding interface: batadv_slave_0
[  246.650059][ T9006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  246.679915][ T9006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  246.698802][ T9006] batman_adv: batadv0: Adding interface: batadv_slave_1
[  246.706393][ T9006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  246.769364][ T9006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  246.847655][ T9009] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.855411][ T9009] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.862899][ T9009] bridge_slave_0: entered allmulticast mode
[  246.872325][ T9009] bridge_slave_0: entered promiscuous mode
[  246.899114][ T9009] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.906560][ T9009] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.913770][ T9009] bridge_slave_1: entered allmulticast mode
[  246.923323][ T9009] bridge_slave_1: entered promiscuous mode
[  246.985750][ T9009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  247.027049][ T9009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  247.042886][ T9006] hsr_slave_0: entered promiscuous mode
[  247.049739][ T9006] hsr_slave_1: entered promiscuous mode
[  247.058152][ T9006] debugfs: 'hsr0' already exists in 'hsr'
[  247.065601][ T9006] Cannot create hsr debugfs directory
[  247.140044][ T9009] team0: Port device team_slave_0 added
[  247.171730][ T9009] team0: Port device team_slave_1 added
[  247.222498][ T9009] batman_adv: batadv0: Adding interface: batadv_slave_0
[  247.230543][ T9009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  247.232450][ T5636] Bluetooth: hci10: command tx timeout
[  247.262272][ T9009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  247.297418][ T9009] batman_adv: batadv0: Adding interface: batadv_slave_1
[  247.305440][ T9009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  247.332395][ T9009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  247.387640][ T5636] Bluetooth: hci13: command tx timeout
[  247.543299][ T9009] hsr_slave_0: entered promiscuous mode
[  247.544612][ T5636] Bluetooth: hci14: command tx timeout
[  247.556788][ T9009] hsr_slave_1: entered promiscuous mode
[  247.563079][ T9009] debugfs: 'hsr0' already exists in 'hsr'
[  247.569079][ T9009] Cannot create hsr debugfs directory
[  247.768420][ T9028] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.775814][ T9028] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.783038][ T9028] bridge_slave_0: entered allmulticast mode
[  247.792736][ T9028] bridge_slave_0: entered promiscuous mode
[  247.800959][ T9028] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.808432][ T9028] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.816484][ T9028] bridge_slave_1: entered allmulticast mode
[  247.824063][ T9028] bridge_slave_1: entered promiscuous mode
[  247.931265][ T9028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  247.964892][ T9028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  248.031224][ T9032] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.039031][ T9032] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.046515][ T9032] bridge_slave_0: entered allmulticast mode
[  248.055276][ T9032] bridge_slave_0: entered promiscuous mode
[  248.091137][ T9032] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.099617][ T9032] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.107852][ T9032] bridge_slave_1: entered allmulticast mode
[  248.115917][ T9032] bridge_slave_1: entered promiscuous mode
[  248.125914][ T9028] team0: Port device team_slave_0 added
[  248.136286][ T9028] team0: Port device team_slave_1 added
[  248.208893][ T9032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  248.243471][ T9032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  248.277013][ T9028] batman_adv: batadv0: Adding interface: batadv_slave_0
[  248.284724][ T9028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  248.314730][ T9028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  248.351241][ T9028] batman_adv: batadv0: Adding interface: batadv_slave_1
[  248.359872][ T9028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  248.386542][ T9028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  248.410741][ T9032] team0: Port device team_slave_0 added
[  248.424165][ T5636] Bluetooth: hci11: command tx timeout
[  248.440603][ T9032] team0: Port device team_slave_1 added
[  248.496512][ T9028] hsr_slave_0: entered promiscuous mode
[  248.504622][ T5636] Bluetooth: hci12: command tx timeout
[  248.512262][ T9028] hsr_slave_1: entered promiscuous mode
[  248.519455][ T9028] debugfs: 'hsr0' already exists in 'hsr'
[  248.525462][ T9028] Cannot create hsr debugfs directory
[  248.531768][ T9032] batman_adv: batadv0: Adding interface: batadv_slave_0
[  248.539738][ T9032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  248.566184][ T9032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  248.591633][ T9032] batman_adv: batadv0: Adding interface: batadv_slave_1
[  248.599559][ T9032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  248.627132][ T9032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  248.741165][ T9032] hsr_slave_0: entered promiscuous mode
[  248.750994][ T9032] hsr_slave_1: entered promiscuous mode
[  248.759272][ T9032] debugfs: 'hsr0' already exists in 'hsr'
[  248.765272][ T9032] Cannot create hsr debugfs directory
[  249.304292][ T5636] Bluetooth: hci10: command tx timeout
[  249.465319][ T5636] Bluetooth: hci13: command tx timeout
[  249.624358][ T5636] Bluetooth: hci14: command tx timeout
[  250.504186][ T5636] Bluetooth: hci11: command tx timeout
[  250.584507][   T50] Bluetooth: hci12: command tx timeout
[  251.384983][   T50] Bluetooth: hci10: command tx timeout
[  251.544074][   T50] Bluetooth: hci13: command tx timeout
[  251.704514][   T50] Bluetooth: hci14: command tx timeout
[  252.584470][   T50] Bluetooth: hci11: command tx timeout
[  252.664160][   T50] Bluetooth: hci12: command tx timeout
[  253.634141][   T50] Bluetooth: hci13: command tx timeout
[  253.784394][   T50] Bluetooth: hci14: command tx timeout
[  255.705420][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  272.984346][ T1837] block nbd0: Possible stuck request ffff888027895080: control (read@0,1024B). Runtime 150 seconds
[  272.995637][ T1837] block nbd0: Possible stuck request ffff888027895240: control (read@1024,1024B). Runtime 150 seconds
[  273.007402][ T1837] block nbd0: Possible stuck request ffff888027895400: control (read@2048,1024B). Runtime 150 seconds
[  273.018528][ T1837] block nbd0: Possible stuck request ffff8880278955c0: control (read@3072,1024B). Runtime 150 seconds
[  303.037810][ T5636] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  303.046576][ T5636] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  303.057054][ T5636] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  303.068269][ T5636] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  303.079066][ T1837] block nbd0: Possible stuck request ffff888027895080: control (read@0,1024B). Runtime 180 seconds
[  303.093156][ T1837] block nbd0: Possible stuck request ffff888027895240: control (read@1024,1024B). Runtime 180 seconds
[  303.104536][ T1837] block nbd0: Possible stuck request ffff888027895400: control (read@2048,1024B). Runtime 180 seconds
[  303.113463][ T5636] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  303.117040][ T1837] block nbd0: Possible stuck request ffff8880278955c0: control (read@3072,1024B). Runtime 180 seconds
[  303.394882][ T9083] lo speed is unknown, defaulting to 1000
[  303.770739][ T9083] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.778064][ T9083] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.786716][ T9083] bridge_slave_0: entered allmulticast mode
[  303.794750][ T9083] bridge_slave_0: entered promiscuous mode
[  303.803712][ T9083] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.811223][ T9083] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.818930][ T9083] bridge_slave_1: entered allmulticast mode
[  303.826458][ T9083] bridge_slave_1: entered promiscuous mode
[  303.858014][ T9083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  303.871061][ T9083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  303.906236][ T9083] team0: Port device team_slave_0 added
[  303.915125][ T9083] team0: Port device team_slave_1 added
[  303.942403][ T9083] batman_adv: batadv0: Adding interface: batadv_slave_0
[  303.951526][ T9083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  303.978429][ T9083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  303.992321][ T9083] batman_adv: batadv0: Adding interface: batadv_slave_1
[  303.999361][ T9083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  304.028732][ T9083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  304.109387][ T9083] hsr_slave_0: entered promiscuous mode
[  304.117229][ T9083] hsr_slave_1: entered promiscuous mode
[  304.124811][ T9083] debugfs: 'hsr0' already exists in 'hsr'
[  304.130611][ T9083] Cannot create hsr debugfs directory
[  304.187542][   T50] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  304.200492][   T50] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  304.210613][   T50] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  304.219636][   T50] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  304.233640][   T50] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  304.611996][   T50] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  304.625024][   T50] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  304.633483][   T50] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  304.646641][   T50] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  304.656830][   T50] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  304.811612][ T9101] lo speed is unknown, defaulting to 1000
[  305.140223][ T9111] lo speed is unknown, defaulting to 1000
[  305.146152][ T5636] Bluetooth: hci15: command tx timeout
[  305.441137][ T9101] bridge0: port 1(bridge_slave_0) entered blocking state
[  305.449015][ T9101] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.456758][ T9101] bridge_slave_0: entered allmulticast mode
[  305.466987][ T9101] bridge_slave_0: entered promiscuous mode
[  305.476172][ T9101] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.483444][ T9101] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.491101][ T9101] bridge_slave_1: entered allmulticast mode
[  305.499339][ T9101] bridge_slave_1: entered promiscuous mode
[  305.580762][ T9101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  305.601839][ T9101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  305.653730][ T9101] team0: Port device team_slave_0 added
[  305.665941][ T9101] team0: Port device team_slave_1 added
[  305.799832][   T50] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  305.809885][   T50] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  305.819173][ T9101] batman_adv: batadv0: Adding interface: batadv_slave_0
[  305.829710][   T50] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  305.839023][   T50] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  305.853250][   T50] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  305.865621][ T9101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  305.897846][ T5636] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1
[  305.911117][ T5636] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9
[  305.912191][ T9101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  305.929434][ T5636] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9
[  305.940516][ T5636] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4
[  305.952658][ T5636] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2
[  305.975182][ T9101] batman_adv: batadv0: Adding interface: batadv_slave_1
[  305.994934][ T9101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  306.031164][ T9101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  306.126791][ T9101] hsr_slave_0: entered promiscuous mode
[  306.133601][ T9101] hsr_slave_1: entered promiscuous mode
[  306.140145][ T9101] debugfs: 'hsr0' already exists in 'hsr'
[  306.146672][ T9101] Cannot create hsr debugfs directory
[  306.269003][   T50] Bluetooth: hci16: command tx timeout
[  306.649521][ T9111] bridge0: port 1(bridge_slave_0) entered blocking state
[  306.662639][ T9111] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.674799][ T9111] bridge_slave_0: entered allmulticast mode
[  306.682719][ T9111] bridge_slave_0: entered promiscuous mode
[  306.693042][ T9111] bridge0: port 2(bridge_slave_1) entered blocking state
[  306.705045][ T9111] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.712384][ T9111] bridge_slave_1: entered allmulticast mode
[  306.722206][ T9111] bridge_slave_1: entered promiscuous mode
[  306.745645][   T50] Bluetooth: hci17: command tx timeout
[  306.783822][ T9111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  306.810449][ T9111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  306.849633][ T9132] lo speed is unknown, defaulting to 1000
[  306.856384][ T9111] team0: Port device team_slave_0 added
[  306.894673][ T9111] team0: Port device team_slave_1 added
[  306.961210][ T9111] batman_adv: batadv0: Adding interface: batadv_slave_0
[  306.968564][ T9111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  306.996693][ T9111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  307.010239][ T9111] batman_adv: batadv0: Adding interface: batadv_slave_1
[  307.018193][ T9111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  307.045325][ T9111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  307.184419][ T9111] hsr_slave_0: entered promiscuous mode
[  307.191329][ T9111] hsr_slave_1: entered promiscuous mode
[  307.198681][ T9111] debugfs: 'hsr0' already exists in 'hsr'
[  307.205145][ T9111] Cannot create hsr debugfs directory
[  307.224128][ T4945] Bluetooth: hci15: command tx timeout
[  307.235649][ T9135] lo speed is unknown, defaulting to 1000
[  307.919934][ T9132] bridge0: port 1(bridge_slave_0) entered blocking state
[  307.927594][ T9132] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.936102][ T9132] bridge_slave_0: entered allmulticast mode
[  307.943443][ T9132] bridge_slave_0: entered promiscuous mode
[  307.950214][ T4945] Bluetooth: hci18: command tx timeout
[  307.966501][ T9132] bridge0: port 2(bridge_slave_1) entered blocking state
[  307.973778][ T9132] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.983490][ T9132] bridge_slave_1: entered allmulticast mode
[  307.991748][ T9132] bridge_slave_1: entered promiscuous mode
[  308.034777][ T4945] Bluetooth: hci19: command tx timeout
[  308.083810][ T9135] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.091400][ T9135] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.101224][ T9135] bridge_slave_0: entered allmulticast mode
[  308.109986][ T9135] bridge_slave_0: entered promiscuous mode
[  308.121083][ T9132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  308.141550][ T9135] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.149038][ T9135] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.158338][ T9135] bridge_slave_1: entered allmulticast mode
[  308.166996][ T9135] bridge_slave_1: entered promiscuous mode
[  308.191750][ T9132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  308.253215][ T9135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  308.267539][ T9132] team0: Port device team_slave_0 added
[  308.277569][ T9135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  308.288856][ T9132] team0: Port device team_slave_1 added
[  308.341344][ T9132] batman_adv: batadv0: Adding interface: batadv_slave_0
[  308.348862][ T9132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  308.354219][ T4945] Bluetooth: hci16: command tx timeout
[  308.376023][ T9132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  308.418765][ T9132] batman_adv: batadv0: Adding interface: batadv_slave_1
[  308.426377][ T9132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  308.453442][ T9132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  308.475925][ T9135] team0: Port device team_slave_0 added
[  308.499467][ T9135] team0: Port device team_slave_1 added
[  308.550093][ T9132] hsr_slave_0: entered promiscuous mode
[  308.556978][ T9132] hsr_slave_1: entered promiscuous mode
[  308.563341][ T9132] debugfs: 'hsr0' already exists in 'hsr'
[  308.570057][ T9132] Cannot create hsr debugfs directory
[  308.576658][ T9135] batman_adv: batadv0: Adding interface: batadv_slave_0
[  308.583623][ T9135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  308.611290][ T9135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  308.624253][ T9135] batman_adv: batadv0: Adding interface: batadv_slave_1
[  308.631251][ T9135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  308.658198][ T9135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  308.754294][ T9135] hsr_slave_0: entered promiscuous mode
[  308.760786][ T9135] hsr_slave_1: entered promiscuous mode
[  308.767848][ T9135] debugfs: 'hsr0' already exists in 'hsr'
[  308.773693][ T9135] Cannot create hsr debugfs directory
[  308.825441][ T4945] Bluetooth: hci17: command tx timeout
[  308.984138][ T4945] Bluetooth: hci6: command 0x0406 tx timeout
[  308.990432][ T4945] Bluetooth: hci7: command 0x0406 tx timeout
[  308.997297][ T5645] Bluetooth: hci9: command 0x0406 tx timeout
[  308.997359][ T5645] Bluetooth: hci8: command 0x0406 tx timeout
[  308.997399][ T5645] Bluetooth: hci5: command 0x0406 tx timeout
[  309.304369][ T5638] Bluetooth: hci15: command tx timeout
[  310.024328][ T5638] Bluetooth: hci18: command tx timeout
[  310.104470][ T5638] Bluetooth: hci19: command tx timeout
[  310.424076][ T5638] Bluetooth: hci16: command tx timeout
[  310.904732][ T5638] Bluetooth: hci17: command tx timeout
[  311.384299][ T5638] Bluetooth: hci15: command tx timeout
[  312.104618][ T5638] Bluetooth: hci18: command tx timeout
[  312.184555][ T5638] Bluetooth: hci19: command tx timeout
[  312.504620][ T5638] Bluetooth: hci16: command tx timeout
[  312.625125][ T4995] udevd[4995]: worker [5735] /devices/virtual/block/nbd0 timeout; kill it
[  312.633867][ T4995] udevd[4995]: seq 11577 '/devices/virtual/block/nbd0' killed
[  312.985332][ T5638] Bluetooth: hci17: command tx timeout
[  314.184486][ T5638] Bluetooth: hci18: command tx timeout
[  314.264377][ T5638] Bluetooth: hci19: command tx timeout
[  317.147231][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  327.388163][   T31] INFO: task syz.2.877:8835 blocked for more than 143 seconds.
[  327.400453][   T31]       Not tainted syzkaller #0
[  327.405955][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  327.414802][   T31] task:syz.2.877       state:D stack:25464 pid:8835  tgid:8834  ppid:5637   task_flags:0x400140 flags:0x00080002
[  327.426915][   T31] Call Trace:
[  327.430233][   T31]  <TASK>
[  327.433199][   T31]  __schedule+0x17b4/0x5680
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  327.438158][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  327.443986][   T31]  ? __pfx___schedule+0x10/0x10
[  327.450864][   T31]  ? schedule+0x90/0x360
[  327.457905][   T31]  schedule+0x164/0x360
[  327.462141][   T31]  schedule_preempt_disabled+0x13/0x30
[  327.468112][   T31]  __mutex_lock+0x7f7/0x1550
[  327.472787][   T31]  ? __mutex_lock+0x608/0x1550
[  327.480384][   T31]  ? genl_rcv_msg+0x10b/0x7a0
[  327.486347][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  327.492047][   T31]  ? radix_tree_lookup+0x240/0x290
[  327.497749][   T31]  genl_rcv_msg+0x10b/0x7a0
[  327.502330][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  327.510166][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  327.517576][   T31]  ? __asan_memcpy+0x40/0x70
[  327.522250][   T31]  ? __skb_clone+0x63/0x7a0
[  327.527252][   T31]  netlink_rcv_skb+0x232/0x4b0
[  327.532100][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  327.537686][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  327.548611][   T31]  ? down_read+0x270/0x2e0
[  327.553097][   T31]  ? genl_rcv+0xd/0x40
[  327.559167][   T31]  genl_rcv+0x28/0x40
[  327.563365][   T31]  netlink_unicast+0x75c/0x8e0
[  327.568738][   T31]  netlink_sendmsg+0x813/0xb40
[  327.573590][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  327.585974][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  327.596325][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  327.609726][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  327.627234][   T31]  __sys_sendto+0x672/0x710
[  327.633049][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  327.642692][   T31]  ? fd_install+0x94/0x3d0
[  327.647605][   T31]  ? fd_install+0x306/0x3d0
[  327.652197][   T31]  __x64_sys_sendto+0xde/0x100
[  327.659221][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.666563][   T31]  do_syscall_64+0x15f/0xf80
[  327.671239][   T31]  ? clear_bhb_loop+0x40/0x90
[  327.676663][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.682643][   T31] RIP: 0033:0x7f2704b5d60e
[  327.687734][   T31] RSP: 002b:00007f27059a4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  327.700326][   T31] RAX: ffffffffffffffda RBX: 00007f27059a66c0 RCX: 00007f2704b5d60e
[  327.708622][   T31] RDX: 0000000000000020 RSI: 00007f27059a5000 RDI: 000000000000000f
[  327.716953][   T31] RBP: 0000000000000000 R08: 00007f27059a4f04 R09: 000000000000000c
[  327.725115][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000f
[  327.733142][   T31] R13: 00007f27059a4f58 R14: 00007f27059a5000 R15: 0000000000000000
[  327.741377][   T31]  </TASK>
[  327.744874][   T31] INFO: task syz.3.878:8838 blocked for more than 143 seconds.
[  327.752485][   T31]       Not tainted syzkaller #0
[  327.757582][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  327.767879][   T31] task:syz.3.878       state:D stack:26328 pid:8838  tgid:8836  ppid:5628   task_flags:0x480140 flags:0x00080002
[  327.780257][   T31] Call Trace:
[  327.783601][   T31]  <TASK>
[  327.788571][   T31]  __schedule+0x17b4/0x5680
[  327.793200][   T31]  ? __pfx___schedule+0x10/0x10
[  327.798762][   T31]  ? schedule+0x90/0x360
[  327.803084][   T31]  schedule+0x164/0x360
[  327.808021][   T31]  blk_mq_freeze_queue_wait+0x101/0x180
[  327.813630][   T31]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[  327.820419][   T31]  ? queue_limits_commit_update_frozen+0x55/0xd0
[  327.826963][   T31]  ? __pfx_autoremove_wake_function+0x10/0x10
[  327.833089][   T31]  queue_limits_commit_update_frozen+0x55/0xd0
[  327.839451][   T31]  nbd_set_size+0x454/0x680
[  327.844994][   T31]  ? __pfx_nbd_set_size+0x10/0x10
[  327.850119][   T31]  ? nla_memcpy+0x5b/0xc0
[  327.854671][   T31]  nbd_genl_reconfigure+0x7f5/0x1ea0
[  327.860013][   T31]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  327.866845][   T31]  ? rcu_is_watching+0x15/0xb0
[  327.871676][   T31]  ? trace_kmalloc+0x2a/0xf0
[  327.877049][   T31]  ? __nla_parse+0x40/0x60
[  327.881532][   T31]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  327.887978][   T31]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  327.894881][   T31]  genl_family_rcv_msg_doit+0x22a/0x330
[  327.900515][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  327.907292][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  327.912266][   T31]  genl_rcv_msg+0x61c/0x7a0
[  327.917167][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  327.922244][   T31]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  327.928131][   T31]  netlink_rcv_skb+0x232/0x4b0
[  327.932953][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  327.938620][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  327.944177][   T31]  ? down_read+0x270/0x2e0
[  327.948666][   T31]  ? genl_rcv+0xd/0x40
[  327.952782][   T31]  genl_rcv+0x28/0x40
[  327.956896][   T31]  netlink_unicast+0x75c/0x8e0
[  327.961718][   T31]  netlink_sendmsg+0x813/0xb40
[  327.968933][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  327.974362][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  327.979343][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  327.984745][   T31]  ____sys_sendmsg+0x972/0x9f0
[  327.989561][   T31]  ? __might_fault+0xaf/0x130
[  327.994817][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  328.000137][   T31]  ? import_iovec+0x73/0xa0
[  328.004855][   T31]  ___sys_sendmsg+0x2a5/0x360
[  328.009601][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  328.014637][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  328.019878][   T31]  ? futex_wait+0x2a2/0x390
[  328.025391][   T31]  ? __fget_files+0x2a/0x420
[  328.030056][   T31]  ? __fget_files+0x3a0/0x420
[  328.034974][   T31]  __x64_sys_sendmsg+0x1bd/0x2a0
[  328.040023][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  328.045693][   T31]  ? rcu_is_watching+0x15/0xb0
[  328.050537][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.057685][   T31]  do_syscall_64+0x15f/0xf80
[  328.062441][   T31]  ? trace_irq_disable+0x3b/0x140
[  328.068340][   T31]  ? clear_bhb_loop+0x40/0x90
[  328.073085][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.079288][   T31] RIP: 0033:0x7f641919cdd9
[  328.083757][   T31] RSP: 002b:00007f64173f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  328.093001][   T31] RAX: ffffffffffffffda RBX: 00007f6419415fa0 RCX: 00007f641919cdd9
[  328.101705][   T31] RDX: 0000000020000804 RSI: 0000200000001900 RDI: 0000000000000004
[  328.109958][   T31] RBP: 00007f6419232d69 R08: 0000000000000000 R09: 0000000000000000
[  328.118089][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  328.126393][   T31] R13: 00007f6419416038 R14: 00007f6419415fa0 R15: 00007ffc7c797dd8
[  328.134681][   T31]  </TASK>
[  328.137779][   T31] INFO: task syz.3.878:8844 blocked for more than 144 seconds.
[  328.145558][   T31]       Not tainted syzkaller #0
[  328.150624][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  328.159701][   T31] task:syz.3.878       state:D stack:27904 pid:8844  tgid:8836  ppid:5628   task_flags:0x400040 flags:0x00080002
[  328.172882][   T31] Call Trace:
[  328.176522][   T31]  <TASK>
[  328.179523][   T31]  __schedule+0x17b4/0x5680
[  328.184672][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  328.190803][   T31]  ? __pfx___schedule+0x10/0x10
[  328.195976][   T31]  ? schedule+0x90/0x360
[  328.200334][   T31]  schedule+0x164/0x360
[  328.204749][   T31]  schedule_preempt_disabled+0x13/0x30
[  328.210433][   T31]  __mutex_lock+0x7f7/0x1550
[  328.215510][   T31]  ? __mutex_lock+0x608/0x1550
[  328.220327][   T31]  ? genl_rcv_msg+0x10b/0x7a0
[  328.225204][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  328.230303][   T31]  ? radix_tree_lookup+0x240/0x290
[  328.235527][   T31]  genl_rcv_msg+0x10b/0x7a0
[  328.240093][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  328.245477][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  328.250869][   T31]  ? __asan_memcpy+0x40/0x70
[  328.255709][   T31]  ? __skb_clone+0x63/0x7a0
[  328.260291][   T31]  netlink_rcv_skb+0x232/0x4b0
[  328.268451][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  328.274724][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  328.280092][   T31]  ? down_read+0x270/0x2e0
[  328.284792][   T31]  ? genl_rcv+0xd/0x40
[  328.288919][   T31]  genl_rcv+0x28/0x40
[  328.292908][   T31]  netlink_unicast+0x75c/0x8e0
[  328.299931][   T31]  netlink_sendmsg+0x813/0xb40
[  328.304855][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  328.310185][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  328.315397][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  328.320835][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  328.326747][   T31]  __sys_sendto+0x672/0x710
[  328.331302][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  328.336522][   T31]  ? fd_install+0x94/0x3d0
[  328.340976][   T31]  ? fd_install+0x306/0x3d0
[  328.345892][   T31]  __x64_sys_sendto+0xde/0x100
[  328.350797][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.357373][   T31]  do_syscall_64+0x15f/0xf80
[  328.362031][   T31]  ? trace_irq_disable+0x3b/0x140
[  328.367582][   T31]  ? clear_bhb_loop+0x40/0x90
[  328.372296][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.379071][   T31] RIP: 0033:0x7f641915d60e
[  328.383551][   T31] RSP: 002b:00007f64173d3e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  328.392094][   T31] RAX: ffffffffffffffda RBX: 00007f64173d56c0 RCX: 00007f641915d60e
[  328.400656][   T31] RDX: 000000000000001c RSI: 00007f64173d4000 RDI: 0000000000000003
[  328.409019][   T31] RBP: 0000000000000000 R08: 00007f64173d3f04 R09: 000000000000000c
[  328.418352][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  328.428617][   T31] R13: 00007f64173d3f58 R14: 00007f64173d4000 R15: 0000000000000000
[  328.437818][   T31]  </TASK>
[  328.440943][   T31] INFO: task syz.3.878:8846 blocked for more than 144 seconds.
[  328.449030][   T31]       Not tainted syzkaller #0
[  328.455379][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  328.464163][   T31] task:syz.3.878       state:D stack:25848 pid:8846  tgid:8836  ppid:5628   task_flags:0x400140 flags:0x00080002
[  328.477138][   T31] Call Trace:
[  328.480486][   T31]  <TASK>
[  328.483434][   T31]  __schedule+0x17b4/0x5680
[  328.488407][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  328.493421][   T31]  ? __pfx___schedule+0x10/0x10
[  328.498618][   T31]  ? schedule+0x90/0x360
[  328.502929][   T31]  schedule+0x164/0x360
[  328.508178][   T31]  schedule_preempt_disabled+0x13/0x30
[  328.513728][   T31]  __mutex_lock+0x7f7/0x1550
[  328.518557][   T31]  ? kernel_text_address+0xa5/0xe0
[  328.523721][   T31]  ? __mutex_lock+0x608/0x1550
[  328.528812][   T31]  ? genl_rcv_msg+0x10b/0x7a0
[  328.533574][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  328.539409][   T31]  ? stack_trace_save+0xa9/0x100
[  328.544575][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  328.549590][   T31]  ? radix_tree_lookup+0x240/0x290
[  328.554924][   T31]  genl_rcv_msg+0x10b/0x7a0
[  328.559489][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  328.565208][   T31]  netlink_rcv_skb+0x232/0x4b0
[  328.570058][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  328.575518][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  328.581348][   T31]  ? down_read+0x270/0x2e0
[  328.586342][   T31]  ? genl_rcv+0xd/0x40
[  328.590650][   T31]  genl_rcv+0x28/0x40
[  328.595353][   T31]  netlink_unicast+0x75c/0x8e0
[  328.600171][   T31]  netlink_sendmsg+0x813/0xb40
[  328.605295][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  328.610701][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  328.615972][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  328.621318][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  328.627252][   T31]  __sys_sendto+0x672/0x710
[  328.631788][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  328.636949][   T31]  ? exc_page_fault+0x6a/0xc0
[  328.641674][   T31]  ? do_user_addr_fault+0xc6f/0x1340
[  328.647155][   T31]  __x64_sys_sendto+0xde/0x100
[  328.651994][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.658603][   T31]  do_syscall_64+0x15f/0xf80
[  328.663212][   T31]  ? trace_irq_disable+0x3b/0x140
[  328.668679][   T31]  ? clear_bhb_loop+0x40/0x90
[  328.673418][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.679412][   T31] RIP: 0033:0x7f641915d60e
[  328.685514][   T31] RSP: 002b:00007f64173b2e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  328.694089][   T31] RAX: ffffffffffffffda RBX: 00007f64173b46c0 RCX: 00007f641915d60e
[  328.702088][   T31] RDX: 000000000000001c RSI: 00007f64173b3000 RDI: 0000000000000007
[  328.710199][   T31] RBP: 0000000000000000 R08: 00007f64173b2f04 R09: 000000000000000c
[  328.718942][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  328.727070][   T31] R13: 00007f64173b2f58 R14: 00007f64173b3000 R15: 0000000000000000
[  328.735276][   T31]  </TASK>
[  328.738352][   T31] INFO: task syz.1.881:8859 blocked for more than 144 seconds.
[  328.747205][   T31]       Not tainted syzkaller #0
[  328.752150][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  328.761082][   T31] task:syz.1.881       state:D stack:27168 pid:8859  tgid:8857  ppid:5626   task_flags:0x400040 flags:0x00080002
[  328.773192][   T31] Call Trace:
[  328.777197][   T31]  <TASK>
[  328.780176][   T31]  __schedule+0x17b4/0x5680
[  328.785518][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  328.790518][   T31]  ? __pfx___schedule+0x10/0x10
[  328.795610][   T31]  ? schedule+0x90/0x360
[  328.799913][   T31]  schedule+0x164/0x360
[  328.804845][   T31]  schedule_preempt_disabled+0x13/0x30
[  328.810350][   T31]  __mutex_lock+0x7f7/0x1550
[  328.815038][   T31]  ? __mutex_lock+0x608/0x1550
[  328.819846][   T31]  ? genl_rcv_msg+0x10b/0x7a0
[  328.824776][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  328.829984][   T31]  ? radix_tree_lookup+0x240/0x290
[  328.835930][   T31]  genl_rcv_msg+0x10b/0x7a0
[  328.840600][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  328.845732][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  328.851139][   T31]  ? __asan_memcpy+0x40/0x70
[  328.855844][   T31]  ? __skb_clone+0x63/0x7a0
[  328.860404][   T31]  netlink_rcv_skb+0x232/0x4b0
[  328.865959][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  328.871025][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  328.876442][   T31]  ? down_read+0x270/0x2e0
[  328.880923][   T31]  ? genl_rcv+0xd/0x40
[  328.885063][   T31]  genl_rcv+0x28/0x40
[  328.889719][   T31]  netlink_unicast+0x75c/0x8e0
[  328.895234][   T31]  netlink_sendmsg+0x813/0xb40
[  328.900072][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  328.905728][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  328.910743][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  328.916151][   T31]  ____sys_sendmsg+0x972/0x9f0
[  328.920966][   T31]  ? __might_fault+0xaf/0x130
[  328.926257][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  328.931574][   T31]  ? import_iovec+0x73/0xa0
[  328.936602][   T31]  ___sys_sendmsg+0x2a5/0x360
[  328.941351][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  328.946408][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  328.951659][   T31]  ? futex_wait+0x2a2/0x390
[  328.957017][   T31]  ? __fget_files+0x2a/0x420
[  328.961656][   T31]  ? __fget_files+0x3a0/0x420
[  328.966444][   T31]  __x64_sys_sendmsg+0x1bd/0x2a0
[  328.971430][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  328.977004][   T31]  ? rcu_is_watching+0x15/0xb0
[  328.981814][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.989342][   T31]  do_syscall_64+0x15f/0xf80
[  328.994077][   T31]  ? trace_irq_disable+0x3b/0x140
[  328.999151][   T31]  ? clear_bhb_loop+0x40/0x90
[  329.003936][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  329.009870][   T31] RIP: 0033:0x7fb12db9cdd9
[  329.015165][   T31] RSP: 002b:00007fb12eb09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  329.023678][   T31] RAX: ffffffffffffffda RBX: 00007fb12de16090 RCX: 00007fb12db9cdd9
[  329.031780][   T31] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000004
[  329.039855][   T31] RBP: 00007fb12dc32d69 R08: 0000000000000000 R09: 0000000000000000
[  329.048717][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  329.056819][   T31] R13: 00007fb12de16128 R14: 00007fb12de16090 R15: 00007ffda476f6b8
[  329.065089][   T31]  </TASK>
[  329.068182][   T31] INFO: task syz.4.884:8878 blocked for more than 145 seconds.
[  329.076437][   T31]       Not tainted syzkaller #0
[  329.081394][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  329.090172][   T31] task:syz.4.884       state:D stack:27904 pid:8878  tgid:8877  ppid:5627   task_flags:0x400040 flags:0x00080002
[  329.102825][   T31] Call Trace:
[  329.106715][   T31]  <TASK>
[  329.109662][   T31]  __schedule+0x17b4/0x5680
[  329.114280][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  329.119291][   T31]  ? __pfx___schedule+0x10/0x10
[  329.124386][   T31]  ? schedule+0x90/0x360
[  329.128696][   T31]  schedule+0x164/0x360
[  329.132864][   T31]  schedule_preempt_disabled+0x13/0x30
[  329.139012][   T31]  __mutex_lock+0x7f7/0x1550
[  329.143656][   T31]  ? __mutex_lock+0x608/0x1550
[  329.148613][   T31]  ? genl_rcv_msg+0x10b/0x7a0
[  329.153326][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  329.158591][   T31]  ? radix_tree_lookup+0x240/0x290
[  329.163759][   T31]  genl_rcv_msg+0x10b/0x7a0
[  329.168858][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  329.173993][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  329.179405][   T31]  ? __asan_memcpy+0x40/0x70
[  329.184101][   T31]  ? __skb_clone+0x63/0x7a0
[  329.188670][   T31]  netlink_rcv_skb+0x232/0x4b0
[  329.194935][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  329.200037][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  329.205509][   T31]  ? down_read+0x270/0x2e0
[  329.209940][   T31]  ? genl_rcv+0xd/0x40
[  329.214126][   T31]  genl_rcv+0x28/0x40
[  329.218146][   T31]  netlink_unicast+0x75c/0x8e0
[  329.223037][   T31]  netlink_sendmsg+0x813/0xb40
[  329.228773][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  329.234446][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  329.239477][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  329.244906][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  329.250328][   T31]  __sys_sendto+0x672/0x710
[  329.255551][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  329.260661][   T31]  ? exc_page_fault+0x6a/0xc0
[  329.265534][   T31]  ? do_user_addr_fault+0xc6f/0x1340
[  329.270889][   T31]  __x64_sys_sendto+0xde/0x100
[  329.275844][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  329.281946][   T31]  do_syscall_64+0x15f/0xf80
[  329.287130][   T31]  ? trace_irq_disable+0x3b/0x140
[  329.292403][   T31]  ? clear_bhb_loop+0x40/0x90
[  329.297979][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  329.304364][   T31] RIP: 0033:0x7f1a3ef5d60e
[  329.308840][   T31] RSP: 002b:00007f1a3feace88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  329.317875][   T31] RAX: ffffffffffffffda RBX: 00007f1a3feae6c0 RCX: 00007f1a3ef5d60e
[  329.325996][   T31] RDX: 0000000000000020 RSI: 00007f1a3fead000 RDI: 0000000000000005
[  329.334064][   T31] RBP: 0000000000000000 R08: 00007f1a3feacf04 R09: 000000000000000c
[  329.342073][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  329.350901][   T31] R13: 00007f1a3feacf58 R14: 00007f1a3fead000 R15: 0000000000000000
[  329.359613][   T31]  </TASK>
[  329.362703][   T31] INFO: task syz.0.886:8888 blocked for more than 145 seconds.
[  329.371947][   T31]       Not tainted syzkaller #0
[  329.377330][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  329.386433][   T31] task:syz.0.886       state:D stack:27904 pid:8888  tgid:8887  ppid:5629   task_flags:0x400140 flags:0x00080002
[  329.399942][   T31] Call Trace:
[  329.403292][   T31]  <TASK>
[  329.406365][   T31]  __schedule+0x17b4/0x5680
[  329.410914][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  329.416033][   T31]  ? __pfx___schedule+0x10/0x10
[  329.420954][   T31]  ? schedule+0x90/0x360
[  329.425587][   T31]  schedule+0x164/0x360
[  329.429770][   T31]  schedule_preempt_disabled+0x13/0x30
[  329.435546][   T31]  __mutex_lock+0x7f7/0x1550
[  329.440238][   T31]  ? __mutex_lock+0x608/0x1550
[  329.445090][   T31]  ? genl_rcv_msg+0x10b/0x7a0
[  329.449796][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  329.455481][   T31]  ? radix_tree_lookup+0x240/0x290
[  329.460720][   T31]  genl_rcv_msg+0x10b/0x7a0
[  329.466628][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  329.471736][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  329.478869][   T31]  ? __asan_memcpy+0x40/0x70
[  329.483558][   T31]  ? __skb_clone+0x63/0x7a0
[  329.488582][   T31]  netlink_rcv_skb+0x232/0x4b0
[  329.493397][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  329.498521][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  329.504738][   T31]  ? down_read+0x270/0x2e0
[  329.509193][   T31]  ? genl_rcv+0xd/0x40
[  329.513266][   T31]  genl_rcv+0x28/0x40
[  329.517775][   T31]  netlink_unicast+0x75c/0x8e0
[  329.522603][   T31]  netlink_sendmsg+0x813/0xb40
[  329.528086][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  329.533422][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  329.538613][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  329.544017][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  329.549318][   T31]  __sys_sendto+0x672/0x710
[  329.553832][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  329.559629][   T31]  ? exc_page_fault+0x6a/0xc0
[  329.565041][   T31]  ? do_user_addr_fault+0xc6f/0x1340
[  329.570398][   T31]  __x64_sys_sendto+0xde/0x100
[  329.575387][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  329.581518][   T31]  do_syscall_64+0x15f/0xf80
[  329.586830][   T31]  ? trace_irq_disable+0x3b/0x140
[  329.591916][   T31]  ? clear_bhb_loop+0x40/0x90
[  329.598213][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  329.605016][   T31] RIP: 0033:0x7fb4a515d60e
[  329.609502][   T31] RSP: 002b:00007fb4a5f74e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  329.618741][   T31] RAX: ffffffffffffffda RBX: 00007fb4a5f766c0 RCX: 00007fb4a515d60e
[  329.627166][   T31] RDX: 0000000000000020 RSI: 00007fb4a5f75000 RDI: 0000000000000008
[  329.635241][   T31] RBP: 0000000000000000 R08: 00007fb4a5f74f04 R09: 000000000000000c
[  329.643253][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[  329.651823][   T31] R13: 00007fb4a5f74f58 R14: 00007fb4a5f75000 R15: 0000000000000000
[  329.659913][   T31]  </TASK>
[  329.663036][   T31] 
[  329.663036][   T31] Showing all locks held in the system:
[  329.670868][   T31] 1 lock held by khungtaskd/31:
[  329.676297][   T31]  #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  329.686270][   T31] 2 locks held by getty/5383:
[  329.690964][   T31]  #0: ffff8880326860a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  329.700807][   T31]  #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0
[  329.712668][   T31] 1 lock held by udevd/5735:
[  329.717376][   T31]  #0: ffff88802739c350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  329.726976][   T31] 2 locks held by syz.2.877/8835:
[  329.732040][   T31]  #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  329.740876][   T31]  #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  329.749941][   T31] 6 locks held by syz.3.878/8838:
[  329.755116][   T31]  #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  329.763314][   T31]  #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  329.772887][   T31]  #2: ffff888027813260 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0
[  329.783354][   T31]  #3: ffff8880278247c8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680
[  329.792967][   T31]  #4: ffff888027824190 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  329.805582][   T31]  #5: ffff8880278241c8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  329.818722][   T31] 2 locks held by syz.3.878/8844:
[  329.823816][   T31]  #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  329.832154][   T31]  #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  329.841885][   T31] 2 locks held by syz.3.878/8846:
[  329.847011][   T31]  #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  329.855332][   T31]  #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  329.865436][   T31] 2 locks held by syz.1.881/8859:
[  329.870510][   T31]  #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  329.880038][   T31]  #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  329.889201][   T31] 2 locks held by syz.4.884/8878:
[  329.894603][   T31]  #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  329.902865][   T31]  #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  329.913052][   T31] 2 locks held by syz.0.886/8888:
[  329.918295][   T31]  #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  329.926603][   T31]  #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  329.936524][   T31] 2 locks held by syz-executor/8898:
[  329.941877][   T31]  #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  329.950471][   T31]  #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  329.960730][   T31] 2 locks held by syz-executor/8901:
[  329.966813][   T31]  #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  329.975221][   T31]  #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  329.984586][   T31] 2 locks held by syz-executor/8904:
[  329.990039][   T31]  #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  329.998470][   T31]  #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  330.007982][   T31] 2 locks held by syz-executor/8931:
[  330.014839][   T31]  #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  330.023113][   T31]  #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  330.032308][   T31] 2 locks held by syz-executor/8932:
[  330.037805][   T31]  #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  330.046877][   T31]  #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  330.056097][   T31] 2 locks held by syz-executor/8987:
[  330.061524][   T31]  #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  330.069909][   T31]  #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  330.079628][   T31] 2 locks held by syz-executor/9006:
[  330.085073][   T31]  #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  330.093334][   T31]  #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  330.102480][   T31] 2 locks held by syz-executor/9009:
[  330.108598][   T31]  #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  330.117818][   T31]  #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  330.126921][   T31] 2 locks held by syz-executor/9028:
[  330.132238][   T31]  #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  330.141103][   T31]  #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  330.150281][   T31] 2 locks held by syz-executor/9032:
[  330.155638][   T31]  #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  330.163836][   T31]  #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  330.173561][   T31] 2 locks held by syz-executor/9083:
[  330.178932][   T31]  #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  330.187253][   T31]  #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  330.196783][   T31] 2 locks held by syz-executor/9101:
[  330.202074][   T31]  #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  330.210367][   T31]  #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  330.220182][   T31] 2 locks held by syz-executor/9111:
[  330.226186][   T31]  #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  330.234498][   T31]  #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  330.243525][   T31] 2 locks held by syz-executor/9132:
[  330.248882][   T31]  #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  330.257824][   T31]  #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  330.267023][   T31] 2 locks held by syz-executor/9135:
[  330.272354][   T31]  #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  330.280632][   T31]  #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  330.290367][   T31] 
[  330.292725][   T31] =============================================
[  330.292725][   T31] 
[  330.301256][   T31] NMI backtrace for cpu 0
[  330.301280][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  330.301303][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  330.301314][   T31] Call Trace:
[  330.301329][   T31]  <TASK>
[  330.301338][   T31]  dump_stack_lvl+0xe8/0x150
[  330.301365][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  330.301389][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  330.301415][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  330.301442][   T31]  sys_info+0x135/0x170
[  330.301461][   T31]  watchdog+0xfd3/0x1030
[  330.301499][   T31]  ? watchdog+0x1c9/0x1030
[  330.301538][   T31]  kthread+0x388/0x470
[  330.301568][   T31]  ? __pfx_watchdog+0x10/0x10
[  330.301597][   T31]  ? __pfx_kthread+0x10/0x10
[  330.301627][   T31]  ret_from_fork+0x514/0xb70
[  330.301654][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  330.301677][   T31]  ? __switch_to+0xc79/0x1410
[  330.301712][   T31]  ? __pfx_kthread+0x10/0x10
[  330.301742][   T31]  ret_from_fork_asm+0x1a/0x30
[  330.301786][   T31]  </TASK>
[  330.301794][   T31] Sending NMI from CPU 0 to CPUs 1:
[  330.415357][    C1] NMI backtrace for cpu 1
[  330.415375][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  330.415393][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  330.415404][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  330.415435][    C1] Code: bb 7d 02 e9 93 f6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 c1 20 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  330.415451][    C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242
[  330.415467][    C1] RAX: 000000000014d4b9 RBX: ffffffff819a91ea RCX: 0000000080000001
[  330.415480][    C1] RDX: 0000000000000001 RSI: ffffffff8dfa6610 RDI: ffffffff8c28ade0
[  330.415492][    C1] RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b
[  330.415506][    C1] R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001
[  330.415518][    C1] R13: 1ffff11003b5b000 R14: 0000000000000001 R15: 1ffff11003b5b000
[  330.415531][    C1] FS:  0000000000000000(0000) GS:ffff88812538d000(0000) knlGS:0000000000000000
[  330.415545][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  330.415557][    C1] CR2: 00005618fa180ee8 CR3: 000000000e74a000 CR4: 00000000003526f0
[  330.415579][    C1] Call Trace:
[  330.415585][    C1]  <TASK>
[  330.415592][    C1]  default_idle+0x9/0x20
[  330.415608][    C1]  default_idle_call+0x72/0xb0
[  330.415625][    C1]  do_idle+0x36a/0x5f0
[  330.415650][    C1]  ? __pfx_do_idle+0x10/0x10
[  330.415676][    C1]  cpu_startup_entry+0x43/0x60
[  330.415696][    C1]  start_secondary+0x101/0x110
[  330.415713][    C1]  common_startup_64+0x13e/0x147
[  330.415750][    C1]  </TASK>
[  330.582010][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  330.588905][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  330.598016][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  330.608078][   T31] Call Trace:
[  330.611374][   T31]  <TASK>
[  330.614316][   T31]  vpanic+0x56c/0xa60
[  330.618308][   T31]  ? __pfx___schedule+0x10/0x10
[  330.623167][   T31]  ? __pfx_vpanic+0x10/0x10
[  330.627689][   T31]  ? nmi_trigger_cpumask_backtrace+0x1f4/0x300
[  330.633906][   T31]  panic+0xc5/0xd0
[  330.637678][   T31]  ? __pfx_panic+0x10/0x10
[  330.642142][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  330.647565][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  330.653764][   T31]  watchdog+0x102c/0x1030
[  330.658149][   T31]  ? watchdog+0x1c9/0x1030
[  330.662604][   T31]  kthread+0x388/0x470
[  330.666712][   T31]  ? __pfx_watchdog+0x10/0x10
[  330.671422][   T31]  ? __pfx_kthread+0x10/0x10
[  330.676050][   T31]  ret_from_fork+0x514/0xb70
[  330.680675][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  330.685826][   T31]  ? __switch_to+0xc79/0x1410
[  330.690557][   T31]  ? __pfx_kthread+0x10/0x10
[  330.695176][   T31]  ret_from_fork_asm+0x1a/0x30
[  330.699978][   T31]  </TASK>
[  330.703896][   T31] Kernel Offset: disabled
[  330.708230][   T31] Rebooting in 86400 seconds..