last executing test programs:

21.730601303s ago: executing program 3 (id=2349):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) (async)
r1 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0x10, &(0x7f0000000000), 0xc) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x805}, 0x8000) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0x38, &(0x7f0000000740)=0x10000, 0x4) (async)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f00000006c0)=0x100000001, 0x76dc) (async)
connect$inet6(r5, &(0x7f0000000700)={0xa, 0x4e22, 0x1}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x1a, 0x7, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000c60001001000000085100000010000009500000000000000852000003c50030095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x35, '\x00', 0x0, 0x3d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) (async)
close(0x3) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r6, &(0x7f0000000340)={&(0x7f0000000380)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0, 0x1a, &(0x7f00000003c0)=ANY=[@ANYBLOB="200000000000000029000000370000002f00000000000000c2040000020000005800000000000000290000003700000062070000000000000103000000071000000002024b09000100010000000000000100c910ff8a00000000000000365e3114000001010a00000000000000000000000100000100000014000000000000002900000034"], 0x90}, 0x46891) (async)
r7 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000480)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) (async)
connect$inet6(r7, &(0x7f00000004c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) (async)
sendmmsg$inet6(r7, &(0x7f0000000500), 0x40000000000017d, 0x888) (async)
unshare(0x2020400) (async)
socket$tipc(0x1e, 0x2, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0500000004000000080000000001"], 0x50) (async)
close(0x3) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x9, 0x6, 0x8, 0x4, 0x40}, 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xd, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002022206b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f00000085000000070000007a0af0ff00000000181100", @ANYRES32=r8, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000000000000850000000200000095"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r9, 0x0, 0xe, 0x0, &(0x7f0000000a00)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

21.488434591s ago: executing program 3 (id=2352):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000000000000000000000100085000000530000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095000000000000007f0cff0a196e6d57113f3eab28c85d691f724ad140108934a3e3efa560dc8db4700e191ff5f03fd7f83f6e1e9aaee2afc55f025e56e0ded37be12657f5e837cfc27b55"], &(0x7f0000000180)='syzkaller\x00'}, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x8d}, {0x0, 0x1, 0xfffffffe}]}, [{}, {}, {}, {}, {0xfff}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {0x1}, {0x2, 0x0, 0x0, 0x0, 0x0, 0xd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8fb3}, {}, {0x0, 0x47da3496, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x80000000}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x4000000}, {}, {0xfffffffe}, {0x20000}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800, 0x0, 0x0, 0x100000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x4, 0x0, 0x7ee, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0xffffffff, 0x0, 0xfffffffd}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {0x4}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1ff}, {}, {0x4, 0x7}, {}, {0x0, 0x0, 0x0, 0xa9cd}, {}, {0x0, 0x3, 0x0, 0x4, 0x2}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0xc}, {0x10000}, {}, {}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001500010000e3fffffbffffff100000000800020008"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20048080)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), r3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001300)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)={0x3c, r4, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48004}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000014c0)={'macsec0\x00', {0x2, 0x4e21, @local}})
sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000001480)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x28, r4, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x6, 0x5c}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4004)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000240)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000023c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000002440)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000000000000000000000100085000000530000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095000000000000007f0cff0a196e6d57113f3eab28c85d691f724ad140108934a3e3efa560dc8db4700e191ff5f03fd7f83f6e1e9aaee2afc55f025e56e0ded37be12657f5e837cfc27b55"], &(0x7f0000000180)='syzkaller\x00'}, 0x88) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x8d}, {0x0, 0x1, 0xfffffffe}]}, [{}, {}, {}, {}, {0xfff}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {0x1}, {0x2, 0x0, 0x0, 0x0, 0x0, 0xd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8fb3}, {}, {0x0, 0x47da3496, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x80000000}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x4000000}, {}, {0xfffffffe}, {0x20000}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800, 0x0, 0x0, 0x100000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x4, 0x0, 0x7ee, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0xffffffff, 0x0, 0xfffffffd}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {0x4}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1ff}, {}, {0x4, 0x7}, {}, {0x0, 0x0, 0x0, 0xa9cd}, {}, {0x0, 0x3, 0x0, 0x4, 0x2}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0xc}, {0x10000}, {}, {}, {0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001500010000e3fffffbffffff100000000800020008"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20048080) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), r3) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001300)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)={0x3c, r4, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48004}, 0x0) (async)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000014c0)={'macsec0\x00', {0x2, 0x4e21, @local}}) (async)
sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000001480)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x28, r4, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x6, 0x5c}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4004) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000240)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000023c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000002440)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)

21.257111009s ago: executing program 1 (id=2354):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$l2tp6(r1, 0x0, 0x0, 0x840, &(0x7f0000000080)={0xa, 0x0, 0x1, @private2, 0x1, 0x3}, 0x20)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00010001"], 0x20}}, 0x0)

21.251218802s ago: executing program 3 (id=2355):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000300000018410000fdffffff0005ab985be3899437e100"/40], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

21.132841567s ago: executing program 4 (id=2357):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={0x0, 0x0, 0x18}, 0x18)
socket$packet(0x11, 0x2, 0x300)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f00000001c0)={&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r2, &(0x7f00000003c0)={0x0, 0xfffffff5, &(0x7f0000000400)=[{&(0x7f0000000440)="a2", 0xfffffdef}], 0x1}, 0x0)
setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000480)=0x1, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000800)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000008c0)=0x8, 0x4)
syz_80211_inject_frame(&(0x7f0000000b40)=@broadcast, &(0x7f0000000b80)=@data_frame={@a_msdu=@type10={{0x0, 0x2, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1}, {}, @random="6fb7a552c1d4", @device_a, @from_mac, {0xa, 0x7}}, @a_msdu=[{@device_b, @device_a, 0x95, "c1dbe83ae623c242573065e6c1901e4acfe2d56a6f014e52def2bf1648153356df02c33e76f05978e208b17a4f774cc5cfc0fa490b3a275eae219da28db5d8ff674ba3d351fe5919d289b8423ffd5f954c03de5824331b42eab408f14159d14ec72c8be859239b694fba04f7bf52458da1cb6149fea592ec13c353f32b9f75813f99f13c38dc9fca4cc1ba16d759a53509129c8c1a"}, {@broadcast, @device_a, 0xf5, "f5aa8b2c88dc0ae95a317f9289d6e4e958a4b1503f1c4da30f6cb4fd565c13026bb3bb925d72e3fe28f2fd7041687dc624da20d73e587c75b136401800689f1a0281fedd687e12d27693ff162fa56998977e19c84601a7da6e4219666779197c3f6ba9debccc2ca9e61506db06f7a130603e7a9a254fe9ddeecc53550dee64c493fe88744ae99b595bea8cb9752bf0e3ba70ba2115f22f8b764f6cd31dd540daa075e1b9a1a5b6ef778469fb73627407d59f38dfc6a5b329ba0000364560b3483acbd1c5194df2bebf9d7e9c9710bd31aa2a08656dc5189d3678c0b7db4af2324bc82ef7f4b235c6ab10725208ca7769d50f4f5d97"}]}, 0x1c0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000900)=0x800001, 0x4)
bind$inet6(r4, &(0x7f0000000940)={0xa, 0x4e22}, 0x1c)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
close(0x3)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000010080000900010073797a30000000002c000000030a01010000000000000000010000010900010073797a30000000000900030073797a3200000000b0000000060a010700000000000000000100000008000b400000000088000480340001800b000100657874686472000024000280080001400000000c0800033ff900003b08000440000000220500020007000000500001800c00010062697477697365004000028008000340000000040800014000000014080002400000001208000640000000011c00078016000100f63bf6822a8643ac5589bce25516b341b34a00000900010073797a30"], 0x124}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x2, 0x8, 0x40, 0x42, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x101}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000700)={'syz_tun\x00', <r8=>0x0})
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000800)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000880)={r9, r8, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f00000008c0)=ANY=[], 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4)
r10 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f00000000c0)=@caif=@dbg={0x25, 0xa1, 0x1}, 0x80, &(0x7f0000000140)}, 0x8045)
sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5)

20.058769395s ago: executing program 1 (id=2358):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2241, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', <r4=>0x0})
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000004c0)={0x1, <r5=>0x0}, 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet(r6, &(0x7f0000000500)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000640)='bbr', 0x3)
sendmmsg$inet(r3, &(0x7f0000000dc0)=[{{&(0x7f0000000100)={0x2, 0x4e21, @rand_addr=0x7}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000200)}, {&(0x7f0000000540)="0d8af6b8930b65157a82873999cce6df90781bd05861ba6471367dcd872efe4fbc8fe3fd638b84ad3cc50878ffd4ebfc31fa278b4fc56168f486c1959778bfbac71ed6987cd39377354ed52bf100ed37adc1435ff7f8bb3069d6debcafbab281130dd6cdfe8ceb540bac21b8bb0845c2fa4281075f183b461d23cf7d3303638389c6c68b4ef9123acfdae81fd2e7936500db3c20126b70138cfedcb1290a041d025fab76243a7ddbf8389e35b638", 0xae}, {&(0x7f0000000700)="86d615cc493181cb7f1bcc3e866c222460120663e8941e926858ae78a1fc2c4a744633a880d9c85360397ddfe2afea058693a47b74b870d62d34143c5c955073f99b2ee949cf1b96f6bf8508834af4047701f8b7f23b748267bc55374355bc56bef77d941d89e1886e14c90aea1bb9ced5f35694e9a7263a64812f0dd8d97b4516b7074db30a3a1690ef1ce171d0d015a289dc2fceb9d70a87be67682ddc2dec354209fed362146384f243fd6cdf1d5055208ec42678ffd1bed7d741e9c15a0446c9", 0xc2}, {&(0x7f0000000800)="03004e0968fdb822bdfb8c3928b7b8ac20022995209fa840f563f834664ee6ece195e5e28c7ace589cce018554d44bdbb7a7dfd22786d554bf8fcacf3aaced53e3436b3991634725f0b2b9e16777e155a4610cbbf4d0dbd8760885363899dfe145b58f82b2cb9f5cbff108525f3149b79238de54eebaca4610ca9def33e7cc3abe7b8412df1089d6fa1799dd0027d2fd52b96b09603ad4d9a17635c86a09e654f45a0a3e0704de6db441fd1efe270339ed4e942635d88b913c06c18d7e3edcb826f156556ce5", 0xc6}, {&(0x7f0000000900)="a3ee30752855f5081b440074c18f3162c94f534aee430e5c83b12dffe654c1dbe9b8e3eed51463e9dd97ebbe8c10e34b6f956c2678ef7f8ae9354e8c5e0540397eeae7442c8a3d743fc5578167d1a41eeff5b3c4777d1a141488ea2bb81867fbbd82cecce221796317e3bb0d7d7bbb90499045e44ccc060c207dbe8fd74087d6d39ca19d3839d9a7eeef8df24d6b8de8ebf43ae8c6901d9bc284dc3828d43e5cffcf4bc18792f11b158f78a285b332c2c0cd4472729cb9ca1f36", 0xba}], 0x5, &(0x7f0000000a40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xca}}], 0x18}}, {{&(0x7f0000000a80)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000ac0)="70f3cd70047f1d3986d59ec141fcc6d648cecef17b7387c262ec80a5da9afeb64352a6a8dc0140afcea315bb3b7c428d5432fab29429fc1e8b6aa94135472e9d8a5e5f7225109f1203857c44d9266740514c02e17e83dfeb6d823629aa7d32a8af6082f29d44714bacb5c9772b9d1a4488c2ba6297a5c54eb77e9937dfbb7e95a1ef92e094788bd0b47362d8a17534917f90f44636f11e9c475293e5f4", 0x9d}, {&(0x7f0000000b80)="c4d7cab6838ec79cd6fe0ae95ad8e19fb0d3a9724506dddf5595d0c002e2da1a65a056ff3cd9f6f8578aab6f298874241df2a173b020c458a57ce169c9a254333599a773748601f71cf370dd4f01c4452119be4e5360aaf15e41db6d845d2fe365f553ab058d81f045858fbb3999ca9e05e8d52215658cd92d57b077374a81fc0fe1aeaf3730020a752e8bdd65cca25116759b5e3a15e0959d886d5ccb061a31c13bfe347110ad0efe9bf37f3c4ce00c9db1315dc4df7ca8733e5a56e54f5c2fab5a3256d6d98d1df27161a4ddeb7a50a6d663bbdfecd9978184405ab4325ea7c3c69f738888fc1bbb9c1e90f182aaae0aca", 0xf2}, {&(0x7f0000000c80)="b0bc8b447503943b6bc487db6ed303a3b9a34c9c2da755c1de4dcae09aeb2d9f6126b25a630fee35c96e4dc528c228fd2f3b2c6bb49a10f980ccc25e922b93747c9e4e79bf5c4f8e187d28e9956fbc87c4a9af835e954864862522ff18ba21d78c6abc04996e2c6e9991092a6ee5c55a74de68813581624357fad1809e2e2c53f37d0fe393f11ca4258e0587cb78f3bed8ea6912562cefd33619cdbe9673a0cb4cc07badfae2be9f2699e7c488115429594c9b9bb54d3cc0df316397195d474b28c4cf5694e4da90f9ea51006a2235dce218037e11ff9b52ac26a4fe794caec95d9cf00a72173c3edc", 0xe9}], 0x3}}], 0x1, 0x2080)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000006c0)=0xdf8, 0x4)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendto$inet(r7, &(0x7f00000010c0)="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", 0x7ba, 0x4000, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000f00)=r5, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r8}, 0x4)
r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000f40)={r9}, 0x8)
close(r10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000f80)=0xffffffffffffffff, 0x4)
sendmsg$nl_route_sched(r3, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001880)=@newtfilter={0x178, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x14c, 0x2, [@TCA_U32_ACT={0x140, 0x7, [@m_vlan={0x13c, 0x3, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0xfffffffffffffc70, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}]}, {0xce, 0x6, "ce3eb09f2840ba0f83c8054f3842dcd3e12acb385434fe51f683451e726072d69e6a064aebd59a8e021aa4184aabf7283f281383308fe5f3bff592276a4f66660ae827cc43dc6f1dd831c0636cbb0082d765b4d34baadc7722d299efc29658eac562d5cd180a55e6501d735a97ef39d58c389b69bc455a2e8936e5d4a83585ac2983decc68111f964f7c08e12db7333eabb9559eb53831a8f30c83f12881efd7f2ea444a93a52278e31aa1b82dbde73fc60048153236fe6b17a02c18d257700634252b14a09782317735"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_U32_DIVISOR={0x8, 0x4, 0x92}]}}]}, 0x178}}, 0x0)
socket$inet(0x2, 0x2, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000829bd7200fbdbdf2539000000080003009f885a9ee882aa12b191ae86b43b9b8478982bc84b37cc4529a9232bb48aadccdb00772fa8c58f4158c5116fb8547e1ee1a1cc885b2f8bf075b50f9aef9b6211d886d97e5d2071f0e41ef5dc07eaea150e115e16018d804c672e1ab3eaac5327bf49c2133cb2db74999e81496a06", @ANYRES32=r2, @ANYBLOB="0c005a802b00038004000100"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYRES64], 0x48}}, 0x0)

20.023777922s ago: executing program 3 (id=2360):
r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={0x1, 0x0, 0x8, 0xe3, 0xfffc, 0x3, 0x0, 0x6, {<r1=>0x2, @in={{0x2, 0x4e23, @broadcast}}, 0x8001, 0x6, 0x2c81, 0x9, 0x8}}, &(0x7f00000000c0)=0xb0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x2}}, 0x2, 0x7, 0x3, 0x6, 0xc0, 0x6dec, 0xc4}, &(0x7f00000001c0)=0x9c) (async)
syz_extract_tcp_res(&(0x7f0000000200)={0x41424344, <r2=>0x41424344}, 0x9, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000240)={0x41424344, <r3=>0x41424344}, 0x1, 0x0)
syz_emit_ethernet(0x177, &(0x7f0000000280)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @val={@void}, {@ipv4={0x800, @tcp={{0x12, 0x4, 0x1, 0x1a, 0x165, 0x66, 0x0, 0x2, 0x6, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x2c, 0x34, 0x1, 0xd, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@loopback, 0x80000001}, {@multicast1, 0x7fffffff}, {@dev={0xac, 0x14, 0x14, 0x16}}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp={0x44, 0x4, 0x53, 0x0, 0x8}, @end, @noop, @generic={0x82, 0x2}]}}, {{0x4e21, 0x4e20, r2, r3, 0x1, 0x0, 0x20, 0x2, 0x3, 0x0, 0x3, {[@sack={0x5, 0x1e, [0x5, 0x4, 0xf, 0x1, 0x0, 0x6, 0x7]}, @exp_fastopen={0xfe, 0x9, 0xf989, "d442cd4105"}, @md5sig={0x13, 0x12, "f3d99b1d3fe412da98f26cb8c429a0ec"}, @exp_smc={0xfe, 0x6}, @mptcp=@syn={0x1e, 0xc, 0x3, 0x1, 0x4, 0x1, 0x10}, @mptcp=@synack={0x1e, 0x10, 0x2, 0x2, 0xb, 0x111, 0x7}, @exp_smc={0xfe, 0x6}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @eol]}}, {"930bae605d8753d65751d86d3d5d538f4f035875bf11ec52d1dec5dd7c29ce1db342cbca032f5e2cfd65cc4d2f644395ff56d964045949bfb00629fd0e92b7900f8e4e15c2cc9bb9b02266868c4fd2014c506a7522a41c34b1f390e3b0af37522e003bf8e4560df987e8b5ee64189f84ab24b833afda0e40be2dc9e38a1cb1fb8d852715f54d8cd1aa0a7ab07893bd1f0c3bf3fc54dc44aaa0b5872eb6"}}}}}}, &(0x7f0000000400)={0x1, 0x1, [0xf0c, 0xd20, 0x7fc, 0x85c]}) (async)
r4 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000000440)=0x1, 0x4) (async)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xfc}}, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000004c0))
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz1\x00', 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f0000000540)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r7, 0x0, 0x25, 0x2, @void}, 0x10) (async)
sendmsg$NFNL_MSG_ACCT_DEL(r7, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, 0x3, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1000}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xab}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x20004000) (async)
r8 = openat$cgroup_ro(r6, &(0x7f00000006c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000700)={{r8}, "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"}) (async)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000001700)={0x80000007})
r9 = accept4$phonet_pipe(r7, &(0x7f0000001740), &(0x7f0000001780)=0x10, 0x80000)
accept4$phonet_pipe(r9, &(0x7f00000017c0), &(0x7f0000001800)=0x10, 0x80000) (async)
recvfrom(r0, &(0x7f0000001840)=""/4096, 0x1000, 0x102, &(0x7f0000002840)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80) (async)
write$tun(r7, &(0x7f00000028c0)={@val={0x0, 0x88f7}, @val={0x3, 0x0, 0x4, 0x5, 0xf18e, 0x5}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @empty, @remote, @local}}, 0x2a) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000002900)={0x9, 0xa, 0x8, 0xcbaa, r1}, &(0x7f0000002940)=0x10) (async)
setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000002980)=0xffffffffffffffff, 0x4) (async)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000002a00), r8)
sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000002b00)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a40)={0x48, r10, 0x100, 0x70bd26, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x9}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xfff}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x0)
sendmsg$key(r8, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000002b40)={0x2, 0x2, 0x9, 0x3, 0x1a, 0x0, 0x70bd27, 0x5, [@sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd28, 0x3500}, @sadb_x_sa2={0x2, 0x13, 0x4, 0x0, 0x0, 0x70bd2b}, @sadb_address={0x3, 0x3, 0x2b, 0x80, 0x0, @in={0x2, 0x4e24, @multicast2}}, @sadb_x_filter={0x5, 0x1a, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@mcast2, 0x2a, 0x1c, 0x32}, @sadb_x_policy={0x8, 0x12, 0x4, 0x4, 0x0, 0x6e6bb1, 0xffffffff, {0x6, 0xff, 0x6, 0x80, 0x0, 0x1, 0x0, @in=@loopback, @in6=@mcast1}}, @sadb_lifetime={0x4, 0x4, 0x6, 0x28ea000b, 0x5a39, 0x5}]}, 0xd0}}, 0x800)
setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000002cc0)=0x5, 0x4) (async)
r11 = socket$unix(0x1, 0x0, 0x0)
recvmmsg(r11, &(0x7f00000060c0)=[{{&(0x7f0000002d00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000003480)=[{&(0x7f0000002d80)=""/247, 0xf7}, {&(0x7f0000002e80)=""/147, 0x93}, {&(0x7f0000002f40)=""/203, 0xcb}, {&(0x7f0000003040)=""/230, 0xe6}, {&(0x7f0000003140)=""/188, 0xbc}, {&(0x7f0000003200)=""/188, 0xbc}, {&(0x7f00000032c0)=""/106, 0x6a}, {&(0x7f0000003340)=""/31, 0x1f}, {&(0x7f0000003380)=""/49, 0x31}, {&(0x7f00000033c0)=""/142, 0x8e}], 0xa, &(0x7f0000003540)=""/136, 0x88}, 0xfffffff7}, {{&(0x7f0000003600)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000004780)=[{&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000004680)=""/44, 0x2c}, {&(0x7f00000046c0)=""/192, 0xc0}], 0x3}, 0x29625dbb}, {{0x0, 0x0, &(0x7f0000005b40)=[{&(0x7f00000047c0)=""/71, 0x47}, {&(0x7f0000004840)=""/88, 0x58}, {&(0x7f00000048c0)=""/36, 0x24}, {&(0x7f0000004900)=""/4096, 0x1000}, {&(0x7f0000005900)=""/122, 0x7a}, {&(0x7f0000005980)=""/111, 0x6f}, {&(0x7f0000005a00)=""/201, 0xc9}, {&(0x7f0000005b00)}], 0x8, &(0x7f0000005bc0)=""/134, 0x86}, 0xd}, {{0x0, 0x0, &(0x7f0000005cc0)=[{&(0x7f0000005c80)=""/5, 0x5}], 0x1, &(0x7f0000005d00)=""/180, 0xb4}, 0x1}, {{&(0x7f0000005dc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000005f80)=[{&(0x7f0000005e40)=""/62, 0x3e}, {&(0x7f0000005e80)=""/121, 0x79}, {&(0x7f0000005f00)=""/119, 0x77}], 0x3, &(0x7f0000005fc0)=""/250, 0xfa}, 0x3}], 0x5, 0x40000022, &(0x7f0000006240))

20.006319112s ago: executing program 1 (id=2363):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2, 0x3, 0x0, 0x2, 0x12, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x7, 0x0, 0x7, 0x0, 0x40000000}, @sadb_address={0x5, 0x5, 0x0, 0x130, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_sa2={0x2, 0x13, 0xbb, 0x0, 0x0, 0x70bd2d, 0x3501}]}, 0x90}, 0x1, 0x7}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0004001a00010029bd700000800000021420041001000000040000b730ef0dfacfb4ff93b7c8bac1e8ad0a1b414980ccf0cf64342c5f65e504ed17306e2901129861cdb019127394df05fad384bd747a77ee269632148f24558ea076fc5a4956ee565d57ece46777548093cda63f2a02362c0205e5c1c544e3bd3bb160ea8032f0c9d4db49af2474ae9d37e2ab8e11ed5b9c686bbed434af9dfe4f45eea3027df4f06f45332d59a133fc9c89e9c2af4d9f504d227b8ba3bef18f767e99c4e67387166d30c3414b757bb3131f3adc1117880343f4ece65d164461e5c981f542051bfe13ec4b5fdaf78f705b838b00"/248], 0x1c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x2928aa90}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0)

19.964636723s ago: executing program 0 (id=2364):
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write(r1, &(0x7f00000000c0)='-', 0x1)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
sendmsg$rds(r0, &(0x7f0000000200)={&(0x7f00000002c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000084}, 0x0)
r2 = socket(0x15, 0x5, 0x0)
getsockopt(r2, 0x200000000114, 0x271b, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)

19.963821629s ago: executing program 1 (id=2365):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @host}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="2000000072009fb3010000000000000007000000", @ANYRES32=0x0, @ANYBLOB="050001"], 0x20}}, 0x4c010)
connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)
r3 = accept(r0, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001cc0)=@arena={0x21, 0x0, 0x0, 0x24, 0x20000, 0xffffffffffffffff, 0x509, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000040001000950000000000000000000007f2d42a9999"], &(0x7f0000000440)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000140), &(0x7f0000000180)=@tcp6=r3}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000600)={r5}, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r4}, &(0x7f0000000140), &(0x7f0000000640)=r5}, 0x20)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000780)=0x1, 0x4)
setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000800)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000001b40)=0x118, 0x4)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000840)={'vlan1\x00', <r8=>0x0})
sendto$packet(r7, &(0x7f0000000880)='\x00', 0x1, 0x240250d4, &(0x7f00000008c0)={0x11, 0x8100, r8, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14)
poll(&(0x7f00000001c0), 0x55, 0x2)
r9 = socket(0x19, 0x4, 0x8)
r10 = socket$inet_icmp(0x2, 0x2, 0x1)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x18, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000001800000000000000800000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000b5000400010000001801000020646c2500000000002020207b1af8ff00000000bfa120000000000007010000f8ffffffb702000008001000b7030000050008008500020006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000ac0)='GPL\x00', 0x6, 0x1001, &(0x7f0000000b00)=""/4097, 0x41100, 0x2d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3e}, 0x94)
setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x138)
write(r9, &(0x7f0000000400)="240000001e005ff6991a2b200e0f7a000a000000000000000000110008000e00000000ff", 0x24)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r9)

19.957913695s ago: executing program 0 (id=2366):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
bind$l2tp6(r0, &(0x7f0000000140)={0xa, 0x0, 0x10, @local, 0x0, 0x1}, 0x20)

19.957220571s ago: executing program 0 (id=2367):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'syzkaller1\x00', 0x4001}) (async, rerun: 32)
r1 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000680)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r2=>0x0}) (async)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000880)={<r3=>0x0, 0x10000, 0x1})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000c80)={{r1}, r2, 0x4, @unused=[0x6781, 0x8, 0x8000000000000001, 0x82], @devid=r3}) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x3, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="660a0000c387c131cb62034300000000850000001600000095"], &(0x7f0000000300)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000}, 0x94) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000005c0)={'syzkaller1\x00', @link_local})
r4 = socket$kcm(0x2, 0x7, 0x2) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000700000000000000800000000400000010ff0000c600feff2000000a9500"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x92, &(0x7f0000000140)=""/146, 0x0, 0x64, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
socket$unix(0x1, 0x5, 0x0) (async)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000600)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) (async, rerun: 32)
write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f00ffffffffffffffc100003c"], 0xfdef) (rerun: 32)

19.952868591s ago: executing program 3 (id=2368):
sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="9800ffbd7000bbb5ff030000da0c00", @ANYRES32=0x0, @ANYBLOB="0c009900ff030000670000002400238005000e000100000005001d00000000000500110000000000060010000200000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900010000800c000000080001005f0000000c0099000800000027000000"], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x8890)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close(0xffffffffffffffff)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a)
r1 = socket$kcm(0x29, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a14000000000a01040000000000000000010080032c000000030a05000000000000000000010000000900010073797a30000000000900030073797a320000000078000000060a010400000000000000000100100008000b400000000050000480340001800b000100657874686472000024000280080001400000000e0800034000000000080004400000002205000200890000001800018011000100666c6f775f6f66666c6f6164000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xe0}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, 0x0, 0x40000)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000200)=@pppoe, 0x80, &(0x7f0000000800)=[{&(0x7f0000000480)=""/246, 0xf6}, {&(0x7f0000000580)=""/152, 0x98}, {&(0x7f0000000700)=""/168, 0xa8}, {&(0x7f00000007c0)=""/10, 0xa}], 0x4, &(0x7f0000000840)=""/52, 0x34}, 0x40000002)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001e1401003dbd01000100000008"], 0x18}}, 0x20004018)
recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@delchain={0x21cc, 0x65, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0x5, 0x8}, {0x1f, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0xd76}, @filter_kind_options=@f_bpf={{0x8}, {0x2198, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x4, 0x4, 0xd9, 0x3ff}, {0x8, 0x98, 0x8, 0x3}, {0x4, 0x3, 0x9, 0xfffffff4}, {0x5, 0x1, 0x2, 0x6}]}}, @TCA_BPF_ACT={0x2140, 0x1, [@m_csum={0x160, 0xb, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x9, 0x7, 0xc, 0x8000}, 0x36}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x6, 0x2, 0x2, 0xffffffff}, 0x66}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x7, 0x1, 0x7, 0x401}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x20000000, 0x4, 0x1}, 0x21}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x3ff, 0x20000000, 0x7ff, 0xfffffe5a}, 0x5f}}]}, {0xa6, 0x6, "7248d3ec12973d09fcd027791dae7e2f903439d3a94e9eb7adf72919ec4c43895d5713f19521b6324a537841f1ebc41db34c02bab7cd31fca7f71778c8a4c2b2b35c29cc299424d4bdb1f7005f8e0bcf48d1627fcf40755ab429e041fefbed1968b849aa35d510281cfa8dd35c3b334b628a8f94a14fae1c71694d35b1ee1e35c959b609e0f82b156b61bf6a460ac478758b430e9f29ada12c95a015637c0cc3394b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0x1cc0, 0x5, 0x0, 0x0, {{0xa}, {0x1c74, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x5, 0xfffffff8, 0x5, 0x8, 0x1}, 0xa, 0x2, [{0xfffffffd, 0x8, 0x5, 0x7023, 0x7ff, 0x3}]}, [{0x8, 0x2, 0x4, 0x9, 0x2, 0x5}, {0xffffffff, 0x1571, 0x7, 0x2, 0x1, 0x6}, {0x1, 0x7, 0x0, 0x2, 0x3, 0x8}, {0x9, 0x8, 0xb9c, 0x4, 0x1, 0x73}, {0x3, 0x6, 0xe, 0x7, 0x7918f95c, 0x4}, {0x1b, 0x9, 0x62b1dada, 0xfff, 0x7fff, 0x6b}, {0x6, 0x3, 0x1, 0x10001, 0x44, 0x3}, {0x4, 0x4, 0x1, 0xe31, 0x4, 0x68}, {0xffff7b7a, 0x5, 0xffffffff, 0x9, 0x10, 0x1}, {0x1126, 0x4, 0xffffffff, 0x0, 0x2}, {0x40, 0x7, 0xbcc, 0x7, 0x0, 0x3ff}, {0xa, 0x2, 0x4, 0x8001, 0x2, 0x6}, {0xe46, 0x4, 0x7, 0x2, 0x2, 0x57}, {0x7, 0x3d27, 0x4, 0x5, 0x2, 0x4}, {0x3, 0x3, 0x3, 0x3, 0x7, 0x5}, {0x5, 0x4d5, 0x3c, 0x2, 0x5, 0x9}, {0x8, 0x2, 0xa5, 0x8, 0xfff, 0x7}, {0x3, 0x5, 0x8001, 0x8}, {0x200, 0x2, 0x1, 0x8, 0xff, 0x5c7b}, {0x28, 0x7, 0x6, 0x10, 0x2}, {0x2, 0x1, 0xffff8000, 0x6, 0x0, 0x3a}, {0x800, 0x2, 0x7, 0x5, 0x7fffffff, 0x8}, {0xc9, 0x3, 0xb, 0x3, 0x7fffffff, 0xff}, {0xfffffffe, 0x5c4, 0x9, 0x0, 0xfffffbff, 0xfffffff7}, {0x1fffc003, 0xffffbf54, 0xea, 0x6, 0x8d7, 0x1}, {0x8, 0x5, 0x6c2, 0x8, 0x7ff, 0x3}, {0x0, 0x3, 0x5, 0x40, 0x4, 0x6}, {0xffffffff, 0x730, 0x4, 0x8001, 0xe0, 0x1ff}, {0xfffffff7, 0x3, 0x8, 0x62f3, 0x5, 0x3}, {0x800, 0x1, 0x1ff, 0x35547e4, 0x6, 0x1000}, {0x1, 0x5, 0x0, 0x4, 0x81, 0x9}, {0x400, 0x101, 0x9, 0x0, 0x2, 0x3}, {0x4, 0x7, 0x401, 0xb, 0x1}, {0x1317, 0x1, 0x0, 0x80000001, 0x7, 0x94d}, {0x2, 0x101, 0x6, 0x19c, 0x9, 0x5}, {0x1, 0xc0fa, 0x2, 0x80, 0x0, 0xff}, {0x81, 0x0, 0x44c, 0x3, 0x1, 0x6}, {0x3, 0xff, 0x5eac1937, 0x100, 0x1}, {0xfffffffe, 0xfff, 0x4, 0x2, 0x28000, 0x7fffffff}, {0x5, 0x1, 0x8, 0x3, 0x1, 0x80}, {0x101, 0x889c, 0xb, 0x8002, 0x0, 0x5}, {0x8, 0x300, 0x1, 0x9, 0x5f80c74e, 0xa59}, {0x6, 0x4, 0x4, 0x4, 0x3, 0x2}, {0x6, 0x0, 0x1, 0x6, 0xade7, 0xfffffffc}, {0x574b, 0x7, 0x4, 0x8}, {0xc, 0x4, 0x8, 0xc1f, 0xf, 0x8000}, {0x5, 0x37f, 0x1000, 0x4, 0x1fc, 0x9}, {0xffff3ecd, 0xffffff45, 0x7f, 0xaee, 0xb, 0x7}, {0x3ff, 0x0, 0xc3, 0x7, 0x80}, {0xc9, 0x9, 0x1, 0x7b0a7f11, 0x200, 0x9}, {0x8, 0xf37, 0x80000001, 0xe, 0x2, 0x500}, {0x0, 0x3, 0x3, 0x8001, 0x2, 0x9}, {0x5, 0x6, 0x1000, 0xfffffff9, 0x8, 0x4}, {0x7, 0x1, 0x5, 0x9, 0xc34, 0x8001}, {0x4, 0x7, 0xcd89, 0x565f, 0x6, 0x1000}, {0x5, 0x3f29cd3c, 0x81, 0x6, 0x6, 0x1ef}, {0x6, 0x9, 0x2, 0x9, 0x1, 0x800}, {0x8ab, 0xd3a, 0x4, 0x3, 0xa, 0x3}, {0x80, 0x7fff, 0xc2c000, 0x1, 0x5f3c, 0x1}, {0x10000, 0x8, 0xffffffff, 0xcf, 0x2, 0x1}, {0x9, 0x86af, 0x7a, 0x3e, 0x1}, {0x2, 0x8000, 0x2, 0x7c, 0x80000001, 0xffffc3d8}, {0xa, 0xb, 0x4, 0x2, 0x4, 0x9}, {0x1, 0x7ff, 0x24, 0x1e, 0x7, 0x1}, {0xffffffff, 0x8, 0x0, 0x8001, 0x89, 0x3}, {0xc, 0x1, 0xfffff182, 0x400, 0x2, 0x7fff}, {0xcc, 0x8000, 0x9, 0xfffffff7, 0x4, 0xd08f}, {0xe, 0x9, 0x8, 0xb, 0x0, 0x8}, {0xdb15, 0x40, 0x46fe, 0x5, 0x4, 0x80}, {0x2, 0x9, 0x3, 0x7, 0xe0, 0xcbc1}, {0x7, 0x3, 0x0, 0xed0, 0x3, 0x8}, {0x3, 0x2, 0x8, 0x1, 0xffffffc0, 0x8}, {0x7, 0x3, 0x5, 0xffffffff, 0x400}, {0x14a, 0x7, 0x0, 0x4df6, 0x2, 0x7}, {0x10, 0x0, 0x4, 0xfffffffc, 0x2, 0x101}, {0x4, 0x6, 0x608d, 0x9427, 0x9, 0x1}, {0x40, 0x3, 0x11, 0x9, 0x80000000, 0x8000}, {0x4, 0x3, 0x32c8, 0xef, 0x9346, 0x800}, {0xf, 0x4, 0xfa6, 0x1, 0x7ff, 0x5}, {0x8, 0x5, 0xc, 0x6, 0x4, 0x7}, {0x0, 0x400, 0x1ff, 0x53, 0x10, 0x7f}, {0x4, 0x8, 0x2, 0x7, 0x40, 0x4}, {0x2, 0x6e, 0x4, 0x7fffffff, 0x2, 0xffff039d}, {0x6, 0x7, 0x80000000, 0x5, 0x6d, 0x8}, {0x9, 0x6, 0x7, 0xf1, 0x3, 0x1}, {0x10, 0x2, 0x745, 0xfffffff9, 0x7, 0x7}, {0x8, 0x9, 0x17e6, 0x8, 0x101, 0x9}, {0xd, 0x9, 0x61, 0x0, 0x916, 0xf8}, {0xfffff870, 0x2, 0x4, 0x89, 0x8, 0x8}, {0x1, 0x9, 0x0, 0x0, 0x6, 0x1}, {0x5a, 0xffff0000, 0x80000001, 0x81, 0x9, 0xfffffff4}, {0x1, 0x4, 0x3, 0x0, 0x4, 0xfffffffc}, {0x1, 0x2, 0xe, 0xcd33, 0x9, 0x8}, {0x5, 0x400, 0x1, 0xd, 0x80000001, 0xf}, {0xffff, 0x4, 0x3, 0x6b, 0x5, 0x3}, {0x2, 0x100000, 0x5, 0xcc, 0x88e, 0x2}, {0x7fffffff, 0x80, 0x5de1d231, 0x6, 0x3, 0x3}, {0x0, 0x6, 0x200, 0x2, 0x9, 0x9}, {0x400, 0xd, 0x5, 0x7, 0x0, 0xd9}, {0xf238, 0x0, 0x1, 0xffff, 0xf99, 0x8}, {0x3, 0x401, 0x1, 0xfffffffa, 0x8000}, {0x5, 0xfff, 0x8100000, 0x100, 0x3, 0x2}, {0x39, 0x5, 0x5, 0x9, 0xffffffff, 0x6}, {0x0, 0xb3df, 0x8, 0xffff, 0x2, 0xa1c7}, {0x800, 0x1, 0x2, 0xb8, 0x4, 0x7}, {0xc1, 0x6, 0x8, 0x6, 0x6}, {0x2, 0x8, 0xfffff001, 0x2, 0x10000, 0x53}, {0xd3, 0x10001, 0xf1, 0x9, 0xa9, 0x7b2f}, {0x76, 0x4, 0xb06e, 0x9, 0x70, 0x1}, {0xf, 0x1, 0x8, 0x9668, 0x1fcf, 0xb70}, {0x6, 0xffffffff, 0xfffffff5, 0x7, 0x80000001, 0x3}, {0x8, 0x8, 0x6ad, 0x1fa1, 0x29, 0x1ff}, {0x2e90, 0xffff, 0x58, 0xab, 0x3, 0x5}, {0x7, 0x5, 0x5, 0xffffffff, 0x1, 0x6}, {0xfbbb, 0x0, 0x7, 0x5, 0x8, 0x9}, {0x7, 0x5, 0x2, 0x1000, 0xc}, {0x401, 0xee1, 0xfffffe00, 0x0, 0x2, 0x4}, {0x0, 0x480000, 0x282, 0x6, 0xffff2d43, 0x8}, {0x7, 0x4, 0x9, 0xac6, 0x6, 0x9}, {0xfffffff7, 0x0, 0xd, 0x2, 0x4, 0x6}, {0x7fff, 0x10001, 0x1000, 0xffff, 0x4, 0x4}, {0xffff, 0xecb, 0x5, 0x81, 0xfffffe01, 0x10001}, {0x9, 0x8e01, 0xc5, 0xae06, 0x4000, 0x7f}, {0x2, 0x8, 0x5, 0x2, 0x0, 0x5}, {0x0, 0x3225, 0x41, 0x8, 0x1, 0x4}, {0x3, 0x8, 0xc, 0x1, 0x2c1d, 0x6}, {0xe, 0x1, 0xc, 0xffff, 0x8, 0xfffffe01}, {0x1d, 0x2, 0x7, 0x0, 0x159, 0x1}], [{0x4}, {0x4}, {0x0, 0x1}, {0x6, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x6f430f49ed6ac6bd}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x1, 0xf61cabe603c30892}, {0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x5}, {0x1}, {0x3, 0x1}, {0x6}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x1}, {}, {0x4, 0xc6ccb7e81ed9de50}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x4}, {0x2}, {0x2}, {0x3}, {0x2}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x1}, {0xb28d00a83ffcc2c7}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x1}, {0x3, 0x2}, {}, {0x2}, {0x3, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x3}, {}, {0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x5}, {0x3, 0x119e686731f243b4}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x3}], 0x1}}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0xf9, 0xc, 0x0, 0x0, 0x6}, 0xc5, 0x5, [{0x0, 0x67497ca5, 0x6ba6, 0x80000000, 0x4, 0x3001}]}, [{0x1, 0x8, 0x8, 0x7, 0x5, 0xfffffe74}, {0x1, 0x6, 0x9, 0xfffffffe, 0x7, 0x9}, {0x0, 0x21a, 0x9, 0x1, 0x800, 0x2}, {0x6, 0x24, 0x111, 0xf, 0x1}, {0x7, 0x6a0, 0x400, 0xc7f, 0x5, 0x71}, {0xb40, 0x8, 0xe, 0x9, 0x45a47ecd, 0x1}, {0x3, 0x6b, 0x880, 0x8, 0x1, 0x1000}, {0x9, 0x3, 0xd, 0xfffffff7, 0x4a77, 0x10001}, {0x9, 0x8b5f, 0x2, 0x9, 0xf1a, 0x7}, {0x200, 0xf0000000, 0x3, 0xa6f, 0xb49, 0x7}, {0x8790, 0xffffffb0, 0x7, 0xc, 0xfffff000, 0xffff8000}, {0x3, 0x7, 0x9, 0x7313f36f, 0x1, 0x7ff}, {0xcd9, 0x5c, 0x3ff, 0x7, 0xc0e3, 0xf93e}, {0x4, 0xffffffff, 0x9e, 0xd, 0x3, 0x4}, {0x5, 0xf6, 0x7, 0x1, 0x5, 0x5}, {0x1, 0x1, 0xe, 0x7, 0x2}, {0x82, 0x7c17, 0x770c, 0x4, 0x1, 0x7fff}, {0x5, 0x9, 0x522, 0x7, 0xd23, 0x4}, {0x1, 0x8b29, 0x1, 0x8, 0x8, 0x8}, {0x9, 0x9, 0x9, 0xffff, 0x669, 0xe}, {0x8000, 0x0, 0x6, 0xfb13, 0x291, 0x6}, {0x6, 0x0, 0x9, 0x9}, {0x5658747, 0x3, 0x0, 0x8, 0x6, 0x8}, {0x6, 0x89, 0x5, 0xee, 0x800, 0x7}, {0x4, 0xa, 0x6, 0x3, 0x76, 0x1ff}, {0x7e7, 0x1, 0xd, 0xb9, 0x8, 0x7ff}, {0x3, 0x2, 0x9, 0x7, 0xf72}, {0xe0f, 0x5, 0x800, 0x5, 0x44f5, 0x3}, {0x8, 0x9, 0x1, 0x2a, 0x4, 0x6}, {0x8, 0x9, 0x2, 0x7, 0x3, 0x3}, {0x5, 0x5, 0x1, 0x8, 0x9, 0xfffffffd}, {0x9, 0xe, 0x5, 0x5, 0xfffffe47}, {0x1, 0x7ffc, 0xf, 0x1, 0x8, 0x7ef}, {0x0, 0x5ae, 0x10, 0x4, 0xd8f, 0x6}, {0x9, 0xc, 0x6, 0xd, 0x8, 0x3}, {0x10000, 0x2, 0x4, 0x80, 0x4, 0x2}, {0x100, 0xc, 0x10000, 0x9, 0x6, 0x7fff}, {0x6, 0x3ff800, 0x0, 0xd, 0x8, 0x1d}, {0x80000000, 0x4, 0x8, 0x7819, 0x400, 0x10}, {0x596, 0x1, 0x1, 0x0, 0x4c81ae93, 0x5d4c}, {0x101, 0x0, 0xe, 0x1948, 0x111, 0x1ff}, {0x7, 0x3, 0x5f31, 0x8, 0x8, 0x90ff}, {0xf1, 0xffffff80, 0x5, 0x6, 0x4, 0x10000}, {0x5, 0xfffff38e, 0x8, 0x0, 0x2, 0xda}, {0x7, 0x5, 0x95, 0x10f, 0xffffffff, 0x8001}, {0x1, 0x6, 0x0, 0x0, 0x1, 0xa}, {0x5, 0x1, 0x0, 0x0, 0x1000, 0x7}, {0x8, 0x2, 0x5, 0xf4, 0xf8, 0xe}, {0x80, 0x8f7, 0x5714, 0x6, 0x7fffffff, 0x7}, {0x8, 0x3, 0xb708, 0x80000001, 0x5, 0xff}, {0x6, 0x80000000, 0x354, 0x1ff, 0x3, 0x1}, {0x1, 0x10, 0x758, 0x1, 0xa, 0xfffffffa}, {0x9, 0x0, 0x5, 0xc15, 0x80000001, 0x9}, {0x3, 0x8, 0x4, 0x6, 0x9, 0x5}, {0x101, 0x9, 0x87, 0x1000, 0x8, 0x1}, {0x9, 0x0, 0xfffff000, 0x9, 0x10, 0x7}, {0x2086a7, 0x1dbe, 0x6e41, 0xfffffff6, 0xfffffffe, 0x101}, {0x7, 0x2, 0x2, 0x6, 0x7, 0xdd9a}, {0x3, 0x4, 0x4, 0x5, 0x2, 0x7}, {0x2, 0x9, 0x2d, 0x2, 0x2, 0x8}, {0xded8, 0x6, 0x9a3, 0xffff, 0x67, 0xa}, {0x4, 0x7, 0x1, 0x7, 0xb, 0x9a2}, {0x21641a49, 0x3, 0x1ff, 0x40, 0x5, 0x2}, {0x18e000, 0x6, 0x8001, 0xffffffff, 0x10001, 0x1}, {0x0, 0x7fff, 0x0, 0xffffffb0, 0x0, 0x140000}, {0x9, 0x101, 0x80000000, 0x2, 0xc39, 0xb}, {0x5, 0x1, 0x8000, 0x4, 0x2, 0x3f3}, {0x7, 0x8000, 0x1, 0x0, 0x1, 0x3}, {0xf, 0x9, 0xb, 0x0, 0xfffffffc, 0xc}, {0x1, 0x5, 0x7, 0x8001, 0x0, 0xb}, {0x6b9, 0x4, 0x7, 0x4, 0x9, 0x2}, {0x2, 0x3, 0x4d147f5d, 0x3, 0x7fc00, 0x2}, {0x4, 0x1, 0x9, 0x3ff, 0x3, 0x81}, {0x101, 0x7fff, 0x5, 0x7fff, 0x8, 0x6}, {0x6cc, 0xd, 0xe880, 0x1, 0x3, 0x4}, {0x74f2, 0x1c, 0x5, 0x1aa, 0x1000, 0x7f}, {0x9, 0x1, 0x7fffffff, 0x1, 0x3, 0x6}, {0x100, 0x8, 0x4, 0x7, 0x4, 0x8000000}, {0x4, 0x926, 0x1ff, 0xfffffffb, 0x1, 0x3}, {0x5, 0x6, 0xb, 0x3ff, 0xfffeffff, 0x5}, {0x8, 0x5, 0x6ad, 0x0, 0x5, 0x7}, {0x7, 0x6348, 0xc20, 0xffff7fff, 0xfffffffe, 0x800}, {0x6, 0xa655, 0x7, 0xf4, 0x7, 0x10}, {0x6, 0x5, 0xffff, 0x40, 0x60a45124, 0xd}, {0xec, 0xffffffff, 0x1128, 0x192c, 0xa, 0x800}, {0x5, 0x9, 0x100, 0x8, 0xfffffffa, 0x8}, {0xfff, 0xfff, 0x4, 0x8001, 0x5, 0xe289}, {0xe, 0x1ff, 0x4, 0x4, 0x0, 0x8}, {0x1, 0x9, 0x9, 0x0, 0x6, 0xbfb5}, {0x40000, 0x96, 0xbe5, 0x1ff, 0x8, 0x9}, {0x0, 0x67, 0xff, 0x5, 0x10, 0x8}, {0x20000000, 0x0, 0x7, 0x7, 0x0, 0x8000}, {0x9, 0x4, 0x1, 0xc, 0x3, 0x8000}, {0xb, 0x3, 0x0, 0x8, 0x8b4, 0x7}, {0x86f, 0x1, 0x1, 0x2, 0x3, 0x3}, {0x47, 0x6012, 0x8001, 0xfffffff8, 0x0, 0x5}, {0xfffffffd, 0x100, 0x9, 0x6, 0x5, 0x7}, {0xffffffff, 0x8, 0x5a6, 0x8000, 0x2, 0x2}, {0x2e, 0xc7c, 0x4, 0x8000, 0xd, 0xfff}, {0x9, 0x9, 0x0, 0x7, 0x3, 0x6}, {0x4, 0xb3, 0x1, 0x8, 0xf, 0x2}, {0x28a, 0x5, 0x8, 0x4, 0x7, 0x5}, {0x38, 0x4, 0x4, 0x6, 0x81, 0x3}, {0x80000000, 0x1000, 0x8, 0x5, 0x5, 0x2}, {0x400, 0xbb, 0x8, 0x5, 0x5, 0x2}, {0x8, 0x9, 0x1, 0xfff, 0x200, 0x471}, {0x2, 0x0, 0x5, 0x1, 0x0, 0xfffffffe}, {0x1, 0xa, 0x3a, 0x3ff, 0x7, 0x1137}, {0x0, 0x2, 0x8000, 0x5, 0x5, 0x9}, {0x8001, 0x8e2, 0x7, 0x8, 0x4, 0x1b43}, {0x400, 0x4, 0xc, 0x6, 0x698, 0x6}, {0x6314, 0x0, 0x10001, 0x3ff, 0x8000, 0x7fff}, {0x6, 0x1, 0x5, 0x8, 0x88}, {0x2, 0xf22a, 0xe475, 0xa, 0x4, 0x744b8102}, {0x7, 0x2a6, 0x8, 0x5, 0x1, 0xd}, {0x5, 0x2, 0x5, 0x9, 0xd9eb12d, 0x5}, {0xd8, 0x1, 0x7, 0x3d, 0x100}, {0xe, 0x0, 0x10000, 0x3, 0x800, 0x6}, {0x68000000, 0x1, 0xfff, 0x3, 0x67, 0x8}, {0x101, 0x4, 0x8, 0x4, 0x1000, 0xfffffffe}, {0xa28d, 0x4, 0xffffff7e, 0xcf, 0x7fffffff, 0x2}, {0x80b, 0x54, 0xe02, 0xd90a, 0xd, 0x3}, {0x7645, 0x2, 0x4c9, 0x800, 0x3, 0x1}, {0x8, 0x37, 0x3, 0x9, 0x2, 0x3}, {0x3, 0x3, 0xfffffff8, 0x3, 0x0, 0xfffffdbc}, {0xfffffffe, 0x1, 0xd89e, 0x1000, 0x3, 0xffff}, {0x9, 0xf574e1e, 0x3, 0x0, 0x8, 0xb}, {0xfffffff2, 0x8, 0x3, 0x6, 0x5, 0x7ff}], [{0x3}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x2}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0xaf8bba8d0517b9e0, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x1}, {0x2}, {}, {0x1}, {0x3}, {}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x46ad83950480526d}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x3}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}], 0x3}}]}, {0x23, 0x6, "ad708099198a0ec1c38872c6b6baebd4c106afa40a3f91a999ddfd290aff46"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_bpf={0x70, 0xb, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x0, 0xff, 0xfe, 0x8}]}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x0, 0x7, 0x2, 0x80}]}]}, {0x22, 0x6, "6d36347a1242181465b574a64f523ba2c253db69f9aaae8e13306c1ee24b"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0xc4, 0x5, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3f800000, 0x5, 0x20000000, 0x9, 0x5}, 0x8}}]}, {0x71, 0x6, "69deacbdb4d5354b30928698782d736f79e7c689cee4c3027b569f62a841f2be5fc5fa659f7c79d435fdb9eb4130bd9a6e3eb3200751586ff5ebdbe62df3b5244259af3f5ab21497e550eb025982bb3aa9d76283e85cc2b6f4eba308b31283715dd3781e328e5a49c8fc610eb9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x1e8, 0x15, 0x0, 0x0, {{0xb}, {0x144, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xc, 0x72523fe1, 0x7, 0x0, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x9, 0x4, 0x5, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x3, 0x20000004, 0xb, 0x3}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4674, 0xa444, 0x2, 0x7d2b, 0xb}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x6, 0xffffffffffffffff, 0x2, 0x9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x6366, 0x5, 0xc, 0x4}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7, 0x2, 0x2, 0x4}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7, 0x20000003, 0x6, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa3c, 0x967, 0x5, 0x6, 0x80000001}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xd, 0x480, 0x3, 0x8001, 0x2d5}, 0x1}}]}, {0x79, 0x6, "d5ef8b5f42f53bb630ae6a50d648f8db0da6ec9de7b6ed4b891485781d2737a05144751ea216feb8fea7f028badf7d9963b01a1342cb62d463074d2b2a31fda8391398621e9540f33c7156ca45fda84d4f64296dcbd827f37628708490db199c49ad999ec23719dfa8575af2554fde2bc5a24ea7ec"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x7}]}}]}, 0x21cc}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

19.556412844s ago: executing program 4 (id=2372):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket(0x2b, 0x1, 0x1)
listen(r1, 0x5) (async)
accept4$inet6(r0, 0x0, 0x0, 0x800) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
socket$tipc(0x1e, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)

19.504492438s ago: executing program 3 (id=2373):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES16=r0, @ANYRES64=0x0], 0x48) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES16=r0, @ANYRES64=0x0], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1, <r3=>0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)=r2}, 0x20)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000002380)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x38, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x508]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x24000080)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0x5, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x34315}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r3}, &(0x7f0000000840)=0x20000, &(0x7f0000000880)=r2}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000008c0)={r3, &(0x7f0000000900)}, 0x20) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000008c0)={r3, &(0x7f0000000900)}, 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}]}], {0x14}}, 0xa8}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000440)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000000480)=[{&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001c80)="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", 0x33}], 0x2, &(0x7f0000001dc0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00)
r8 = socket(0x400000000010, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a40), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x30, r10, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044808}, 0x0) (async)
sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x30, r10, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044808}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000b80), 0xffffffffffffffff)
r14 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ppoll(&(0x7f0000002080)=[{r0, 0x1}, {r14}, {r5, 0x501}], 0x3, &(0x7f00000020c0), &(0x7f0000002100)={[0x2]}, 0x8)
sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000001e40)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000ffdbdf25030000000c00050003010000000000000c000200020000000000000008000100000000000c0004"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4004)
sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f0000001e80)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001f00)={&(0x7f0000001f40)=ANY=[@ANYBLOB="2c0000b7", @ANYRES16=r13, @ANYBLOB="04002cbd7000fcdbdf25020000000c00050020000000000000000c0004000400000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x8084) (async)
sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f0000001e80)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001f00)={&(0x7f0000001f40)=ANY=[@ANYBLOB="2c0000b7", @ANYRES16=r13, @ANYBLOB="04002cbd7000fcdbdf25020000000c00050020000000000000000c0004000400000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x8084)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000002180), r12) (async)
r15 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002180), r12)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r12, &(0x7f0000002280)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x4c, r15, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004840}, 0xc000) (async)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r12, &(0x7f0000002280)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x4c, r15, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004840}, 0xc000)
sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000002040)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f80)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="04002dbd7000ffdbdf250100000008000100000000000c000300080000000000238eedc43a6f3f8b5b2e0c00e4ffffff341749d45d75d27c4e2b23124324ff93d1414fe036848e000000"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x80)
sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009"], 0xb0}}, 0x0)
syz_emit_ethernet(0x76, &(0x7f00000003c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @private=0xa010102, @local, {[@cipso={0x86, 0x28, 0x2, [{0x6, 0xb, "5e000000ff000000f5"}, {0x0, 0x5, "0404a6"}, {0x0, 0x12, "960605390006fff5800000b61af93a93"}]}, @rr={0x7, 0xf, 0x57, [@rand_addr=0x64010101, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end]}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x76, &(0x7f00000003c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @private=0xa010102, @local, {[@cipso={0x86, 0x28, 0x2, [{0x6, 0xb, "5e000000ff000000f5"}, {0x0, 0x5, "0404a6"}, {0x0, 0x12, "960605390006fff5800000b61af93a93"}]}, @rr={0x7, 0xf, 0x57, [@rand_addr=0x64010101, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end]}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x10}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x10}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)

19.270539556s ago: executing program 1 (id=2374):
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x4, 0x6, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

19.129867752s ago: executing program 1 (id=2375):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000079100000000000006900e0ff0000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000080)={'gretap0\x00', <r2=>0x0, 0x8, 0x7, 0x6, 0x2, {{0x19, 0x4, 0x1, 0x39, 0x64, 0x66, 0x0, 0x3, 0x6, 0x0, @multicast1, @rand_addr=0x64010102, {[@ssrr={0x89, 0x1b, 0x29, [@local, @rand_addr=0x64010102, @loopback, @multicast1, @loopback, @multicast2]}, @end, @timestamp={0x44, 0x18, 0x3a, 0x0, 0x9, [0x7, 0x2621, 0x9, 0x7, 0x8000]}, @timestamp_prespec={0x44, 0x1c, 0xf8, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfff}, {@loopback, 0x8}, {@multicast2, 0x80000001}]}]}}}}})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000240)=0x4)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000002c0)=0x2)
ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000ac0)={0x2, &(0x7f0000000b00)=[{0x50, 0x0, 0x7, 0x8000008}, {0x6, 0xfc, 0x8}]})
write$ppp(r4, &(0x7f0000000b40)="0002", 0x2)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'syztnl0\x00', &(0x7f00000003c0)={'ip_vti0\x00', <r5=>0x0, 0x7800, 0x700, 0x1, 0x84, {{0x3b, 0x4, 0x3, 0x3b, 0xec, 0x64, 0x0, 0x3, 0x4, 0x0, @loopback, @multicast1, {[@cipso={0x86, 0x21, 0xffffffffffffffff, [{0x0, 0xf, "f7726a5bdef4cc52890a14757a"}, {0x5, 0x2}, {0x5, 0x4, 'SD'}, {0x0, 0x6, "e5cf0c0c"}]}, @end, @end, @timestamp={0x44, 0x1c, 0x5b, 0x0, 0x0, [0x69f, 0x0, 0x4, 0x7, 0x9323, 0x2]}, @rr={0x7, 0x1b, 0x9d, [@remote, @empty, @remote, @rand_addr=0x64010101, @broadcast, @private=0xa010100]}, @timestamp_addr={0x44, 0xc, 0xb9, 0x1, 0x4, [{@multicast2, 0x3}]}, @cipso={0x86, 0x70, 0x0, [{0x7, 0x5, "680652"}, {0x7, 0xe, "586208a6e7d54d5db3659a8f"}, {0x2, 0x12, "e5a286b723e69c0ef9d5447c3ae0dea0"}, {0x6, 0xb, "797b73ae699e62ec86"}, {0x6, 0xa, "cd6a137eebb6c90b"}, {0x2, 0x7, "8661616752"}, {0x0, 0x10, "699c71207c738d3794debe47d047"}, {0xfbd653fb1d80a788, 0xc, "e61b161b09df13ae580f"}, {0x1, 0xd, "3d1c70cc8f7f5ee60929f4"}]}]}}}}})
r6 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x7, &(0x7f0000000540)=0x6, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'wlan1\x00', <r7=>0x0})
sendmsg$can_raw(r6, &(0x7f00000005c0)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000640)={&(0x7f0000000680)=@can={{0x0, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x4, 0x0, "36e932c486d21bdc"}, 0x10}, 0x1, 0x0, 0x0, 0x20084845}, 0x4094)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'ip_vti0\x00', &(0x7f00000006c0)={'gre0\x00', <r8=>0x0, 0x7800, 0x7800, 0x6, 0x6, {{0x6, 0x4, 0x0, 0x27, 0x18, 0x66, 0x0, 0x9, 0x44be2f19d7d6836b, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010101, {[@noop]}}}}})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000740)={'bridge0\x00', <r11=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r11, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000880)={'syztnl2\x00', <r12=>0x0, 0x29, 0x9, 0x1, 0x170, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x7800, 0x8000, 0x1, 0x9}})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xec, r1, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x90}, 0x40)

18.8329309s ago: executing program 0 (id=2377):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xc201})
write$tun(r1, &(0x7f0000000840)={@val={0x0, 0x86dd}, @val={0x0, 0x4, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@tipc_packet={0xb, 0x6, "02ce5a", 0x28, 0x6, 0x0, @mcast2, @local, {[], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x0, 0x0, 0x1, 0x1, 0x105a, 0x2, 0x4e22, 0x4e24, 0x1, 0x4}}}}}}, 0x5e)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r2, 0x0)
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x30000008})
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000007c0)=@broute={'broute\x00', 0x20, 0x5, 0x668, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000140], 0x0, &(0x7f0000000040), &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x5, 0x42, 0x88ca, 'wlan1\x00', 'pim6reg0\x00', 'veth1_to_bridge\x00', 'vcan0\x00', @remote, [0x0, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, [0x0, 0x0, 0xff, 0xff, 0xff], 0x0, 0xe8, 0xe8, 0x160, [@realm={{'realm\x00', 0x0, 0x10}, {{0x7, 0x1}}}, @mark_m={{'mark_m\x00', 0x0, 0x18}, {{0xd36e, 0x9, 0x0, 0x1}}}], [], @common=@nflog={'nflog\x00', 0x50, {{0x6, 0xd, 0xf2ed, 0x0, 0x0, "b0f183dd257b5d3cde8a2702520ff53d0773635ab8d84d6fe7620fa8bfb2b98a2f5df4ca61eb5bc8b77cbafe43ece9051fe175333cea12f7d97fe6df7311a1c2"}}}}, {0x5, 0x68, 0x80f3, 'veth0_to_hsr\x00', 'hsr0\x00', 'veth1\x00', 'hsr0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @local, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0x0, 0x128, 0x128, 0x158, [@devgroup={{'devgroup\x00', 0x0, 0x18}, {{0x5, 0x400, 0x9, 0x400, 0x8}}}, @ip6={{'ip6\x00', 0x0, 0x50}, {{@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0xffffffff, 0xff, 0xffffff00, 0xff000000], [0xffffffff, 0x0, 0xff, 0xffffff00], 0xf8, 0x80bb644e3dc25934, 0x1, 0x0, 0x4e24, 0x4e22, 0x4e21, 0x4e22}}}], [], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x5, 0x20, 0x6003, 'veth1\x00', 'bond_slave_0\x00', 'dvmrp0\x00', 'veth0\x00', @empty, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], @remote, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], 0x0, 0x118, 0x178, 0x1a8, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth0\x00', 'pim6reg0\x00', 0x2a, 0x2, 0xab, 0x1ff, 0x2, 0x9, {0x8}, {0x66}}}}, @cluster={{'cluster\x00', 0x0, 0x10}, {{0x0, 0x0, 0xe2d3}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x4}}}}, {0x11, 0x68, 0xf9, 'veth0_virt_wifi\x00', 'gre0\x00', 'veth0_to_hsr\x00', 'batadv0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, [0xff, 0x0, 0x0, 0x0, 0xff], @link_local, [0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xa0, [], [], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x1, [{0x11, 0x11, 0x88b5, 'macsec0\x00', 'geneve0\x00', 'ip6tnl0\x00', 'wg2\x00', @empty, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x0, 0xa0, 0xa0, 0xd8, [@cpu={{'cpu\x00', 0x0, 0x8}, {{0x3, 0x1}}}], [], @common=@dnat={'dnat\x00', 0x10, {{@multicast, 0xfffffffffffffffe}}}}]}]}, 0x6e0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000c00)={0x2, 0x4e23, @local}, 0x10)
r4 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r4, &(0x7f0000000c80)="4c00000012001f15b9409b8400feffffffffffff000000000017030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94acc000000000000000000000051d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0)

18.259148424s ago: executing program 4 (id=2378):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000084000000100000080"], 0x48)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)=<r1=>0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000004c0)={{r0}, r1, 0x2, @inherit={0x58, &(0x7f0000000080)={0x0, 0x2, 0x5, 0x1, {0x21, 0x4, 0x100000000, 0x3, 0x5091068c}, [0x4, 0xa]}}, @name="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"})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001}, [@map_val={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xa0}]}, &(0x7f0000000180)='syzkaller\x00', 0x7}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000084000000100000080"], 0x48) (async)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) (async)
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000004c0)={{r0}, r1, 0x2, @inherit={0x58, &(0x7f0000000080)={0x0, 0x2, 0x5, 0x1, {0x21, 0x4, 0x100000000, 0x3, 0x5091068c}, [0x4, 0xa]}}, @name="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"}) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001}, [@map_val={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xa0}]}, &(0x7f0000000180)='syzkaller\x00', 0x7}, 0x94) (async)

18.069201025s ago: executing program 4 (id=2379):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000040)="060000000300010040", 0x9)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x1a, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xffffff15}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x3d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)

18.052443942s ago: executing program 0 (id=2381):
r0 = socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYRES8=r0], 0xffc6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0xd, 0x5, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb96}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x39}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000010000000000000000000000711834000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x6, &(0x7f00000001c0), 0x4)
setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000640)=0x6, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000680)=0x1, 0x4)
connect$inet6(r3, &(0x7f00000006c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r3, &(0x7f0000000700)="a6e2", 0x2, 0x840, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000780)=0x40)
socket$inet6(0xa, 0x80002, 0x0)
r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000007c0)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x33}}}, 0xb, 0x8, 0xfff, 0x4, 0x0, 0x9, 0x7f}, &(0x7f0000000880)=0x9c)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x11, &(0x7f0000000cc0)=ANY=[@ANYRES8=r4, @ANYRES32=0x0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x62a01, 0x0)
socket$kcm(0x2, 0x3, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10100, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r1}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, r6, 0xf2}, 0x38)
socket$nl_route(0x10, 0x3, 0x0)
accept(r2, 0x0, &(0x7f0000000080))
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x800, 0x0)
socket$inet6(0xa, 0x2, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3418000040000901feffffff00000000017c0000040042800c000180060006006558000010180280091814800518", @ANYRES64, @ANYRESHEX=0x0], 0x1834}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

18.050047731s ago: executing program 4 (id=2382):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000080)={&(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0x11c}}, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) (async)
r2 = socket$kcm(0x23, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
listen(r2, 0x800) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f00000006c0)=[{r2, 0xc511}], 0x1, 0x0, &(0x7f0000000700)={[0x4]}, 0x8) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffe6) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) (async)
r4 = socket$inet(0x2, 0x3, 0x1)
sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001040)=[{&(0x7f0000001240)='\b', 0x1}, {0x0, 0x3e}], 0x2, &(0x7f0000001280)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0xfffe) (async)
close(0x3)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="14000000100001000000000000f3ffff0400000a64000000060a010400000000000000000a0000010900010073797a31000000003800048034000180090001007866726d000000002400028008000440000000030800024000000001080001400000001305000300000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x8c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xe, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x6, 0xc, &(0x7f0000000b40)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c0019800800", @ANYRES16=r7, @ANYRES32], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c1) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000c40)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) (async)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r8=>0xffffffffffffffff}) (async)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="005a9a459d13a3491208", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1808000000000080000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7023716000014000000b7030000000000008500000005000000bf09000000000000350901000000000095000000000000006e98ffff0000000056080000000000008500000005000000b700000000000000950000000000"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e22, @local}}, 0x2, 0x1, 0x81, 0x7, 0x12, 0x3, 0x3}, &(0x7f0000000200)=0x9c)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000010c0)={'ip_vti0\x00', &(0x7f0000001080)={'tunl0\x00', 0x0, 0x80, 0x0, 0xb, 0x4, {{0x6, 0x4, 0x1, 0x0, 0x18, 0x64, 0x0, 0x2, 0x2f, 0x0, @multicast2, @local, {[@noop]}}}}})

17.453872154s ago: executing program 2 (id=2384):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYRESDEC=r2], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r3, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r3, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2e, 0xfffffffc, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0xffff, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000780)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) (async, rerun: 32)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0xfffc, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a, 0xfffffffd}, 0x9c) (async, rerun: 32)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)="1800000072006bcd9e3fe3dc6e0800000709000013000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000a00)={'syzkaller1\x00', 0xc201}) (async)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r7], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) (async, rerun: 64)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d80)='memory.events\x00', 0x275a, 0x0) (rerun: 64)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x100000e, 0x1010, r9, 0xffffd000) (async)
setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f0000000dc0)={{0xa, 0x4e20, 0xf86, @local, 0xfffffffa}, {0xa, 0x4e24, 0x43369565, @loopback, 0x9}, 0x0, {[0x380000, 0xfffffffd, 0x800, 0x9, 0x2, 0x7, 0xd, 0x3]}}, 0x5c)
r10 = socket$kcm(0x2, 0x3, 0x2)
connect(r1, &(0x7f0000000e40)=@pppoe={0x18, 0x0, {0x1, @random="fdaf26ce02f4", 'ip6_vti0\x00'}}, 0x80) (async)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000b40)={'syzkaller1\x00', @broadcast}) (async)
write$tun(r6, &(0x7f0000000b80)=ANY=[@ANYBLOB="080008000700020000002b000000457f003100660000401190780a010102ac1414164e204e20001d90780100000000b68ed34f131c03e57e518e4d08"], 0xfdef) (async)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000bc0)=0x7f, 0x4)
bind$inet6(r2, &(0x7f0000000c00)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 32)
sendto$inet6(r2, &(0x7f0000000c40)='X', 0x34000, 0x0, &(0x7f0000000c80)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (rerun: 32)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000cc0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x2, 0x54, 0x4, 0x73}, 0x9c) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000540)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

17.149634952s ago: executing program 4 (id=2385):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan0\x00', <r2=>0x0})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$l2tp(0xffffffffffffffff, &(0x7f0000000240)="6782a9959aac9e442711262cb14ae0eb886ca91d0f164f1d9f84473e7525478c49c5183fca3c5667d002b4c34d1e9990", 0x30, 0x400c0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x7d, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0xfffff496, @empty}}, 0x5, 0x400}, 0x90)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000040)={'wpan1\x00', <r6=>0x0})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000700)={0x458, r8, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x70, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80}, @ETHTOOL_A_BITSET_VALUE={0x28, 0x4, "87e5a451fae3cd160f59588677bb3d59afa279764b20edf250768bab876d45242fedb480"}, @ETHTOOL_A_BITSET_MASK={0x3c, 0x5, "a170fec170a90fc4cf5790796af65d5884a837aeb7ddbc99b8b83c830447b1b5c6ff18dff67449689f3f1d4b6cfd572474447b2e2b485ec4"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x26c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x6c, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '!\\,-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '(&#\xc8\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3359}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x8f, 0x4, "47f40d5d552d1936ac928dc3bedd448425dd7302ef610eafda434f555cf58aebad0728f4e6b4db8fb017bc84e08a0a01027232be623dd0a0c346ea276310901bb405f6f0dc6be52a480351cde57e9b49d477296aaf81a6608b49ba994a58cee316c660454170bb28e144e157d3605569a0b6dd9888a91ca6c33d5af037727acdff976f4ae27bfa2ea2e4e0"}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#(\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb2c}, @ETHTOOL_A_BITSET_MASK={0xeb, 0x5, "d6a46f351292fe3929f03bc3b856f327c0271ccae970f43b18904a12a6f9c5b3ca33d91264ac164407c07a36b0d00ed0af95b33a1ac020c2d39d0d138bd4076c632ee5706d08319a82c066ff403bbfb15dd3931a640f72f0d290938131395e0fc7bac49da88df73a1b146ef6b8a66a4bcecd36c974762aa2e1861d07a08ce89bb15054d2a0445860c9f3a2de459e541f0fe8bbe70648ce3631ce5e0cddd7e6da0d853d2ab00b38a4ca28d8e3788f70407e0fb2d38ba70cda3e4e490f0bc141f7f0644fdb437835d21e514591a721bd3cf580683abfc26e8d805121c99686abb145bed7c5210f38"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'c)-[\x8a\x93\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x168, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '),-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'flow_offload\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'flow_offload\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xe2, 0x5, "eef7f55f08dbb8f3977e86601ce9f4dc1c8ff9dac0bdea93e383ebaba6710aaf668d32ce1c772028a86e81037e663b901c03a3c561e1a78b6a4d644439efdb7d885f6928366867b890702709480fc0394fb96053e810366d8e55e9d7c6c105cda723f64ade26468d1e27ebc9d920a7dba105ac0d0d12099ec1960772bda55e788246236a87d636ed77c9ab1d5d7f8cc5e87e3c97d4d371f28d9b6736d1cd85a22a99b0014c82e2531aa9e7053d8cfb868e2225f1191401cbb07bfadf049f409ff2e693ac8b59d52c1f05856fc5e99dcbb5c053698a8510b2c94c7e635d54"}]}]}, 0x458}, 0x1, 0x0, 0x0, 0x800}, 0x20000080)
sendmsg$NFT_BATCH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "0e"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32=r6, @ANYBLOB='$\x002'], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r6, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x0)

17.126614022s ago: executing program 0 (id=2386):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000006800050003001000fdffff7f000000000000000009000200010000001500000014000c800800030001040000060001007f0000000600030001000000"], 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x1, 0x8000}, 0x1c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1010000007c0004060000000000bf852c8986626691b01b5f44e4ce287128"], 0xe0}], 0x1}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40050)
sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x14, 0x17, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}}, 0x4004000)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000740)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x6db0, 0xfffffffc, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fcdbdf253f00000008000300", @ANYRES32, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000880)={'wlan0\x00'})
nanosleep(&(0x7f0000000000)={0x0, 0x3938700}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400c884}, 0x40)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x9, 0x10000}})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), r6)
sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x1c, r7, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48004}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340))
connect$inet(r5, &(0x7f0000000300)={0x2, 0x4e24, @broadcast}, 0x10)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))

16.547700845s ago: executing program 2 (id=2387):
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async)
r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x80800) (async)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14)
bind$xdp(r0, &(0x7f0000000540)={0x2c, 0x8, 0x0, 0xf, r1}, 0x10) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x20008085, &(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x20000000}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
socket$inet6(0xa, 0x3, 0xffff) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x401, 0xfffffffe, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x2478a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x3}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x44}}, 0x80c0) (async)
ioctl$XFS_IOC_FSBULKSTAT(r3, 0xc0205865, &(0x7f0000000340)={&(0x7f0000000200), 0xd546, &(0x7f0000000240)=[{}], &(0x7f0000000300)})

16.449755574s ago: executing program 2 (id=2388):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x8003}, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0xc201}) (async)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x2, 0x1, 0x3, 0xa, 0x5, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x40, 0xb5, &(0x7f0000000140)=""/181, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x0, 0x8, 0x9}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000340)=[{0x5, 0x3, 0x1, 0x1}, {0x5, 0x4, 0x8}, {0x1, 0x1, 0x4, 0xa}, {0x2, 0x1, 0x1, 0xf}, {0x8, 0x5, 0x8}, {0x0, 0x5, 0x3, 0x4}, {0x3, 0x5, 0xe, 0x6}, {0x4, 0x1, 0x3, 0x7}, {0x3, 0x4, 0x4}, {0x0, 0x2, 0x4, 0x1}], 0x10, 0x9}, 0x94)
ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000004c0)=r2) (async)
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000500)={'syzkaller1\x00', @broadcast}) (async)
write$tun(r1, &(0x7f00000007c0)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x7}, @ipv4=@gre={{0x6, 0x4, 0x1, 0x16, 0xfc0, 0x67, 0x0, 0xb, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@lsrr={0x83, 0x3, 0xe0}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [], "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"}, {0x8, 0x88be, 0x2, {{0x3, 0x1, 0x9, 0x0, 0x0, 0x2, 0x7, 0x10}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0x3, 0x3, 0x0, 0x0, 0x5, 0xd1}, 0x2, {0x550e, 0x8, 0x0, 0xb, 0x0, 0x1, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x0, "8ed54a8dde63db9cd049972880513e14dd4a46d223f31730c4b5a8866284c052bf6d071ebe8dc08f0fae30192e0745b00ff7540eb5ac4e75b2e112a92e8f0a9363747e0028587f68b2c20c71c94c5823a3575f8dd595bdd55bab9ab2cec4062e1ab06d0516a916be31b5634c81b0c17adcc3d31693e31665c399c0b505cf6d184794a0ad4c076f70a0ed223465b3739e6f733e5afd146cfbdf18d82fb40a9a9aeeffee41117a53"}}}}, 0xfce)

16.328616188s ago: executing program 2 (id=2389):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000000), 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r1, &(0x7f0000000240)=[{&(0x7f0000000280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e960272f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a1905234", 0x34}, {&(0x7f00000002c0)="051a0000", 0x4}, {&(0x7f0000000300)="73ec500447db", 0x6}], 0x3)
listen(r0, 0x0)
r3 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r3, &(0x7f0000000040), 0x10)
sendmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
close(0x4)
close(0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000140)=0x1, 0x4)

16.213811594s ago: executing program 2 (id=2390):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 64)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000340)={{<r1=>r0, &(0x7f0000000200)='!\\&$:*\x00', 0x8800, &(0x7f0000000240)={@_ha_fsid={[0x4, 0x4]}, {0x8, 0x1, 0x9, 0xf}}, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x6}, {[0x8, 0xb5, 0x0, 0x10000]}, 0x9a6, 0x1f, &(0x7f0000000300)=""/31}) (rerun: 64)
ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000003c0))
r2 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 32)
sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) (rerun: 32)
connect$unix(r2, &(0x7f0000000180)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x1c) (async)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_opts(r3, 0x0, 0x5, &(0x7f0000000100)=""/1, &(0x7f0000000140)=0x1) (async)
close(0xffffffffffffffff)

15.297542407s ago: executing program 2 (id=2391):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001780)=@getqdisc={0x24, 0x26, 0x301}, 0x24}}, 0x0)
setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000017c0)={@private=0xa010100, @rand_addr=0x64010102, 0xffffffffffffffff, "f8e88b76c69c9fbac62d433220a11163b0270c4f82b6ff1d8c5da1bf8852ccf1", 0x7f, 0x6, 0x5, 0x6}, 0x3c)
r3 = accept$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001800)=0x14)
r4 = socket(0x2b, 0x80801, 0x1)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000001680)={'filter\x00', 0x4}, 0x68)
mmap(&(0x7f0000001000/0x5000)=nil, 0x5000, 0x0, 0x2a1635058ac3d3d6, r3, 0x35a09000)
socket(0x10, 0x3, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001540)={0x1c, r5, 0x1, 0x0, 0x8, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000001640), 0x6ad01, 0x0)
close(0x3)
sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x24, 0x31, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x10, 0x18, 0x0, 0x0, @binary="01ac0f0002ac0f0008ac0f00"}]}, 0x24}, 0x1, 0x0, 0x0, 0x46854}, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="03920000004000003c00128008000100677470003000028008000300eec2000008000100", @ANYRES32, @ANYBLOB="080002"], 0x6c}, 0x1, 0x0, 0x0, 0x24048850}, 0x200080c4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f00000015c0)=ANY=[@ANYBLOB="9feb01001800000000000000500000005000000004000000020000000000000e05000000010000000000000000000001050000000800000000000000000000830000000001000000020000000180000000000000000000030000000002000000020000000b000000006161"], 0x0, 0x6c}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="2018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000cb000000bf09000000000000550901001f00000095000000000000001daaf5ff00000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x7, 0x100a, &(0x7f0000000440)=""/4106, 0x41100, 0xc}, 0x94)

4.078027013s ago: executing program 32 (id=2375):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000079100000000000006900e0ff0000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000080)={'gretap0\x00', <r2=>0x0, 0x8, 0x7, 0x6, 0x2, {{0x19, 0x4, 0x1, 0x39, 0x64, 0x66, 0x0, 0x3, 0x6, 0x0, @multicast1, @rand_addr=0x64010102, {[@ssrr={0x89, 0x1b, 0x29, [@local, @rand_addr=0x64010102, @loopback, @multicast1, @loopback, @multicast2]}, @end, @timestamp={0x44, 0x18, 0x3a, 0x0, 0x9, [0x7, 0x2621, 0x9, 0x7, 0x8000]}, @timestamp_prespec={0x44, 0x1c, 0xf8, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfff}, {@loopback, 0x8}, {@multicast2, 0x80000001}]}]}}}}})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000240)=0x4)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000002c0)=0x2)
ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000ac0)={0x2, &(0x7f0000000b00)=[{0x50, 0x0, 0x7, 0x8000008}, {0x6, 0xfc, 0x8}]})
write$ppp(r4, &(0x7f0000000b40)="0002", 0x2)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'syztnl0\x00', &(0x7f00000003c0)={'ip_vti0\x00', <r5=>0x0, 0x7800, 0x700, 0x1, 0x84, {{0x3b, 0x4, 0x3, 0x3b, 0xec, 0x64, 0x0, 0x3, 0x4, 0x0, @loopback, @multicast1, {[@cipso={0x86, 0x21, 0xffffffffffffffff, [{0x0, 0xf, "f7726a5bdef4cc52890a14757a"}, {0x5, 0x2}, {0x5, 0x4, 'SD'}, {0x0, 0x6, "e5cf0c0c"}]}, @end, @end, @timestamp={0x44, 0x1c, 0x5b, 0x0, 0x0, [0x69f, 0x0, 0x4, 0x7, 0x9323, 0x2]}, @rr={0x7, 0x1b, 0x9d, [@remote, @empty, @remote, @rand_addr=0x64010101, @broadcast, @private=0xa010100]}, @timestamp_addr={0x44, 0xc, 0xb9, 0x1, 0x4, [{@multicast2, 0x3}]}, @cipso={0x86, 0x70, 0x0, [{0x7, 0x5, "680652"}, {0x7, 0xe, "586208a6e7d54d5db3659a8f"}, {0x2, 0x12, "e5a286b723e69c0ef9d5447c3ae0dea0"}, {0x6, 0xb, "797b73ae699e62ec86"}, {0x6, 0xa, "cd6a137eebb6c90b"}, {0x2, 0x7, "8661616752"}, {0x0, 0x10, "699c71207c738d3794debe47d047"}, {0xfbd653fb1d80a788, 0xc, "e61b161b09df13ae580f"}, {0x1, 0xd, "3d1c70cc8f7f5ee60929f4"}]}]}}}}})
r6 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x7, &(0x7f0000000540)=0x6, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'wlan1\x00', <r7=>0x0})
sendmsg$can_raw(r6, &(0x7f00000005c0)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000640)={&(0x7f0000000680)=@can={{0x0, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x4, 0x0, "36e932c486d21bdc"}, 0x10}, 0x1, 0x0, 0x0, 0x20084845}, 0x4094)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'ip_vti0\x00', &(0x7f00000006c0)={'gre0\x00', <r8=>0x0, 0x7800, 0x7800, 0x6, 0x6, {{0x6, 0x4, 0x0, 0x27, 0x18, 0x66, 0x0, 0x9, 0x44be2f19d7d6836b, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010101, {[@noop]}}}}})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000740)={'bridge0\x00', <r11=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r11, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000880)={'syztnl2\x00', <r12=>0x0, 0x29, 0x9, 0x1, 0x170, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x7800, 0x8000, 0x1, 0x9}})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xec, r1, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x90}, 0x40)

4.035903616s ago: executing program 33 (id=2373):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES16=r0, @ANYRES64=0x0], 0x48) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES16=r0, @ANYRES64=0x0], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1, <r3=>0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)=r2}, 0x20)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000002380)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x38, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x508]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x24000080)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0x5, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x34315}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r3}, &(0x7f0000000840)=0x20000, &(0x7f0000000880)=r2}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000008c0)={r3, &(0x7f0000000900)}, 0x20) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000008c0)={r3, &(0x7f0000000900)}, 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}]}], {0x14}}, 0xa8}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000440)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000000480)=[{&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001c80)="9d7fcf3efc6316a6a555ba8b4726d7ccaf8a060000009cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71ad21b965f615b31105d60a4b16fa2fa1371850a1be85ffcad45b49422b2121d709014f49cf6bd1d18acc4c19e4356669a2ac3e05d5cdc6f0f485c1eb52ea8faf7e83a1468b6a491e71ae3d03cd9677e72413954feae71b5775a6e3e9fa9db9e1ed56e56bff66a7a86214d8145d878e26fa35bd55db98ecdef374d26a5d9cd0e89f3ae45be2d8e1d98ee0865fb64d6dd1e8c89608733370f12be1495d81b36dd72cc28e9c9b2c45f925b38b21818d93ce604772c21824e45793c4073eb44773f8e42c9ebb297dd5e76e856a22253c0e8a80f33b4d015c3f9c0c26bcdd6b440322a23b10d507eecead59faa166bdac1bd840211336dc0c", 0x33}], 0x2, &(0x7f0000001dc0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00)
r8 = socket(0x400000000010, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a40), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x30, r10, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044808}, 0x0) (async)
sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x30, r10, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044808}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000b80), 0xffffffffffffffff)
r14 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ppoll(&(0x7f0000002080)=[{r0, 0x1}, {r14}, {r5, 0x501}], 0x3, &(0x7f00000020c0), &(0x7f0000002100)={[0x2]}, 0x8)
sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000001e40)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000ffdbdf25030000000c00050003010000000000000c000200020000000000000008000100000000000c0004"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4004)
sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f0000001e80)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001f00)={&(0x7f0000001f40)=ANY=[@ANYBLOB="2c0000b7", @ANYRES16=r13, @ANYBLOB="04002cbd7000fcdbdf25020000000c00050020000000000000000c0004000400000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x8084) (async)
sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f0000001e80)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001f00)={&(0x7f0000001f40)=ANY=[@ANYBLOB="2c0000b7", @ANYRES16=r13, @ANYBLOB="04002cbd7000fcdbdf25020000000c00050020000000000000000c0004000400000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x8084)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000002180), r12) (async)
r15 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002180), r12)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r12, &(0x7f0000002280)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x4c, r15, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004840}, 0xc000) (async)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r12, &(0x7f0000002280)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x4c, r15, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004840}, 0xc000)
sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000002040)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f80)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="04002dbd7000ffdbdf250100000008000100000000000c000300080000000000238eedc43a6f3f8b5b2e0c00e4ffffff341749d45d75d27c4e2b23124324ff93d1414fe036848e000000"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x80)
sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009"], 0xb0}}, 0x0)
syz_emit_ethernet(0x76, &(0x7f00000003c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @private=0xa010102, @local, {[@cipso={0x86, 0x28, 0x2, [{0x6, 0xb, "5e000000ff000000f5"}, {0x0, 0x5, "0404a6"}, {0x0, 0x12, "960605390006fff5800000b61af93a93"}]}, @rr={0x7, 0xf, 0x57, [@rand_addr=0x64010101, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end]}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x76, &(0x7f00000003c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @private=0xa010102, @local, {[@cipso={0x86, 0x28, 0x2, [{0x6, 0xb, "5e000000ff000000f5"}, {0x0, 0x5, "0404a6"}, {0x0, 0x12, "960605390006fff5800000b61af93a93"}]}, @rr={0x7, 0xf, 0x57, [@rand_addr=0x64010101, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end]}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x10}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x10}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)

2.061524364s ago: executing program 34 (id=2386):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000006800050003001000fdffff7f000000000000000009000200010000001500000014000c800800030001040000060001007f0000000600030001000000"], 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x1, 0x8000}, 0x1c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1010000007c0004060000000000bf852c8986626691b01b5f44e4ce287128"], 0xe0}], 0x1}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40050)
sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x14, 0x17, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}}, 0x4004000)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000740)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x6db0, 0xfffffffc, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fcdbdf253f00000008000300", @ANYRES32, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000880)={'wlan0\x00'})
nanosleep(&(0x7f0000000000)={0x0, 0x3938700}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400c884}, 0x40)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x9, 0x10000}})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), r6)
sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x1c, r7, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48004}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340))
connect$inet(r5, &(0x7f0000000300)={0x2, 0x4e24, @broadcast}, 0x10)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))

1.984348715s ago: executing program 35 (id=2385):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan0\x00', <r2=>0x0})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$l2tp(0xffffffffffffffff, &(0x7f0000000240)="6782a9959aac9e442711262cb14ae0eb886ca91d0f164f1d9f84473e7525478c49c5183fca3c5667d002b4c34d1e9990", 0x30, 0x400c0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x7d, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0xfffff496, @empty}}, 0x5, 0x400}, 0x90)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000040)={'wpan1\x00', <r6=>0x0})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000700)={0x458, r8, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x70, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80}, @ETHTOOL_A_BITSET_VALUE={0x28, 0x4, "87e5a451fae3cd160f59588677bb3d59afa279764b20edf250768bab876d45242fedb480"}, @ETHTOOL_A_BITSET_MASK={0x3c, 0x5, "a170fec170a90fc4cf5790796af65d5884a837aeb7ddbc99b8b83c830447b1b5c6ff18dff67449689f3f1d4b6cfd572474447b2e2b485ec4"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x26c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x6c, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '!\\,-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '(&#\xc8\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3359}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x8f, 0x4, "47f40d5d552d1936ac928dc3bedd448425dd7302ef610eafda434f555cf58aebad0728f4e6b4db8fb017bc84e08a0a01027232be623dd0a0c346ea276310901bb405f6f0dc6be52a480351cde57e9b49d477296aaf81a6608b49ba994a58cee316c660454170bb28e144e157d3605569a0b6dd9888a91ca6c33d5af037727acdff976f4ae27bfa2ea2e4e0"}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#(\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb2c}, @ETHTOOL_A_BITSET_MASK={0xeb, 0x5, "d6a46f351292fe3929f03bc3b856f327c0271ccae970f43b18904a12a6f9c5b3ca33d91264ac164407c07a36b0d00ed0af95b33a1ac020c2d39d0d138bd4076c632ee5706d08319a82c066ff403bbfb15dd3931a640f72f0d290938131395e0fc7bac49da88df73a1b146ef6b8a66a4bcecd36c974762aa2e1861d07a08ce89bb15054d2a0445860c9f3a2de459e541f0fe8bbe70648ce3631ce5e0cddd7e6da0d853d2ab00b38a4ca28d8e3788f70407e0fb2d38ba70cda3e4e490f0bc141f7f0644fdb437835d21e514591a721bd3cf580683abfc26e8d805121c99686abb145bed7c5210f38"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'c)-[\x8a\x93\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x168, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '),-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'flow_offload\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'flow_offload\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xe2, 0x5, "eef7f55f08dbb8f3977e86601ce9f4dc1c8ff9dac0bdea93e383ebaba6710aaf668d32ce1c772028a86e81037e663b901c03a3c561e1a78b6a4d644439efdb7d885f6928366867b890702709480fc0394fb96053e810366d8e55e9d7c6c105cda723f64ade26468d1e27ebc9d920a7dba105ac0d0d12099ec1960772bda55e788246236a87d636ed77c9ab1d5d7f8cc5e87e3c97d4d371f28d9b6736d1cd85a22a99b0014c82e2531aa9e7053d8cfb868e2225f1191401cbb07bfadf049f409ff2e693ac8b59d52c1f05856fc5e99dcbb5c053698a8510b2c94c7e635d54"}]}]}, 0x458}, 0x1, 0x0, 0x0, 0x800}, 0x20000080)
sendmsg$NFT_BATCH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "0e"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32=r6, @ANYBLOB='$\x002'], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r6, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x0)

0s ago: executing program 36 (id=2391):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001780)=@getqdisc={0x24, 0x26, 0x301}, 0x24}}, 0x0)
setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000017c0)={@private=0xa010100, @rand_addr=0x64010102, 0xffffffffffffffff, "f8e88b76c69c9fbac62d433220a11163b0270c4f82b6ff1d8c5da1bf8852ccf1", 0x7f, 0x6, 0x5, 0x6}, 0x3c)
r3 = accept$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001800)=0x14)
r4 = socket(0x2b, 0x80801, 0x1)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000001680)={'filter\x00', 0x4}, 0x68)
mmap(&(0x7f0000001000/0x5000)=nil, 0x5000, 0x0, 0x2a1635058ac3d3d6, r3, 0x35a09000)
socket(0x10, 0x3, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001540)={0x1c, r5, 0x1, 0x0, 0x8, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000001640), 0x6ad01, 0x0)
close(0x3)
sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x24, 0x31, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x10, 0x18, 0x0, 0x0, @binary="01ac0f0002ac0f0008ac0f00"}]}, 0x24}, 0x1, 0x0, 0x0, 0x46854}, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="03920000004000003c00128008000100677470003000028008000300eec2000008000100", @ANYRES32, @ANYBLOB="080002"], 0x6c}, 0x1, 0x0, 0x0, 0x24048850}, 0x200080c4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f00000015c0)=ANY=[@ANYBLOB="9feb01001800000000000000500000005000000004000000020000000000000e05000000010000000000000000000001050000000800000000000000000000830000000001000000020000000180000000000000000000030000000002000000020000000b000000006161"], 0x0, 0x6c}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="2018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000cb000000bf09000000000000550901001f00000095000000000000001daaf5ff00000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x7, 0x100a, &(0x7f0000000440)=""/4106, 0x41100, 0xc}, 0x94)

kernel console output (not intermixed with test programs):

  do_check_main+0x95/0x1f0
[  266.624028][T12393]  bpf_check+0x302b/0x34e0
[  266.624054][T12393]  ? ktime_get_with_offset+0x93/0x2d0
[  266.624075][T12393]  ? ktime_get_with_offset+0x93/0x2d0
[  266.624098][T12393]  ? __pfx_bpf_check+0x10/0x10
[  266.624116][T12393]  ? bpf_obj_name_cpy+0x194/0x1e0
[  266.624139][T12393]  bpf_prog_load+0x14da/0x1c60
[  266.624164][T12393]  ? __pfx_bpf_prog_load+0x10/0x10
[  266.624191][T12393]  ? __might_fault+0xaf/0x130
[  266.624212][T12393]  __sys_bpf+0xd86/0xe00
[  266.624233][T12393]  ? __pfx___sys_bpf+0x10/0x10
[  266.624281][T12393]  ? __fget_files+0x2a/0x420
[  266.624327][T12393]  ? ksys_write+0x242/0x270
[  266.624357][T12393]  ? __pfx_ksys_write+0x10/0x10
[  266.624389][T12393]  __x64_sys_bpf+0xba/0xd0
[  266.624414][T12393]  do_syscall_64+0x166/0x520
[  266.624432][T12393]  ? trace_irq_disable+0x3b/0x140
[  266.624454][T12393]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.624470][T12393]  ? clear_bhb_loop+0x70/0xc0
[  266.624489][T12393]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.624504][T12393] RIP: 0033:0x7fd6ba79fb19
[  266.624519][T12393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  266.624532][T12393] RSP: 002b:00007fd6bb5f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  266.624549][T12393] RAX: ffffffffffffffda RBX: 00007fd6baa25fa0 RCX: 00007fd6ba79fb19
[  266.624560][T12393] RDX: 0000000000000094 RSI: 0000200000000fc0 RDI: 0000000000000005
[  266.624570][T12393] RBP: 00007fd6bb5f0090 R08: 0000000000000000 R09: 0000000000000000
[  266.624579][T12393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  266.624588][T12393] R13: 00007fd6baa26038 R14: 00007fd6baa25fa0 R15: 00007ffd82e64448
[  266.624613][T12393]  </TASK>
[  269.190085][T12362] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  269.373816][T12406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1532'.
[  269.453700][T12408] block nbd0: server does not support multiple connections per device.
[  269.454025][T12408] block nbd0: shutting down sockets
[  269.465225][T12415] netlink: 'syz.4.1530': attribute type 3 has an invalid length.
[  269.465556][T12414] bond0: entered allmulticast mode
[  269.575093][T12413] bond8: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1)
[  269.607233][T12413] bond8 (unregistering): Released all slaves
[  269.705582][T12432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1534'.
[  269.850533][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:86:c3:f6:ba:a0, vlan:0)
[  269.966889][T12440] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1535'.
[  270.067312][T12450] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1538'.
[  270.090132][T12454] FAULT_INJECTION: forcing a failure.
[  270.090132][T12454] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  270.090166][T12454] CPU: 1 UID: 0 PID: 12454 Comm: syz.1.1537 Not tainted syzkaller #0 PREEMPT(full) 
[  270.090191][T12454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  270.090205][T12454] Call Trace:
[  270.090214][T12454]  <TASK>
[  270.090223][T12454]  dump_stack_lvl+0xe8/0x150
[  270.090265][T12454]  should_fail_ex+0x3eb/0x540
[  270.090299][T12454]  _copy_to_user+0x31/0xb0
[  270.090331][T12454]  bpf_log_attr_finalize+0x124/0x1e0
[  270.090360][T12454]  ? __pfx_bpf_log_attr_finalize+0x10/0x10
[  270.090388][T12454]  ? print_verification_stats+0x730/0x8f0
[  270.090418][T12454]  ? ktime_get+0x1f5/0x220
[  270.090451][T12454]  bpf_check+0x20a7/0x34e0
[  270.090488][T12454]  ? ktime_get_with_offset+0x93/0x2d0
[  270.090519][T12454]  ? ktime_get_with_offset+0x93/0x2d0
[  270.090551][T12454]  ? __pfx_bpf_check+0x10/0x10
[  270.090578][T12454]  ? bpf_obj_name_cpy+0x194/0x1e0
[  270.090612][T12454]  bpf_prog_load+0x14da/0x1c60
[  270.090649][T12454]  ? __pfx_bpf_prog_load+0x10/0x10
[  270.090691][T12454]  ? __might_fault+0xaf/0x130
[  270.090723][T12454]  __sys_bpf+0xd86/0xe00
[  270.090754][T12454]  ? __pfx___sys_bpf+0x10/0x10
[  270.090797][T12454]  ? __fget_files+0x2a/0x420
[  270.090846][T12454]  ? ksys_write+0x242/0x270
[  270.090878][T12454]  ? __pfx_ksys_write+0x10/0x10
[  270.090914][T12454]  __x64_sys_bpf+0xba/0xd0
[  270.090950][T12454]  do_syscall_64+0x166/0x520
[  270.090975][T12454]  ? trace_irq_disable+0x3b/0x140
[  270.091006][T12454]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.091030][T12454]  ? clear_bhb_loop+0x70/0xc0
[  270.091058][T12454]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.091081][T12454] RIP: 0033:0x7f6d45b9fb19
[  270.091102][T12454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  270.091122][T12454] RSP: 002b:00007f6d46a7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  270.091145][T12454] RAX: ffffffffffffffda RBX: 00007f6d45e25fa0 RCX: 00007f6d45b9fb19
[  270.091163][T12454] RDX: 0000000000000094 RSI: 0000200000000fc0 RDI: 0000000000000005
[  270.091178][T12454] RBP: 00007f6d46a7e090 R08: 0000000000000000 R09: 0000000000000000
[  270.091192][T12454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  270.091205][T12454] R13: 00007f6d45e26038 R14: 00007f6d45e25fa0 R15: 00007ffd78d0b018
[  270.091243][T12454]  </TASK>
[  270.406797][T12456] netlink: 'syz.3.1539': attribute type 16 has an invalid length.
[  270.406822][T12456] netlink: 'syz.3.1539': attribute type 17 has an invalid length.
[  270.449982][T12456] sit0: left promiscuous mode
[  271.031505][T12456] syzkaller0: left promiscuous mode
[  271.031533][T12456] syzkaller0: left allmulticast mode
[  271.036855][T12456] macsec1: left promiscuous mode
[  271.056170][T12456] gretap0: left allmulticast mode
[  271.067334][T12456] bond7: left promiscuous mode
[  271.067356][T12456] bridge2: left promiscuous mode
[  271.080545][T12456] macvtap1: left allmulticast mode
[  271.080725][T12456] macvtap2: left allmulticast mode
[  271.080877][T12456] macvtap3: left allmulticast mode
[  271.199124][ T7128] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  271.199164][ T7128] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  271.199205][ T7128] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  271.199233][ T7128] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  271.199270][ T7128] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  271.199314][ T7128] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  271.199351][ T7128] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  271.199379][ T7128] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  271.380333][T12488] syzkaller1: tun_chr_ioctl cmd 1074025673
[  271.383233][T12488] syzkaller1: tun_chr_ioctl cmd 2147767520
[  271.414819][T12491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1549'.
[  271.415914][T12491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1549'.
[  271.416572][T12491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1549'.
[  271.417371][T12491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1549'.
[  271.460390][T12491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1549'.
[  271.587045][T12503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1551'.
[  271.587078][T12503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1551'.
[  271.639117][T12503] macvtap2: entered allmulticast mode
[  271.812090][T12513] netlink: 'syz.3.1553': attribute type 1 has an invalid length.
[  271.812117][T12513] netlink: 'syz.3.1553': attribute type 2 has an invalid length.
[  271.980476][T12515] bridge0: entered promiscuous mode
[  271.980552][T12515] bridge0: entered allmulticast mode
[  272.420036][T12534] netlink: 'syz.2.1559': attribute type 5 has an invalid length.
[  272.522708][T12537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1558'.
[  272.565427][T12538] netlink: 'syz.0.1560': attribute type 1 has an invalid length.
[  272.672331][T12538] 8021q: adding VLAN 0 to HW filter on device bond11
[  272.790566][T12546] netlink: 'syz.0.1560': attribute type 1 has an invalid length.
[  273.135304][T12540] bond11: (slave veth7): Enslaving as an active interface with a down link
[  273.175158][T12541] 8021q: adding VLAN 0 to HW filter on device batadv2
[  273.185702][T12541] bond11: (slave batadv2): making interface the new active one
[  273.187234][T12541] batadv2: entered promiscuous mode
[  273.187837][T12541] bond11: (slave batadv2): Enslaving as an active interface with an up link
[  273.246043][T12538] bond11 (unregistering): (slave veth7): Releasing active interface
[  273.277966][T12538] bond11 (unregistering): (slave batadv2): Releasing active interface
[  273.277995][T12538] batadv2: left promiscuous mode
[  273.418861][T12538] bond11 (unregistering): Released all slaves
[  273.621483][T12546] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  273.936565][T12567] FAULT_INJECTION: forcing a failure.
[  273.936565][T12567] name failslab, interval 1, probability 0, space 0, times 0
[  273.936597][T12567] CPU: 0 UID: 0 PID: 12567 Comm: syz.2.1568 Not tainted syzkaller #0 PREEMPT(full) 
[  273.936633][T12567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  273.936653][T12567] Call Trace:
[  273.936663][T12567]  <TASK>
[  273.936672][T12567]  dump_stack_lvl+0xe8/0x150
[  273.936710][T12567]  should_fail_ex+0x3eb/0x540
[  273.936740][T12567]  should_failslab+0xa8/0x100
[  273.936772][T12567]  __kvmalloc_node_noprof+0x171/0x820
[  273.936801][T12567]  ? __kmalloc_cache_noprof+0x31c/0x600
[  273.936826][T12567]  ? bpf_int_jit_compile+0x7f8/0x1a40
[  273.936856][T12567]  ? bpf_int_jit_compile+0x7f8/0x1a40
[  273.936892][T12567]  bpf_int_jit_compile+0x7f8/0x1a40
[  273.936943][T12567]  ? __pfx_bpf_int_jit_compile+0x10/0x10
[  273.936978][T12567]  ? rcu_is_watching+0x16/0xb0
[  273.937009][T12567]  ? trace_kmalloc+0x2a/0xf0
[  273.937030][T12567]  ? bpf_prog_has_arena_insns+0x457/0x4d0
[  273.937064][T12567]  __bpf_prog_select_runtime+0x542/0xbe0
[  273.937090][T12567]  ? convert_pseudo_ld_imm64+0x386/0x420
[  273.937118][T12567]  bpf_check+0x2858/0x34e0
[  273.937151][T12567]  ? ktime_get_with_offset+0x93/0x2d0
[  273.937179][T12567]  ? ktime_get_with_offset+0x93/0x2d0
[  273.937207][T12567]  ? __pfx_bpf_check+0x10/0x10
[  273.937232][T12567]  ? bpf_obj_name_cpy+0x194/0x1e0
[  273.937265][T12567]  bpf_prog_load+0x14da/0x1c60
[  273.937299][T12567]  ? __pfx_bpf_prog_load+0x10/0x10
[  273.937341][T12567]  ? __might_fault+0xaf/0x130
[  273.937370][T12567]  __sys_bpf+0xd86/0xe00
[  273.937398][T12567]  ? __pfx___sys_bpf+0x10/0x10
[  273.937430][T12567]  ? __fget_files+0x2a/0x420
[  273.937473][T12567]  ? ksys_write+0x242/0x270
[  273.937502][T12567]  ? __pfx_ksys_write+0x10/0x10
[  273.937535][T12567]  __x64_sys_bpf+0xba/0xd0
[  273.937569][T12567]  do_syscall_64+0x166/0x520
[  273.937593][T12567]  ? trace_irq_disable+0x3b/0x140
[  273.937621][T12567]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.937643][T12567]  ? clear_bhb_loop+0x70/0xc0
[  273.937668][T12567]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.937689][T12567] RIP: 0033:0x7fdeb4d9fb19
[  273.937709][T12567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  273.937728][T12567] RSP: 002b:00007fdeb5c03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  273.937750][T12567] RAX: ffffffffffffffda RBX: 00007fdeb5025fa0 RCX: 00007fdeb4d9fb19
[  273.937765][T12567] RDX: 0000000000000094 RSI: 0000200000000fc0 RDI: 0000000000000005
[  273.937779][T12567] RBP: 00007fdeb5c03090 R08: 0000000000000000 R09: 0000000000000000
[  273.937792][T12567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  273.937804][T12567] R13: 00007fdeb5026038 R14: 00007fdeb5025fa0 R15: 00007ffda0ecb6b8
[  273.937838][T12567]  </TASK>
[  274.297155][T12579] geneve1: Caught tx_queue_len zero misconfig
[  274.361154][T12581] bridge0: port 3(
01ªX¹¦Dö») entered blocking state
[  274.361311][T12581] bridge0: port 3(
01ªX¹¦Dö») entered forwarding state
[  274.367352][T12581] 8021q: adding VLAN 0 to HW filter on device bond0
[  274.396586][T12581] 8021q: adding VLAN 0 to HW filter on device team0
[  274.443251][T12581] veth1_macvtap: left promiscuous mode
[  274.444424][T12581] veth0_macvtap: left promiscuous mode
[  274.447173][T12581] veth0_macvtap: entered promiscuous mode
[  274.466345][T12581] veth1_macvtap: entered promiscuous mode
[  274.467907][T12581] geneve0: left promiscuous mode
[  274.482555][T12588] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  274.485331][T12581] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  274.486567][T12581] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  274.517815][T12581] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  274.535291][T12581] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  274.550455][T12581] 8021q: adding VLAN 0 to HW filter on device bond1
[  274.557319][T12581] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  274.689309][ T7119] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  274.689364][ T7119] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  274.689405][ T7119] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  274.689433][ T7119] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  274.689497][ T7119] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  274.689524][ T7119] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  274.693304][ T7132] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.693445][ T7132] bridge0: port 1(bridge_slave_0) entered forwarding state
[  274.695810][ T7132] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.695928][ T7132] bridge0: port 2(bridge_slave_1) entered forwarding state
[  274.766555][T12602] ip_tables: iptables: counters copy to user failed while replacing table
[  274.803432][T12582] netlink: 'syz.3.1570': attribute type 3 has an invalid length.
[  274.803671][T12582] netlink: 'syz.3.1570': attribute type 3 has an invalid length.
[  274.881563][ T9013] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  274.931753][ T7128] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  274.931982][ T7128] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  274.970949][ T9013] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  275.028412][ T7138] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  275.028477][ T7138] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  275.095846][ T5640] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  275.120566][T12604] __nla_validate_parse: 70 callbacks suppressed
[  275.120586][T12604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1574'.
[  275.135053][T12604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1574'.
[  275.135081][T12604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1574'.
[  275.167747][T12608] syzkaller0: entered promiscuous mode
[  275.167769][T12608] syzkaller0: entered allmulticast mode
[  275.199336][ T7128] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  275.221998][T12611] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1577'.
[  275.225385][T12624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1574'.
[  275.475773][T12633] FAULT_INJECTION: forcing a failure.
[  275.475773][T12633] name failslab, interval 1, probability 0, space 0, times 0
[  275.475809][T12633] CPU: 1 UID: 0 PID: 12633 Comm: syz.4.1581 Not tainted syzkaller #0 PREEMPT(full) 
[  275.475835][T12633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  275.475848][T12633] Call Trace:
[  275.475857][T12633]  <TASK>
[  275.475866][T12633]  dump_stack_lvl+0xe8/0x150
[  275.475907][T12633]  should_fail_ex+0x3eb/0x540
[  275.475942][T12633]  should_failslab+0xa8/0x100
[  275.475978][T12633]  __kvmalloc_node_noprof+0x171/0x820
[  275.476009][T12633]  ? __kmalloc_cache_noprof+0x31c/0x600
[  275.476037][T12633]  ? bpf_int_jit_compile+0x7f8/0x1a40
[  275.476070][T12633]  ? bpf_int_jit_compile+0x7f8/0x1a40
[  275.476112][T12633]  bpf_int_jit_compile+0x7f8/0x1a40
[  275.476175][T12633]  ? __pfx_bpf_int_jit_compile+0x10/0x10
[  275.476214][T12633]  ? rcu_is_watching+0x16/0xb0
[  275.476249][T12633]  ? trace_kmalloc+0x2a/0xf0
[  275.476272][T12633]  ? bpf_prog_has_arena_insns+0x457/0x4d0
[  275.476310][T12633]  __bpf_prog_select_runtime+0x542/0xbe0
[  275.476338][T12633]  ? convert_pseudo_ld_imm64+0x386/0x420
[  275.476370][T12633]  bpf_check+0x2858/0x34e0
[  275.476408][T12633]  ? ktime_get_with_offset+0x93/0x2d0
[  275.476444][T12633]  ? ktime_get_with_offset+0x93/0x2d0
[  275.476476][T12633]  ? __pfx_bpf_check+0x10/0x10
[  275.476504][T12633]  ? bpf_obj_name_cpy+0x194/0x1e0
[  275.476537][T12633]  bpf_prog_load+0x14da/0x1c60
[  275.476576][T12633]  ? __pfx_bpf_prog_load+0x10/0x10
[  275.476616][T12633]  ? __might_fault+0xaf/0x130
[  275.476648][T12633]  __sys_bpf+0xd86/0xe00
[  275.476680][T12633]  ? __pfx___sys_bpf+0x10/0x10
[  275.476716][T12633]  ? __fget_files+0x2a/0x420
[  275.476764][T12633]  ? ksys_write+0x242/0x270
[  275.476797][T12633]  ? __pfx_ksys_write+0x10/0x10
[  275.476834][T12633]  __x64_sys_bpf+0xba/0xd0
[  275.476870][T12633]  do_syscall_64+0x166/0x520
[  275.476896][T12633]  ? trace_irq_disable+0x3b/0x140
[  275.476927][T12633]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.476951][T12633]  ? clear_bhb_loop+0x70/0xc0
[  275.476979][T12633]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.477002][T12633] RIP: 0033:0x7fd6ba79fb19
[  275.477024][T12633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  275.477044][T12633] RSP: 002b:00007fd6bb5f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  275.477067][T12633] RAX: ffffffffffffffda RBX: 00007fd6baa25fa0 RCX: 00007fd6ba79fb19
[  275.477084][T12633] RDX: 0000000000000094 RSI: 0000200000000fc0 RDI: 0000000000000005
[  275.477099][T12633] RBP: 00007fd6bb5f0090 R08: 0000000000000000 R09: 0000000000000000
[  275.477114][T12633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  275.477127][T12633] R13: 00007fd6baa26038 R14: 00007fd6baa25fa0 R15: 00007ffd82e64448
[  275.477171][T12633]  </TASK>
[  275.500229][ T5640] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  275.610970][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  275.810039][T12635] pimreg: renamed from bridge0 (while UP)
[  275.851277][ T5767] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  276.212711][T12629] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1580'.
[  276.212737][T12629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1580'.
[  276.251890][ T7138] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  276.252201][ T7138] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  276.517212][T12665] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  276.627787][T12669] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1580'.
[  276.627811][T12669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1580'.
[  276.656146][T12670] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1589'.
[  276.735367][T12679] ip_tables: iptables: counters copy to user failed while replacing table
[  276.762135][T12679] netlink: 'syz.3.1591': attribute type 61 has an invalid length.
[  277.010104][T12687] bridge_slave_1: default FDB implementation only supports local addresses
[  277.031556][T12690] FAULT_INJECTION: forcing a failure.
[  277.031556][T12690] name failslab, interval 1, probability 0, space 0, times 0
[  277.031597][T12690] CPU: 1 UID: 0 PID: 12690 Comm: syz.2.1595 Not tainted syzkaller #0 PREEMPT(full) 
[  277.031624][T12690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  277.031638][T12690] Call Trace:
[  277.031647][T12690]  <TASK>
[  277.031656][T12690]  dump_stack_lvl+0xe8/0x150
[  277.031700][T12690]  should_fail_ex+0x3eb/0x540
[  277.031735][T12690]  should_failslab+0xa8/0x100
[  277.031771][T12690]  __kmalloc_cache_noprof+0x9e/0x600
[  277.031801][T12690]  ? __bpf_prog_map_compatible+0x372/0x860
[  277.031827][T12690]  ? __bpf_prog_map_compatible+0x372/0x860
[  277.031863][T12690]  __bpf_prog_map_compatible+0x372/0x860
[  277.031898][T12690]  __bpf_prog_select_runtime+0x18a/0xbe0
[  277.031934][T12690]  bpf_check+0x2858/0x34e0
[  277.031973][T12690]  ? ktime_get_with_offset+0x93/0x2d0
[  277.032005][T12690]  ? ktime_get_with_offset+0x93/0x2d0
[  277.032037][T12690]  ? __pfx_bpf_check+0x10/0x10
[  277.032064][T12690]  ? bpf_obj_name_cpy+0x194/0x1e0
[  277.032099][T12690]  bpf_prog_load+0x14da/0x1c60
[  277.032136][T12690]  ? __pfx_bpf_prog_load+0x10/0x10
[  277.032177][T12690]  ? __might_fault+0xaf/0x130
[  277.032209][T12690]  __sys_bpf+0xd86/0xe00
[  277.032241][T12690]  ? __pfx___sys_bpf+0x10/0x10
[  277.032278][T12690]  ? __fget_files+0x2a/0x420
[  277.032326][T12690]  ? ksys_write+0x242/0x270
[  277.032359][T12690]  ? __pfx_ksys_write+0x10/0x10
[  277.032398][T12690]  __x64_sys_bpf+0xba/0xd0
[  277.032434][T12690]  do_syscall_64+0x166/0x520
[  277.032459][T12690]  ? trace_irq_disable+0x3b/0x140
[  277.032488][T12690]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.032512][T12690]  ? clear_bhb_loop+0x70/0xc0
[  277.032541][T12690]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.032564][T12690] RIP: 0033:0x7fdeb4d9fb19
[  277.032594][T12690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  277.032614][T12690] RSP: 002b:00007fdeb5c03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  277.032639][T12690] RAX: ffffffffffffffda RBX: 00007fdeb5025fa0 RCX: 00007fdeb4d9fb19
[  277.032657][T12690] RDX: 0000000000000094 RSI: 0000200000000fc0 RDI: 0000000000000005
[  277.032671][T12690] RBP: 00007fdeb5c03090 R08: 0000000000000000 R09: 0000000000000000
[  277.032686][T12690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  277.032700][T12690] R13: 00007fdeb5026038 R14: 00007fdeb5025fa0 R15: 00007ffda0ecb6b8
[  277.032739][T12690]  </TASK>
[  277.897168][T12705] bond3: invalid ARP target 0.0.0.0 specified for addition
[  277.897198][T12705] bond3: option arp_ip_target: invalid value (0)
[  277.916942][T12705] bond3 (unregistering): Released all slaves
[  277.924721][T12714] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  277.924738][T12714] IPv6: NLM_F_CREATE should be set when creating new route
[  277.924783][T12714] IPv6: NLM_F_CREATE should be set when creating new route
[  278.206635][T12730] netlink: 'syz.1.1604': attribute type 62 has an invalid length.
[  278.242520][T12734] IPVS: set_ctl: invalid protocol: 108 172.20.20.170:20000
[  278.407837][T12736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  278.408037][T12736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  278.409265][T12736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  278.456293][T12735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  278.471673][T12735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  278.506023][T12746] tipc: Enabling of bearer <h:m> rejected, media not registered
[  278.613539][T12748] xt_ecn: cannot match TCP bits for non-tcp packets
[  279.928633][    C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed
[  279.928656][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  280.242226][T12823] __nla_validate_parse: 1 callbacks suppressed
[  280.242249][T12823] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1629'.
[  280.356708][T12827] syzkaller0: entered promiscuous mode
[  280.356734][T12827] syzkaller0: entered allmulticast mode
[  280.475803][T12827] bond11: (slave vlan2): Opening slave failed
[  280.555908][T12836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1632'.
[  280.855160][T12844] netlink: 'syz.0.1634': attribute type 5 has an invalid length.
[  280.943877][T12851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1637'.
[  280.943916][T12851] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1637'.
[  281.134079][T12862] netlink: 'syz.4.1641': attribute type 21 has an invalid length.
[  281.134103][T12862] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1641'.
[  281.134866][T12862] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1641'.
[  281.135100][T12862] netlink: zone id is out of range
[  281.135639][T12862] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  281.137622][T12863] netlink: 'syz.4.1641': attribute type 21 has an invalid length.
[  281.137643][T12863] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1641'.
[  281.190399][T12863] netlink: zone id is out of range
[  281.193710][T12862] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1641'.
[  281.221983][T12867] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  281.265198][T12870] netlink: 'syz.0.1642': attribute type 1 has an invalid length.
[  281.305728][T12870] 8021q: adding VLAN 0 to HW filter on device bond12
[  281.993373][   T32] audit: type=1804 audit(1793668832.137:15): pid=12875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1644" name="/newroot/323/cgroup.controllers" dev="tmpfs" ino=1679 res=1 errno=0
[  281.993888][   T32] audit: type=1800 audit(1793668832.137:16): pid=12875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1644" name="cgroup.controllers" dev="tmpfs" ino=1679 res=0 errno=-22
[  282.061499][T12875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1644'.
[  282.121021][T12890] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1643'.
[  282.635365][T12912] syzkaller0: entered promiscuous mode
[  282.635390][T12912] syzkaller0: entered allmulticast mode
[  282.886640][T12918] netlink: 'syz.2.1652': attribute type 6 has an invalid length.
[  282.886667][T12918] netlink: 'syz.2.1652': attribute type 5 has an invalid length.
[  283.106091][T12930] 8021q: adding VLAN 0 to HW filter on device bond13
[  283.470288][T12946] bridge0: port 1(veth0) entered blocking state
[  283.470504][T12946] bridge0: port 1(veth0) entered disabled state
[  283.470782][T12946] veth0: entered allmulticast mode
[  283.472935][T12946] veth0: entered promiscuous mode
[  283.554072][T12948] xt_hashlimit: max too large, truncated to 1048576
[  283.621094][T12950] xt_nfacct: accounting object `' does not exist
[  283.644235][T12950] netlink: 'syz.1.1662': attribute type 2 has an invalid length.
[  283.741273][T12956] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  284.059215][T12986] ip_tables: iptables: counters copy to user failed while replacing table
[  285.027223][T13028] vlan0: entered promiscuous mode
[  285.111720][T13033] batadv_slave_1: entered promiscuous mode
[  285.117190][T13033] batadv_slave_1: left promiscuous mode
[  285.293415][T13041] IPv6: sit2: Disabled Multicast RS
[  285.405480][T13050] __nla_validate_parse: 81 callbacks suppressed
[  285.405501][T13050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1691'.
[  285.415848][T13049] veth0_macvtap: left promiscuous mode
[  285.453088][T13051] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1690'.
[  285.474020][T13051] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1690'.
[  285.906606][T13074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1696'.
[  286.003363][T13051] bond10: entered promiscuous mode
[  286.003601][T13051] bond10: entered allmulticast mode
[  286.004402][T13051] 8021q: adding VLAN 0 to HW filter on device bond10
[  286.266695][T13080] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1696'.
[  286.306304][T13076] tipc: Started in network mode
[  286.306341][T13076] tipc: Node identity 66eb67c655d2, cluster identity 4711
[  286.306997][T13076] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  286.400117][T13070] tipc: Resetting bearer <eth:syzkaller0>
[  286.433935][T13087] ip_tables: iptables: counters copy to user failed while replacing table
[  286.492383][T13070] tipc: Disabling bearer <eth:syzkaller0>
[  286.535700][T13087] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1700'.
[  286.741419][T13101] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  286.791707][T13101] openvswitch: netlink: Message has 16 unknown bytes.
[  286.866680][T13105] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1706'.
[  286.886017][T13105] netlink: 'syz.4.1706': attribute type 1 has an invalid length.
[  286.957648][T13105] bond13: entered promiscuous mode
[  286.965709][T13105] 8021q: adding VLAN 0 to HW filter on device bond13
[  287.002270][T13105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1706'.
[  287.033045][T13105] 8021q: adding VLAN 0 to HW filter on device bond13
[  287.033544][T13105] bond13: (slave wireguard0): The slave device specified does not support setting the MAC address
[  287.033567][T13105] bond13: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  287.081541][T13105] bond13: (slave wireguard0): making interface the new active one
[  287.081568][T13105] wireguard0: entered promiscuous mode
[  287.083276][T13105] bond13: (slave wireguard0): Enslaving as an active interface with an up link
[  287.143034][T13115] netlink: 'syz.2.1707': attribute type 10 has an invalid length.
[  287.145251][T13118] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  287.205299][T13115] team0: Port device dummy0 added
[  287.286612][T13127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1708'.
[  287.286639][T13127] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1708'.
[  287.768804][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  287.769276][    C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  287.877704][ T5295] veth0_macvtap: entered promiscuous mode
[  287.989740][T13158] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  288.806616][T13199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  288.852689][T13195] ip_tables: iptables: counters copy to user failed while replacing table
[  289.241498][T13221] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  289.308246][T13221] netlink: 'syz.1.1729': attribute type 10 has an invalid length.
[  289.731579][T13246] syzkaller1: entered promiscuous mode
[  289.731606][T13246] syzkaller1: entered allmulticast mode
[  289.796768][T13257] bridge_slave_0: default FDB implementation only supports local addresses
[  290.318679][ T5640] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  290.354030][ T5640] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  290.375485][T13273] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  291.370513][ T9013] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  291.406567][ T9013] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  291.423053][T13310] __nla_validate_parse: 5 callbacks suppressed
[  291.423074][T13310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1749'.
[  291.427435][T13310] netlink: 'syz.1.1749': attribute type 4 has an invalid length.
[  291.427483][T13310] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1749'.
[  291.467721][T13310] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  291.599004][T13314] bridge3: entered promiscuous mode
[  291.599030][T13314] bridge3: entered allmulticast mode
[  291.601876][T13314] team0: Device bridge3 is of different type
[  292.045854][T13345] bond13: entered allmulticast mode
[  292.047102][T13345] wireguard0: entered allmulticast mode
[  292.170936][T13346] lo: entered allmulticast mode
[  292.183691][ T9013] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  292.192955][ T9013] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  292.208711][T13353] netlink: 'syz.1.1759': attribute type 4 has an invalid length.
[  292.482140][   T46] IPVS: starting estimator thread 0...
[  292.483601][T13362] netlink: 'syz.0.1763': attribute type 2 has an invalid length.
[  292.483619][T13362] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1763'.
[  292.516470][T13362] netlink: 'syz.0.1763': attribute type 2 has an invalid length.
[  292.516510][T13362] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1763'.
[  292.555798][T13368] 8021q: adding VLAN 0 to HW filter on device bond11
[  292.556378][T13368] bridge0: port 2(bond11) entered blocking state
[  292.556552][T13368] bridge0: port 2(bond11) entered disabled state
[  292.556654][T13368] bond11: entered allmulticast mode
[  292.581715][T13368] bond11: entered promiscuous mode
[  292.585555][T13368] bridge0: port 2(bond11) entered blocking state
[  292.585875][T13368] bridge0: port 2(bond11) entered forwarding state
[  292.597570][T13366] netlink: 'syz.3.1762': attribute type 11 has an invalid length.
[  292.619233][T13367] IPVS: using max 26 ests per chain, 62400 per kthread
[  292.692884][T13380] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1764'.
[  292.811427][T13335] bond13: left allmulticast mode
[  292.811485][T13335] wireguard0: left allmulticast mode
[  293.062925][T13399] block nbd0: server does not support multiple connections per device.
[  293.063347][T13399] block nbd0: shutting down sockets
[  293.247287][T13410] netlink: 'syz.2.1774': attribute type 1 has an invalid length.
[  293.325866][T13410] bond3: entered promiscuous mode
[  293.334027][T13410] 8021q: adding VLAN 0 to HW filter on device bond3
[  293.387866][T13413] bond3: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  293.387906][T13413] bond3: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  293.387926][T13413] bond3: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode
[  293.426375][T13421] netlink: 'syz.1.1777': attribute type 1 has an invalid length.
[  293.428023][T13421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1777'.
[  293.428102][T13421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1777'.
[  293.674845][ T7102] bridge0: port 2(bond11) entered disabled state
[  293.707028][T13410] bond3: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  293.707059][T13410] bond3: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  293.740518][T13421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1777'.
[  293.740597][T13421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1777'.
[  293.912396][T13436] netlink: 'syz.4.1780': attribute type 1 has an invalid length.
[  293.935416][T13421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1777'.
[  294.002362][T13438] IPVS: set_ctl: invalid protocol: 29 172.30.0.5:20000
[  294.947950][T13490] tipc: Resetting bearer <eth:syz_tun>
[  295.021920][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:86:c3:f6:ba:a0, vlan:0)
[  295.929332][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:86:c3:f6:ba:a0, vlan:0)
[  296.836338][T13556] __nla_validate_parse: 17 callbacks suppressed
[  296.836360][T13556] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1808'.
[  296.933574][T13555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1808'.
[  296.933605][T13555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1808'.
[  297.492004][T13570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1814'.
[  297.714936][T13585] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1816'.
[  297.728949][T13584] netlink: 'syz.4.1817': attribute type 7 has an invalid length.
[  297.728970][T13584] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1817'.
[  297.844935][T13587] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1816'.
[  297.935190][T13603] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1819'.
[  297.935311][T13602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1819'.
[  298.041757][T13606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1818'.
[  298.058872][ T5767] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  298.099553][T13587] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  298.251541][T13594] tipc: New replicast peer: 172.20.20.187
[  298.251836][T13594] tipc: Enabled bearer <udp:syz0>, priority 26
[  298.316297][T13609] bond0: (slave gretap0): Opening slave failed
[  298.604765][T13621] netlink: 'syz.3.1821': attribute type 4 has an invalid length.
[  298.811444][ T9013] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  299.254166][T13637] geneve3: entered promiscuous mode
[  299.368829][   T29] tipc: Node number set to 859400134
[  299.866800][T13652] TC_ACT_REPEAT abuse ?
[  299.899906][T13661] TC_ACT_REPEAT abuse ?
[  300.362728][T13675] netlink: 'syz.0.1834': attribute type 2 has an invalid length.
[  300.362757][T13675] netlink: 'syz.0.1834': attribute type 2 has an invalid length.
[  300.729699][T13689] netlink: 'syz.3.1835': attribute type 1 has an invalid length.
[  300.824031][T13689] 8021q: adding VLAN 0 to HW filter on device bond8
[  301.022605][T13536] Set syz1 is full, maxelem 65536 reached
[  301.073944][T13703] vlan2: entered promiscuous mode
[  301.073966][T13703] bridge0: entered promiscuous mode
[  301.477807][T13727] netlink: 'syz.1.1842': attribute type 7 has an invalid length.
[  301.477830][T13727] netlink: 'syz.1.1842': attribute type 5 has an invalid length.
[  301.500885][T13728] netlink: 'syz.1.1842': attribute type 7 has an invalid length.
[  301.500906][T13728] netlink: 'syz.1.1842': attribute type 5 has an invalid length.
[  302.385878][T13765] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  302.387367][T13765] IPv6: NLM_F_CREATE should be specified when creating new route
[  302.766192][T13782] __nla_validate_parse: 4 callbacks suppressed
[  302.766215][T13782] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1855'.
[  303.063668][T13798] netlink: 'syz.0.1859': attribute type 1 has an invalid length.
[  303.129358][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  303.216869][T13802] 8021q: adding VLAN 0 to HW filter on device bond16
[  303.228163][T13802] bond15: (slave bond16): making interface the new active one
[  303.236927][T13802] bond15: (slave bond16): Enslaving as an active interface with an up link
[  303.277965][T13802] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1859'.
[  303.333198][T13807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1862'.
[  303.443580][T13798] bond15: (slave gretap2): Enslaving as a backup interface with an up link
[  303.477693][T13819] bridge3: left promiscuous mode
[  303.492365][T13819] bond11: left promiscuous mode
[  303.492389][T13819] bridge4: left promiscuous mode
[  303.524583][T13819] bridge0: left promiscuous mode
[  303.535154][T13819] bond13: left promiscuous mode
[  303.535177][T13819] wireguard0: left promiscuous mode
[  303.843034][T13844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1867'.
[  303.931274][T13846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1868'.
[  303.987676][T13849] Bluetooth: hci0: unsupported parameter 5135
[  303.987702][T13849] Bluetooth: hci0: unsupported parameter 8192
[  303.987717][T13849] Bluetooth: hci0: unsupported parameter 5135
[  303.987730][T13849] Bluetooth: hci0: unsupported parameter 8192
[  304.009306][T13849] batadv_slave_0: entered promiscuous mode
[  304.059750][T13849] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1870'.
[  304.075078][T13849] veth1_to_team: entered promiscuous mode
[  304.085164][T13849] veth1_to_team: left promiscuous mode
[  304.198084][T13847] batadv_slave_0: left promiscuous mode
[  304.242254][T13856] syzkaller0: entered promiscuous mode
[  304.242278][T13856] syzkaller0: entered allmulticast mode
[  304.358103][T13866] netlink: 'syz.2.1876': attribute type 15 has an invalid length.
[  304.412524][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:86:c3:f6:ba:a0, vlan:0)
[  304.530645][T13877] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1879'.
[  304.650187][T13884] netlink: 'syz.0.1877': attribute type 1 has an invalid length.
[  304.805509][T13893] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1881'.
[  304.883905][T13884] 8021q: adding VLAN 0 to HW filter on device bond17
[  305.048779][    C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  305.138097][T13899] sch_tbf: peakrate 7 is lower than or equals to rate 7 !
[  305.505226][T13924] af_packet: tpacket_rcv: packet too big, clamped from 2916 to 4294967286. macoff=82
[  305.542325][T13930] sock: sock_timestamping_bind_phc: sock not bind to device
[  305.702286][T13939] netlink: 'syz.1.1888': attribute type 10 has an invalid length.
[  305.845926][T13940] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  305.947337][T13950] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1890'.
[  305.996900][T13945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1889'.
[  306.166153][T13956] block nbd0: server does not support multiple connections per device.
[  306.167801][T13956] block nbd0: shutting down sockets
[  306.588027][T13975] syzkaller1: entered promiscuous mode
[  306.588054][T13975] syzkaller1: entered allmulticast mode
[  306.675422][T13975] syzkaller1: left promiscuous mode
[  306.675448][T13975] syzkaller1: left allmulticast mode
[  307.132740][T13996] netlink: 'syz.1.1904': attribute type 2 has an invalid length.
[  307.275662][T14003] netlink: 'syz.3.1905': attribute type 9 has an invalid length.
[  307.328697][T14006] netlink: 'syz.1.1907': attribute type 8 has an invalid length.
[  307.596219][T14016] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  307.813244][T14037] netlink: 'syz.3.1914': attribute type 10 has an invalid length.
[  307.813268][T14037] __nla_validate_parse: 2 callbacks suppressed
[  307.813280][T14037] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1914'.
[  307.813685][T14037] netlink: 'syz.3.1914': attribute type 10 has an invalid length.
[  307.813703][T14037] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1914'.
[  307.814014][T14037] netlink: 'syz.3.1914': attribute type 10 has an invalid length.
[  307.814032][T14037] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1914'.
[  307.814343][T14037] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1914'.
[  307.816140][T14037] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1914'.
[  307.816505][T14037] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1914'.
[  307.816823][T14037] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1914'.
[  307.817141][T14037] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1914'.
[  307.925458][T14037] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1914'.
[  307.925879][T14037] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1914'.
[  308.129779][T14037] validate_nla: 16 callbacks suppressed
[  308.129799][T14037] netlink: 'syz.3.1914': attribute type 10 has an invalid length.
[  308.216708][T14037] netlink: 'syz.3.1914': attribute type 10 has an invalid length.
[  308.217392][T14037] netlink: 'syz.3.1914': attribute type 10 has an invalid length.
[  308.258046][T14053] 8021q: adding VLAN 0 to HW filter on device bond14
[  310.843997][T14115] openvswitch: netlink: Actions may not be safe on all matching packets
[  310.901769][T14109] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  311.057734][T14125] syzkaller0: entered promiscuous mode
[  311.057757][T14125] syzkaller0: entered allmulticast mode
[  311.200739][T14129] block nbd0: not configured, cannot reconfigure
[  311.300665][T14139] IPVS: set_ctl: invalid protocol: 98 172.30.0.2:20001
[  311.411223][T14144] netlink: 'syz.3.1940': attribute type 19 has an invalid length.
[  311.447291][T14146] netlink: 'syz.1.1942': attribute type 1 has an invalid length.
[  311.491824][T14147] IPVS: set_ctl: invalid protocol: 98 172.30.0.2:20001
[  311.549731][T14150] netlink: 'syz.1.1942': attribute type 1 has an invalid length.
[  311.675701][T14156] netlink: 'syz.0.1943': attribute type 1 has an invalid length.
[  312.364576][T14188] bridge_slave_1: Caught tx_queue_len zero misconfig
[  312.380762][T14185] syzkaller0: entered promiscuous mode
[  312.380785][T14185] syzkaller0: entered allmulticast mode
[  312.515516][T14203] ip_tables: iptables: counters copy to user failed while replacing table
[  312.682524][T14212] syzkaller0: left promiscuous mode
[  312.682547][T14212] syzkaller0: left allmulticast mode
[  312.975788][T14230] x_tables: duplicate underflow at hook 2
[  313.652625][T14252] bond9: option lacp_rate: invalid value (128)
[  313.656983][T14252] bond9 (unregistering): Released all slaves
[  313.747190][T14257] __nla_validate_parse: 30 callbacks suppressed
[  313.747210][T14257] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1967'.
[  313.787137][T14259] netlink: 'syz.0.1969': attribute type 11 has an invalid length.
[  313.847138][T14254] bond9: option xmit_hash_policy: invalid value (10)
[  313.868445][T14262] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1970'.
[  313.868469][T14262] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1970'.
[  313.870347][T14254] bond9 (unregistering): Released all slaves
[  313.999067][T14257] bond9: option xmit_hash_policy: invalid value (10)
[  314.000602][T14257] bond9 (unregistering): Released all slaves
[  314.165903][T14275] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  314.802285][T14304] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  315.552119][T14337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1986'.
[  315.552175][T14337] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1986'.
[  315.609006][ T7102] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  315.609057][ T7102] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  315.609094][ T7102] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  315.609130][ T7102] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  315.835247][T14343] ip_tables: iptables: counters copy to user failed while replacing table
[  315.855154][T14343] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1988'.
[  315.855725][T14343] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1988'.
[  316.185743][T14356] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1992'.
[  316.185780][T14356] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1992'.
[  316.231717][T14356] team0: entered promiscuous mode
[  316.231740][T14356] team_slave_0: entered promiscuous mode
[  316.231955][T14356] team_slave_1: entered promiscuous mode
[  316.264061][T14356] team0: left promiscuous mode
[  316.264098][T14356] team_slave_0: left promiscuous mode
[  316.264321][T14356] team_slave_1: left promiscuous mode
[  316.276182][T14355] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1992'.
[  316.320827][T14365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  316.821256][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:86:c3:f6:ba:a0, vlan:0)
[  316.931949][T14378] veth9: entered promiscuous mode
[  317.063350][T14383] gre3: entered allmulticast mode
[  317.791244][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:86:c3:f6:ba:a0, vlan:0)
[  317.813575][T14419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  317.930086][T14424] tc_dump_action: action bad kind
[  318.180019][T14432] netlink: 'syz.2.2014': attribute type 1 has an invalid length.
[  318.254277][T14432] 8021q: adding VLAN 0 to HW filter on device bond4
[  318.844338][T14458] xt_l2tp: v2 sid > 0xffff: 4294967294
[  319.233060][T14460] bridge4: entered promiscuous mode
[  319.233085][T14460] bridge4: entered allmulticast mode
[  319.246339][T14460] team0: Port device bridge4 added
[  319.247160][T14461] bridge0: port 1(team0) entered blocking state
[  319.247271][T14461] bridge0: port 1(team0) entered disabled state
[  319.247454][T14461] team0: entered allmulticast mode
[  319.247471][T14461] team_slave_0: entered allmulticast mode
[  319.247519][T14461] team_slave_1: entered allmulticast mode
[  319.293231][T14461] team0: entered promiscuous mode
[  319.293254][T14461] team_slave_0: entered promiscuous mode
[  319.293474][T14461] team_slave_1: entered promiscuous mode
[  319.399823][T14466] netlink: 'syz.0.2022': attribute type 1 has an invalid length.
[  319.840347][T14491] __nla_validate_parse: 42 callbacks suppressed
[  319.840370][T14491] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2029'.
[  319.950522][   T32] audit: type=1804 audit(1793668870.097:17): pid=14493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2031" name="/newroot/383/memory.events" dev="tmpfs" ino=1974 res=1 errno=0
[  319.950764][   T32] audit: type=1800 audit(1793668870.097:18): pid=14493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2031" name="memory.events" dev="tmpfs" ino=1974 res=0 errno=-22
[  320.016708][T14493] syzkaller0: entered promiscuous mode
[  320.016732][T14493] syzkaller0: entered allmulticast mode
[  320.034886][T14493] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  320.073797][T14493] tipc: Resetting bearer <eth:syzkaller0>
[  320.075504][T14503] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2034'.
[  320.094889][T14492] tipc: Resetting bearer <eth:syzkaller0>
[  320.161077][T14492] tipc: Disabling bearer <eth:syzkaller0>
[  320.211650][T14501] syzkaller0: entered promiscuous mode
[  320.211674][T14501] syzkaller0: entered allmulticast mode
[  321.498777][T14545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2047'.
[  321.515942][T14541] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2046'.
[  321.564619][T14544] syzkaller1: entered promiscuous mode
[  321.564646][T14544] syzkaller1: entered allmulticast mode
[  321.862135][   T32] audit: type=1804 audit(1793668872.007:19): pid=14550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2050" name="/newroot/434/memory.events" dev="tmpfs" ino=2251 res=1 errno=0
[  322.123264][T14560] xt_cgroup: invalid path, errno=-2
[  322.152879][T14569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2055'.
[  322.152914][T14569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2055'.
[  322.254030][T14572] netlink: 'syz.2.2053': attribute type 6 has an invalid length.
[  322.312483][T14576] IPv6: addrconf: prefix option has invalid lifetime
[  325.026761][T14560] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  326.060129][T14614] ip6gre2: entered allmulticast mode
[  326.063769][T14626] netlink: 'syz.4.2070': attribute type 1 has an invalid length.
[  326.110406][T14626] 8021q: adding VLAN 0 to HW filter on device bond15
[  326.393440][T14629] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2071'.
[  326.442752][T14639] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2074'.
[  326.462269][T14639] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2074'.
[  326.462303][T14639] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2074'.
[  326.506361][T14639] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2074'.
[  326.506395][T14639] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2074'.
[  326.529942][T14639] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2074'.
[  326.529975][T14639] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2074'.
[  326.558813][T14639] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2074'.
[  326.558847][T14639] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2074'.
[  326.647121][T14646] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  326.976889][T14660] netlink: 'syz.3.2080': attribute type 1 has an invalid length.
[  327.110418][T14639] erspan0: left allmulticast mode
[  327.236719][T14654] 8021q: adding VLAN 0 to HW filter on device bond16
[  327.296469][T14660] 8021q: adding VLAN 0 to HW filter on device bond9
[  327.306940][ T9741] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  327.358854][ T9741] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  327.358974][ T9741] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  327.359051][ T9741] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  327.966214][T14690] xt_TCPMSS: Only works on TCP SYN packets
[  327.998912][T14690] ip6gretap1: entered allmulticast mode
[  328.005800][T14690] batman_adv: batadv0: Adding interface: ip6gretap1
[  328.005819][T14690] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  328.006127][T14690] batman_adv: batadv0: Interface activated: ip6gretap1
[  328.227355][T14705] netlink: 'syz.1.2093': attribute type 3 has an invalid length.
[  328.227381][T14705] netlink: 'syz.1.2093': attribute type 1 has an invalid length.
[  328.227424][T14705] NCSI netlink: No device for ifindex 0
[  328.473822][   T32] audit: type=1804 audit(1793668878.617:20): pid=14713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2096" name="/newroot/408/cgroup.controllers" dev="tmpfs" ino=2121 res=1 errno=0
[  328.474136][   T32] audit: type=1800 audit(1793668878.617:21): pid=14713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2096" name="cgroup.controllers" dev="tmpfs" ino=2121 res=0 errno=-22
[  328.663974][T14720] netlink: 'syz.3.2097': attribute type 2 has an invalid length.
[  328.781469][T14722] netlink: 'syz.3.2097': attribute type 10 has an invalid length.
[  331.451568][T14722] dummy0: entered promiscuous mode
[  331.451823][T14722] dummy0: entered allmulticast mode
[  331.453526][T14722] team0: Port device dummy0 added
[  331.734387][T14749] sctp: [Deprecated]: syz.3.2100 (pid 14749) Use of int in max_burst socket option deprecated.
[  331.734387][T14749] Use struct sctp_assoc_value instead
[  331.880886][T14757] veth11: entered allmulticast mode
[  332.043336][T14770] __nla_validate_parse: 236 callbacks suppressed
[  332.043357][T14770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2108'.
[  332.146654][T14750] veth11: left allmulticast mode
[  332.283396][T14785] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  332.521088][T14791] netlink: 'syz.0.2115': attribute type 1 has an invalid length.
[  332.599590][T14791] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2115'.
[  332.975391][T14795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2116'.
[  333.020114][T14800] geneve0: Caught tx_queue_len zero misconfig
[  333.234027][T14810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2121'.
[  333.613298][T14828] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2126'.
[  333.644139][T14801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2119'.
[  334.217107][T14849] team0: Device vxcan3 is CAN, IEEE 802.15.4 or 6LoWPAN. These device types can't be added as a team port
[  334.312412][T14864] netlink: 'syz.2.2134': attribute type 1 has an invalid length.
[  334.488569][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  334.582370][T14874] bridge_slave_0: default FDB implementation only supports local addresses
[  335.127906][T14891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2140'.
[  335.630818][T14931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2145'.
[  335.759060][T14941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2146'.
[  336.220881][T14958] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2149'.
[  336.463878][T14969] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  336.676939][T14981] netlink: 'syz.4.2156': attribute type 22 has an invalid length.
[  336.687940][T14981] 8021q: adding VLAN 0 to HW filter on device bond0
[  336.773731][T14988] batman_adv: batadv0: Adding interface: veth0
[  336.773750][T14988] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  336.773862][T14988] batman_adv: batadv0: Interface activated: veth0
[  336.827739][T14989] batman_adv: batadv0: Interface deactivated: veth0
[  336.827758][T14989] batman_adv: batadv0: Removing interface: veth0
[  337.142551][T15010] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  337.180329][T15011] netlink: 'syz.3.2160': attribute type 16 has an invalid length.
[  337.180352][T15011] netlink: 'syz.3.2160': attribute type 17 has an invalid length.
[  337.264140][T15000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  337.355781][T15000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  337.468963][ T8992] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  337.608817][T15011] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  337.660536][ T7826] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  337.780754][T15032] netlink: 'syz.1.2166': attribute type 1 has an invalid length.
[  337.852933][T15032] 8021q: adding VLAN 0 to HW filter on device bond12
[  337.855452][ T5295] veth0_vlan: left promiscuous mode
[  337.885422][ T5640] veth0_vlan: entered promiscuous mode
[  337.967186][T15032] gretap0: entered promiscuous mode
[  338.154773][T15035] bond13 (unregistering): Released all slaves
[  338.186984][T15054] __nla_validate_parse: 1 callbacks suppressed
[  338.187005][T15054] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2171'.
[  338.216610][T15055] netlink: 'syz.0.2172': attribute type 2 has an invalid length.
[  338.216632][T15055] netlink: 'syz.0.2172': attribute type 2 has an invalid length.
[  338.216646][T15055] netlink: 'syz.0.2172': attribute type 1 has an invalid length.
[  338.261951][T15032] bond12 (unregistering): Released all slaves
[  338.328549][    C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  338.580604][T15068] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2174'.
[  338.585989][T15068] netlink: 'syz.0.2174': attribute type 1 has an invalid length.
[  338.586041][T15068] netlink: 1368 bytes leftover after parsing attributes in process `syz.0.2174'.
[  338.696181][T15062] IPVS: Error connecting to the multicast addr
[  339.147209][T15089] tipc: Resetting bearer <eth:syz_tun>
[  339.249490][T15094] 8021q: adding VLAN 0 to HW filter on device batadv0
[  339.615637][T15110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2182'.
[  339.615721][T15110] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2182'.
[  339.765999][T15117] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2184'.
[  340.216092][T15142] xt_REDIRECT: bad MAP_IPS.
[  340.396223][T15148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2189'.
[  340.440493][T15148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2189'.
[  340.562988][T15154] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  340.782535][T15158] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  340.785318][T15158] syzkaller0: entered promiscuous mode
[  340.785342][T15158] syzkaller0: entered allmulticast mode
[  340.830389][T15163] 8021q: VLANs not supported on tunl0
[  340.838979][T15158] tipc: Resetting bearer <eth:syzkaller0>
[  340.843753][T15157] tipc: Resetting bearer <eth:syzkaller0>
[  340.880618][T15157] tipc: Disabling bearer <eth:syzkaller0>
[  344.196957][T15202] veth0: left allmulticast mode
[  344.196984][T15202] veth0: left promiscuous mode
[  344.197208][T15202] bridge0: port 1(veth0) entered disabled state
[  344.241547][T15202] batman_adv: batadv0: Adding interface: veth0
[  344.241567][T15202] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  344.241600][T15202] batman_adv: batadv0: Interface activated: veth0
[  344.542583][T15217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2206'.
[  344.854391][T15228] xfrm1: entered allmulticast mode
[  344.855584][T15233] netlink: 'syz.0.2210': attribute type 2 has an invalid length.
[  345.402486][T15260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2218'.
[  345.402512][T15260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2218'.
[  345.402538][T15260] netlink: 'syz.4.2218': attribute type 14 has an invalid length.
[  345.402553][T15260] netlink: 'syz.4.2218': attribute type 13 has an invalid length.
[  345.464955][T15264] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  345.682973][T15269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2221'.
[  345.767006][T15269] bond18: option lacp_active: invalid value (5)
[  345.778208][T15269] bond18 (unregistering): Released all slaves
[  345.825374][T15273] mac80211_hwsim hwsim10 ..ãc¤±: renamed from wlan1
[  345.853852][T15275] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2223'.
[  346.113126][T15285] netlink: 'syz.2.2225': attribute type 1 has an invalid length.
[  346.318168][T15294] netlink: 'syz.2.2228': attribute type 4 has an invalid length.
[  346.318194][T15294] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2228'.
[  346.358972][T15294] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  346.584080][T15300] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2230'.
[  347.710322][T15319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2233'.
[  347.711350][T15319] 8021q: adding VLAN 0 to HW filter on device bond0
[  347.940461][T15363] ip_tables: iptables: counters copy to user failed while replacing table
[  348.191266][T15376] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2243'.
[  348.191300][T15376] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2243'.
[  348.747445][T15400] erspan1: entered promiscuous mode
[  349.456969][T15437] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  350.018852][T15466] __nla_validate_parse: 3 callbacks suppressed
[  350.018875][T15466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2270'.
[  350.025833][T15468] netlink: 'syz.0.2272': attribute type 1 has an invalid length.
[  350.126624][T15468] 8021q: adding VLAN 0 to HW filter on device bond19
[  350.235484][T15479] netlink: 'syz.3.2275': attribute type 1 has an invalid length.
[  350.252295][T15468] bond19: (slave geneve0): making interface the new active one
[  350.273214][T15468] bond19: (slave geneve0): Enslaving as an active interface with an up link
[  350.273483][T15473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2273'.
[  350.273506][T15473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2273'.
[  350.309735][T15486] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2274'.
[  350.432547][T15491] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2275'.
[  350.459649][T15485] bond10: (slave veth5): Enslaving as an active interface with a down link
[  350.491361][   T88] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  350.493260][ T9741] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  350.494515][ T1104] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  350.494567][ T1104] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  350.545138][T15479] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2275'.
[  350.585661][T15485] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  350.589604][ T9009] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  350.672800][T15479] ip6gre1: entered promiscuous mode
[  350.672824][T15479] ip6gre1: entered allmulticast mode
[  350.758541][ T5767] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  351.310085][T15526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2287'.
[  351.392903][T15526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2287'.
[  351.443637][T15534] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2286'.
[  351.651660][T15540] nbd0: detected capacity change from 0 to 63
[  351.746868][T15540] TC_ACT_REPEAT abuse ?
[  351.760575][ T5648] block nbd0: Receive control failed (result -104)
[  351.827381][T15553] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2293'.
[  351.891505][T15543] veth1_to_team: entered promiscuous mode
[  351.895565][T15543] veth1_to_team: left promiscuous mode
[  352.591144][T15584] netlink: 'syz.1.2301': attribute type 3 has an invalid length.
[  352.591918][T15584] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  353.226560][T15628] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  353.604732][T15645] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check.
[  353.734833][   T32] audit: type=1804 audit(1793668903.877:22): pid=15647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2313" name="/newroot/472/cgroup.controllers" dev="tmpfs" ino=2440 res=1 errno=0
[  353.734891][   T32] audit: type=1800 audit(1793668903.877:23): pid=15647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2313" name="cgroup.controllers" dev="tmpfs" ino=2440 res=0 errno=-22
[  354.374631][   T32] audit: type=1804 audit(1793668904.517:24): pid=15673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2319" name="/newroot/474/cgroup.controllers" dev="tmpfs" ino=2453 res=1 errno=0
[  354.374686][   T32] audit: type=1800 audit(1793668904.517:25): pid=15673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2319" name="cgroup.controllers" dev="tmpfs" ino=2453 res=0 errno=-22
[  354.374729][   T32] audit: type=1800 audit(1793668904.517:26): pid=15673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2319" name="cgroup.controllers" dev="tmpfs" ino=2453 res=0 errno=-22
[  354.456649][   T32] audit: type=1800 audit(1793668904.597:27): pid=15673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2319" name="cgroup.controllers" dev="tmpfs" ino=2453 res=0 errno=-22
[  354.481904][   T32] audit: type=1800 audit(1793668904.627:28): pid=15673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2319" name="cgroup.controllers" dev="tmpfs" ino=2453 res=0 errno=-22
[  354.498780][   T32] audit: type=1800 audit(1793668904.637:29): pid=15673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2319" name="cgroup.controllers" dev="tmpfs" ino=2453 res=0 errno=-22
[  354.538074][   T32] audit: type=1800 audit(1793668904.677:30): pid=15673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2319" name="cgroup.controllers" dev="tmpfs" ino=2453 res=0 errno=-22
[  354.563470][   T32] audit: type=1800 audit(1793668904.697:31): pid=15673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2319" name="cgroup.controllers" dev="tmpfs" ino=2453 res=0 errno=-22
[  354.855483][T15675] wireguard1: entered allmulticast mode
[  355.234893][T15695] netlink: 'syz.3.2327': attribute type 10 has an invalid length.
[  355.235129][T15695] netlink: 'syz.3.2327': attribute type 10 has an invalid length.
[  355.235309][T15695] netlink: 'syz.3.2327': attribute type 10 has an invalid length.
[  355.235518][T15695] netlink: 'syz.3.2327': attribute type 10 has an invalid length.
[  355.235698][T15695] netlink: 'syz.3.2327': attribute type 10 has an invalid length.
[  355.235875][T15695] netlink: 'syz.3.2327': attribute type 10 has an invalid length.
[  355.236050][T15695] netlink: 'syz.3.2327': attribute type 10 has an invalid length.
[  355.236227][T15695] netlink: 'syz.3.2327': attribute type 10 has an invalid length.
[  355.247036][T15695] netlink: 'syz.3.2327': attribute type 10 has an invalid length.
[  355.247573][T15695] netlink: 'syz.3.2327': attribute type 10 has an invalid length.
[  355.349856][T15703] __nla_validate_parse: 5 callbacks suppressed
[  355.349887][T15703] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2329'.
[  355.693902][T15716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2332'.
[  355.864236][T15719] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  355.887991][T15719] syzkaller0: entered promiscuous mode
[  355.888016][T15719] syzkaller0: entered allmulticast mode
[  355.908697][ T9742] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  355.909105][ T9742] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  355.909154][ T9742] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  355.916067][T15719] tipc: Resetting bearer <eth:syzkaller0>
[  355.939352][ T7106] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  356.157425][T15735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2335'.
[  356.157475][T15735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2335'.
[  356.612072][T15769] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2343'.
[  356.811062][T15776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2344'.
[  356.947028][T15780] !: entered promiscuous mode
[  357.152441][T15778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2345'.
[  357.579124][T15808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2351'.
[  358.096231][T15841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  358.464886][T15853] bond12: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  358.484943][T15853] bond12 (unregistering): Released all slaves
[  359.162505][ T5767] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  359.339025][ T5767] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  359.553247][T15886] block nbd1: Unsupported socket: should be TCP or UNIX.
[  359.558697][T15885] block nbd1: Unsupported socket: should be TCP or UNIX.
[  359.582206][T15891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2371'.
[  359.589984][ T5767] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  359.641659][T15895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2371'.
[  360.018881][T15906] syz.2.2376: vmalloc error: size 34359742464, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  360.019032][T15906] CPU: 1 UID: 0 PID: 15906 Comm: syz.2.2376 Not tainted syzkaller #0 PREEMPT(full) 
[  360.019059][T15906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  360.019080][T15906] Call Trace:
[  360.019089][T15906]  <TASK>
[  360.019099][T15906]  dump_stack_lvl+0xe8/0x150
[  360.019144][T15906]  warn_alloc+0x24d/0x270
[  360.019170][T15906]  ? stack_depot_save_flags+0x33/0x810
[  360.019207][T15906]  ? __pfx_warn_alloc+0x10/0x10
[  360.019233][T15906]  ? kasan_save_track+0x4f/0x80
[  360.019261][T15906]  ? __kasan_kmalloc+0x93/0xb0
[  360.019293][T15906]  ? xsk_init_queue+0x8a/0xe0
[  360.019316][T15906]  ? xsk_setsockopt+0x5e0/0x960
[  360.019339][T15906]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  360.019389][T15906]  __vmalloc_node_range_noprof+0x12c/0x16f0
[  360.019453][T15906]  ? rcu_is_watching+0x16/0xb0
[  360.019496][T15906]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  360.019522][T15906]  ? __kmalloc_cache_noprof+0x31c/0x600
[  360.019551][T15906]  ? __kmalloc_cache_noprof+0x148/0x600
[  360.019579][T15906]  ? xskq_create+0x56/0x220
[  360.019609][T15906]  xskq_create+0x148/0x220
[  360.019634][T15906]  ? xsk_init_queue+0x8a/0xe0
[  360.019661][T15906]  xsk_init_queue+0x8a/0xe0
[  360.019689][T15906]  xsk_setsockopt+0x5e0/0x960
[  360.019714][T15906]  ? __pfx_xsk_setsockopt+0x10/0x10
[  360.019738][T15906]  ? __pfx_aa_sk_perm+0x10/0x10
[  360.019776][T15906]  ? aa_sock_opt_perm+0x142/0x1e0
[  360.019805][T15906]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  360.019835][T15906]  ? __pfx_xsk_setsockopt+0x10/0x10
[  360.019861][T15906]  do_sock_setsockopt+0x17c/0x1b0
[  360.019890][T15906]  __x64_sys_setsockopt+0x13d/0x1b0
[  360.019920][T15906]  do_syscall_64+0x166/0x520
[  360.019947][T15906]  ? trace_irq_disable+0x3b/0x140
[  360.019979][T15906]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  360.020003][T15906]  ? clear_bhb_loop+0x70/0xc0
[  360.020032][T15906]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  360.020056][T15906] RIP: 0033:0x7fdeb4d9fb19
[  360.020080][T15906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  360.020100][T15906] RSP: 002b:00007fdeb5c03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  360.020126][T15906] RAX: ffffffffffffffda RBX: 00007fdeb5025fa0 RCX: 00007fdeb4d9fb19
[  360.020144][T15906] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004
[  360.020170][T15906] RBP: 00007fdeb4e37b70 R08: 0000000000000004 R09: 0000000000000000
[  360.020184][T15906] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000
[  360.020200][T15906] R13: 00007fdeb5026038 R14: 00007fdeb5025fa0 R15: 00007ffda0ecb6b8
[  360.020239][T15906]  </TASK>
[  360.020343][T15906] Mem-Info:
[  360.020355][T15906] active_anon:5596 inactive_anon:0 isolated_anon:0
[  360.020355][T15906]  active_file:0 inactive_file:43482 isolated_file:0
[  360.020355][T15906]  unevictable:0 dirty:169 writeback:0
[  360.020355][T15906]  slab_reclaimable:12023 slab_unreclaimable:106818
[  360.020355][T15906]  mapped:29510 shmem:530 pagetables:3426
[  360.020355][T15906]  sec_pagetables:0 bounce:0
[  360.020355][T15906]  kernel_misc_reclaimable:0
[  360.020355][T15906]  free:1266638 free_pcp:16375 free_cma:0
[  360.020476][T15906] Node 0 active_anon:22384kB inactive_anon:0kB active_file:0kB inactive_file:173740kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118040kB dirty:676kB writeback:0kB shmem:2120kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16172kB pagetables:13528kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  360.020541][T15906] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  360.020602][T15906] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  360.020671][T15906] lowmem_reserve[]: 0 2463 2465 2465 2465
[  360.020715][T15906] Node 0 DMA32 free:1122304kB boost:0kB min:33936kB low:42420kB high:50904kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22384kB inactive_anon:0kB active_file:0kB inactive_file:173740kB unevictable:0kB writepending:676kB zspages:0kB present:3129332kB managed:2523120kB mlocked:0kB bounce:0kB free_pcp:65500kB local_pcp:35140kB free_cma:0kB
[  360.020784][T15906] lowmem_reserve[]: 0 0 1 1 1
[  360.020824][T15906] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  360.020889][T15906] lowmem_reserve[]: 0 0 0 0 0
[  360.020930][T15906] Node 1 Normal free:3928888kB boost:0kB min:55940kB low:69924kB high:83908kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  360.020996][T15906] lowmem_reserve[]: 0 0 0 0 0
[  360.021037][T15906] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  360.021179][T15906] Node 0 DMA32: 2785*4kB (UME) 1128*8kB (UME) 522*16kB (UM) 40*32kB (UME) 117*64kB (UME) 459*128kB (UME) 349*256kB (UM) 256*512kB (UME) 181*1024kB (UME) 7*2048kB (UME) 148*4096kB (UM) = 1122340kB
[  360.021374][T15906] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  360.021525][T15906] Node 1 Normal: 2*4kB (UM) 6*8kB (UM) 12*16kB (UM) 6*32kB (UM) 10*64kB (UM) 4*128kB (UM) 3*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 957*4096kB (M) = 3928888kB
[  360.021714][T15906] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  360.021733][T15906] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  360.021752][T15906] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  360.021771][T15906] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  360.021790][T15906] 44008 total pagecache pages
[  360.021805][T15906] 0 pages in swap cache
[  360.021813][T15906] Free swap  = 124996kB
[  360.021822][T15906] Total swap = 124996kB
[  360.021832][T15906] 2097051 pages RAM
[  360.021840][T15906] 0 pages HighMem/MovableOnly
[  360.021848][T15906] 434240 pages reserved
[  360.021856][T15906] 0 pages cma reserved
[  360.185930][ T5767] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  360.516231][T15907] __nla_validate_parse: 1 callbacks suppressed
[  360.516288][T15907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2375'.
[  360.636691][T15907] bridge0: port 1(veth0_to_bridge) entered disabled state
[  360.637858][T15907] bridge0: port 3(vlan3) entered disabled state
[  361.022683][T15922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2382'.
[  361.054085][T15923] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2382'.
[  361.413104][T15936] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2383'.
[  361.564984][T15944] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2384'.
[  361.586003][T15944] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2384'.
[  361.589992][T15944] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2384'.
[  361.601054][T15944] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2384'.
[  361.620435][T15944] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2384'.
[  361.620626][T15943] syzkaller1: entered promiscuous mode
[  361.620643][T15943] syzkaller1: entered allmulticast mode
[  361.635141][T15944] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2384'.
[  362.633532][T15973] syzkaller1: entered promiscuous mode
[  362.633552][T15973] syzkaller1: entered allmulticast mode
[  375.109552][ T5642] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  375.114755][ T5642] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  375.117268][ T5642] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  375.120915][ T5642] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  375.122555][ T5642] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  375.172835][ T5642] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  375.174382][ T5642] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  375.174734][ T5642] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  375.175715][ T5642] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  375.176460][ T5642] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  375.186402][ T5642] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  375.202277][ T5642] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  375.204000][ T5642] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  375.206279][ T5642] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  375.215898][ T5642] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  375.696028][T15992] rxe_eth0 speed is unknown, defaulting to 1000
[  375.705452][T15994] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[  375.706680][T15992] rxe_eth0 speed is unknown, defaulting to 1000
[  375.707506][T15992] rxe_eth0 speed is unknown, defaulting to 1000
[  375.946698][T15992] infiniband rxe0: set active
[  375.946760][ T7830] rxe_eth0 speed is unknown, defaulting to 1000
[  375.946822][T15992] infiniband rxe0: added rxe_eth0
[  375.982731][T15992] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  375.982771][T15992] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  375.982815][T15992] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  376.075446][T15992] RDS/IB: rxe0: added
[  376.075505][T15992] smc: adding ib device rxe0 with port count 1
[  376.075525][T15992] smc:    ib device rxe0 port 1 has no pnetid
[  376.112944][ T7830] rxe_eth0 speed is unknown, defaulting to 1000
[  376.136286][T15992] rxe_eth0 speed is unknown, defaulting to 1000
[  376.202739][T15994] bridge0: port 1(bridge_slave_0) entered blocking state
[  376.202926][T15994] bridge0: port 1(bridge_slave_0) entered disabled state
[  376.203075][T15994] bridge_slave_0: entered allmulticast mode
[  376.204857][T15994] bridge_slave_0: entered promiscuous mode
[  376.212179][T15994] bridge0: port 2(bridge_slave_1) entered blocking state
[  376.212694][T15994] bridge0: port 2(bridge_slave_1) entered disabled state
[  376.213248][T15994] bridge_slave_1: entered allmulticast mode
[  376.217267][T15994] bridge_slave_1: entered promiscuous mode
[  376.285363][T15994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  376.290263][T15994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  376.334304][T15994] team0: Port device team_slave_0 added
[  376.337515][T15994] team0: Port device team_slave_1 added
[  376.377332][T15994] batman_adv: batadv0: Adding interface: batadv_slave_0
[  376.377351][T15994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  376.377378][T15994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  376.383943][T15994] batman_adv: batadv0: Adding interface: batadv_slave_1
[  376.383990][T15994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  376.384054][T15994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  376.501612][T15994] hsr_slave_0: entered promiscuous mode
[  376.502753][T15994] hsr_slave_1: entered promiscuous mode
[  376.576613][T15992] rxe_eth0 speed is unknown, defaulting to 1000
[  376.799854][T15992] rxe_eth0 speed is unknown, defaulting to 1000
[  376.953025][T15992] rxe_eth0 speed is unknown, defaulting to 1000
[  377.236790][ T5642] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  377.250228][ T5642] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  377.257948][ T5642] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  377.267356][ T5642] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  377.268002][ T5642] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  377.288618][ T5642] Bluetooth: hci5: command tx timeout
[  377.289210][ T5642] Bluetooth: hci6: command tx timeout
[  377.359784][ T5642] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  377.360095][T15992] rxe_eth0 speed is unknown, defaulting to 1000
[  377.361142][ T5642] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  377.361901][ T5642] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  377.364300][ T5642] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  377.364917][ T5642] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  377.747621][T15992] rxe_eth0 speed is unknown, defaulting to 1000
[  378.007873][T15992] rxe_eth0 speed is unknown, defaulting to 1000
[  378.205914][T16028] rxe_eth0 speed is unknown, defaulting to 1000
[  378.423914][T16031] rxe_eth0 speed is unknown, defaulting to 1000
[  378.683308][T15992] bridge0: port 1(bridge_slave_0) entered blocking state
[  378.683480][T15992] bridge0: port 1(bridge_slave_0) entered disabled state
[  378.683591][T15992] bridge_slave_0: entered allmulticast mode
[  378.684840][T15992] bridge_slave_0: entered promiscuous mode
[  378.724945][T15992] bridge0: port 2(bridge_slave_1) entered blocking state
[  378.725050][T15992] bridge0: port 2(bridge_slave_1) entered disabled state
[  378.725175][T15992] bridge_slave_1: entered allmulticast mode
[  378.726639][T15992] bridge_slave_1: entered promiscuous mode
[  378.798158][T15992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  378.830340][T15992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  378.896536][T15992] team0: Port device team_slave_0 added
[  378.903562][T15992] team0: Port device team_slave_1 added
[  378.976183][T15992] batman_adv: batadv0: Adding interface: batadv_slave_0
[  378.976204][T15992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  378.976233][T15992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  379.037128][T15992] batman_adv: batadv0: Adding interface: batadv_slave_1
[  379.037147][T15992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  379.037195][T15992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  379.222160][ T5642] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  379.224808][ T5642] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  379.225523][ T5642] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  379.226453][ T5642] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  379.227100][ T5642] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  379.357028][T16028] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.357144][T16028] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.357616][T16028] bridge_slave_0: entered allmulticast mode
[  379.369405][ T5642] Bluetooth: hci8: command tx timeout
[  379.373190][ T5635] Bluetooth: hci5: command tx timeout
[  379.374438][ T5648] Bluetooth: hci7: command tx timeout
[  379.375378][ T5642] Bluetooth: hci6: command tx timeout
[  379.405902][T16028] bridge_slave_0: entered promiscuous mode
[  379.432336][T15992] hsr_slave_0: entered promiscuous mode
[  379.433518][T15992] hsr_slave_1: entered promiscuous mode
[  379.434372][T15992] debugfs: 'hsr0' already exists in 'hsr'
[  379.434422][T15992] Cannot create hsr debugfs directory
[  379.466742][T16028] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.466851][T16028] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.466993][T16028] bridge_slave_1: entered allmulticast mode
[  379.485918][T16028] bridge_slave_1: entered promiscuous mode
[  379.585835][T16028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  379.607943][T16028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  379.717365][T16028] team0: Port device team_slave_0 added
[  379.727041][T16028] team0: Port device team_slave_1 added
[  379.824857][T16028] batman_adv: batadv0: Adding interface: batadv_slave_0
[  379.824876][T16028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  379.824900][T16028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  379.825492][T16031] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.825665][T16031] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.826298][T16031] bridge_slave_0: entered allmulticast mode
[  379.827769][T16031] bridge_slave_0: entered promiscuous mode
[  379.905325][T16028] batman_adv: batadv0: Adding interface: batadv_slave_1
[  379.905342][T16028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  379.905375][T16028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  379.905995][T16031] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.906145][T16031] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.906250][T16031] bridge_slave_1: entered allmulticast mode
[  379.907522][T16031] bridge_slave_1: entered promiscuous mode
[  380.038880][T16031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  380.042676][T16031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  380.077418][T16066] rxe_eth0 speed is unknown, defaulting to 1000
[  380.139034][T16031] team0: Port device team_slave_0 added
[  380.181856][T16031] team0: Port device team_slave_1 added
[  380.213507][T16028] hsr_slave_0: entered promiscuous mode
[  380.214779][T16028] hsr_slave_1: entered promiscuous mode
[  380.215664][T16028] debugfs: 'hsr0' already exists in 'hsr'
[  380.215684][T16028] Cannot create hsr debugfs directory
[  380.286916][T16031] batman_adv: batadv0: Adding interface: batadv_slave_0
[  380.286944][T16031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  380.286972][T16031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  380.341541][T16031] batman_adv: batadv0: Adding interface: batadv_slave_1
[  380.341559][T16031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  380.341589][T16031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  380.539966][T16031] hsr_slave_0: entered promiscuous mode
[  380.541112][T16031] hsr_slave_1: entered promiscuous mode
[  380.541748][T16031] debugfs: 'hsr0' already exists in 'hsr'
[  380.541769][T16031] Cannot create hsr debugfs directory
[  381.039293][T16066] bridge0: port 1(bridge_slave_0) entered blocking state
[  381.039458][T16066] bridge0: port 1(bridge_slave_0) entered disabled state
[  381.039791][T16066] bridge_slave_0: entered allmulticast mode
[  381.040981][T16066] bridge_slave_0: entered promiscuous mode
[  381.048068][T16066] bridge0: port 2(bridge_slave_1) entered blocking state
[  381.049100][T16066] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.049240][T16066] bridge_slave_1: entered allmulticast mode
[  381.052861][T16066] bridge_slave_1: entered promiscuous mode
[  381.113233][T16066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  381.116250][T16066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  381.154343][T16066] team0: Port device team_slave_0 added
[  381.156582][T16066] team0: Port device team_slave_1 added
[  381.187885][T16066] batman_adv: batadv0: Adding interface: batadv_slave_0
[  381.187902][T16066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  381.187928][T16066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  381.195270][T16066] batman_adv: batadv0: Adding interface: batadv_slave_1
[  381.195306][T16066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  381.195385][T16066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  381.289574][ T5642] Bluetooth: hci9: command tx timeout
[  381.302063][T16066] hsr_slave_0: entered promiscuous mode
[  381.304917][T16066] hsr_slave_1: entered promiscuous mode
[  381.307325][T16066] debugfs: 'hsr0' already exists in 'hsr'
[  381.307383][T16066] Cannot create hsr debugfs directory
[  381.448703][ T5642] Bluetooth: hci6: command tx timeout
[  381.448738][ T5642] Bluetooth: hci7: command tx timeout
[  381.448763][ T5642] Bluetooth: hci8: command tx timeout
[  381.448793][ T5642] Bluetooth: hci5: command tx timeout
[  381.852885][ T1719] block nbd0: Possible stuck request ffff8880285a7000: control (read@0,1024B). Runtime 30 seconds
[  381.853322][ T1719] block nbd0: Possible stuck request ffff8880285a71c0: control (read@1024,3072B). Runtime 30 seconds
[  383.368787][ T5648] Bluetooth: hci9: command tx timeout
[  383.528890][ T5648] Bluetooth: hci5: command tx timeout
[  383.528929][ T5648] Bluetooth: hci8: command tx timeout
[  383.528952][ T5648] Bluetooth: hci7: command tx timeout
[  383.528975][ T5648] Bluetooth: hci6: command tx timeout
[  385.449652][ T5642] Bluetooth: hci9: command tx timeout
[  385.609273][ T5642] Bluetooth: hci7: command tx timeout
[  385.609313][ T5642] Bluetooth: hci8: command tx timeout
[  387.538907][ T5648] Bluetooth: hci9: command tx timeout
[  399.130863][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  409.369810][    C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  411.930723][ T1719] block nbd0: Possible stuck request ffff8880285a7000: control (read@0,1024B). Runtime 60 seconds
[  411.930769][ T1719] block nbd0: Possible stuck request ffff8880285a71c0: control (read@1024,3072B). Runtime 60 seconds
[  414.531475][ T5000] udevd[5000]: worker [15346] /devices/virtual/block/nbd0 is taking a long time
[  435.114533][ T5642] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  435.115297][ T5642] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  435.116081][ T5642] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  435.117016][ T5642] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  435.117718][ T5642] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  435.428628][T16092] rxe_eth0 speed is unknown, defaulting to 1000
[  435.663248][ T5642] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  435.665586][ T5642] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  435.666302][ T5642] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  435.667297][ T5642] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  435.667886][ T5642] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  436.039279][T16092] bridge0: port 1(bridge_slave_0) entered blocking state
[  436.039508][T16092] bridge0: port 1(bridge_slave_0) entered disabled state
[  436.039650][T16092] bridge_slave_0: entered allmulticast mode
[  436.041352][T16092] bridge_slave_0: entered promiscuous mode
[  436.072637][T16092] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.072824][T16092] bridge0: port 2(bridge_slave_1) entered disabled state
[  436.073003][T16092] bridge_slave_1: entered allmulticast mode
[  436.075267][T16092] bridge_slave_1: entered promiscuous mode
[  436.133973][T16092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  436.137819][T16092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  436.191202][T16092] team0: Port device team_slave_0 added
[  436.194013][T16092] team0: Port device team_slave_1 added
[  436.194088][T16103] rxe_eth0 speed is unknown, defaulting to 1000
[  436.243956][T16092] batman_adv: batadv0: Adding interface: batadv_slave_0
[  436.243973][T16092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  436.244002][T16092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  436.246136][T16092] batman_adv: batadv0: Adding interface: batadv_slave_1
[  436.246151][T16092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  436.246180][T16092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  436.392068][T16092] hsr_slave_0: entered promiscuous mode
[  436.393259][T16092] hsr_slave_1: entered promiscuous mode
[  436.394170][T16092] debugfs: 'hsr0' already exists in 'hsr'
[  436.394191][T16092] Cannot create hsr debugfs directory
[  436.843866][T16103] bridge0: port 1(bridge_slave_0) entered blocking state
[  436.843997][T16103] bridge0: port 1(bridge_slave_0) entered disabled state
[  436.844093][T16103] bridge_slave_0: entered allmulticast mode
[  436.845281][T16103] bridge_slave_0: entered promiscuous mode
[  436.853293][T16103] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.853471][T16103] bridge0: port 2(bridge_slave_1) entered disabled state
[  436.853599][T16103] bridge_slave_1: entered allmulticast mode
[  436.855191][T16103] bridge_slave_1: entered promiscuous mode
[  436.934491][T16103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  436.945530][T16103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  436.990800][T16103] team0: Port device team_slave_0 added
[  436.993780][T16103] team0: Port device team_slave_1 added
[  437.038059][T16103] batman_adv: batadv0: Adding interface: batadv_slave_0
[  437.038078][T16103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  437.038108][T16103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  437.104227][T16103] batman_adv: batadv0: Adding interface: batadv_slave_1
[  437.104247][T16103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  437.104277][T16103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  437.208705][ T5642] Bluetooth: hci10: command tx timeout
[  437.231442][T16103] hsr_slave_0: entered promiscuous mode
[  437.234439][T16103] hsr_slave_1: entered promiscuous mode
[  437.235309][T16103] debugfs: 'hsr0' already exists in 'hsr'
[  437.235330][T16103] Cannot create hsr debugfs directory
[  437.304354][ T5648] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  437.311447][ T5648] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  437.316960][ T5648] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  437.321386][ T5648] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  437.323009][ T5648] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  437.688494][ T5648] Bluetooth: hci11: command tx timeout
[  437.731716][T16128] rxe_eth0 speed is unknown, defaulting to 1000
[  438.171454][ T5642] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  438.173053][ T5642] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  438.173897][ T5642] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  438.177303][ T5642] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  438.177964][ T5642] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  438.240127][T16128] bridge0: port 1(bridge_slave_0) entered blocking state
[  438.240321][T16128] bridge0: port 1(bridge_slave_0) entered disabled state
[  438.240462][T16128] bridge_slave_0: entered allmulticast mode
[  438.244099][T16128] bridge_slave_0: entered promiscuous mode
[  438.261396][T16128] bridge0: port 2(bridge_slave_1) entered blocking state
[  438.261877][T16128] bridge0: port 2(bridge_slave_1) entered disabled state
[  438.262969][T16128] bridge_slave_1: entered allmulticast mode
[  438.267691][T16128] bridge_slave_1: entered promiscuous mode
[  438.326144][T16128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  438.340212][T16128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  438.387785][T16128] team0: Port device team_slave_0 added
[  438.397156][T16128] team0: Port device team_slave_1 added
[  438.436634][T16128] batman_adv: batadv0: Adding interface: batadv_slave_0
[  438.436653][T16128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  438.436682][T16128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  438.483655][T16128] batman_adv: batadv0: Adding interface: batadv_slave_1
[  438.483673][T16128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  438.483703][T16128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  438.580144][T16128] hsr_slave_0: entered promiscuous mode
[  438.581018][T16128] hsr_slave_1: entered promiscuous mode
[  438.581565][T16128] debugfs: 'hsr0' already exists in 'hsr'
[  438.581586][T16128] Cannot create hsr debugfs directory
[  438.815435][T16145] rxe_eth0 speed is unknown, defaulting to 1000
[  439.266420][T16145] bridge0: port 1(bridge_slave_0) entered blocking state
[  439.266553][T16145] bridge0: port 1(bridge_slave_0) entered disabled state
[  439.266655][T16145] bridge_slave_0: entered allmulticast mode
[  439.267887][T16145] bridge_slave_0: entered promiscuous mode
[  439.276342][T16145] bridge0: port 2(bridge_slave_1) entered blocking state
[  439.276736][T16145] bridge0: port 2(bridge_slave_1) entered disabled state
[  439.277076][T16145] bridge_slave_1: entered allmulticast mode
[  439.282733][T16145] bridge_slave_1: entered promiscuous mode
[  439.290187][ T5648] Bluetooth: hci10: command tx timeout
[  439.343574][T16145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  439.346540][T16145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  439.395663][T16145] team0: Port device team_slave_0 added
[  439.397908][T16145] team0: Port device team_slave_1 added
[  439.429921][T16145] batman_adv: batadv0: Adding interface: batadv_slave_0
[  439.429943][T16145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  439.429963][T16145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  439.432002][T16145] batman_adv: batadv0: Adding interface: batadv_slave_1
[  439.432016][T16145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  439.432049][T16145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  439.473491][ T5648] Bluetooth: hci12: command tx timeout
[  439.557494][T16145] hsr_slave_0: entered promiscuous mode
[  439.561005][T16145] hsr_slave_1: entered promiscuous mode
[  439.563479][T16145] debugfs: 'hsr0' already exists in 'hsr'
[  439.563535][T16145] Cannot create hsr debugfs directory
[  439.768859][ T5648] Bluetooth: hci11: command tx timeout
[  440.130339][ T5642] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  440.132516][ T5642] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  440.133254][ T5642] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  440.134272][ T5642] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  440.134989][ T5642] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  440.259025][ T5648] Bluetooth: hci13: command tx timeout
[  440.460208][T16166] rxe_eth0 speed is unknown, defaulting to 1000
[  440.837214][T16166] bridge0: port 1(bridge_slave_0) entered blocking state
[  440.837344][T16166] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.837670][T16166] bridge_slave_0: entered allmulticast mode
[  440.842773][T16166] bridge_slave_0: entered promiscuous mode
[  440.852820][T16166] bridge0: port 2(bridge_slave_1) entered blocking state
[  440.853198][T16166] bridge0: port 2(bridge_slave_1) entered disabled state
[  440.853350][T16166] bridge_slave_1: entered allmulticast mode
[  440.864027][T16166] bridge_slave_1: entered promiscuous mode
[  440.916733][T16166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  440.923431][T16166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  440.957155][T16166] team0: Port device team_slave_0 added
[  440.964543][T16166] team0: Port device team_slave_1 added
[  440.991557][T16166] batman_adv: batadv0: Adding interface: batadv_slave_0
[  440.991575][T16166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  440.991607][T16166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  440.993239][T16166] batman_adv: batadv0: Adding interface: batadv_slave_1
[  440.993255][T16166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  440.993289][T16166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  441.114835][T16166] hsr_slave_0: entered promiscuous mode
[  441.115907][T16166] hsr_slave_1: entered promiscuous mode
[  441.116457][T16166] debugfs: 'hsr0' already exists in 'hsr'
[  441.116478][T16166] Cannot create hsr debugfs directory
[  441.368828][ T5648] Bluetooth: hci10: command tx timeout
[  441.538836][ T5648] Bluetooth: hci12: command tx timeout
[  441.848452][ T5648] Bluetooth: hci11: command tx timeout
[  442.010049][ T1719] block nbd0: Possible stuck request ffff8880285a7000: control (read@0,1024B). Runtime 90 seconds
[  442.010085][ T1719] block nbd0: Possible stuck request ffff8880285a71c0: control (read@1024,3072B). Runtime 90 seconds
[  442.248706][ T5648] Bluetooth: hci14: command tx timeout
[  442.328556][ T5648] Bluetooth: hci13: command tx timeout
[  443.458590][ T5648] Bluetooth: hci10: command tx timeout
[  443.611753][ T5648] Bluetooth: hci12: command tx timeout
[  443.928616][ T5648] Bluetooth: hci11: command tx timeout
[  444.328534][ T5648] Bluetooth: hci14: command tx timeout
[  444.408678][ T5648] Bluetooth: hci13: command tx timeout
[  445.698776][ T5648] Bluetooth: hci12: command tx timeout
[  446.408404][ T5648] Bluetooth: hci14: command tx timeout
[  446.489119][ T5642] Bluetooth: hci13: command tx timeout
[  448.488585][ T5648] Bluetooth: hci14: command tx timeout
[  472.094141][ T1719] block nbd0: Possible stuck request ffff8880285a7000: control (read@0,1024B). Runtime 120 seconds
[  472.094177][ T1719] block nbd0: Possible stuck request ffff8880285a71c0: control (read@1024,3072B). Runtime 120 seconds
[  495.192066][ T5642] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  495.193049][ T5642] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  495.193950][ T5642] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  495.194892][ T5642] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  495.195573][ T5642] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  495.507516][T16189] rxe_eth0 speed is unknown, defaulting to 1000
[  495.867871][T16189] bridge0: port 1(bridge_slave_0) entered blocking state
[  495.868001][T16189] bridge0: port 1(bridge_slave_0) entered disabled state
[  495.868101][T16189] bridge_slave_0: entered allmulticast mode
[  495.872921][T16189] bridge_slave_0: entered promiscuous mode
[  495.882760][T16189] bridge0: port 2(bridge_slave_1) entered blocking state
[  495.882944][T16189] bridge0: port 2(bridge_slave_1) entered disabled state
[  495.883782][T16189] bridge_slave_1: entered allmulticast mode
[  495.889054][T16189] bridge_slave_1: entered promiscuous mode
[  495.941721][T16189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  495.944540][T16189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  495.982649][T16189] team0: Port device team_slave_0 added
[  495.984899][T16189] team0: Port device team_slave_1 added
[  496.020029][T16189] batman_adv: batadv0: Adding interface: batadv_slave_0
[  496.020046][T16189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  496.020078][T16189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  496.021714][T16189] batman_adv: batadv0: Adding interface: batadv_slave_1
[  496.021729][T16189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  496.021762][T16189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  496.138882][T16189] hsr_slave_0: entered promiscuous mode
[  496.140100][T16189] hsr_slave_1: entered promiscuous mode
[  496.140898][T16189] debugfs: 'hsr0' already exists in 'hsr'
[  496.140921][T16189] Cannot create hsr debugfs directory
[  496.302035][ T5642] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  496.305197][ T5642] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  496.308009][ T5642] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  496.316697][ T5642] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  496.331253][ T5642] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  496.734549][T16207] rxe_eth0 speed is unknown, defaulting to 1000
[  497.089849][T16207] bridge0: port 1(bridge_slave_0) entered blocking state
[  497.089996][T16207] bridge0: port 1(bridge_slave_0) entered disabled state
[  497.090096][T16207] bridge_slave_0: entered allmulticast mode
[  497.091304][T16207] bridge_slave_0: entered promiscuous mode
[  497.101914][T16207] bridge0: port 2(bridge_slave_1) entered blocking state
[  497.102222][T16207] bridge0: port 2(bridge_slave_1) entered disabled state
[  497.102617][T16207] bridge_slave_1: entered allmulticast mode
[  497.112791][T16207] bridge_slave_1: entered promiscuous mode
[  497.167366][T16207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  497.179558][T16207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  497.209868][T16207] team0: Port device team_slave_0 added
[  497.214316][T16207] team0: Port device team_slave_1 added
[  497.245838][T16207] batman_adv: batadv0: Adding interface: batadv_slave_0
[  497.245855][T16207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  497.245887][T16207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  497.247296][T16207] batman_adv: batadv0: Adding interface: batadv_slave_1
[  497.247311][T16207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  497.247359][T16207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  497.292688][ T5635] Bluetooth: hci15: command tx timeout
[  497.360881][T16207] hsr_slave_0: entered promiscuous mode
[  497.361640][T16207] hsr_slave_1: entered promiscuous mode
[  497.362176][T16207] debugfs: 'hsr0' already exists in 'hsr'
[  497.362207][T16207] Cannot create hsr debugfs directory
[  498.240430][T16210] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  498.242147][T16210] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  498.242918][T16210] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  498.243899][T16210] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  498.244515][T16210] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  498.286000][ T5635] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  498.316383][T16228] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  498.321692][T16228] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  498.336109][T16228] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  498.350886][T16232] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  498.408821][T16210] Bluetooth: hci16: command tx timeout
[  498.489332][T16210] Bluetooth: hci6: command 0x0406 tx timeout
[  498.489447][T16210] Bluetooth: hci5: command 0x0406 tx timeout
[  498.770337][T16227] rxe_eth0 speed is unknown, defaulting to 1000
[  498.940094][T16230] rxe_eth0 speed is unknown, defaulting to 1000
[  499.285422][T16227] bridge0: port 1(bridge_slave_0) entered blocking state
[  499.285586][T16227] bridge0: port 1(bridge_slave_0) entered disabled state
[  499.285687][T16227] bridge_slave_0: entered allmulticast mode
[  499.286941][T16227] bridge_slave_0: entered promiscuous mode
[  499.320667][T16227] bridge0: port 2(bridge_slave_1) entered blocking state
[  499.320768][T16227] bridge0: port 2(bridge_slave_1) entered disabled state
[  499.320891][T16227] bridge_slave_1: entered allmulticast mode
[  499.322916][T16227] bridge_slave_1: entered promiscuous mode
[  499.378656][ T5648] Bluetooth: hci15: command tx timeout
[  499.397945][T16227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  499.412266][T16227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  499.454705][T16227] team0: Port device team_slave_0 added
[  499.457799][T16227] team0: Port device team_slave_1 added
[  499.499721][T16227] batman_adv: batadv0: Adding interface: batadv_slave_0
[  499.499740][T16227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  499.499769][T16227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  499.501944][T16227] batman_adv: batadv0: Adding interface: batadv_slave_1
[  499.501960][T16227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  499.501989][T16227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  499.639427][T16227] hsr_slave_0: entered promiscuous mode
[  499.640264][T16227] hsr_slave_1: entered promiscuous mode
[  499.640850][T16227] debugfs: 'hsr0' already exists in 'hsr'
[  499.640871][T16227] Cannot create hsr debugfs directory
[  499.759075][T16230] bridge0: port 1(bridge_slave_0) entered blocking state
[  499.759197][T16230] bridge0: port 1(bridge_slave_0) entered disabled state
[  499.759339][T16230] bridge_slave_0: entered allmulticast mode
[  499.760737][T16230] bridge_slave_0: entered promiscuous mode
[  499.773287][T16230] bridge0: port 2(bridge_slave_1) entered blocking state
[  499.773472][T16230] bridge0: port 2(bridge_slave_1) entered disabled state
[  499.773750][T16230] bridge_slave_1: entered allmulticast mode
[  499.779846][T16230] bridge_slave_1: entered promiscuous mode
[  499.867842][T16230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  499.889367][T16230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  499.942372][T16230] team0: Port device team_slave_0 added
[  499.956699][T16230] team0: Port device team_slave_1 added
[  500.001673][T16230] batman_adv: batadv0: Adding interface: batadv_slave_0
[  500.001692][T16230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  500.001716][T16230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  500.003496][T16230] batman_adv: batadv0: Adding interface: batadv_slave_1
[  500.003510][T16230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  500.003538][T16230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  500.129949][T16230] hsr_slave_0: entered promiscuous mode
[  500.131518][T16230] hsr_slave_1: entered promiscuous mode
[  500.132363][T16230] debugfs: 'hsr0' already exists in 'hsr'
[  500.132383][T16230] Cannot create hsr debugfs directory
[  500.252019][ T5642] Bluetooth: hci17: command tx timeout
[  500.348634][ T5648] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1
[  500.355869][ T5648] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9
[  500.358834][ T5648] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9
[  500.361315][ T5648] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4
[  500.362965][ T5648] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2
[  500.408896][ T5648] Bluetooth: hci18: command tx timeout
[  500.491551][ T5648] Bluetooth: hci16: command tx timeout
[  500.789557][T16265] rxe_eth0 speed is unknown, defaulting to 1000
[  501.199680][T16265] bridge0: port 1(bridge_slave_0) entered blocking state
[  501.199824][T16265] bridge0: port 1(bridge_slave_0) entered disabled state
[  501.199928][T16265] bridge_slave_0: entered allmulticast mode
[  501.201199][T16265] bridge_slave_0: entered promiscuous mode
[  501.208960][T16265] bridge0: port 2(bridge_slave_1) entered blocking state
[  501.209237][T16265] bridge0: port 2(bridge_slave_1) entered disabled state
[  501.209454][T16265] bridge_slave_1: entered allmulticast mode
[  501.210970][T16265] bridge_slave_1: entered promiscuous mode
[  501.280771][T16265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  501.284133][T16265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  501.327034][T16265] team0: Port device team_slave_0 added
[  501.335056][T16265] team0: Port device team_slave_1 added
[  501.361251][T16265] batman_adv: batadv0: Adding interface: batadv_slave_0
[  501.361267][T16265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  501.361299][T16265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  501.362755][T16265] batman_adv: batadv0: Adding interface: batadv_slave_1
[  501.362769][T16265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  501.362802][T16265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  501.460479][ T5648] Bluetooth: hci15: command tx timeout
[  501.476865][T16265] hsr_slave_0: entered promiscuous mode
[  501.477719][T16265] hsr_slave_1: entered promiscuous mode
[  501.479468][T16265] debugfs: 'hsr0' already exists in 'hsr'
[  501.479519][T16265] Cannot create hsr debugfs directory
[  502.171659][ T1719] block nbd0: Possible stuck request ffff8880285a7000: control (read@0,1024B). Runtime 150 seconds
[  502.171714][ T1719] block nbd0: Possible stuck request ffff8880285a71c0: control (read@1024,3072B). Runtime 150 seconds
[  502.328410][ T5648] Bluetooth: hci17: command tx timeout
[  502.408622][ T5648] Bluetooth: hci19: command tx timeout
[  502.488426][ T5648] Bluetooth: hci18: command tx timeout
[  502.568524][ T5648] Bluetooth: hci16: command tx timeout
[  503.528487][ T5648] Bluetooth: hci15: command tx timeout
[  503.609664][ T5648] Bluetooth: hci9: command 0x0406 tx timeout
[  503.609732][ T5648] Bluetooth: hci8: command 0x0406 tx timeout
[  503.609779][ T5648] Bluetooth: hci7: command 0x0406 tx timeout
[  504.408651][T16232] Bluetooth: hci17: command tx timeout
[  504.488576][T16232] Bluetooth: hci19: command tx timeout
[  504.568512][T16232] Bluetooth: hci18: command tx timeout
[  504.648467][T16232] Bluetooth: hci16: command tx timeout
[  506.489577][T16232] Bluetooth: hci17: command tx timeout
[  506.568542][T16232] Bluetooth: hci19: command tx timeout
[  506.649217][T16232] Bluetooth: hci18: command tx timeout
[  508.569480][   T34] INFO: task syz.3.2373:15885 blocked for more than 143 seconds.
[  508.569509][   T34]       Not tainted syzkaller #0
[  508.569521][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  508.569533][   T34] task:syz.3.2373      stat
** replaying previous printk message **
[  508.569533][   T34] task:syz.3.2373      state:D stack:25320 pid:15885 tgid:15883 ppid:5638   task_flags:0x480140 flags:0x00080002
[  508.569611][   T34] Call Trace:
[  508.569619][   T34]  <TASK>
[  508.569633][   T34]  __schedule+0x17dd/0x5830
[  508.569664][   T34]  ? __lock_acquire+0x747/0x2de0
[  508.569724][   T34]  ? __pfx___schedule+0x10/0x10
[  508.569744][   T34]  ? lock_acquire+0x115/0x350
[  508.569784][   T34]  ? schedule+0x90/0x2b0
[  508.569811][   T34]  schedule+0x164/0x2b0
[  508.569838][   T34]  blk_mq_freeze_queue_wait+0xfc/0x180
[  508.569877][   T34]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[  508.569909][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[  508.569974][   T34]  queue_limits_commit_update_frozen+0x55/0xd0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  508.570014][   T34]  nbd_set_size+0x4c5/0x7d0
[  508.570042][   T34]  ? __pfx_nbd_set_size+0x10/0x10
[  508.570089][   T34]  ? nla_memcpy+0x5b/0xc0
[  508.570132][   T34]  nbd_genl_reconfigure+0x7e1/0x1040
[  508.570183][   T34]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  508.570222][   T34]  ? __kmalloc_noprof+0x387/0x710
[  508.570253][   T34]  ? __nla_parse+0x40/0x60
[  508.570288][   T34]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  508.570326][   T34]  genl_family_rcv_msg_doit+0x233/0x340
[  508.570404][   T34]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  508.570443][   T34]  ? __lock_acquire+0x747/0x2de0
[  508.570484][   T34]  genl_rcv_msg+0x614/0x7a0
[  508.570517][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  508.570541][   T34]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  508.570595][   T34]  netlink_rcv_skb+0x226/0x4a0
[  508.570627][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  508.570655][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  508.570826][   T34]  ? down_read+0x2b9/0x320
[  508.570867][   T34]  genl_rcv+0x28/0x40
[  508.570890][   T34]  netlink_unicast+0x8ef/0xa80
[  508.570940][   T34]  netlink_sendmsg+0x7f0/0xb20
[  508.570981][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  508.571019][   T34]  ? aa_sock_msg_perm+0x144/0x210
[  508.571048][   T34]  ? apparmor_socket_sendmsg+0x98/0x360
[  508.571083][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  508.571115][   T34]  sock_sendmsg_nosec+0x14e/0x190
[  508.571150][   T34]  ____sys_sendmsg+0x54e/0x850
[  508.571182][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  508.571218][   T34]  ? import_iovec+0x73/0xa0
[  508.571251][   T34]  ___sys_sendmsg+0x2a5/0x360
[  508.571273][   T34]  ? __lock_acquire+0x747/0x2de0
[  508.571307][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  508.571359][   T34]  ? futex_wake+0x51b/0x5f0
[  508.571426][   T34]  ? __fget_files+0x3a2/0x420
[  508.571452][   T34]  ? __fget_files+0x2a/0x420
[  508.571491][   T34]  __x64_sys_sendmsg+0x1b1/0x290
[  508.571519][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  508.571570][   T34]  do_syscall_64+0x166/0x520
[  508.571595][   T34]  ? trace_irq_disable+0x3b/0x140
[  508.571625][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.571649][   T34]  ? clear_bhb_loop+0x70/0xc0
[  508.571677][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.571707][   T34] RIP: 0033:0x7f8a8a19fb19
[  508.571728][   T34] RSP: 002b:00007f8a8afad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  508.571752][   T34] RAX: ffffffffffffffda RBX: 00007f8a8a425fa0 RCX: 00007f8a8a19fb19
[  508.571769][   T34] RDX: 0000000000004004 RSI: 0000200000000bc0 RDI: 000000000000000c
[  508.571784][   T34] RBP: 00007f8a8a237b70 R08: 0000000000000000 R09: 0000000000000000
[  508.571799][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  508.571813][   T34] R13: 00007f8a8a426038 R14: 00007f8a8a425fa0 R15: 00007ffe9a3ba518
[  508.571851][   T34]  </TASK>
[  508.571866][   T34] INFO: task syz.3.2373:15889 blocked for more than 143 seconds.
[  508.571882][   T34]       Not tainted syzkaller #0
[  508.571893][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  508.571903][   T34] task:syz.3.2373      state:D stack:27944 pid:15889 tgid:15883 ppid:5638   task_flags:0x400140 flags:0x00080002
[  508.571967][   T34] Call Trace:
[  508.571974][   T34]  <TASK>
[  508.571988][   T34]  __schedule+0x17dd/0x5830
[  508.572046][   T34]  ? __pfx___schedule+0x10/0x10
[  508.572081][   T34]  ? schedule+0x90/0x2b0
[  508.572108][   T34]  schedule+0x164/0x2b0
[  508.572134][   T34]  schedule_preempt_disabled+0x13/0x30
[  508.572157][   T34]  __mutex_lock+0x7c4/0x15a0
[  508.572189][   T34]  ? __mutex_lock+0x5cd/0x15a0
[  508.572220][   T34]  ? genl_rcv_msg+0x10b/0x7a0
[  508.572247][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  508.572306][   T34]  ? __lock_acquire+0x747/0x2de0
[  508.572362][   T34]  ? radix_tree_lookup+0x240/0x290
[  508.572392][   T34]  genl_rcv_msg+0x10b/0x7a0
[  508.572424][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  508.572469][   T34]  netlink_rcv_skb+0x226/0x4a0
[  508.572502][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  508.572529][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  508.572579][   T34]  ? down_read+0x2b9/0x320
[  508.572612][   T34]  genl_rcv+0x28/0x40
[  508.572634][   T34]  netlink_unicast+0x8ef/0xa80
[  508.572684][   T34]  netlink_sendmsg+0x7f0/0xb20
[  508.572724][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  508.572761][   T34]  ? aa_sock_msg_perm+0x144/0x210
[  508.572789][   T34]  ? apparmor_socket_sendmsg+0x98/0x360
[  508.572825][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  508.572856][   T34]  sock_sendmsg_nosec+0x14e/0x190
[  508.572896][   T34]  __sys_sendto+0x408/0x5a0
[  508.572938][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  508.573007][   T34]  ? do_user_addr_fault+0xd3f/0x1480
[  508.573044][   T34]  __x64_sys_sendto+0xde/0x100
[  508.573083][   T34]  do_syscall_64+0x166/0x520
[  508.573108][   T34]  ? trace_irq_disable+0x3b/0x140
[  508.573139][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.573162][   T34]  ? clear_bhb_loop+0x70/0xc0
[  508.573190][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.573213][   T34] RIP: 0033:0x7f8a8a16034e
[  508.573233][   T34] RSP: 002b:00007f8a883f4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  508.573256][   T34] RAX: ffffffffffffffda RBX: 00007f8a883f66c0 RCX: 00007f8a8a16034e
[  508.573273][   T34] RDX: 0000000000000028 RSI: 00007f8a883f5000 RDI: 000000000000000c
[  508.573288][   T34] RBP: 0000000000000000 R08: 00007f8a883f4f04 R09: 000000000000000c
[  508.573303][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c
[  508.573317][   T34] R13: 00007f8a883f4f58 R14: 00007f8a883f5000 R15: 0000000000000000
[  508.573377][   T34]  </TASK>
[  508.573386][   T34] INFO: task syz.3.2373:15897 blocked for more than 143 seconds.
[  508.573403][   T34]       Not tainted syzkaller #0
[  508.573414][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  508.573424][   T34] task:syz.3.2373      state:D stack:28808 pid:15897 tgid:15883 ppid:5638   task_flags:0x400040 flags:0x00080002
[  508.573488][   T34] Call Trace:
[  508.573496][   T34]  <TASK>
[  508.573510][   T34]  __schedule+0x17dd/0x5830
[  508.573565][   T34]  ? __pfx___schedule+0x10/0x10
[  508.573599][   T34]  ? schedule+0x90/0x2b0
[  508.573630][   T34]  schedule+0x164/0x2b0
[  508.573649][   T34]  schedule_preempt_disabled+0x13/0x30
[  508.573665][   T34]  __mutex_lock+0x7c4/0x15a0
[  508.573687][   T34]  ? __mutex_lock+0x5cd/0x15a0
[  508.573709][   T34]  ? genl_rcv_msg+0x10b/0x7a0
[  508.573727][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  508.573751][   T34]  ? __lock_acquire+0x747/0x2de0
[  508.573774][   T34]  ? radix_tree_lookup+0x240/0x290
[  508.573794][   T34]  genl_rcv_msg+0x10b/0x7a0
[  508.573815][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  508.573846][   T34]  netlink_rcv_skb+0x226/0x4a0
[  508.573874][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  508.573893][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  508.573929][   T34]  ? down_read+0x2b9/0x320
[  508.573953][   T34]  genl_rcv+0x28/0x40
[  508.573968][   T34]  netlink_unicast+0x8ef/0xa80
[  508.574003][   T34]  netlink_sendmsg+0x7f0/0xb20
[  508.574032][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  508.574058][   T34]  ? aa_sock_msg_perm+0x144/0x210
[  508.574078][   T34]  ? apparmor_socket_sendmsg+0x98/0x360
[  508.574103][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  508.574126][   T34]  sock_sendmsg_nosec+0x14e/0x190
[  508.574150][   T34]  __sys_sendto+0x408/0x5a0
[  508.574179][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  508.574228][   T34]  ? do_user_addr_fault+0xd3f/0x1480
[  508.574252][   T34]  __x64_sys_sendto+0xde/0x100
[  508.574280][   T34]  do_syscall_64+0x166/0x520
[  508.574298][   T34]  ? trace_irq_disable+0x3b/0x140
[  508.574320][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.574355][   T34]  ? clear_bhb_loop+0x70/0xc0
[  508.574379][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.574394][   T34] RIP: 0033:0x7f8a8a16034e
[  508.574408][   T34] RSP: 002b:00007f8a883d3e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  508.574424][   T34] RAX: ffffffffffffffda RBX: 00007f8a883d56c0 RCX: 00007f8a8a16034e
[  508.574435][   T34] RDX: 0000000000000028 RSI: 00007f8a883d4000 RDI: 000000000000000c
[  508.574446][   T34] RBP: 0000000000000000 R08: 00007f8a883d3f04 R09: 000000000000000c
[  508.574456][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c
[  508.574465][   T34] R13: 00007f8a883d3f58 R14: 00007f8a883d4000 R15: 0000000000000000
[  508.574491][   T34]  </TASK>
[  508.574497][   T34] INFO: task syz.1.2375:15904 blocked for more than 143 seconds.
[  508.574509][   T34]       Not tainted syzkaller #0
[  508.574517][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  508.574524][   T34] task:syz.1.2375      state:D stack:26832 pid:15904 tgid:15903 ppid:5631   task_flags:0x400140 flags:0x00080002
[  508.574570][   T34] Call Trace:
[  508.574576][   T34]  <TASK>
[  508.574585][   T34]  __schedule+0x17dd/0x5830
[  508.574624][   T34]  ? __pfx___schedule+0x10/0x10
[  508.574648][   T34]  ? schedule+0x90/0x2b0
[  508.574666][   T34]  schedule+0x164/0x2b0
[  508.574684][   T34]  schedule_preempt_disabled+0x13/0x30
[  508.574700][   T34]  __mutex_lock+0x7c4/0x15a0
[  508.574722][   T34]  ? __mutex_lock+0x5cd/0x15a0
[  508.574751][   T34]  ? genl_rcv_msg+0x10b/0x7a0
[  508.574769][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  508.574789][   T34]  ? __dev_queue_xmit+0x29b/0x3920
[  508.574817][   T34]  ? radix_tree_lookup+0x240/0x290
[  508.574837][   T34]  genl_rcv_msg+0x10b/0x7a0
[  508.574863][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  508.574895][   T34]  netlink_rcv_skb+0x226/0x4a0
[  508.574918][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  508.574937][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  508.574972][   T34]  ? down_read+0x2b9/0x320
[  508.574996][   T34]  genl_rcv+0x28/0x40
[  508.575011][   T34]  netlink_unicast+0x8ef/0xa80
[  508.575049][   T34]  netlink_sendmsg+0x7f0/0xb20
[  508.575078][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  508.575105][   T34]  ? aa_sock_msg_perm+0x144/0x210
[  508.575125][   T34]  ? apparmor_socket_sendmsg+0x98/0x360
[  508.575151][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  508.575174][   T34]  sock_sendmsg_nosec+0x14e/0x190
[  508.575198][   T34]  __sys_sendto+0x408/0x5a0
[  508.575228][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  508.575276][   T34]  ? do_user_addr_fault+0xd3f/0x1480
[  508.575301][   T34]  __x64_sys_sendto+0xde/0x100
[  508.575347][   T34]  do_syscall_64+0x166/0x520
[  508.575366][   T34]  ? trace_irq_disable+0x3b/0x140
[  508.575388][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.575404][   T34]  ? clear_bhb_loop+0x70/0xc0
[  508.575425][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.575441][   T34] RIP: 0033:0x7f6d45b6034e
[  508.575453][   T34] RSP: 002b:00007f6d46a7ce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  508.575469][   T34] RAX: ffffffffffffffda RBX: 00007f6d46a7e6c0 RCX: 00007f6d45b6034e
[  508.575481][   T34] RDX: 0000000000000020 RSI: 00007f6d46a7d000 RDI: 0000000000000004
[  508.575491][   T34] RBP: 0000000000000000 R08: 00007f6d46a7cf04 R09: 000000000000000c
[  508.575501][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  508.575511][   T34] R13: 00007f6d46a7cf58 R14: 00007f6d46a7d000 R15: 0000000000000000
[  508.575536][   T34]  </TASK>
[  508.575543][   T34] INFO: task syz.4.2385:15949 blocked for more than 143 seconds.
[  508.575554][   T34]       Not tainted syzkaller #0
[  508.575562][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  508.575569][   T34] task:syz.4.2385      state:D stack:28456 pid:15949 tgid:15948 ppid:5632   task_flags:0x400140 flags:0x00080002
[  508.575618][   T34] Call Trace:
[  508.575623][   T34]  <TASK>
[  508.575632][   T34]  __schedule+0x17dd/0x5830
[  508.575673][   T34]  ? __pfx___schedule+0x10/0x10
[  508.575698][   T34]  ? schedule+0x90/0x2b0
[  508.575717][   T34]  schedule+0x164/0x2b0
[  508.575735][   T34]  schedule_preempt_disabled+0x13/0x30
[  508.575751][   T34]  __mutex_lock+0x7c4/0x15a0
[  508.575774][   T34]  ? __mutex_lock+0x5cd/0x15a0
[  508.575796][   T34]  ? genl_rcv_msg+0x10b/0x7a0
[  508.575816][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  508.575840][   T34]  ? __lock_acquire+0x747/0x2de0
[  508.575870][   T34]  ? radix_tree_lookup+0x240/0x290
[  508.575890][   T34]  genl_rcv_msg+0x10b/0x7a0
[  508.575912][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  508.575943][   T34]  netlink_rcv_skb+0x226/0x4a0
[  508.575967][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  508.575986][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  508.576022][   T34]  ? down_read+0x2b9/0x320
[  508.576046][   T34]  genl_rcv+0x28/0x40
[  508.576062][   T34]  netlink_unicast+0x8ef/0xa80
[  508.576097][   T34]  netlink_sendmsg+0x7f0/0xb20
[  508.576126][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  508.576153][   T34]  ? aa_sock_msg_perm+0x144/0x210
[  508.576173][   T34]  ? apparmor_socket_sendmsg+0x98/0x360
[  508.576199][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  508.576222][   T34]  sock_sendmsg_nosec+0x14e/0x190
[  508.576246][   T34]  __sys_sendto+0x408/0x5a0
[  508.576276][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  508.576324][   T34]  ? do_user_addr_fault+0xd3f/0x1480
[  508.576365][   T34]  __x64_sys_sendto+0xde/0x100
[  508.576394][   T34]  do_syscall_64+0x166/0x520
[  508.576412][   T34]  ? trace_irq_disable+0x3b/0x140
[  508.576434][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.576451][   T34]  ? clear_bhb_loop+0x70/0xc0
[  508.576471][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.576487][   T34] RIP: 0033:0x7fd6ba76034e
[  508.576500][   T34] RSP: 002b:00007fd6bb5eee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  508.576515][   T34] RAX: ffffffffffffffda RBX: 00007fd6bb5f06c0 RCX: 00007fd6ba76034e
[  508.576527][   T34] RDX: 0000000000000024 RSI: 00007fd6bb5ef000 RDI: 0000000000000004
[  508.576537][   T34] RBP: 0000000000000000 R08: 00007fd6bb5eef04 R09: 000000000000000c
[  508.576547][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  508.576557][   T34] R13: 00007fd6bb5eef58 R14: 00007fd6bb5ef000 R15: 0000000000000000
[  508.576582][   T34]  </TASK>
[  508.576588][   T34] INFO: task syz.4.2385:15958 blocked for more than 143 seconds.
[  508.576599][   T34]       Not tainted syzkaller #0
[  508.576607][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  508.576613][   T34] task:syz.4.2385      state:D stack:28584 pid:15958 tgid:15948 ppid:5632   task_flags:0x400140 flags:0x00080002
[  508.576662][   T34] Call Trace:
[  508.576666][   T34]  <TASK>
[  508.576675][   T34]  __schedule+0x17dd/0x5830
[  508.576714][   T34]  ? __pfx___schedule+0x10/0x10
[  508.576738][   T34]  ? schedule+0x90/0x2b0
[  508.576757][   T34]  schedule+0x164/0x2b0
[  508.576775][   T34]  schedule_preempt_disabled+0x13/0x30
[  508.576792][   T34]  __mutex_lock+0x7c4/0x15a0
[  508.576814][   T34]  ? __mutex_lock+0x5cd/0x15a0
[  508.576837][   T34]  ? genl_rcv_msg+0x10b/0x7a0
[  508.576855][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  508.576884][   T34]  ? __lock_acquire+0x747/0x2de0
[  508.576909][   T34]  ? radix_tree_lookup+0x240/0x290
[  508.576928][   T34]  genl_rcv_msg+0x10b/0x7a0
[  508.576951][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  508.576982][   T34]  netlink_rcv_skb+0x226/0x4a0
[  508.577005][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  508.577024][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  508.577060][   T34]  ? down_read+0x2b9/0x320
[  508.577083][   T34]  genl_rcv+0x28/0x40
[  508.577099][   T34]  netlink_unicast+0x8ef/0xa80
[  508.577133][   T34]  netlink_sendmsg+0x7f0/0xb20
[  508.577162][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  508.577189][   T34]  ? aa_sock_msg_perm+0x144/0x210
[  508.577208][   T34]  ? apparmor_socket_sendmsg+0x98/0x360
[  508.577234][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  508.577257][   T34]  sock_sendmsg_nosec+0x14e/0x190
[  508.577281][   T34]  __sys_sendto+0x408/0x5a0
[  508.577310][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  508.577375][   T34]  ? do_user_addr_fault+0xd3f/0x1480
[  508.577401][   T34]  __x64_sys_sendto+0xde/0x100
[  508.577429][   T34]  do_syscall_64+0x166/0x520
[  508.577447][   T34]  ? trace_irq_disable+0x3b/0x140
[  508.577469][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.577486][   T34]  ? clear_bhb_loop+0x70/0xc0
[  508.577507][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.577523][   T34] RIP: 0033:0x7fd6ba76034e
[  508.577536][   T34] RSP: 002b:00007fd6bb5ace88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  508.577551][   T34] RAX: ffffffffffffffda RBX: 00007fd6bb5ae6c0 RCX: 00007fd6ba76034e
[  508.577562][   T34] RDX: 0000000000000028 RSI: 00007fd6bb5ad000 RDI: 0000000000000005
[  508.577572][   T34] RBP: 0000000000000000 R08: 00007fd6bb5acf04 R09: 000000000000000c
[  508.577582][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  508.577592][   T34] R13: 00007fd6bb5acf58 R14: 00007fd6bb5ad000 R15: 0000000000000000
[  508.577617][   T34]  </TASK>
[  508.577623][   T34] INFO: task syz.4.2385:15962 blocked for more than 143 seconds.
[  508.577634][   T34]       Not tainted syzkaller #0
[  508.577642][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  508.577648][   T34] task:syz.4.2385      state:D stack:28808 pid:15962 tgid:15948 ppid:5632   task_flags:0x400040 flags:0x00080002
[  508.577707][   T34] Call Trace:
[  508.577713][   T34]  <TASK>
[  508.577721][   T34]  __schedule+0x17dd/0x5830
[  508.577759][   T34]  ? __pfx___schedule+0x10/0x10
[  508.577782][   T34]  ? schedule+0x90/0x2b0
[  508.577800][   T34]  schedule+0x164/0x2b0
[  508.577817][   T34]  schedule_preempt_disabled+0x13/0x30
[  508.577833][   T34]  __mutex_lock+0x7c4/0x15a0
[  508.577854][   T34]  ? __mutex_lock+0x5cd/0x15a0
[  508.577880][   T34]  ? genl_rcv_msg+0x10b/0x7a0
[  508.577899][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  508.577922][   T34]  ? __lock_acquire+0x747/0x2de0
[  508.577945][   T34]  ? radix_tree_lookup+0x240/0x290
[  508.577964][   T34]  genl_rcv_msg+0x10b/0x7a0
[  508.577986][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  508.578016][   T34]  netlink_rcv_skb+0x226/0x4a0
[  508.578038][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  508.578057][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  508.578091][   T34]  ? down_read+0x2b9/0x320
[  508.578114][   T34]  genl_rcv+0x28/0x40
[  508.578129][   T34]  netlink_unicast+0x8ef/0xa80
[  508.578387][   T34]  netlink_sendmsg+0x7f0/0xb20
[  508.578431][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  508.578468][   T34]  ? aa_sock_msg_perm+0x144/0x210
[  508.578497][   T34]  ? apparmor_socket_sendmsg+0x98/0x360
[  508.578532][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  508.578564][   T34]  sock_sendmsg_nosec+0x14e/0x190
[  508.578597][   T34]  __sys_sendto+0x408/0x5a0
[  508.578639][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  508.578704][   T34]  ? fd_install+0x95/0x4e0
[  508.578740][   T34]  __x64_sys_sendto+0xde/0x100
[  508.578778][   T34]  do_syscall_64+0x166/0x520
[  508.578802][   T34]  ? trace_irq_disable+0x3b/0x140
[  508.578833][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.578857][   T34]  ? clear_bhb_loop+0x70/0xc0
[  508.578892][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.578915][   T34] RIP: 0033:0x7fd6ba76034e
[  508.578935][   T34] RSP: 002b:00007fd6bb58be88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  508.578958][   T34] RAX: ffffffffffffffda RBX: 00007fd6bb58d6c0 RCX: 00007fd6ba76034e
[  508.578975][   T34] RDX: 0000000000000020 RSI: 00007fd6bb58c000 RDI: 0000000000000007
[  508.578989][   T34] RBP: 0000000000000000 R08: 00007fd6bb58bf04 R09: 000000000000000c
[  508.579003][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  508.579016][   T34] R13: 00007fd6bb58bf58 R14: 00007fd6bb58c000 R15: 0000000000000000
[  508.579050][   T34]  </TASK>
[  508.579059][   T34] INFO: task syz.0.2386:15951 blocked for more than 143 seconds.
[  508.579075][   T34]       Not tainted syzkaller #0
[  508.579085][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  508.579095][   T34] task:syz.0.2386      state:D stack:25704 pid:15951 tgid:15950 ppid:5634   task_flags:0x400140 flags:0x00080002
[  508.579156][   T34] Call Trace:
[  508.579164][   T34]  <TASK>
[  508.579176][   T34]  __schedule+0x17dd/0x5830
[  508.579233][   T34]  ? __pfx___schedule+0x10/0x10
[  508.579269][   T34]  ? schedule+0x90/0x2b0
[  508.579296][   T34]  schedule+0x164/0x2b0
[  508.579322][   T34]  schedule_preempt_disabled+0x13/0x30
[  508.579373][   T34]  __mutex_lock+0x7c4/0x15a0
[  508.579406][   T34]  ? __mutex_lock+0x5cd/0x15a0
[  508.579437][   T34]  ? genl_rcv_msg+0x10b/0x7a0
[  508.579463][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  508.579593][   T34]  ? __lock_acquire+0x747/0x2de0
[  508.579677][   T34]  ? radix_tree_lookup+0x240/0x290
[  508.579748][   T34]  genl_rcv_msg+0x10b/0x7a0
[  508.579889][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  508.579992][   T34]  netlink_rcv_skb+0x226/0x4a0
[  508.580072][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  508.580139][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  508.580260][   T34]  ? down_read+0x2b9/0x320
[  508.580381][   T34]  genl_rcv+0x28/0x40
[  508.580440][   T34]  netlink_unicast+0x8ef/0xa80
[  508.580559][   T34]  netlink_sendmsg+0x7f0/0xb20
[  508.580661][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  508.580752][   T34]  ? aa_sock_msg_perm+0x144/0x210
[  508.580823][   T34]  ? apparmor_socket_sendmsg+0x98/0x360
[  508.580921][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  508.581013][   T34]  sock_sendmsg_nosec+0x14e/0x190
[  508.581108][   T34]  __sys_sendto+0x408/0x5a0
[  508.581207][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  508.581410][   T34]  ? do_user_addr_fault+0xd3f/0x1480
[  508.581497][   T34]  __x64_sys_sendto+0xde/0x100
[  508.581588][   T34]  do_syscall_64+0x166/0x520
[  508.581649][   T34]  ? trace_irq_disable+0x3b/0x140
[  508.581727][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.581780][   T34]  ? clear_bhb_loop+0x70/0xc0
[  508.581850][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.581912][   T34] RIP: 0033:0x7feb2e36034e
[  508.581960][   T34] RSP: 002b:00007feb2f283e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  508.581998][   T34] RAX: ffffffffffffffda RBX: 00007feb2f2856c0 RCX: 00007feb2e36034e
[  508.582025][   T34] RDX: 0000000000000020 RSI: 00007feb2f284000 RDI: 0000000000000009
[  508.582057][   T34] RBP: 0000000000000000 R08: 00007feb2f283f04 R09: 000000000000000c
[  508.582095][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009
[  508.582126][   T34] R13: 00007feb2f283f58 R14: 00007feb2f284000 R15: 0000000000000000
[  508.582214][   T34]  </TASK>
[  508.582236][   T34] INFO: task syz.0.2386:15956 blocked for more than 143 seconds.
[  508.582276][   T34]       Not tainted syzkaller #0
[  508.582298][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  508.582327][   T34] task:syz.0.2386      state:D stack:25064 pid:15956 tgid:15950 ppid:5634   task_flags:0x400140 flags:0x00080002
[  508.582560][   T34] Call Trace:
[  508.582580][   T34]  <TASK>
[  508.582628][   T34]  __schedule+0x17dd/0x5830
[  508.582779][   T34]  ? __pfx___schedule+0x10/0x10
[  508.582872][   T34]  ? schedule+0x90/0x2b0
[  508.582943][   T34]  schedule+0x164/0x2b0
[  508.583003][   T34]  schedule_preempt_disabled+0x13/0x30
[  508.583092][   T34]  __mutex_lock+0x7c4/0x15a0
[  508.583172][   T34]  ? __mutex_lock+0x5cd/0x15a0
[  508.583250][   T34]  ? genl_rcv_msg+0x10b/0x7a0
[  508.583322][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  508.583446][   T34]  ? __lock_acquire+0x747/0x2de0
[  508.583526][   T34]  ? radix_tree_lookup+0x240/0x290
[  508.583597][   T34]  genl_rcv_msg+0x10b/0x7a0
[  508.583670][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  508.583822][   T34]  netlink_rcv_skb+0x226/0x4a0
[  508.583918][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  508.583979][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  508.584098][   T34]  ? down_read+0x2b9/0x320
[  508.584176][   T34]  genl_rcv+0x28/0x40
[  508.584226][   T34]  netlink_unicast+0x8ef/0xa80
[  508.584401][   T34]  netlink_sendmsg+0x7f0/0xb20
[  508.584500][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  508.584589][   T34]  ? aa_sock_msg_perm+0x144/0x210
[  508.584651][   T34]  ? apparmor_socket_sendmsg+0x98/0x360
[  508.584740][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  508.584812][   T34]  sock_sendmsg_nosec+0x14e/0x190
[  508.584901][   T34]  __sys_sendto+0x408/0x5a0
[  508.585000][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  508.585180][   T34]  ? do_user_addr_fault+0xd3f/0x1480
[  508.585273][   T34]  __x64_sys_sendto+0xde/0x100
[  508.585415][   T34]  do_syscall_64+0x166/0x520
[  508.585470][   T34]  ? trace_irq_disable+0x3b/0x140
[  508.585548][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.585607][   T34]  ? clear_bhb_loop+0x70/0xc0
[  508.585681][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.585734][   T34] RIP: 0033:0x7feb2e36034e
[  508.585785][   T34] RSP: 002b:00007feb2f262e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  508.585845][   T34] RAX: ffffffffffffffda RBX: 00007feb2f2646c0 RCX: 00007feb2e36034e
[  508.585888][   T34] RDX: 0000000000000024 RSI: 00007feb2f263000 RDI: 000000000000000d
[  508.585920][   T34] RBP: 0000000000000000 R08: 00007feb2f262f04 R09: 000000000000000c
[  508.585959][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d
[  508.585992][   T34] R13: 00007feb2f262f58 R14: 00007feb2f263000 R15: 0000000000000000
[  508.586091][   T34]  </TASK>
[  508.586113][   T34] INFO: task syz.2.2391:15985 blocked for more than 143 seconds.
[  508.586154][   T34]       Not tainted syzkaller #0
[  508.586184][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  508.586206][   T34] task:syz.2.2391      state:D stack:25704 pid:15985 tgid:15984 ppid:5633   task_flags:0x400140 flags:0x00080002
[  508.586409][   T34] Call Trace:
[  508.586430][   T34]  <TASK>
[  508.586462][   T34]  __schedule+0x17dd/0x5830
[  508.586630][   T34]  ? __pfx___schedule+0x10/0x10
[  508.586712][   T34]  ? schedule+0x90/0x2b0
[  508.586775][   T34]  schedule+0x164/0x2b0
[  508.586842][   T34]  schedule_preempt_disabled+0x13/0x30
[  508.586902][   T34]  __mutex_lock+0x7c4/0x15a0
[  508.586980][   T34]  ? __mutex_lock+0x5cd/0x15a0
[  508.587060][   T34]  ? genl_rcv_msg+0x10b/0x7a0
[  508.587121][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  508.587189][   T34]  ? __dev_queue_xmit+0x29b/0x3920
[  508.587234][   T34]  ? radix_tree_lookup+0x240/0x290
[  508.587260][   T34]  genl_rcv_msg+0x10b/0x7a0
[  508.587291][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  508.587359][   T34]  netlink_rcv_skb+0x226/0x4a0
[  508.587394][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  508.587420][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  508.587464][   T34]  ? down_read+0x2b9/0x320
[  508.587495][   T34]  genl_rcv+0x28/0x40
[  508.587515][   T34]  netlink_unicast+0x8ef/0xa80
[  508.587563][   T34]  netlink_sendmsg+0x7f0/0xb20
[  508.587602][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  508.587639][   T34]  ? aa_sock_msg_perm+0x144/0x210
[  508.587667][   T34]  ? apparmor_socket_sendmsg+0x98/0x360
[  508.587702][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  508.587733][   T34]  sock_sendmsg_nosec+0x14e/0x190
[  508.587766][   T34]  __sys_sendto+0x408/0x5a0
[  508.587805][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  508.587879][   T34]  ? do_user_addr_fault+0xd3f/0x1480
[  508.587914][   T34]  __x64_sys_sendto+0xde/0x100
[  508.587953][   T34]  do_syscall_64+0x166/0x520
[  508.587978][   T34]  ? trace_irq_disable+0x3b/0x140
[  508.588008][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.588031][   T34]  ? clear_bhb_loop+0x70/0xc0
[  508.588093][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.588248][   T34] RIP: 0033:0x7fdeb4d6034e
[  508.588298][   T34] RSP: 002b:00007fdeb5c01e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  508.588436][   T34] RAX: ffffffffffffffda RBX: 00007fdeb5c036c0 RCX: 00007fdeb4d6034e
[  508.588478][   T34] RDX: 0000000000000020 RSI: 00007fdeb5c02000 RDI: 0000000000000008
[  508.588511][   T34] RBP: 0000000000000000 R08: 00007fdeb5c01f04 R09: 000000000000000c
[  508.588551][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[  508.588584][   T34] R13: 00007fdeb5c01f58 R14: 00007fdeb5c02000 R15: 0000000000000000
[  508.588676][   T34]  </TASK>
[  508.588698][   T34] INFO: task syz.2.2391:15986 blocked for more than 143 seconds.
[  508.588740][   T34]       Not tainted syzkaller #0
[  508.588789][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  508.588812][   T34] task:syz.2.2391      state:D stack:27168 pid:15986 tgid:15984 ppid:5633   task_flags:0x400040 flags:0x00080002
[  508.588991][   T34] Call Trace:
[  508.589011][   T34]  <TASK>
[  508.589044][   T34]  __schedule+0x17dd/0x5830
[  508.589190][   T34]  ? __pfx___schedule+0x10/0x10
[  508.589281][   T34]  ? schedule+0x90/0x2b0
[  508.589408][   T34]  schedule+0x164/0x2b0
[  508.589477][   T34]  schedule_preempt_disabled+0x13/0x30
[  508.589547][   T34]  __mutex_lock+0x7c4/0x15a0
[  508.589666][   T34]  ? __mutex_lock+0x5cd/0x15a0
[  508.589749][   T34]  ? genl_rcv_msg+0x10b/0x7a0
[  508.589822][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  508.589905][   T34]  ? __dev_queue_xmit+0x29b/0x3920
[  508.590008][   T34]  ? radix_tree_lookup+0x240/0x290
[  508.590078][   T34]  genl_rcv_msg+0x10b/0x7a0
[  508.590157][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  508.590260][   T34]  netlink_rcv_skb+0x226/0x4a0
[  508.590387][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  508.590457][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  508.590577][   T34]  ? down_read+0x2b9/0x320
[  508.590658][   T34]  genl_rcv+0x28/0x40
[  508.590705][   T34]  netlink_unicast+0x8ef/0xa80
[  508.590838][   T34]  netlink_sendmsg+0x7f0/0xb20
[  508.590966][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  508.591074][   T34]  ? aa_sock_msg_perm+0x144/0x210
[  508.591146][   T34]  ? apparmor_socket_sendmsg+0x98/0x360
[  508.591237][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  508.591319][   T34]  sock_sendmsg_nosec+0x14e/0x190
[  508.591448][   T34]  ____sys_sendmsg+0x54e/0x850
[  508.591531][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  508.591618][   T34]  ? import_iovec+0x73/0xa0
[  508.591702][   T34]  ___sys_sendmsg+0x2a5/0x360
[  508.591801][   T34]  ? __lock_acquire+0x747/0x2de0
[  508.591904][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  508.591976][   T34]  ? futex_wait+0x2a2/0x390
[  508.592140][   T34]  ? __fget_files+0x3a2/0x420
[  508.592211][   T34]  ? __fget_files+0x2a/0x420
[  508.592302][   T34]  __x64_sys_sendmsg+0x1b1/0x290
[  508.592421][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  508.592544][   T34]  do_syscall_64+0x166/0x520
[  508.592602][   T34]  ? trace_irq_disable+0x3b/0x140
[  508.592682][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.592724][   T34]  ? clear_bhb_loop+0x70/0xc0
[  508.592794][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.592846][   T34] RIP: 0033:0x7fdeb4d9fb19
[  508.592904][   T34] RSP: 002b:00007fdeb5be2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  508.592954][   T34] RAX: ffffffffffffffda RBX: 00007fdeb5026090 RCX: 00007fdeb4d9fb19
[  508.592986][   T34] RDX: 0000000000000004 RSI: 0000200000000080 RDI: 000000000000000a
[  508.592999][   T34] RBP: 00007fdeb4e37b70 R08: 0000000000000000 R09: 0000000000000000
[  508.593013][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  508.593025][   T34] R13: 00007fdeb5026128 R14: 00007fdeb5026090 R15: 00007ffda0ecb6b8
[  508.593061][   T34]  </TASK>
[  508.593129][   T34] 
[  508.593129][   T34] Showing all locks held in the system:
[  508.593144][   T34] locks held by pr/ttyS0/33: 3, last CPU#0:
[  508.593160][   T34]  #0: ffffffff8fe33dd8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60
[  508.593400][   T34]  #1: ffffffff9bfee6d8 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0
[  508.593550][   T34]  #2: ffff8880b8228618 (hrtimer_bases.lock){-.-.}-{2:2}, at: hrtimer_start_range_ns+0x8c/0x3e0
[  508.593687][   T34] locks held by khungtaskd/34: 1, last CPU#1:
[  508.593719][   T34]  #0: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  508.593919][   T34] locks held by getty/5388: 2, on CPU#0:
[  508.593960][   T34]  #0: ffff8880371440a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  508.594115][   T34]  #1: ffffc900032362e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  508.594379][   T34] locks held by udevd/15346: 1, on CPU#1:
[  508.594421][   T34]  #0: ffff88802849f350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[  508.594588][   T34] locks held by syz.3.2373/15885: 6, on CPU#0:
[  508.594631][   T34]  #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  508.594791][   T34]  #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  508.594943][   T34]  #2: ffff8880284eda18 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4a6/0x1040
[  508.595106][   T34]  #3: ffff888027b3da68 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x284/0x7d0
[  508.595257][   T34]  #4: ffff888027b3d430 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  508.595489][   T34]  #5: ffff888027b3d468 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  508.595661][   T34] locks held by syz.3.2373/15889: 2, on CPU#0:
[  508.595700][   T34]  #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  508.595822][   T34]  #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  508.595963][   T34] locks held by syz.3.2373/15897: 2, on CPU#1:
[  508.596003][   T34]  #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  508.596152][   T34]  #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  508.596314][   T34] locks held by syz.1.2375/15904: 2, on CPU#1:
[  508.596417][   T34]  #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  508.596551][   T34]  #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  508.596689][   T34] locks held by syz.4.2385/15949: 2, on CPU#0:
[  508.596730][   T34]  #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  508.596853][   T34]  #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  508.596999][   T34] locks held by syz.4.2385/15958: 2, on CPU#0:
[  508.597041][   T34]  #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  508.597174][   T34]  #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  508.597308][   T34] locks held by syz.4.2385/15962: 2, on CPU#1:
[  508.597385][   T34]  #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  508.597539][   T34]  #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  508.597681][   T34] locks held by syz.0.2386/15951: 2, on CPU#0:
[  508.597715][   T34]  #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  508.597849][   T34]  #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  508.597993][   T34] locks held by syz.0.2386/15956: 2, on CPU#1:
[  508.598034][   T34]  #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  508.599267][   T34]  #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  508.599481][   T34] locks held by syz.2.2391/15985: 2, on CPU#0:
[  508.599521][   T34]  #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  508.599642][   T34]  #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  508.599775][   T34] locks held by syz.2.2391/15986: 2, on CPU#0:
[  508.599813][   T34]  #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  508.599942][   T34]  #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  508.600089][   T34] locks held by syz-executor/15992: 2, on CPU#1:
[  508.600125][   T34]  #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  508.600287][   T34]  #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  508.600463][   T34] locks held by syz-executor/15994: 2, on CPU#0:
[  508.600503][   T34]  #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  508.600627][   T34]  #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  508.600775][   T34] locks held by syz-executor/16028: 2, on CPU#0:
[  508.600814][   T34]  #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  508.600945][   T34]  #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  508.601072][   T34] locks held by syz-executor/16031: 2, on CPU#0:
[  508.601120][   T34]  #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  508.601241][   T34]  #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  508.601424][   T34] locks held by syz-executor/16066: 2, on CPU#1:
[  508.601465][   T34]  #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  508.601593][   T34]  #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  508.601719][   T34] locks held by syz-executor/16092: 2, on CPU#1:
[  508.601759][   T34]  #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  508.601847][   T34]  #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  508.601905][   T34] locks held by syz-executor/16103: 2, on CPU#1:
[  508.601920][   T34]  #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  508.601969][   T34]  #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  508.602021][   T34] locks held by syz-executor/16128: 2, on CPU#0:
[  508.602036][   T34]  #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  508.602085][   T34]  #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  508.602136][   T34] locks held by syz-executor/16145: 2, on CPU#0:
[  508.602152][   T34]  #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  508.602200][   T34]  #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  508.602252][   T34] locks held by syz-executor/16166: 2, on CPU#0:
[  508.602266][   T34]  #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  508.602315][   T34]  #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  508.602391][   T34] locks held by syz-executor/16189: 2, on CPU#0:
[  508.602407][   T34]  #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  508.602565][   T34]  #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  508.602710][   T34] locks held by syz-executor/16207: 2, on CPU#0:
[  508.602786][   T34]  #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  508.602903][   T34]  #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  508.603026][   T34] locks held by syz-executor/16227: 2, on CPU#0:
[  508.603061][   T34]  #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  508.603174][   T34]  #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  508.603297][   T34] locks held by syz-executor/16230: 2, on CPU#1:
[  508.603346][   T34]  #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  508.603498][   T34]  #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  508.603614][   T34] locks held by syz-executor/16265: 2, on CPU#1:
[  508.603654][   T34]  #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  508.603778][   T34]  #1: ffffffff914f03e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  508.603922][   T34] 
[  508.603941][   T34] =============================================
[  508.603941][   T34] 
[  508.603986][   T34] NMI backtrace for cpu 1
[  508.604032][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  508.604091][   T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  508.604122][   T34] Call Trace:
[  508.604142][   T34]  <TASK>
[  508.604169][   T34]  dump_stack_lvl+0xe8/0x150
[  508.604259][   T34]  nmi_cpu_backtrace+0x274/0x2d0
[  508.604348][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  508.604415][   T34]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  508.604505][   T34]  sys_info+0x135/0x170
[  508.604577][   T34]  watchdog+0x1073/0x10f0
[  508.604675][   T34]  ? watchdog+0x209/0x10f0
[  508.604765][   T34]  kthread+0x38b/0x480
[  508.604826][   T34]  ? __pfx_watchdog+0x10/0x10
[  508.604893][   T34]  ? __pfx_kthread+0x10/0x10
[  508.604957][   T34]  ret_from_fork+0x514/0xb70
[  508.605019][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  508.605087][   T34]  ? __switch_to+0xc78/0x1410
[  508.605177][   T34]  ? __pfx_kthread+0x10/0x10
[  508.605239][   T34]  ret_from_fork_asm+0x1a/0x30
[  508.605358][   T34]  </TASK>
[  508.605427][   T34] Sending NMI from CPU 1 to CPUs 0:
[  508.605482][    C0] NMI backtrace for cpu 0
[  508.605495][    C0] CPU: 0 UID: 0 PID: 33 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) 
[  508.605515][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  508.605526][    C0] RIP: 0010:io_serial_in+0x77/0xc0
[  508.605556][    C0] Code: e8 2e b2 45 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 9f 8f bc fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 8a 45 82 06 cc 44 89 f9 80 e1 07
[  508.605573][    C0] RSP: 0018:ffffc90000a978b8 EFLAGS: 00000002
[  508.605589][    C0] RAX: 1ffffffff37fdc00 RBX: 00000000000003fd RCX: 0000000000000000
[  508.605601][    C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020
[  508.605612][    C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  508.605624][    C0] R10: dffffc0000000000 R11: ffffffff85836350 R12: dffffc0000000000
[  508.605638][    C0] R13: 0000000000000000 R14: ffffffff9bfee700 R15: 0000000000000000
[  508.605650][    C0] FS:  0000000000000000(0000) GS:ffff888123620000(0000) knlGS:0000000000000000
[  508.605664][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  508.605677][    C0] CR2: 00007f3acb44a222 CR3: 0000000037324000 CR4: 00000000003526f0
[  508.605695][    C0] Call Trace:
[  508.605702][    C0]  <TASK>
[  508.605711][    C0]  wait_for_lsr+0x184/0x2f0
[  508.605739][    C0]  __serial8250_console_fifo_write+0xcd/0x3e0
[  508.605765][    C0]  serial8250_console_write+0xa7e/0x1200
[  508.605791][    C0]  ? lockdep_hardirqs_on+0x7b/0x110
[  508.605817][    C0]  ? __pfx_serial8250_console_write+0x10/0x10
[  508.605842][    C0]  ? __schedule+0x17f3/0x5830
[  508.605871][    C0]  nbcon_emit_next_record+0xef5/0x1a90
[  508.605906][    C0]  ? __pfx_nbcon_emit_next_record+0x10/0x10
[  508.605935][    C0]  ? nbcon_context_try_acquire+0x819/0xbd0
[  508.605968][    C0]  ? _raw_spin_lock_irqsave+0x4c/0x60
[  508.605989][    C0]  nbcon_kthread_func+0x6d9/0x8d0
[  508.606017][    C0]  ? nbcon_kthread_func+0x163/0x8d0
[  508.606040][    C0]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  508.606068][    C0]  ? __kthread_parkme+0x71/0x1f0
[  508.606087][    C0]  ? __kthread_parkme+0x199/0x1f0
[  508.606108][    C0]  kthread+0x38b/0x480
[  508.606128][    C0]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  508.606150][    C0]  ? __pfx_kthread+0x10/0x10
[  508.606171][    C0]  ret_from_fork+0x514/0xb70
[  508.606192][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  508.606213][    C0]  ? __switch_to+0xc78/0x1410
[  508.606243][    C0]  ? __pfx_kthread+0x10/0x10
[  508.606264][    C0]  ret_from_fork_asm+0x1a/0x30
[  508.606294][    C0]  </TASK>
[  508.606509][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  512.724769][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  512.733901][   T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  512.743976][   T34] Call Trace:
[  512.747271][   T34]  <TASK>
[  512.750223][   T34]  vpanic+0x26f/0x710
[  512.754223][   T34]  panic+0xc5/0xd0
[  512.757950][   T34]  ? __pfx_panic+0x10/0x10
[  512.762388][   T34]  ? wq_watchdog_touch+0xf9/0x160
[  512.767441][   T34]  ? nmi_trigger_cpumask_backtrace+0x24d/0x390
[  512.773627][   T34]  watchdog+0x10e7/0x10f0
[  512.778005][   T34]  ? watchdog+0x209/0x10f0
[  512.782452][   T34]  kthread+0x38b/0x480
[  512.786558][   T34]  ? __pfx_watchdog+0x10/0x10
[  512.791255][   T34]  ? __pfx_kthread+0x10/0x10
[  512.795872][   T34]  ret_from_fork+0x514/0xb70
[  512.800483][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  512.805633][   T34]  ? __switch_to+0xc78/0x1410
[  512.810359][   T34]  ? __pfx_kthread+0x10/0x10
[  512.814982][   T34]  ret_from_fork_asm+0x1a/0x30
[  512.819780][   T34]  </TASK>
[  512.823421][   T34] Kernel Offset: disabled
[  512.827758][   T34] Rebooting in 86400 seconds..