last executing test programs:

23.644086913s ago: executing program 3 (id=9430):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x24, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x3, 0x7c}, [@nested={0x10, 0x1, 0x0, 0x1, [@typed={0x9, 0x6, 0x0, 0x0, @str='/!:]\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r3=>0x0})
r4 = socket$inet(0x2, 0x3, 0x7)
shutdown(r4, 0x0)
recvmmsg(r4, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x1000}, {{0x0, 0x0, 0x0}, 0x81}], 0x2, 0x10002, 0x0)
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="a4000000", @ANYRES16, @ANYBLOB="030926bd7000fedbdf256800000008000300", @ANYRES32=r3, @ANYBLOB="2600c7"], 0xa4}, 0x1, 0x0, 0x0, 0x40880}, 0x40840)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000000)={<r5=>0x0, 0x8, 0x2}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f00000001c0)={r5, 0x54, "1fbf47068597a69584b6ddce506e30afc990edae793e7bfa515530bd92b37239c1b8fc71caaa5b769b14da8a0554628221c1ca30ee985f143524cfa0d4066c1151f7215ab9ce46de73f2015fde29b12430c1f29a"}, &(0x7f00000002c0)=0x5c)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$xdp(0x2c, 0x3, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x24, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x3, 0x7c}, [@nested={0x10, 0x1, 0x0, 0x1, [@typed={0x9, 0x6, 0x0, 0x0, @str='/!:]\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) (async)
socket$inet(0x2, 0x3, 0x7) (async)
shutdown(r4, 0x0) (async)
recvmmsg(r4, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x1000}, {{0x0, 0x0, 0x0}, 0x81}], 0x2, 0x10002, 0x0) (async)
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="a4000000", @ANYRES16, @ANYBLOB="030926bd7000fedbdf256800000008000300", @ANYRES32=r3, @ANYBLOB="2600c7"], 0xa4}, 0x1, 0x0, 0x0, 0x40880}, 0x40840) (async)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x8, 0x2}, &(0x7f00000000c0)=0x8) (async)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f00000001c0)={r5, 0x54, "1fbf47068597a69584b6ddce506e30afc990edae793e7bfa515530bd92b37239c1b8fc71caaa5b769b14da8a0554628221c1ca30ee985f143524cfa0d4066c1151f7215ab9ce46de73f2015fde29b12430c1f29a"}, &(0x7f00000002c0)=0x5c) (async)

23.507917275s ago: executing program 3 (id=9434):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}, {0x85, 0x0, 0x0, 0x73}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x10, 0x50, &(0x7f0000000180)="00000000301328b160c71e094a1a54e6e8ba455643e45f6f47c258ffff252dcf4b41cdb1da6c3d313477fba71c4c64407a11c53b898d2a9575b336c1c04492de0aee5a11bfd57cfd66ea35614714fb21318efde38ee59eddbe10a5013a", &(0x7f0000000700), 0x6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x4c)

23.448581154s ago: executing program 3 (id=9436):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, r0, 0x300, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4)
recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000bc0)=""/4073, 0xff4}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000140)=""/54, 0x36}, {&(0x7f0000000080)=""/24, 0x18}], 0x4}, 0x8}], 0x4000000000001b6, 0x180, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, r0, 0x300, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) (async)
recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000bc0)=""/4073, 0xff4}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000140)=""/54, 0x36}, {&(0x7f0000000080)=""/24, 0x18}], 0x4}, 0x8}], 0x4000000000001b6, 0x180, 0x0) (async)

23.251893976s ago: executing program 3 (id=9437):
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640), 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10)
sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000012c0)={0x0, 0x7, 0x47a}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x47a}, 0x39)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc)

23.190238657s ago: executing program 3 (id=9438):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000fc0)={'geneve1\x00', &(0x7f0000000f40)=@ethtool_dump={0x40, 0x4, 0x2}})
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r2, 0x0, r5, 0x0, 0xf3a, 0x0)
close(r4)
write(r1, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000080))
ppoll(&(0x7f0000003840)=[{r0, 0x40}], 0x20000000000000fc, 0x0, 0x0, 0x0)

22.59871411s ago: executing program 3 (id=9453):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x1d, &(0x7f0000000200)={&(0x7f0000000240)={0x20, 0x25, 0x301, 0x70bd29, 0x25dfdbfd, {0x5}, [@nested={0xc, 0x12d, 0x0, 0x1, [@typed={0x8, 0x2c, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x13}}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x3e59cdaa2b3e421c)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/170, 0xaa, 0x0, &(0x7f0000000140)=""/32, 0x20}, &(0x7f00000001c0)=0x40)

21.003814732s ago: executing program 1 (id=9473):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
socket$alg(0x26, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200040, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0xa)
socket$unix(0x1, 0x5, 0x0)
socket(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380))
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
socket$inet6(0xa, 0x2, 0x0)
close(0x3)
socket$inet6_sctp(0xa, 0x5, 0x84)

21.003174201s ago: executing program 4 (id=9474):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0xffffff9b}, 0x1, 0x7}, 0x20000000)
accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, &(0x7f00000000c0)=0x1c) (async)
r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, &(0x7f00000000c0)=0x1c)
sendto$inet6(r2, &(0x7f0000000100)="e39bcf3ec59bfed670064102a172b73b74e07a25fbcd85d9c4dc26e02c511a001e9278e177f1d8f3a56e8d98a51c2a24ee15237f8c2c3ef4103948a7edb30830798cb62ef008952c62ba6f05d322e5ddbb0e7562347ab6dcebca5fd5cfa873f2c13396c4e409352cf957eb05358a84e667330e15e360b0acb2d340693f8be345f05430855e6be96f6761d43777d71348a1ad0ad2f1d29793d2231ec6128fcaefe89a682f", 0xa4, 0x8005, &(0x7f00000001c0)={0xa, 0x4e23, 0x2, @private0, 0xe31}, 0x1c)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
connect$pppl2tp(r0, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x2, 0x0, {0xa, 0x4e23, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}}, 0x32)
socket$nl_route(0x10, 0x3, 0x0)

20.934290758s ago: executing program 4 (id=9477):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x49}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

20.809961319s ago: executing program 1 (id=9478):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0xc, 0x9, 0x7}, {0x60d8, 0xa3, 0x1, 0x7}]}, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000000204c00000000", @ANYRES32=0x1, @ANYBLOB="8b00000000000000000000000000000000000000d02c0f58e121b9f668953306e55d297de6158252e18be821e49c02ef505393d32f4a97ed3ef6c87cc226f078c27937d26f934da65172b59781aad5a109f88c1228dcb6dc95aed2730864948be1291efcb2cdf7cb1f4bb92b481f824cad5e455a46e935f068f8b6b14a56b58ef4593b8f4b5524205a4df96249533701cfe457236f2669665b14ab01b58acabb42e6502183b2781db351e067c3dff6c91d4c3843c1ba6bd833726cb6c0baa09ffe9154aab040651a44088ac85274e835f1ed437f906aa223", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000020000000300"/28], 0x50) (async)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000000204c00000000", @ANYRES32=0x1, @ANYBLOB="8b00000000000000000000000000000000000000d02c0f58e121b9f668953306e55d297de6158252e18be821e49c02ef505393d32f4a97ed3ef6c87cc226f078c27937d26f934da65172b59781aad5a109f88c1228dcb6dc95aed2730864948be1291efcb2cdf7cb1f4bb92b481f824cad5e455a46e935f068f8b6b14a56b58ef4593b8f4b5524205a4df96249533701cfe457236f2669665b14ab01b58acabb42e6502183b2781db351e067c3dff6c91d4c3843c1ba6bd833726cb6c0baa09ffe9154aab040651a44088ac85274e835f1ed437f906aa223", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000020000000300"/28], 0x50)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000b660fa1100000000", @ANYRES32, @ANYBLOB="000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000050000000300000000000000000000000000000000000000f7764b3c649bba685fbe7bcf727e27a074b0fc5b21361157f166f058fe1634682a0059162160a6e0ac84efdab65b1daccc6f6c8f8968573f2124414fb243df0254679a2a5ba1acc18fbb082f3389a3902a1a55371ee66c1ae502727d2da34104fd347858fdfa49193c6accb99c227e589856644af81eef4a6c5eca423c89ee00"], 0x50)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0)
sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000900)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000600)={0x24, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfff}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20008000)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x7, [@enum64={0x7, 0x6, 0x0, 0x13, 0x0, 0x0, [{0x10, 0x0, 0x53f}, {0x9, 0x8, 0x59a}, {0xb, 0xffffff09, 0x5}, {0x7, 0x8, 0x8}, {0xf, 0x1, 0x7}, {0x6, 0x7, 0x249}]}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x71, 0x0, 0x59, 0x1}, @enum64={0x8, 0x1, 0x0, 0x13, 0x0, 0x3, [{0x1, 0x2, 0x7f}]}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x3, 0x6}]}, {0x0, [0x61, 0x5f, 0x61, 0x5f, 0x0]}}, &(0x7f0000000380)=""/137, 0xab, 0x89, 0x0, 0x8}, 0x28)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async)
r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r8)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r9}, &(0x7f0000000000), &(0x7f0000000040)=r10}, 0x20)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xe, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0xc, 0x7, 0x7, 0xfffffffffffffff4, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb}, @call={0x85, 0x0, 0x0, 0x87}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa653, 0x0, 0x0, 0x0, 0x24}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fffffff}, @map_val={0x18, 0x6, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x80000000}, @generic={0x2, 0x0, 0x5, 0xfffb, 0xfffffff9}, @exit], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f0000000480)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[r8, r9, r11], 0x0, 0x10, 0x2}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xe, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0xc, 0x7, 0x7, 0xfffffffffffffff4, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb}, @call={0x85, 0x0, 0x0, 0x87}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa653, 0x0, 0x0, 0x0, 0x24}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fffffff}, @map_val={0x18, 0x6, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x80000000}, @generic={0x2, 0x0, 0x5, 0xfffb, 0xfffffff9}, @exit], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f0000000480)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[r8, r9, r11], 0x0, 0x10, 0x2}, 0x94)

20.736006464s ago: executing program 4 (id=9479):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r3=>0x0}) (rerun: 32)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="030328bd7000000000000a00000008000300", @ANYRES16=r2, @ANYRES32=r3, @ANYRES64=0x0, @ANYRES64=r1], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
r4 = socket$inet(0x2, 0x2, 0x0) (async, rerun: 64)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e000000000000000380000007000000030000ca75ffffff00000000000000002e"], 0x0, 0x46}, 0x28) (rerun: 64)
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async)
writev(r5, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001000010025bd7000fcdbdf25000000", @ANYRESOCT=r5, @ANYBLOB="380904000300000008001b", @ANYRES16=r5, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x68090}, 0x91) (async)
setsockopt$inet_mreqsrc(r4, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000002000010028bd7000fcdbdf250a1453ac5f000000000000000000080018004e234e6314000200fc0200000000000000000000000000011400010020010000000000f0ffffffffffffff01"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000ffffff180100002020782500000000002020207b12f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000001000085000000620000009500000000000000bfb5b19978aee8d48b3a4c0835973cb79b9bef2a1bb830c4aedf29fa069d6ec03c674264e8f4281a09877e1c451313c9c0561e365b19ce729cd8b385821f9eee5677a0105c6d4ecca41895591005e481b9181be3f0c49f8d08bd69ab49ee991c8ec1d66f13147f16447ee030907d14b8077d70fa90997e61eb64a7bd454cf1aee17b69c5137a628355091030f3df4d201ef885ad63905382c9f01145a6753ec03a19fd6ace"], &(0x7f0000000000)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x31}, 0x94) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r8, &(0x7f00000001c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c33bec0c49ee12b5", 0x75}, {0x0}], 0x2) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) (async)
r9 = socket$kcm(0x2, 0x0, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async)
bind$xdp(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (async)
write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x2e)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x1010, 0xffffffffffffffff, 0x0)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r10, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)

20.682337876s ago: executing program 4 (id=9481):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socket$unix(0x1, 0x1, 0x0) (async)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r2, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3ff, 0x4c}}}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15f4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x382}, @NL80211_ATTR_CENTER_FREQ1={0x8}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20880}, 0xc080) (async)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r2, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3ff, 0x4c}}}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15f4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x382}, @NL80211_ATTR_CENTER_FREQ1={0x8}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20880}, 0xc080)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r5)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r4, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x5ee}], 0x1}, 0x4011)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000f000000850000002800000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007f000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) (async)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000f000000850000002800000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007f000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94)
ioctl$sock_ifreq(r6, 0x891c, &(0x7f0000000440)={'vcan0\x00', @ifru_ivalue=0x26ba})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000500)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

20.559437255s ago: executing program 1 (id=9483):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xfffb, 0x6, 0x6, 0x2}, 0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x28}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x4000080)
socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40014}, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x88, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7606}, {}, {0x0, 0x0, 0x101}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, {0x0, 0x0, 0x0, 0x2000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x400000}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {0x0, 0xfffffffa}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x0, 0x0, 0x0, 0xc}, {}, {0x20000}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x80000001}, {}, {}, {0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe4a9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x1}, {}, {}, {}, {0x4}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r11)
r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r13 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r14 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073", @ANYRES64=r12], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0)
sendmsg$SMC_PNETID_ADD(r11, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r13, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000040}, 0x4)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042800c00018006000600800a0000100002800900148004"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'})

20.416183464s ago: executing program 1 (id=9485):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f00000007c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1)
close(r2)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r5)
getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r6, 0x50083, 0x2c01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850)
sendmmsg$inet(r4, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1=0xe0000306}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400))
splice(r1, 0x0, r2, 0x0, 0xfffd, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xb, 0x0, 0xffff0000}})
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x409, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x7e}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe4}, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040))

17.481426077s ago: executing program 1 (id=9488):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x442000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x339)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x442000, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) (async)

17.41770134s ago: executing program 1 (id=9491):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000580)={<r1=>0x0, 0xcd8c, 0xfe, 0x2, 0x6, 0x8, 0x7ff, 0x1, {0x0, @in6={{0xa, 0x4e21, 0x8, @local, 0xfffffff9}}, 0xcb2, 0x8, 0xffffff80, 0x80000000, 0x1}}, &(0x7f0000000640)=0xb0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000680)={r1, 0x82, "fb0c47ccc870502040bea64528055205c8453fef65c89256528f8436e4693aaef6e1e7eed73170901bf230a70c5bb618975808346bc21bc7e18f5486d1606c318b3cfa6b7b4efe786470e8e9e6cd4eb6107a9c1d86ed5539a8d2d2500b854053bba227d7bafa5fa0f7266c9842972c3f88500dfe200e4bc5b3f8556592cf43954a40"}, &(0x7f0000000740)=0x8a)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$kcm(0x15, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x114, 0x3, 0x0, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000400)={'sit0\x00', <r5=>0x0, 0x10, 0x80, 0x4, 0x8, {{0xb, 0x4, 0x1, 0x8, 0x2c, 0x64, 0x0, 0xb, 0x4, 0x0, @private=0xa010100, @multicast2, {[@cipso={0x86, 0x18, 0x0, [{0x6, 0xe, "0abc9b9b8c5996bfb67d1bba"}, {0x0, 0x4, "eb6b"}]}]}}}}})
sendmsg$nl_route(r4, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001000000128bd7000fcdbdf2500000000", @ANYRES32=r5, @ANYBLOB="00040002000000"], 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x40001)
sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800)
r6 = socket(0x10, 0x3, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt(r8, 0x400000000000003a, 0x1, 0x0, 0x0)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x28, r9, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xce2}]}, 0x28}}, 0x4000000)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10)
write(r6, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c)
r10 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', <r11=>0x0, 0x40, 0x20, 0x8, 0x6, {{0x9, 0x4, 0x2, 0x25, 0x24, 0x64, 0x0, 0x3, 0x29, 0x0, @remote, @rand_addr=0x64010101, {[@generic={0x44, 0xf, "37cf010c80d952c1e7cef44021"}]}}}}})
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@deltclass={0x70, 0x29, 0x1, 0x70bd2c, 0x25dfdbf8, {0x0, 0x0, 0x0, r11, {0x8, 0xa}, {0x4, 0x2}, {0xfff3, 0xc}}, [@tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x80, 0x5}}, @tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000090}, 0x2004400d)
r12 = socket(0x400000000010, 0x3, 0x0)
r13 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0xa4, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, {0x8, 0xf}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0x7, 0x4, 0x5, 0x8, 0x0, 0x2, 0x7ff, 0x2b, [{0xfffffff7, 0xcf, 0xffffb44b, 0x4}, {0x9, 0x400, 0x2, 0x8}, {0x8, 0x400, 0x3, 0xfffffff7}, {0x6, 0x6, 0x7fff, 0x51f3}, {0x3ff, 0xffff, 0x1}]}}, @TCA_U32_MARK={0x10, 0xa, {0x8, 0x4}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newtfilter={0x7c, 0x2c, 0x100, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x10, 0x4}, {0x10, 0x3}, {0xf, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0xfff2}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0xfff1}}]}}, @TCA_RATE={0x6, 0x5, {0x62, 0xc}}, @filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xac, 0x1}}]}, 0x7c}}, 0x0)
r15 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000010829bdb422f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2e2002000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014)

17.388023859s ago: executing program 4 (id=9492):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
r0 = socket(0x11, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x2118, 0x4)
sendmmsg(r0, &(0x7f0000000000)=[{{&(0x7f0000000640)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100e2f288a8d2", 0x13}, {&(0x7f0000001c00)="659900c3f7c8e544e1abc41796cae4c9908368acb3abdb908ada84b1c98b91c34352f80ed64e4606a25bcbab94869ac816a7fb9c29a8c768fbffb21ad7f6013ff676da589c2e0865cfd321543070c3dd36bf94deb1d137c220d9c559", 0x5c}], 0x2}}], 0x1, 0x24044015)
recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/126, 0x6e}], 0x40}, 0x2}, {{&(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x0, &(0x7f0000000800)=[{&(0x7f00000006c0)=""/194}, {&(0x7f00000007c0)=""/20}], 0x0, &(0x7f0000000840)=""/138}, 0x4}], 0x1, 0x2002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)=0x4000000)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x6100204)
pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000540)="00214797357e0e8d442441e9beae583d48ac340dc69d54af976b6a7c18c4907ed175462f18ec0e16ad9f57abed3bad46320d0d4abf7c3a617f1b2fbe8b338d1fce4490668ce9faadcf6b44b9906eeb59241caa04a1bf2399f37a7f221861e3580bdf025cb470613b79119f1c9fe8b9ee5d1f41b6af7d12a2ba71c7a74727cece06221eadc4d7137811e483a94c1164f4496f0fe1829f55cd2d91b74aeee64bc05e7014dbb599bad1be2d8ced5b1a3131", 0xb0}, {&(0x7f0000000240)}], 0x2, 0x739, 0x1)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000005c0)=0x221100, 0x4)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010427b800fcdbdf25140000000c0006000100000001000000e3"], 0x20}}, 0x4090)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r4=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000040)=0x800, 0x4)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r5, &(0x7f0000000000)={0x2a, 0x0, 0x7ffe}, 0xc)
r6 = socket(0x2b, 0x1, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20040894)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)}], 0x1}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r7, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
bind$qrtr(r5, &(0x7f00000000c0)={0x2a, 0x1, 0x7ffe}, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000140)=""/176, 0xb0}, {&(0x7f0000000200)=""/19, 0x13}], 0x2, 0x6, 0x1)

17.05539216s ago: executing program 2 (id=9494):
syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x10, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @ndisc_ra={0x89, 0x0, 0x0, 0x1, 0xfe, 0x0, 0x0, 0xfffffffe}}}}}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000cf9f2d1b0000060a0b160000000000000000020000084c00048018000180080001006f7366000c000280080001400000000430000180080001006e617400240002800800014000000000080005400000001708000640000000000800024000ddff010900010073797a302d2399416daeff555248aae774000000000900020073797a3200"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x40080)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100"], 0x38}}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x9)
bind$netlink(r5, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb}, 0xc)
sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000fddbdf25010000000000000007410000004c0018000000026962000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000fdff00000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x110)
bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x2, @empty, 0x4e24, 0x0, 'none\x00', 0x14, 0x3, 0x33}, {@local, 0x4e23, 0x1, 0xe5, 0x400, 0x40}}, 0x44)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000d042abd70000000000001000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e64000000001400028008001400520000000500010005000000"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=ANY=[@ANYBLOB="380000001000010025bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100804000100000008001b000000000008002900000001"], 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r7)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x40, 0x5, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x14ffe30aa4ab24bf, 0x0, 0x0, {0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x80b0}, 0x20008890)
sendmsg$IEEE802154_START_REQ(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000d0000000500070012000000050018007f00000006000800feff0000050017000000000005001a000000000006000a00ffff00000500190004000000050007000700000005001b00ff0000000500010001000000060008"], 0x6c}, 0x1, 0x0, 0x0, 0x18000}, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f00000002c0)={r6, &(0x7f0000000100)='-/^\x00', 0x8200, &(0x7f0000000140)={@align=0xa, {0x3, 0x9, 0x8279, 0x10001}}, 0x4, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x9c82})
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

17.026715893s ago: executing program 2 (id=9495):
r0 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x400)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$inet6(r2, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x40085)
socket$netlink(0x10, 0x3, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=@raw=[@generic={0x0, 0x2, 0x8, 0x101, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x10}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x400}, @exit, @exit, @alu={0x4, 0x0, 0x1, 0x8, 0x5, 0x30, 0xffffffffffffffff}, @map_fd={0x18, 0x6, 0x1, 0x0, r1}, @jmp={0x5, 0x0, 0x4, 0xb, 0xa, 0xffffffffffffffff}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r1, r1, r1, r1, 0xffffffffffffffff, r1], 0x0, 0x10, 0xfffffffe}, 0xc3)
sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004180)=@newtaction={0x8c, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x16e}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x2, 0x10001, 0x8, 0x34a, {0x0, 0x1, 0x0, 0x3, 0x86}, {0x5, 0x1, 0x6, 0x5, 0x7f, 0x2}, 0xff, 0x2, 0xfffffff8}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810)

16.921279191s ago: executing program 2 (id=9497):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x7, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x6}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x7d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$unix(0x1, 0x1, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa88a806008100050086dd608ab7f200142c0000000000000000000000000000000000fe8000000000000000000000000000aa3a0400", @ANYRES32=0x41424344], 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x411452449d3edcff)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x5, r6}, 0x38)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7, r6}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x5, 0x2, &(0x7f0000000180)=@raw=[@map_idx_val={0x18, 0x1, 0x6, 0x0, 0xf}], &(0x7f00000001c0)='GPL\x00', 0x7ff, 0x1000, &(0x7f00000009c0)=""/4096, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f00000019c0)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x40088c0)
sendmsg$OSF_MSG_ADD(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x1508}}, 0x24000880)
writev(r8, &(0x7f0000000040), 0x2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r11 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0)

16.83609068s ago: executing program 4 (id=9498):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd504001000000ee12000008000300", @ANYRES32=r2, @ANYBLOB="08003200050000000500330001000000"], 0x2c}}, 0x18) (async)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd504001000000ee12000008000300", @ANYRES32=r2, @ANYBLOB="08003200050000000500330001000000"], 0x2c}}, 0x18)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
socket(0x10, 0x803, 0x0) (async)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r5, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="140006"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) (async)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r5, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="140006"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010)
socket(0x10, 0x3, 0x0) (async)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r11=>0x0})
socket$unix(0x1, 0x1, 0x0)
socket$inet6(0xa, 0x3, 0x5) (async)
socket$inet6(0xa, 0x3, 0x5)
r12 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x22020400)
sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x200088c4)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r13, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r14, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) (async)
sendmsg$NL80211_CMD_RELOAD_REGDB(r13, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r14, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004)
sendmmsg(r13, &(0x7f00000000c0), 0x4000000000000d2, 0x8048848)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r11], 0x20}}, 0x8080)

16.764595654s ago: executing program 2 (id=9500):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', <r3=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3, 0x1}, 0x10)
getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000240)=0x30)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40)
unshare(0x22020600)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r5, 0x20, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, r6, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4}, 0x50)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x1f}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}}, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000003c0)="3828208a6110a89e55924dcfbfc8cbe048b8b2525f0e83fb09ea4a45f71a8ef84227f921d764ced07793ace076f26d3ba07520b192fb7c7947d4a0f8cb9378f9505e39ae03e0024a25b585ae420e69b84c02482d3a8e09082554313d6cc0551175013f041ac9565b3858b55e9172c7484e8f9aad20c7524b56a0c1f7b1fad45a27d182c8720e4fc4a6fcd810a311a09f13a3b7fa7e7274bc6e038816c0ed535035bdf32dfed1bcffd574be8ac30f35bdf2dc87a7d79760ab26c6e63650462482022b7049e61b0d61fdb75422ddd754c9f00f81d035392b9dc0a1362759bf414509c94e4c6ce18bacac20280f5ce96f5577a8300aa86e5d95aa21d1c401f77e9059d9fe79a84eec6e183f70175fc92842dfbfe6408b8dbec9343cf9f4146dab2506d00d1049956da5425ba120692ae62285d20414be1467801c1d22e701b8d0f3b68537d1d2573f63a57bc0fc8978d62f549ef071df77afbedc7ff789972ae761e177b85341798633a4168ec6ee2aa15491dae95ad250bf79cdeeb623052922892ebd22c3630af2553e8a27c9565fc2ec77c26ad401ead2219c4a19a5ef9f3750fe0b219753842844f82b953e9f43ff515681c06b251cfd494ce90aebcd84c81d802a7e947b17af4b541a09aca7728794e475e0d6df2c5638fa93b0697d7c2dca0a22ccb9c45acebaa6866f32c65cc019c9e7d4351c237b61d371a08a32b226c064b9ea8dccf843010124115f4902123ac010e2eda81ae9ece954ac2bc1d8a2011d4e697f1e2b5b94fbac7085aca913823af3c311798467b143479a0bbe07dbeb9400bd87d2770b006d5f6c88a60ec5b82d6523ad113ed78e1a3192320387750f577528518188160451294fb651630b2f1994c91761c5748f1def5b85e07d22e37b8bfbc0bfa021370c79cf2c167365c2ff4f6fb5bee0833a2adf82f25dcf59134bb1706db50434f7d622f95cb35957845246385c265d8c4e98296801fff45474529585db347c7835a101489c5e94cd17ad1bd89e5bce6306ec1612bba67bcdaf65663e53e42ff0fd35d3a3537b1d1c416ec21c4b2b39163cbd2f9c2f2019acf5d7bc15d307d92251d691fb649a6770199deb61c2252ca46ac7e85a61a56e8414663059c808b67ce6a33e76890315a193119e1f9fb84ac91c3532d3c944edee1d4c894030f3053114d26b56f6f52d5c5393c40b66f5300cb5223e236d80259f1e912bdecbfcfeacefcd8a48f2fc2bc955ce3db6b4df40514a404b1e6324fd88110027a412accf6ab7eabe0fc4b0c79fa8b6809fbad526213d542f61d0e5e6661c473720410cfe4329b6eadb0b6b33feadb13c2350e564c21077ceab91869aba38fb0a9979d5ac90316427f0562ca049e64f3cf0582bf4f5452458254dc6801efcd5d0de3ba84e23a29013df691a69684471cf3b403db6508d474e7893f3b26d1a4c8f5970cf547d0e67536d3c731f6b037697283bf004226e3be17cc8e96285f1431b7fdcd9d578f885d19402d42d026889460639f55eee767954a7f40631e0acb5dd58e3f986046fa2a4659a260507b70520bf5c536f67048572f589a91ceec00c7e52d75e39310ed9339e6c70925f5f2f731887e6e5ea95447ab609ca9f2de7a338bcd4df3ad44df7b1d0ca0c3880c305c4391e971481adfe84cacdcb8cb334a974077231e0278e9dc1b707deab9f94816be4327fe38c5e5a481dde92e1425523da8da5d8fb69143ac685fdf491cad4cdc422fb3e493cae20c0add0d44f83c5714bfcb0f84d2c02bef3843bc02b431d4c44859c1b2c884d8112053d38737cb3f6e23df04472ae26af41aa2bec4a36c06185eb80cd5ca31638d0556d30c894be99fc725cb76839c470847dda5db67a320c1cbadaab3ddb640f978c3b7da1dd67cfc79aea68e65c23491da8221222724f6ed129841c10c3c29e3ed386b4d3fade741bf4c63576c13d9681d790f019358cab6e40770403a3f8f6349544dbf4a6c68f893c213d62cc8ed3bb03ba1f6c323e86c2d7741fa8560a7fcb7a15b8fb56cc4c45f42c24c9285318557bc0fb28df47f9b4dafda23e9649cdc02f382c7dc931bf6037e1302cd35ae9a33b190a5c361193d98e6de52945a95f592aa9fa7da3cafb71d7cfcaa900276d30855d9874f83a451005d2d71a8b81311fc36a2127488a546d85919a5f553e385d1e717037212def1a322255068326f55bd231c6a68332cbfaffc02d5d8e083d2827810d79aee3fa8a549e51acad5e1c95d2435b7bb34f03ea576229cedf6c77ee01a7a4e6e64e370b07d8a1b873a372c2b09bd4803cbfdec741f9d8991f2b150c7a46a51fd671769c56e4cb57e5fd1e134ac0f2760b79a72a4a1a4c7dfb29ca8b366a71dd5d300c95c231802cd945e37baf09ec0018e71cdea6d1fb2318f8aee565a01abfb25bed0ba2489c8bcdaec50ede24ddeae8ecc54b8c3937d34c707d6b2d9fcb8cdcf9a5d8e71dc71bc117d49fac05b93743d94a50ae6ea7ba763c5a302336e17b40a88e35906ee44b56ffab38fe51ea4ba8a1ae4d8337b2fea82842e927a215c1bbc9f6399f057527bdaf87553cb052b38d44087dbf0b1ebe1bbeed7a58c7c2907a50f6eef63e0a690cafc8eaf9fbd0913e202ff73a4deb7daf6c51a1d1936f9e99ff938886738eb11b607e7d2b391a209add3175fc4b4a50df22e51dee9de60b409e44ca480e557baf58fb6b79ab0e3add706ee9f90d4d051c55819beea8776da917956105f55728e10ac056c6b40c4f452df7a7802a17dc5023628b9dc12c5e4f86b94562c3e1bee6b637826b1973159e2777e1d2d8be5dc864309c9ecf3e1376945a06c3903cdbcc43a412af089472526c82e1fa258093aa95d2d85acc71eb76c99c22c4cd16fec4f608d545db3138478dee8362b4370d9e6e5527f8fa79c992a155884a2575494875e972215320dff27b292d1bd0314881a752c26f460c88c5201d96eba53564687a1717235344655b76c2cebdc1e70b9079df4e48926fc8cb843134c9116776fee18c150bf3bab729ed6c191921d3e4f054bd9dee9c713c4e8af764985152ce76d47db74eb4436a3d0c98438a756ce383ed8122ec8725bd1ed8fac3874bbafa6338eb53df49232abcac02edc42ec4369459f9c2fd6a9af39d7d38ff7f21e38b80c3e513267241691d2e4efa3e3a5c01eafcc3b2c911384a8614c4cdc69e30a45be7777b5d91464a8d1ebea521100d380496ceda7d21e6f1a25f0245137a5259d98d1182e246cc89d393a742f3c0f02ef772dc6d765f9be494349891cbfe3f05bc647d334bd6e562b658ede1c281f8c2b9c5e11711eddffdd89754114ae2ebf3605646ffc8287e50620f70cb05925faca1c3aa3b4e05ce850ee9ab523ca10c3d0b3cb1dea032de176979d1b46c7c10109f41cab3b721b476811f270c1f8f49909478a9fa4d4150fe805708b76fb6106d8d634ed67e1045beba34fa8f8195de79924cd87a1dbd1864dd4dcf341073c86a67b5d9bde64ee7bd2a5034896153e0e09713d725fb188b35d1cff2344aca72c2ad65e0d3b00c7e820762f8960994b60c59e5673d5dd84b16baf4fdbedb13a34cfadc836523d4feef612280c49b7839ef43c5ed958e89702c1e9a06826f2b56a37c3c18ae430ea41c108cd80905d57fd6e52ef54786e974390c0b166b698a5c086aec011b038ae95bf6115eb172fe5cc5055dd89020a65f32695a784e37cb769689332ea0cc3914f419ff3135981b9123a2a998f017803e1512fd6c0d0774aeabac6063aad81afc70b9bf021cd9e1c5588688b3ec07d800a6f2aa4c42dc51d7ca37e73a19405aca151f9eeef35ca41a78e8a47b7229c376a0357d02b85068a06ff2729b210d8d85e3e80f82984678eac74bf3cae5b0a10611aa976a4eaa3437d13455b0c5c26d54dac0c8338b869d98e8962b1d2e88f476bc8ea0a5830b76783afada0853c4839569eeb5b88509960e0784e53062af47febb9c641045f35fafce493c87ea00297c0ea9579986a452b6d766624f3f218577c24a5e87174462d669d2a9e0be58be34fb4dd0d9dc09992eb7efe1675fac49d4767ab5b67fc28036615bd43856b1069701916b9f8cc889244f249ab511e699c3e787c14125f6894a88967f160e50b265d24aab8e380c467a6a102994af80bd7cb3c9a7a1c49ed2a47e1e67a0c5d9e7d5d83d46bb9725c84437217ee60242beab2c259069f386bb51bc3c93e0c978f7488589e1d03f595da6ababa4503b54eba5ef5cbac3ee145689890815a6820665188730d2a389ddf3c5cb49de4ffe07126cd431c880a341970a264ce5019b3ecdb231f0892f2718eaef0b86d3552610dce773b7bdeac9f8d20075bc5ea316b19704280bd0ed7198d43f46e1206283038c5f4edd9c8ce3501615643c4636004ba0077f2443f490acfb6f2f4f3ae63e97a4d5eff04b8fb4f0ade5289472478b33ab393699fa7952f8fb6f7926486ac7df2232b69b98ee0fb71f2ca18b3c49f81f8bb5d47460cb47fa756030b68bc69cf8c4eb71dd6116f7c2684ee45712449839691972c4285813c2fb97a9dcf7f7c06c38193f33b695f3629b5ece6a4f1fb23c56b3c42b56c6020e17def365d483f849b60d5b82f6efd7b40809520c0f4e2955515c5eaf5fd69dd0daaf0f12bc02ae5a060b0a327d147fdbb5befdb383f78f59d1278b731fbcdc475c10f3cbc7572a5fb56de8aff341808fb959e27e21f462b396bfd08239563042e2994b68874353b8b8a8afc0761f98a5d0a5739c92e624f057661f1710271380e9ffac8f5974bef4c25c961fcac6000725356a0a578daac22d0ec3a4a8d0984afeb46a0ec4d4f7d23266d59aa93f6db1a8c9b8b6ad336af15c30dc0d351e92626df79304db7b6a7e974e0032fb780faad1de33d9974a1f5b2dc03942b63d1f91f1203ec6bf71f1e10ee093287ba81a94f95cf37e144da9c6033aaaabd2425e7c87ea82682060064c003e3b866d7cbc8c599f74737be3d3aaae885706102efb1e2e73197ba0becee6d10425065023756f7458cd77b282dc9530de4951ee15394820eddf7b9986394e04fe4c1cdd13429898184c86ab91d022a83af7c97f339bdd35650586ce5d494d59861c8a46276b87cb6ca2610f0a49b9d03fd9816300fd8b6a9cee51eb91ed365c2c98e897b469aa8b0f4c9191f5b38ba7f44d204ff1dfebf730bc3d5f7e9e87aaa0c5818f71c86a4a7371c8b1db868ed75b72a6881ad841f1efabd8193037f650aa0d7899196ea977d233d93adbc70b86167344278c250a1a012e6dbfd6e1c3301cb084d16b2ecc7719b4b00e4aa49c1b45798ea2cda1160372833ce8db2dcbf9bad64299e2fa7da92976bfb119809101d4b29c51b57631ed8956003918dc98962066b81d08f1646d13ca2cc038f8380044c94d5f64e570071e35c46f72ee15ae6f11ffe6e178d5a6ee582f9b4cc38f02c92aa3e2df225a778c7e2109a3da862f03bcedb857e8a3e6877114d5f7b29aa9b8367b61e3f74536db7e5f64be654fc4db725796e3dbb24a674f72497beabe5ee89fb8a474fbc5ba7eda13e9bc5468f88fa34162cf819845daaede32c23235477a23ffd7c0b4ab0496dcf90c05933e37861be8c520c0a8e6648b3dbf3d218f5d70c11e9fac9957a824618d4ef8cf89671c363d0a28944a40840b85fb6a980ed2f4c159546ab52c81e1277985051cd702f0e022ce0f7f49dfbc29307053cc8afcd5c70b602c4567743d2d513b1c9718df0207ae15616048102063ee4a58740958d0621df63c9ae284abda899db11a0718946c45f6", 0x1000)

16.271670455s ago: executing program 2 (id=9502):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x28, 0x1d, 0xfffffffb, 0xffffffff}, 0x10)
write(r1, &(0x7f0000000040)="240000001e005f0214f6fffffffffff8070000000200000000000000080000000d000000", 0x52)
r2 = socket$packet(0x11, 0x3, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd002}, [@generic={0x91, 0x1, 0x1, 0x83}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffeff9}, 0x94)
r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r3, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a)
sendfile(r3, r4, 0x0, 0xffffffff000)
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x80000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f00000001c0)=0x3)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0)=0x4)
getpeername$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r4, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0}}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@ipmr_delroute={0x74, 0x19, 0x10, 0x70bd26, 0x25dfdbfb, {0x80, 0x80, 0x80, 0x6, 0xfc, 0x1, 0xc8, 0x5, 0x2d00}, [@RTA_IIF={0x8, 0x3, r5}, @RTA_DST={0x8, 0x1, @private=0xa010102}, @RTA_OIF={0x8, 0x4, r6}, @RTA_NH_ID={0x8, 0x1e, 0x2}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_ID={0xc, 0x1, 0x3}}, @RTA_GATEWAY={0x8, 0x5, @multicast1}, @RTA_TABLE={0x8, 0xf, 0x5}, @RTA_IIF={0x8, 0x3, r7}, @RTA_ENCAP_TYPE={0x6}, @RTA_OIF={0x8, 0x4, r7}]}, 0x74}, 0x1, 0x0, 0x0, 0x840}, 0x8000)

16.271392822s ago: executing program 0 (id=9503):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x7fff, @ipv4={'\x00', '\xff\xff', @local}, 0x6, 0x2}, 0x20)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0x6, @remote, 0x73af}}, 0x0, 0x0, 0x8, 0x5b2, 0xf1, 0xffffffff}, 0x9c)
r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14, 0x80800)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r3=>0x0})
connect$packet(r2, &(0x7f0000000140)={0x11, 0x3, r3, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14)
recvfrom(r0, 0x0, 0x0, 0x12140, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x70}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)

16.241557882s ago: executing program 0 (id=9504):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, 0x0, 0x2d, 0xb, @void}, 0x10)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/ipc\x00')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x300000d, 0x100010, r0, 0x7baf2000)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x4, @link_local, 'lo\x00'}}, 0x1e)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_route(0x10, 0x3, 0x0)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xf3a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'ip_vti0\x00', 0x10})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000380)={'rose0\x00', @random="faa68eb3f3f7"})
write$tun(r4, &(0x7f0000000f00)=ANY=[@ANYBLOB="000086dd0000110000080000000060ec970000382c00fe8000000000000000000000000000aaff0200000000000000000000f90000013a00000000000000030190780800000060aabc2b00028400fe8000000000000000000000000000aafc0200"/110], 0x6e)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={<r6=>0x0, 0x19, "cc6acfbca520c6dc8da6a758f6dac82f34deb4a094a0f1a14e"}, &(0x7f00000000c0)=0x21)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000240)={r6, 0x62, "f6bb099188f6a01fd2e8ac834b9f1b645e3fb810535f2a4f29544ff56cb8a6646694cf46b0a07cf9fca25b0e54d54b5cfe87f41fed9abe99e507eeeca2b6acf14f2064495a922a30e8ef4a9b55f5ae6e3b01885701ce1b361decd8065ef2716bab65"}, &(0x7f0000000340)=0x6a)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8000)
socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x19}}, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000180001130600b580e20dca7e647000000000000a"], 0x1c}}, 0x0)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r7, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf250a0013657673696d0050000fe21b3964657673696d300000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048848}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="3b030000000000005000128008000100687372004400028008000200", @ANYRES32=0x0, @ANYBLOB="05000600e50000000a000400bbbbbbbbbbbb000008000100", @ANYRES16=r5, @ANYBLOB="050003000a0000000a000400ffffffffffff00000600050006000000"], 0x70}}, 0x48000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001100010028bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076657468315f766c616e00000000000048ff"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)

15.821673739s ago: executing program 0 (id=9505):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, 0x0, 0x0) (async)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000a00)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESOCT], 0x20}, 0x1, 0x7}, 0x4000810) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140), <r2=>0x0, 0x4003c, &(0x7f0000000440), 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000500), 0x8, 0x64, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) (async)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) (async)
socket$igmp6(0xa, 0x3, 0x2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r5=>0x0}) (async)
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x1, 0x6, 0x0, 0x100, 0x2, 0x500000})
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180104, r5}) (async)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x0, 0xffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180017000000000029000000370000008900000000000000e6a98b4396d3332853eb463fc990373f8ab8dfd18b84d0df6de19a02ae831122fced2786dfd2e15b7a8e541693ed71764aabb03458995868f2f73b77b76f24aeae91191cc1ac1d55e779fd2e3ccb1148e2b5738e98fdebed2c"], 0x18}}], 0x1, 0x400c0c4) (async)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="adea08c7beef905d069c564c90c2000000", 0x11) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x80000}, 0x10, r2}, 0x94) (async)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r6, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) (async)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18)
syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb08004520887000000000fd019078ac1e0001ac1414aa030090780324000045fc00000000000003010000ac1e0001e00000010702443c4f93e000000200000007ffffffff00000006ac1414bb00000009ac14140800000006ac1414aa00000005ffffffff00000000000000001eed5e820000"], 0x0)
r7 = socket$l2tp6(0xa, 0x2, 0x73)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
getpeername$l2tp6(r7, &(0x7f0000000040), 0x0) (async)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mreqn(r9, 0x0, 0x20, &(0x7f0000000040)={@empty, @broadcast}, 0x0) (async)
r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r11, &(0x7f0000000200), 0x12) (async)
bind$x25(r10, &(0x7f0000000080), 0x12)
ioctl$sock_ifreq(r8, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6})

15.719979422s ago: executing program 0 (id=9506):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYBLOB="79d317a52e50da2d9c4151354e7b822383755c8447ab0be0e5316f69005f6a85111ab5303ee69ca56a2fdd09cb076d9e6b62266cf4f4457db9aa622e1d1fca791c44ebe42531fee4252eb6e644c3f48a30b2026c678804d6565c3c145b44c6fce9c01c1ec65a3777041cdb2196d2987f26103724d3e5437b1841ddb628504e08b44dd4bacaf2887bc4f2f2ca18fbd32b537b65bff78998c34820e13989eec507c6a14d8fd8d61a8c72ed56bdb038c3e096b0e1177b53561ae9717ac9e946c6561094523a21f772af30810a9510351a8468b636d4c5cfaee938c2b2ac694d089193b3d7c7acccf6a416675d520857c3109fd29e87eeae"], 0x38}, 0x1, 0x0, 0x0, 0x4048014}, 0x40004000)

15.716308582s ago: executing program 0 (id=9507):
syz_emit_ethernet(0x82, &(0x7f0000000400)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @multicast2, {0x16, 0x4, 0x0, 0x4, 0x0, 0x64, 0x0, 0x1, 0x11, 0x7, @empty, @dev={0xac, 0x14, 0x14, 0x15}, {[@cipso={0x86, 0x6, 0xfffffffffffffffe}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1=0xe000002f}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x40000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@multicast2}, {@rand_addr=0x80, 0x4}, {@private=0xa010102, 0x1}]}]}}}}}}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0xfd, 0x0, 0x0, 0x1, 0xc}}, 0x1c}, 0x1, 0x0, 0x0, 0x40488d4}, 0x20044840)
syz_emit_ethernet(0x82, &(0x7f0000000400)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @multicast2, {0x16, 0x4, 0x0, 0x4, 0x0, 0x64, 0x0, 0x1, 0x11, 0x7, @empty, @dev={0xac, 0x14, 0x14, 0x15}, {[@cipso={0x86, 0x6, 0xfffffffffffffffe}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1=0xe000002f}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x40000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@multicast2}, {@rand_addr=0x80, 0x4}, {@private=0xa010102, 0x1}]}]}}}}}}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0xfd, 0x0, 0x0, 0x1, 0xc}}, 0x1c}, 0x1, 0x0, 0x0, 0x40488d4}, 0x20044840) (async)

15.695916016s ago: executing program 0 (id=9508):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x33}]}, 0x24}}, 0x48850)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r2)
sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8800)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780))
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000400)={@private, @local, <r5=>0x0}, &(0x7f0000000480)=0xc)
sendmsg$nl_route_sched(r1, &(0x7f0000002b00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000001880)=@deltfilter={0x1214, 0x2d, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x8, 0x3}, {0xfff1, 0x2}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x3e}}, @TCA_RATE={0x6, 0x5, {0x81, 0x6}}, @filter_kind_options=@f_fw={{0x7}, {0x87c, 0x2, [@TCA_FW_POLICE={0x840, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7f}, @TCA_POLICE_RATE={0x404, 0x2, [0xe, 0xffff, 0x2, 0x4, 0xffff, 0x866, 0x2, 0x3, 0x4, 0xac7d, 0x1, 0x6, 0x3, 0xee, 0x7f, 0x7, 0x1, 0x2, 0x1ff, 0x7, 0x6, 0x0, 0x6, 0xb, 0x1, 0x3ff, 0xc4, 0xfffffffb, 0x8, 0x5, 0x9, 0x6bc40000, 0x8, 0x4, 0x3, 0x8, 0x6, 0x100, 0x6, 0xc, 0x6, 0x9, 0x9, 0x2, 0x7, 0x8000, 0xffff, 0x7, 0x7fff, 0x3, 0x64b, 0x6, 0x1, 0x101, 0xbf, 0x2, 0x7, 0x2, 0xff, 0x2, 0x3, 0x4, 0x0, 0x6, 0x6, 0x7, 0x4, 0x400, 0xff, 0x5, 0x67fd, 0x8, 0x5, 0x8, 0x3, 0x0, 0x2, 0x256ecc82, 0x73c, 0x3, 0x8, 0x0, 0x8, 0xff, 0x9, 0x9, 0x7fff, 0x2, 0x8, 0x0, 0x10, 0xfffffff7, 0xfffffff8, 0x8fd, 0x2, 0x3060, 0x0, 0x5, 0x10, 0x9, 0x81, 0x200, 0x9, 0x6, 0x2, 0x9, 0x8a, 0x0, 0x7, 0x7, 0x82a, 0x88e, 0x9, 0x400, 0x9, 0x9, 0xbd3, 0x3, 0x8, 0xf, 0x4, 0x4, 0xb3d, 0x9, 0x6, 0x0, 0x80000001, 0x7, 0x7ff, 0x10001, 0x8, 0x7fffffff, 0x80000001, 0x2d2, 0x8, 0x9, 0x3, 0x3, 0x0, 0x7, 0x3, 0x103, 0x40, 0x7f, 0x0, 0x0, 0x9, 0x0, 0x2, 0x1, 0xffffffff, 0x1, 0x4, 0x9, 0x2, 0x6, 0xfffffffb, 0x5, 0x0, 0x9f, 0x200, 0xf, 0xb, 0x94, 0x4, 0x509, 0x10000, 0x80, 0xe, 0x9, 0x2, 0xffffffff, 0x63a7, 0x0, 0x1, 0x3, 0xc367, 0x11, 0xfffffffe, 0x9, 0x1, 0x7fff, 0x4ec5, 0x9, 0xd, 0x5, 0x8, 0x6, 0x2, 0x9, 0x7, 0x81, 0x9, 0x0, 0x6, 0x7, 0x8, 0x0, 0xd1, 0x3f7f, 0xc60, 0xfa, 0x9, 0x6000, 0xff, 0x6bf, 0x5, 0xdd, 0x3c7, 0x2, 0x7, 0x3, 0x2b84, 0xdcb6, 0x5, 0x100, 0x7, 0x81, 0x7, 0xff, 0x5, 0x6, 0xe, 0x6, 0x2, 0xc0, 0x6, 0xfffffffc, 0x9, 0x3e57, 0x466, 0x4, 0xf9, 0x8, 0x4, 0x9, 0x3, 0x5, 0x1000, 0x5, 0x9, 0x7, 0x4, 0x9, 0x558, 0x6, 0xfffffff8, 0x5, 0x8, 0x5, 0x5, 0x7f, 0x7, 0x2, 0xfff, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x0, 0x7, 0x6, 0x4, 0xffffff00, 0x80000000, 0x400, 0x1, 0x6, 0x5, 0x4, 0x0, 0xffffffff, 0x7, 0x100, 0xfff, 0xda, 0x7fff, 0x9, 0x6, 0xf, 0x7f, 0x4, 0xfffffff8, 0x7, 0xdff, 0x0, 0x1, 0xd, 0x6, 0xfff, 0x800, 0x80000000, 0x5, 0x9a5, 0x80, 0x0, 0x4, 0x5f5, 0x10001, 0x3, 0x5, 0x100, 0x0, 0x7, 0x4f, 0x1, 0x3, 0x7, 0x14, 0x143, 0x7, 0x4, 0x8, 0x7b55, 0x9, 0x2, 0x8, 0x7ff, 0x2, 0x8, 0x7, 0x1, 0xfff, 0x7, 0x1000, 0x3, 0x7f, 0x3498, 0x2, 0x8, 0x6, 0xd43, 0x4, 0x8, 0x3, 0x3, 0x7, 0x8fdb, 0x61, 0x1000, 0x80000000, 0x100, 0x0, 0x40, 0x8, 0x5, 0x4, 0x10001, 0x9, 0x400, 0x800, 0xffff86f4, 0x465a60c8, 0x3, 0xa9c, 0xd39e, 0x7, 0x8, 0x9, 0x9, 0x4, 0x5, 0x81, 0xe214, 0x3, 0x6619, 0x0, 0x8, 0x4, 0x401, 0x9, 0x6, 0x3, 0x9, 0x958, 0x8, 0xd1, 0x5, 0xfffffff7, 0x4, 0x3, 0x7, 0x6, 0x3ff, 0x4a, 0x10000000, 0x5, 0xe, 0x3, 0xda1, 0xffff, 0xc00, 0x9, 0x4, 0x6, 0xe3, 0x0, 0x1, 0xfffffff9, 0x948b, 0x1, 0x3, 0xfff, 0x3, 0x8, 0x0, 0x4, 0xdcd0, 0x1, 0xe, 0x8, 0x478459f, 0xff, 0x0, 0xb4d, 0xffffff7f, 0x2, 0x3, 0x3, 0x5, 0x7, 0x2, 0x5, 0x1, 0x7, 0x4, 0x80000000, 0x166, 0x0, 0x3339, 0x0, 0xa, 0x8, 0x0, 0x401, 0xffffff86, 0x7fff, 0x8, 0x0, 0x3, 0x5, 0x0, 0x9, 0xfffffff3, 0x634, 0x0, 0x4, 0x4, 0x6, 0x8, 0x6, 0xff, 0x4, 0xf8, 0x6, 0x1dd, 0x5, 0x2, 0xffff, 0x6, 0xffffac71, 0x6, 0x5, 0xb7, 0x800, 0xe, 0x9, 0xb1e, 0x3, 0x6, 0x0, 0x9, 0x100, 0x5, 0x6d71, 0x20000, 0x2, 0x200, 0x5, 0x9, 0xca6, 0x0, 0xd, 0x71, 0xd, 0x8, 0x6, 0x6, 0x0, 0xb644, 0xfff, 0xa00, 0x9, 0x3, 0x5, 0xad31, 0x100, 0x1ff, 0x94, 0x0, 0x5, 0x7, 0x1000, 0x552, 0x9, 0x8, 0x9, 0x7fff, 0x5, 0x3ff, 0x1, 0x7, 0xb, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80}, @TCA_POLICE_RATE64={0xc, 0x8, 0xff}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x1, 0xfff1}}, @TCA_FW_CLASSID={0x8, 0x1, {0x8, 0x5}}, @TCA_FW_POLICE={0x14, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}]}, @TCA_FW_INDEV={0x14, 0x3, 'syzkaller1\x00'}]}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x16}]}}, @filter_kind_options=@f_route={{0xa}, {0x8d0, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x45}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xf1}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xc, 0x2}}, @TCA_ROUTE4_POLICE={0x8ac, 0x5, [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3ff, 0x20000000, 0x70, 0x2, 0x4, {0x7, 0x1, 0x400, 0x7ff, 0x1ff, 0x8}, {0x9, 0x3, 0x2, 0x200, 0x8ee, 0x600000}, 0x8, 0x7, 0x10}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x100}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4e2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x200000}, @TCA_POLICE_RATE={0x404, 0x2, [0xe6, 0x1, 0x4, 0xff, 0x6, 0x101, 0x6, 0x8, 0x1, 0x91, 0x3, 0x5, 0x3, 0x1, 0x2, 0x3, 0x1a8a, 0x5, 0xfffffffc, 0x6, 0xe825, 0x7, 0x1, 0x8, 0x8, 0x3, 0x7, 0x2, 0x401, 0x7, 0x2, 0x3, 0x0, 0x2, 0xfffffff8, 0x80, 0x3, 0x0, 0xfffffffd, 0xe4, 0x4, 0x8b59, 0xee, 0x9, 0x7fffffff, 0x8, 0xffffffff, 0x6, 0x80000000, 0x80000000, 0xe0fb, 0x1, 0x80, 0x0, 0x5, 0xb0b, 0xfffffffa, 0x3, 0x7d, 0xfffffffc, 0x80000001, 0x1, 0xde, 0xce6, 0xff, 0x3ff, 0x2, 0x8, 0xfffffff8, 0x9, 0x5, 0xb40, 0xffffff80, 0x80000001, 0x100, 0x7f0, 0x9, 0x1, 0x6, 0x2, 0x6, 0x100, 0x3, 0x1ff, 0x4fb0, 0x0, 0x9, 0x2, 0xfffffff5, 0x5, 0x8001, 0x3ff, 0x100, 0x9, 0x6, 0x3, 0x6, 0x0, 0x67, 0x1ff, 0x51, 0x182, 0x7, 0x3, 0x7500000, 0x0, 0x7fffffff, 0x5, 0x1, 0x7fff, 0x2, 0x10001, 0xf9, 0xfb1, 0x200, 0xfae3, 0x8, 0x3, 0x101, 0x400, 0x9, 0x7ff, 0x1, 0x6, 0x3c31a4bf, 0x8, 0x974, 0x1, 0xc7, 0x8001, 0x3, 0xf, 0x92, 0x9, 0x5d6e2bc0, 0x0, 0x2, 0x6, 0x2, 0x80000000, 0x3, 0x1, 0x2, 0x91, 0x8, 0x6, 0x8, 0x1, 0x4, 0x200, 0x6, 0x2, 0x0, 0x1, 0x9, 0x1000, 0x7, 0x736b, 0x4a94, 0x2, 0x3, 0x63, 0x7, 0x2b, 0x7f, 0x4e44, 0xd03, 0x200, 0x2, 0x6, 0x5, 0x9, 0xa, 0xc4, 0x365, 0xcd, 0x7, 0xffffff0b, 0x9, 0x10000, 0x0, 0x7fffffff, 0x3, 0x1, 0x9, 0xfffffff9, 0x2, 0x80000001, 0xfb, 0x5c01, 0x101, 0x4, 0x80000001, 0x5, 0x40, 0x9, 0xffff4df0, 0x3, 0x400, 0xcc, 0x5, 0xd58, 0x44, 0x3, 0x9, 0x3, 0x5, 0x9, 0x3, 0xa4, 0x2, 0x4, 0x9, 0xa, 0xf00000, 0x1, 0x10001, 0x7f, 0x7fff, 0xfffffffe, 0x9, 0x3ff, 0xfffffbff, 0xffffffab, 0x1000, 0x10001, 0x10000, 0x9, 0x3, 0x1, 0x8, 0xf9db, 0xfa0, 0xfffffff9, 0x9, 0x2, 0x8, 0x5, 0x80000, 0xfffffffb, 0x4, 0x3, 0x8, 0x7, 0x100, 0x49, 0x3, 0x6, 0x3, 0x2, 0x3, 0x7, 0xd, 0x1, 0x1, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40, 0x9, 0x2, 0xa063, 0x7, 0x3, 0x8, 0x6, 0x40, 0x4, 0xf, 0x1, 0x1, 0x7, 0x0, 0x8, 0x1, 0xffffffff, 0x61, 0x9d7, 0x8, 0x0, 0x7, 0x350, 0x2, 0x7, 0xe, 0x2, 0x790ba9d7, 0x5, 0x50, 0x7, 0x0, 0x4, 0x7, 0x5, 0x100, 0xa6e, 0x69, 0x6, 0x1, 0x7fff, 0x0, 0x5, 0x60000000, 0x4, 0x51, 0x3, 0x4, 0x7, 0xfff, 0xc82c, 0x3, 0x101, 0x6ef7, 0x6, 0x8, 0x2, 0xff, 0x4, 0x7, 0xe, 0x5, 0x6, 0x8, 0x4, 0x0, 0x7, 0xffffff81, 0x0, 0x0, 0x4, 0x7, 0x2, 0xfffffffc, 0xffffffff, 0x2, 0x3, 0xfffffff8, 0xe05a, 0x6, 0xf20, 0xffffffef, 0x1ff, 0x2, 0xffff, 0xc9, 0x80000001, 0x3, 0x200, 0x3, 0x0, 0x1, 0xdaeb, 0x7, 0xe89, 0x10, 0x4, 0x5, 0x49, 0x80, 0x4, 0x80000001, 0xb01, 0x1, 0x9, 0xb, 0x7, 0xfc, 0x5a, 0x6, 0x8, 0x3, 0x0, 0x6, 0x0, 0x1, 0xedd4, 0x800, 0x739, 0x6, 0xfffffffe, 0x3, 0x4, 0x8, 0x1, 0xd, 0xee9, 0x9, 0xccd, 0xf, 0x9, 0x80, 0x4ec, 0x9, 0x7, 0x8000, 0x9, 0x7, 0x4, 0x9, 0x8000, 0xfffffff5, 0xffff, 0x8, 0x81, 0x7f, 0x2, 0x1dd5, 0x9, 0x1, 0x101, 0xffffff00, 0x401, 0x101, 0x80000001, 0x0, 0x9853, 0x9, 0x1, 0x3, 0x7, 0x3, 0xd, 0x4642992d, 0x8, 0x2, 0xc, 0x3, 0xa2a1, 0x2, 0x2, 0x940, 0x13, 0xf12, 0x0, 0x0, 0x3, 0x4, 0x3906, 0x400, 0x2, 0x3, 0xffffffff, 0x80000, 0x9, 0x81, 0x9, 0x8, 0x0, 0xfffffc00, 0x1, 0x7, 0x1, 0x0, 0x1, 0x64, 0x3, 0x0, 0x400, 0x9ac, 0xffff, 0xad9, 0x2, 0x0, 0x0, 0x2b, 0x800, 0x9, 0x8, 0x0, 0xb, 0xfffff000, 0x4, 0x7, 0x4, 0x15d2, 0x8, 0x0, 0x2, 0x6, 0x435, 0x38d, 0x0, 0x2, 0x2, 0x800, 0x0, 0x0, 0x98d0, 0x0, 0xa, 0x9, 0xfffffffe, 0x77, 0xe, 0x1, 0x8, 0xfff, 0xffffffff, 0x0, 0x7, 0x7, 0x7, 0x6, 0x398d, 0xa, 0x8001, 0x2, 0x2, 0x1, 0x7a4d, 0x161, 0x7f, 0x80000000, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc55, 0xffffffffffffffff, 0x8, 0xf, 0x2, {0x9, 0x0, 0x6, 0xa, 0xb, 0xfffffff8}, {0x9, 0x1, 0x1, 0x2, 0x8a5, 0x4}, 0xcb, 0x3, 0x8000}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xb9}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xffffff00, 0x0, 0xff000000, 0xffffffff]}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x2}, @TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0xca}]}}]}, 0x1214}, 0x1, 0x0, 0x0, 0x20000001}, 0x10040000)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0xc}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x28, 0xfffc, 0x0, 0x2, 0x0, 0x0, 0x67}, {0xfffffffffffffff8, 0x400000000001, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffff190, 0x80000}, {0x3, 0x0, 0x80, 0x2}, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x4, 0x0, 0x0, 0xe000000}}, 0xe8)
listen(r6, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x100}}}}}}, 0x0)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x11, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x300}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x17}}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1011, &(0x7f0000000840)=""/4113, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00')
r9 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r9, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x56401, 0xfffffbfc, 0x8, 0x3, 0x3}, 0x1c)
r10 = socket$kcm(0x2, 0x3, 0x84)
r11 = socket$inet(0x2, 0x5, 0xe6d)
getsockopt$inet_buf(r11, 0x0, 0x2b, &(0x7f0000002b40)=""/4096, &(0x7f0000003b40)=0x1000)
sendmsg$inet(r10, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000c"], 0x68}, 0x0)
r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.io_queued\x00', 0x0, 0x0)
sendmsg$IPSET_CMD_GET_BYINDEX(r12, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0xf, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048840}, 0x44800)
getpid()
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x6, 0xb, 0x0, 0x0, @str='{\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84)

15.441714396s ago: executing program 2 (id=9509):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x2, 0x5, 0x4, 0x854b, 0xd8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r10 = socket$unix(0x1, 0x5, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x4, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
close(r9)
r13 = socket$unix(0x1, 0x1, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r15=>0x0})
sendmsg$nl_route_sched(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r15, {}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x0, 0x2, {0x4, 0x1, 0xfffffffa}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)

2.040596544s ago: executing program 32 (id=9491):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000580)={<r1=>0x0, 0xcd8c, 0xfe, 0x2, 0x6, 0x8, 0x7ff, 0x1, {0x0, @in6={{0xa, 0x4e21, 0x8, @local, 0xfffffff9}}, 0xcb2, 0x8, 0xffffff80, 0x80000000, 0x1}}, &(0x7f0000000640)=0xb0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000680)={r1, 0x82, "fb0c47ccc870502040bea64528055205c8453fef65c89256528f8436e4693aaef6e1e7eed73170901bf230a70c5bb618975808346bc21bc7e18f5486d1606c318b3cfa6b7b4efe786470e8e9e6cd4eb6107a9c1d86ed5539a8d2d2500b854053bba227d7bafa5fa0f7266c9842972c3f88500dfe200e4bc5b3f8556592cf43954a40"}, &(0x7f0000000740)=0x8a)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$kcm(0x15, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x114, 0x3, 0x0, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000400)={'sit0\x00', <r5=>0x0, 0x10, 0x80, 0x4, 0x8, {{0xb, 0x4, 0x1, 0x8, 0x2c, 0x64, 0x0, 0xb, 0x4, 0x0, @private=0xa010100, @multicast2, {[@cipso={0x86, 0x18, 0x0, [{0x6, 0xe, "0abc9b9b8c5996bfb67d1bba"}, {0x0, 0x4, "eb6b"}]}]}}}}})
sendmsg$nl_route(r4, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001000000128bd7000fcdbdf2500000000", @ANYRES32=r5, @ANYBLOB="00040002000000"], 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x40001)
sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800)
r6 = socket(0x10, 0x3, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt(r8, 0x400000000000003a, 0x1, 0x0, 0x0)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x28, r9, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xce2}]}, 0x28}}, 0x4000000)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10)
write(r6, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c)
r10 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', <r11=>0x0, 0x40, 0x20, 0x8, 0x6, {{0x9, 0x4, 0x2, 0x25, 0x24, 0x64, 0x0, 0x3, 0x29, 0x0, @remote, @rand_addr=0x64010101, {[@generic={0x44, 0xf, "37cf010c80d952c1e7cef44021"}]}}}}})
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@deltclass={0x70, 0x29, 0x1, 0x70bd2c, 0x25dfdbf8, {0x0, 0x0, 0x0, r11, {0x8, 0xa}, {0x4, 0x2}, {0xfff3, 0xc}}, [@tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x80, 0x5}}, @tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000090}, 0x2004400d)
r12 = socket(0x400000000010, 0x3, 0x0)
r13 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0xa4, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, {0x8, 0xf}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0x7, 0x4, 0x5, 0x8, 0x0, 0x2, 0x7ff, 0x2b, [{0xfffffff7, 0xcf, 0xffffb44b, 0x4}, {0x9, 0x400, 0x2, 0x8}, {0x8, 0x400, 0x3, 0xfffffff7}, {0x6, 0x6, 0x7fff, 0x51f3}, {0x3ff, 0xffff, 0x1}]}}, @TCA_U32_MARK={0x10, 0xa, {0x8, 0x4}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newtfilter={0x7c, 0x2c, 0x100, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x10, 0x4}, {0x10, 0x3}, {0xf, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0xfff2}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0xfff1}}]}}, @TCA_RATE={0x6, 0x5, {0x62, 0xc}}, @filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xac, 0x1}}]}, 0x7c}}, 0x0)
r15 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000010829bdb422f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2e2002000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014)

1.027928631s ago: executing program 33 (id=9498):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd504001000000ee12000008000300", @ANYRES32=r2, @ANYBLOB="08003200050000000500330001000000"], 0x2c}}, 0x18) (async)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd504001000000ee12000008000300", @ANYRES32=r2, @ANYBLOB="08003200050000000500330001000000"], 0x2c}}, 0x18)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
socket(0x10, 0x803, 0x0) (async)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r5, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="140006"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) (async)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r5, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="140006"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010)
socket(0x10, 0x3, 0x0) (async)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r11=>0x0})
socket$unix(0x1, 0x1, 0x0)
socket$inet6(0xa, 0x3, 0x5) (async)
socket$inet6(0xa, 0x3, 0x5)
r12 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x22020400)
sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x200088c4)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r13, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r14, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) (async)
sendmsg$NL80211_CMD_RELOAD_REGDB(r13, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r14, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004)
sendmmsg(r13, &(0x7f00000000c0), 0x4000000000000d2, 0x8048848)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r11], 0x20}}, 0x8080)

17.829549ms ago: executing program 34 (id=9508):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x33}]}, 0x24}}, 0x48850)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r2)
sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8800)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780))
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000400)={@private, @local, <r5=>0x0}, &(0x7f0000000480)=0xc)
sendmsg$nl_route_sched(r1, &(0x7f0000002b00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000001880)=@deltfilter={0x1214, 0x2d, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x8, 0x3}, {0xfff1, 0x2}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x3e}}, @TCA_RATE={0x6, 0x5, {0x81, 0x6}}, @filter_kind_options=@f_fw={{0x7}, {0x87c, 0x2, [@TCA_FW_POLICE={0x840, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7f}, @TCA_POLICE_RATE={0x404, 0x2, [0xe, 0xffff, 0x2, 0x4, 0xffff, 0x866, 0x2, 0x3, 0x4, 0xac7d, 0x1, 0x6, 0x3, 0xee, 0x7f, 0x7, 0x1, 0x2, 0x1ff, 0x7, 0x6, 0x0, 0x6, 0xb, 0x1, 0x3ff, 0xc4, 0xfffffffb, 0x8, 0x5, 0x9, 0x6bc40000, 0x8, 0x4, 0x3, 0x8, 0x6, 0x100, 0x6, 0xc, 0x6, 0x9, 0x9, 0x2, 0x7, 0x8000, 0xffff, 0x7, 0x7fff, 0x3, 0x64b, 0x6, 0x1, 0x101, 0xbf, 0x2, 0x7, 0x2, 0xff, 0x2, 0x3, 0x4, 0x0, 0x6, 0x6, 0x7, 0x4, 0x400, 0xff, 0x5, 0x67fd, 0x8, 0x5, 0x8, 0x3, 0x0, 0x2, 0x256ecc82, 0x73c, 0x3, 0x8, 0x0, 0x8, 0xff, 0x9, 0x9, 0x7fff, 0x2, 0x8, 0x0, 0x10, 0xfffffff7, 0xfffffff8, 0x8fd, 0x2, 0x3060, 0x0, 0x5, 0x10, 0x9, 0x81, 0x200, 0x9, 0x6, 0x2, 0x9, 0x8a, 0x0, 0x7, 0x7, 0x82a, 0x88e, 0x9, 0x400, 0x9, 0x9, 0xbd3, 0x3, 0x8, 0xf, 0x4, 0x4, 0xb3d, 0x9, 0x6, 0x0, 0x80000001, 0x7, 0x7ff, 0x10001, 0x8, 0x7fffffff, 0x80000001, 0x2d2, 0x8, 0x9, 0x3, 0x3, 0x0, 0x7, 0x3, 0x103, 0x40, 0x7f, 0x0, 0x0, 0x9, 0x0, 0x2, 0x1, 0xffffffff, 0x1, 0x4, 0x9, 0x2, 0x6, 0xfffffffb, 0x5, 0x0, 0x9f, 0x200, 0xf, 0xb, 0x94, 0x4, 0x509, 0x10000, 0x80, 0xe, 0x9, 0x2, 0xffffffff, 0x63a7, 0x0, 0x1, 0x3, 0xc367, 0x11, 0xfffffffe, 0x9, 0x1, 0x7fff, 0x4ec5, 0x9, 0xd, 0x5, 0x8, 0x6, 0x2, 0x9, 0x7, 0x81, 0x9, 0x0, 0x6, 0x7, 0x8, 0x0, 0xd1, 0x3f7f, 0xc60, 0xfa, 0x9, 0x6000, 0xff, 0x6bf, 0x5, 0xdd, 0x3c7, 0x2, 0x7, 0x3, 0x2b84, 0xdcb6, 0x5, 0x100, 0x7, 0x81, 0x7, 0xff, 0x5, 0x6, 0xe, 0x6, 0x2, 0xc0, 0x6, 0xfffffffc, 0x9, 0x3e57, 0x466, 0x4, 0xf9, 0x8, 0x4, 0x9, 0x3, 0x5, 0x1000, 0x5, 0x9, 0x7, 0x4, 0x9, 0x558, 0x6, 0xfffffff8, 0x5, 0x8, 0x5, 0x5, 0x7f, 0x7, 0x2, 0xfff, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x0, 0x7, 0x6, 0x4, 0xffffff00, 0x80000000, 0x400, 0x1, 0x6, 0x5, 0x4, 0x0, 0xffffffff, 0x7, 0x100, 0xfff, 0xda, 0x7fff, 0x9, 0x6, 0xf, 0x7f, 0x4, 0xfffffff8, 0x7, 0xdff, 0x0, 0x1, 0xd, 0x6, 0xfff, 0x800, 0x80000000, 0x5, 0x9a5, 0x80, 0x0, 0x4, 0x5f5, 0x10001, 0x3, 0x5, 0x100, 0x0, 0x7, 0x4f, 0x1, 0x3, 0x7, 0x14, 0x143, 0x7, 0x4, 0x8, 0x7b55, 0x9, 0x2, 0x8, 0x7ff, 0x2, 0x8, 0x7, 0x1, 0xfff, 0x7, 0x1000, 0x3, 0x7f, 0x3498, 0x2, 0x8, 0x6, 0xd43, 0x4, 0x8, 0x3, 0x3, 0x7, 0x8fdb, 0x61, 0x1000, 0x80000000, 0x100, 0x0, 0x40, 0x8, 0x5, 0x4, 0x10001, 0x9, 0x400, 0x800, 0xffff86f4, 0x465a60c8, 0x3, 0xa9c, 0xd39e, 0x7, 0x8, 0x9, 0x9, 0x4, 0x5, 0x81, 0xe214, 0x3, 0x6619, 0x0, 0x8, 0x4, 0x401, 0x9, 0x6, 0x3, 0x9, 0x958, 0x8, 0xd1, 0x5, 0xfffffff7, 0x4, 0x3, 0x7, 0x6, 0x3ff, 0x4a, 0x10000000, 0x5, 0xe, 0x3, 0xda1, 0xffff, 0xc00, 0x9, 0x4, 0x6, 0xe3, 0x0, 0x1, 0xfffffff9, 0x948b, 0x1, 0x3, 0xfff, 0x3, 0x8, 0x0, 0x4, 0xdcd0, 0x1, 0xe, 0x8, 0x478459f, 0xff, 0x0, 0xb4d, 0xffffff7f, 0x2, 0x3, 0x3, 0x5, 0x7, 0x2, 0x5, 0x1, 0x7, 0x4, 0x80000000, 0x166, 0x0, 0x3339, 0x0, 0xa, 0x8, 0x0, 0x401, 0xffffff86, 0x7fff, 0x8, 0x0, 0x3, 0x5, 0x0, 0x9, 0xfffffff3, 0x634, 0x0, 0x4, 0x4, 0x6, 0x8, 0x6, 0xff, 0x4, 0xf8, 0x6, 0x1dd, 0x5, 0x2, 0xffff, 0x6, 0xffffac71, 0x6, 0x5, 0xb7, 0x800, 0xe, 0x9, 0xb1e, 0x3, 0x6, 0x0, 0x9, 0x100, 0x5, 0x6d71, 0x20000, 0x2, 0x200, 0x5, 0x9, 0xca6, 0x0, 0xd, 0x71, 0xd, 0x8, 0x6, 0x6, 0x0, 0xb644, 0xfff, 0xa00, 0x9, 0x3, 0x5, 0xad31, 0x100, 0x1ff, 0x94, 0x0, 0x5, 0x7, 0x1000, 0x552, 0x9, 0x8, 0x9, 0x7fff, 0x5, 0x3ff, 0x1, 0x7, 0xb, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80}, @TCA_POLICE_RATE64={0xc, 0x8, 0xff}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x1, 0xfff1}}, @TCA_FW_CLASSID={0x8, 0x1, {0x8, 0x5}}, @TCA_FW_POLICE={0x14, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}]}, @TCA_FW_INDEV={0x14, 0x3, 'syzkaller1\x00'}]}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x16}]}}, @filter_kind_options=@f_route={{0xa}, {0x8d0, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x45}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xf1}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xc, 0x2}}, @TCA_ROUTE4_POLICE={0x8ac, 0x5, [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3ff, 0x20000000, 0x70, 0x2, 0x4, {0x7, 0x1, 0x400, 0x7ff, 0x1ff, 0x8}, {0x9, 0x3, 0x2, 0x200, 0x8ee, 0x600000}, 0x8, 0x7, 0x10}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x100}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4e2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x200000}, @TCA_POLICE_RATE={0x404, 0x2, [0xe6, 0x1, 0x4, 0xff, 0x6, 0x101, 0x6, 0x8, 0x1, 0x91, 0x3, 0x5, 0x3, 0x1, 0x2, 0x3, 0x1a8a, 0x5, 0xfffffffc, 0x6, 0xe825, 0x7, 0x1, 0x8, 0x8, 0x3, 0x7, 0x2, 0x401, 0x7, 0x2, 0x3, 0x0, 0x2, 0xfffffff8, 0x80, 0x3, 0x0, 0xfffffffd, 0xe4, 0x4, 0x8b59, 0xee, 0x9, 0x7fffffff, 0x8, 0xffffffff, 0x6, 0x80000000, 0x80000000, 0xe0fb, 0x1, 0x80, 0x0, 0x5, 0xb0b, 0xfffffffa, 0x3, 0x7d, 0xfffffffc, 0x80000001, 0x1, 0xde, 0xce6, 0xff, 0x3ff, 0x2, 0x8, 0xfffffff8, 0x9, 0x5, 0xb40, 0xffffff80, 0x80000001, 0x100, 0x7f0, 0x9, 0x1, 0x6, 0x2, 0x6, 0x100, 0x3, 0x1ff, 0x4fb0, 0x0, 0x9, 0x2, 0xfffffff5, 0x5, 0x8001, 0x3ff, 0x100, 0x9, 0x6, 0x3, 0x6, 0x0, 0x67, 0x1ff, 0x51, 0x182, 0x7, 0x3, 0x7500000, 0x0, 0x7fffffff, 0x5, 0x1, 0x7fff, 0x2, 0x10001, 0xf9, 0xfb1, 0x200, 0xfae3, 0x8, 0x3, 0x101, 0x400, 0x9, 0x7ff, 0x1, 0x6, 0x3c31a4bf, 0x8, 0x974, 0x1, 0xc7, 0x8001, 0x3, 0xf, 0x92, 0x9, 0x5d6e2bc0, 0x0, 0x2, 0x6, 0x2, 0x80000000, 0x3, 0x1, 0x2, 0x91, 0x8, 0x6, 0x8, 0x1, 0x4, 0x200, 0x6, 0x2, 0x0, 0x1, 0x9, 0x1000, 0x7, 0x736b, 0x4a94, 0x2, 0x3, 0x63, 0x7, 0x2b, 0x7f, 0x4e44, 0xd03, 0x200, 0x2, 0x6, 0x5, 0x9, 0xa, 0xc4, 0x365, 0xcd, 0x7, 0xffffff0b, 0x9, 0x10000, 0x0, 0x7fffffff, 0x3, 0x1, 0x9, 0xfffffff9, 0x2, 0x80000001, 0xfb, 0x5c01, 0x101, 0x4, 0x80000001, 0x5, 0x40, 0x9, 0xffff4df0, 0x3, 0x400, 0xcc, 0x5, 0xd58, 0x44, 0x3, 0x9, 0x3, 0x5, 0x9, 0x3, 0xa4, 0x2, 0x4, 0x9, 0xa, 0xf00000, 0x1, 0x10001, 0x7f, 0x7fff, 0xfffffffe, 0x9, 0x3ff, 0xfffffbff, 0xffffffab, 0x1000, 0x10001, 0x10000, 0x9, 0x3, 0x1, 0x8, 0xf9db, 0xfa0, 0xfffffff9, 0x9, 0x2, 0x8, 0x5, 0x80000, 0xfffffffb, 0x4, 0x3, 0x8, 0x7, 0x100, 0x49, 0x3, 0x6, 0x3, 0x2, 0x3, 0x7, 0xd, 0x1, 0x1, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40, 0x9, 0x2, 0xa063, 0x7, 0x3, 0x8, 0x6, 0x40, 0x4, 0xf, 0x1, 0x1, 0x7, 0x0, 0x8, 0x1, 0xffffffff, 0x61, 0x9d7, 0x8, 0x0, 0x7, 0x350, 0x2, 0x7, 0xe, 0x2, 0x790ba9d7, 0x5, 0x50, 0x7, 0x0, 0x4, 0x7, 0x5, 0x100, 0xa6e, 0x69, 0x6, 0x1, 0x7fff, 0x0, 0x5, 0x60000000, 0x4, 0x51, 0x3, 0x4, 0x7, 0xfff, 0xc82c, 0x3, 0x101, 0x6ef7, 0x6, 0x8, 0x2, 0xff, 0x4, 0x7, 0xe, 0x5, 0x6, 0x8, 0x4, 0x0, 0x7, 0xffffff81, 0x0, 0x0, 0x4, 0x7, 0x2, 0xfffffffc, 0xffffffff, 0x2, 0x3, 0xfffffff8, 0xe05a, 0x6, 0xf20, 0xffffffef, 0x1ff, 0x2, 0xffff, 0xc9, 0x80000001, 0x3, 0x200, 0x3, 0x0, 0x1, 0xdaeb, 0x7, 0xe89, 0x10, 0x4, 0x5, 0x49, 0x80, 0x4, 0x80000001, 0xb01, 0x1, 0x9, 0xb, 0x7, 0xfc, 0x5a, 0x6, 0x8, 0x3, 0x0, 0x6, 0x0, 0x1, 0xedd4, 0x800, 0x739, 0x6, 0xfffffffe, 0x3, 0x4, 0x8, 0x1, 0xd, 0xee9, 0x9, 0xccd, 0xf, 0x9, 0x80, 0x4ec, 0x9, 0x7, 0x8000, 0x9, 0x7, 0x4, 0x9, 0x8000, 0xfffffff5, 0xffff, 0x8, 0x81, 0x7f, 0x2, 0x1dd5, 0x9, 0x1, 0x101, 0xffffff00, 0x401, 0x101, 0x80000001, 0x0, 0x9853, 0x9, 0x1, 0x3, 0x7, 0x3, 0xd, 0x4642992d, 0x8, 0x2, 0xc, 0x3, 0xa2a1, 0x2, 0x2, 0x940, 0x13, 0xf12, 0x0, 0x0, 0x3, 0x4, 0x3906, 0x400, 0x2, 0x3, 0xffffffff, 0x80000, 0x9, 0x81, 0x9, 0x8, 0x0, 0xfffffc00, 0x1, 0x7, 0x1, 0x0, 0x1, 0x64, 0x3, 0x0, 0x400, 0x9ac, 0xffff, 0xad9, 0x2, 0x0, 0x0, 0x2b, 0x800, 0x9, 0x8, 0x0, 0xb, 0xfffff000, 0x4, 0x7, 0x4, 0x15d2, 0x8, 0x0, 0x2, 0x6, 0x435, 0x38d, 0x0, 0x2, 0x2, 0x800, 0x0, 0x0, 0x98d0, 0x0, 0xa, 0x9, 0xfffffffe, 0x77, 0xe, 0x1, 0x8, 0xfff, 0xffffffff, 0x0, 0x7, 0x7, 0x7, 0x6, 0x398d, 0xa, 0x8001, 0x2, 0x2, 0x1, 0x7a4d, 0x161, 0x7f, 0x80000000, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc55, 0xffffffffffffffff, 0x8, 0xf, 0x2, {0x9, 0x0, 0x6, 0xa, 0xb, 0xfffffff8}, {0x9, 0x1, 0x1, 0x2, 0x8a5, 0x4}, 0xcb, 0x3, 0x8000}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xb9}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xffffff00, 0x0, 0xff000000, 0xffffffff]}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x2}, @TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0xca}]}}]}, 0x1214}, 0x1, 0x0, 0x0, 0x20000001}, 0x10040000)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0xc}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x28, 0xfffc, 0x0, 0x2, 0x0, 0x0, 0x67}, {0xfffffffffffffff8, 0x400000000001, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffff190, 0x80000}, {0x3, 0x0, 0x80, 0x2}, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x4, 0x0, 0x0, 0xe000000}}, 0xe8)
listen(r6, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x100}}}}}}, 0x0)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x11, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x300}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x17}}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1011, &(0x7f0000000840)=""/4113, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00')
r9 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r9, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x56401, 0xfffffbfc, 0x8, 0x3, 0x3}, 0x1c)
r10 = socket$kcm(0x2, 0x3, 0x84)
r11 = socket$inet(0x2, 0x5, 0xe6d)
getsockopt$inet_buf(r11, 0x0, 0x2b, &(0x7f0000002b40)=""/4096, &(0x7f0000003b40)=0x1000)
sendmsg$inet(r10, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000c"], 0x68}, 0x0)
r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.io_queued\x00', 0x0, 0x0)
sendmsg$IPSET_CMD_GET_BYINDEX(r12, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0xf, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048840}, 0x44800)
getpid()
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x6, 0xb, 0x0, 0x0, @str='{\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84)

0s ago: executing program 35 (id=9509):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x2, 0x5, 0x4, 0x854b, 0xd8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r10 = socket$unix(0x1, 0x5, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x4, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
close(r9)
r13 = socket$unix(0x1, 0x1, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r15=>0x0})
sendmsg$nl_route_sched(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r15, {}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x0, 0x2, {0x4, 0x1, 0xfffffffa}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)

kernel console output (not intermixed with test programs):

 mode
[  693.354181][ T6677] vlan4: entered promiscuous mode
[  693.359235][ T6677] veth1: entered promiscuous mode
[  693.731685][T30385] Bluetooth: hci2: command 0x0405 tx timeout
[  693.764329][ T6710] vxcan1: tx drop: invalid sa for name 0x0000000000000002
[  693.795999][ T6716] netlink: 'syz.2.8695': attribute type 1 has an invalid length.
[  693.937378][ T6732] syzkaller0: entered promiscuous mode
[  693.943508][ T6732] syzkaller0: entered allmulticast mode
[  694.323113][ T6774] xfrm1: entered allmulticast mode
[  694.626989][ T6813] syzkaller1: tun_chr_ioctl cmd 1074025673
[  694.681058][ T5744] syzkaller1: tun_net_xmit 90
[  706.300688][ T1044] dvmrp0: left allmulticast mode
[  706.307444][ T1044] tipc: Resetting bearer <eth:gre0>
[  706.450153][ T1044] gretap0 (unregistering): left allmulticast mode
[  706.464818][ T1044] tipc: Disabling bearer <eth:gre0>
[  706.477099][ T1044] bond15 (unregistering): (slave geneve3): Releasing active interface
[  706.499118][ T1044] bond1 (unregistering): (slave bridge1): Releasing backup interface
[  706.515614][ T1044] bond8 (unregistering): (slave bridge6): Releasing backup interface
[  706.524618][ T1044] bond8 (unregistering): (slave bridge6): the permanent HWaddr of slave - 02:6f:28:b4:4e:97 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  706.545704][ T1044] bond8 (unregistering): (slave bridge7): Releasing backup interface
[  706.560982][ T1044] bond1 (unregistering): Released all slaves
[  706.569843][ T1044] bond2 (unregistering): Released all slaves
[  706.581789][ T1044] bond3 (unregistering): Released all slaves
[  706.597354][ T1044] bond0 (unregistering): Released all slaves
[  706.606434][ T1044] bond4 (unregistering): Released all slaves
[  706.618143][ T1044] bond5 (unregistering): Released all slaves
[  706.629486][ T1044] bond6 (unregistering): Released all slaves
[  706.638554][ T1044] bond7 (unregistering): Released all slaves
[  706.647806][ T1044] bond8 (unregistering): Released all slaves
[  706.657124][ T1044] bond9 (unregistering): Released all slaves
[  706.672054][ T1044] bond10 (unregistering): (slave veth7): Releasing backup interface
[  706.680069][ T1044] veth7: left promiscuous mode
[  706.688579][ T1044] bond10 (unregistering): Released all slaves
[  706.698047][ T1044] bond11 (unregistering): Released all slaves
[  706.708177][ T1044] bond12 (unregistering): (slave bond13): Releasing backup interface
[  706.716337][ T1044] bond13 (unregistering): left promiscuous mode
[  706.723467][ T1044] bond12 (unregistering): Released all slaves
[  706.733043][ T1044] bond13 (unregistering): Released all slaves
[  706.745759][ T1044] bond14 (unregistering): Released all slaves
[  706.757728][ T1044] bond15 (unregistering): Released all slaves
[  706.768285][ T1044] bond16 (unregistering): Released all slaves
[  706.852266][ T1044] tipc: Left network mode
[  707.228721][ T1044] hsr_slave_0: left promiscuous mode
[  707.234915][ T1044] hsr_slave_1: left promiscuous mode
[  707.243236][ T1044] veth1_macvtap: left promiscuous mode
[  707.248698][ T1044] veth0_macvtap: left promiscuous mode
[  707.255348][ T1044] veth1_vlan: left allmulticast mode
[  707.260748][ T1044] veth1_vlan: left promiscuous mode
[  707.265965][ T1044] veth0_vlan: left promiscuous mode
[  707.395812][T10428] smc: removing ib device uyz0
[  707.424923][ T5744] uyz0: Port: 1 Link DOWN
[  707.433827][T10428] smbdirect: ib_dev[uyz0] removed
[  707.916187][ T1044] IPVS: stop unused estimator thread 0...
[  714.263995][ T6853] netlink: 'syz.2.8729': attribute type 1 has an invalid length.
[  714.277684][ T6853] __nla_validate_parse: 40 callbacks suppressed
[  714.277700][ T6853] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8729'.
[  714.485210][ T6886] syzkaller0: entered promiscuous mode
[  714.491537][ T6886] syzkaller0: entered allmulticast mode
[  714.500085][ T6886] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  714.540363][ T6896] netlink: 260 bytes leftover after parsing attributes in process `syz.0.8736'.
[  714.596242][ T6883] tipc: Resetting bearer <eth:syzkaller0>
[  714.605116][ T6883] tipc: Disabling bearer <eth:syzkaller0>
[  714.646476][ T6900] syzkaller0: entered promiscuous mode
[  714.652928][ T6900] syzkaller0: entered allmulticast mode
[  714.759446][ T6906] netlink: 5 bytes leftover after parsing attributes in process `syz.4.8742'.
[  714.768644][ T6906] 0ªî{X¹¦: renamed from gretap0
[  714.776558][ T6906] 0ªî{X¹¦: entered allmulticast mode
[  714.783781][ T6906] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  714.822593][ T6910] lo: entered allmulticast mode
[  714.832993][ T6910] lo: left allmulticast mode
[  715.053693][ T6914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8744'.
[  715.237764][ T6931] syzkaller1: entered promiscuous mode
[  715.247565][ T6931] syzkaller1: entered allmulticast mode
[  715.537493][ T6954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8753'.
[  715.564534][ T6954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8753'.
[  715.895874][ T6981] 8021q: VLANs not supported on wg2
[  715.966242][ T6984] netlink: 'syz.2.8758': attribute type 13 has an invalid length.
[  715.982421][ T6990] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8760'.
[  716.005939][ T6991] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8760'.
[  716.043571][ T6999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8761'.
[  716.156787][ T6999] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  716.195442][ T7009] syzkaller0: entered promiscuous mode
[  716.267819][ T7009] syzkaller0: entered allmulticast mode
[  716.277841][ T7023] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  716.335654][ T7023] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8765'.
[  716.377604][ T7023] netlink: 'syz.1.8765': attribute type 11 has an invalid length.
[  716.442785][ T7023] netlink: 'syz.1.8765': attribute type 11 has an invalid length.
[  716.456990][ T7044] netlink: 'syz.3.8768': attribute type 19 has an invalid length.
[  716.491448][ T7044] netlink: 'syz.3.8768': attribute type 19 has an invalid length.
[  721.011329][ T1766] block nbd1: Possible stuck request ffff888092080380: control (read@2048,1024B). Runtime 60 seconds
[  721.023097][ T1766] block nbd1: Possible stuck request ffff888092080540: control (read@3072,1024B). Runtime 60 seconds
[  721.034069][ T1766] block nbd1: Possible stuck request ffff888092080000: control (read@0,1024B). Runtime 60 seconds
[  721.045036][ T1766] block nbd1: Possible stuck request ffff8880920801c0: control (read@1024,1024B). Runtime 60 seconds
[  722.629859][ T4987] udevd[4987]: worker [2441] /devices/virtual/block/nbd1 is taking a long time
[  737.019653][T10452] veth1_virt_wifi: left allmulticast mode
[  737.179740][T10452] bond4 (unregistering): (slave geneve3): Releasing active interface
[  737.238839][T10452] .` (unregistering): Released all slaves
[  737.261015][T10452] bond1 (unregistering): Released all slaves
[  737.272494][T10452] bond0 (unregistering): Released all slaves
[  737.286496][T10452] bond2 (unregistering): Released all slaves
[  737.301718][T10452] bond3 (unregistering): Released all slaves
[  737.323697][T10452] bond4 (unregistering): Released all slaves
[  737.332945][T10452] bond5 (unregistering): Released all slaves
[  737.344814][T10452] bond6 (unregistering): Released all slaves
[  737.354118][T10452] bond7 (unregistering): Released all slaves
[  737.363944][T10452] bond8 (unregistering): Released all slaves
[  737.373208][T10452] bond9 (unregistering): Released all slaves
[  737.382527][T10452] bond10 (unregistering): Released all slaves
[  737.444786][T10452] tipc: Disabling bearer <udp:syz0>
[  737.450263][T10452] tipc: Left network mode
[  737.823171][ T7149] __nla_validate_parse: 3 callbacks suppressed
[  737.823189][ T7149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8772'.
[  737.871952][ T7155] erspan0: left allmulticast mode
[  737.890879][ T7155] erspan0: left promiscuous mode
[  737.908105][ T7155] bridge9: port 1(erspan0) entered disabled state
[  737.949832][ T7155] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  737.958176][ T7165] netlink: 'syz.1.8773': attribute type 3 has an invalid length.
[  737.987131][ T7165] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8773'.
[  738.172880][ T7186] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8783'.
[  738.273252][ T7200] nbd: nbd2 already in use
[  738.278253][ T7200] block nbd2: NBD_DISCONNECT
[  738.285996][ T7200] block nbd2: Send disconnect failed -104
[  738.296821][ T7200] block nbd2: shutting down sockets
[  738.737215][ T7200] syzkaller0: entered promiscuous mode
[  738.751005][ T7200] syzkaller0: entered allmulticast mode
[  738.777552][ T7228] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8792'.
[  738.973437][ T7239] netlink: 'syz.4.8793': attribute type 11 has an invalid length.
[  739.444048][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8803'.
[  739.528651][T10452] veth0_macvtap: left promiscuous mode
[  739.537943][ T7283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8804'.
[  739.542381][T10452] veth1_vlan: left promiscuous mode
[  739.563877][T10452] veth0_vlan: left promiscuous mode
[  739.588320][ T7283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8804'.
[  739.987685][ T7278] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  740.063402][ T7285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8804'.
[  740.140951][ T7299] vlan2: entered promiscuous mode
[  740.158645][ T7299] veth0: entered promiscuous mode
[  740.231917][ T7298] vlan2: entered promiscuous mode
[  740.337810][T10452] IPVS: stop unused estimator thread 0...
[  740.393934][ T7315] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8809'.
[  740.429944][T30385] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  740.439950][T30385] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  740.448397][T30385] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  740.459842][T30385] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  740.469033][T30385] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  740.627361][T10452] pim6reg: left allmulticast mode
[  740.677026][T10452] pim6reg99999999: left allmulticast mode
[  740.737712][ T7344] IPVS: set_ctl: invalid protocol: 108 10.1.1.1:20129
[  740.884809][T10452] erspan0 (unregistering): left promiscuous mode
[  740.971000][T10452] bond6 (unregistering): (slave geneve3): Releasing active interface
[  741.013504][ T7356] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  741.047529][T10452] bond3 (unregistering): (slave bridge4): Releasing backup interface
[  741.072745][T10452] bond0 (unregistering): Released all slaves
[  741.092618][T10452] bond1 (unregistering): Released all slaves
[  741.118026][T10452] bond2 (unregistering): Released all slaves
[  741.135239][T10452] bond3 (unregistering): Released all slaves
[  741.166275][T10452] bond4 (unregistering): (slave veth11): Releasing active interface
[  741.190941][T10452] bond4 (unregistering): (slave vlan3): Releasing active interface
[  741.209853][T10452] bond4 (unregistering): Released all slaves
[  741.227715][T10452] bond5 (unregistering): Released all slaves
[  741.242503][T10452] bond6 (unregistering): Released all slaves
[  741.260496][T10452] bond7 (unregistering): Released all slaves
[  741.289761][T10452] bond8 (unregistering): Released all slaves
[  741.309735][T10452] bond9 (unregistering): Released all slaves
[  741.340463][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8816'.
[  741.357949][ T7342] ip6tnl0: Caught tx_queue_len zero misconfig
[  741.412844][ T7366] ip6gre4: entered promiscuous mode
[  741.427158][ T7366] ip6gre4: entered allmulticast mode
[  741.440349][ T7331] syzkaller0: entered promiscuous mode
[  741.450866][ T7331] syzkaller0: entered allmulticast mode
[  741.492312][T10452] tipc: Left network mode
[  741.493387][T10428] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  741.522726][ T5744] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  741.532210][T10428] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  741.580840][ T7396] : entered promiscuous mode
[  741.725068][ T7403] syzkaller1: entered promiscuous mode
[  741.744414][ T7403] syzkaller1: entered allmulticast mode
[  741.917443][ T7429] openvswitch: netlink: IPv4 tun info is not correct
[  741.931771][ T7319] lo speed is unknown, defaulting to 1000
[  741.951386][ T7429] syzkaller1: entered promiscuous mode
[  741.957013][ T7429] syzkaller1: entered allmulticast mode
[  742.146303][ T7319] lo speed is unknown, defaulting to 1000
[  742.154190][ T7453] netlink: 'syz.2.8833': attribute type 1 has an invalid length.
[  742.210784][ T5723] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  742.451326][ T5723] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  742.530708][T30385] Bluetooth: hci0: command tx timeout
[  742.774745][T10452] hsr_slave_0: left promiscuous mode
[  742.795065][T10452] hsr_slave_1: left promiscuous mode
[  742.805733][T10452] batman_adv: batadv0: Removing interface: batadv_slave_1
[  742.908395][T10452] team0 (unregistering): Port device team_slave_1 removed
[  742.922524][T10452] team0 (unregistering): Port device team_slave_0 removed
[  742.930861][T30385] Bluetooth: hci2: command 0x0405 tx timeout
[  743.017502][ T7496] syzkaller0: entered promiscuous mode
[  743.023229][ T7496] syzkaller0: entered allmulticast mode
[  743.047020][ T7514] IPv6: sit4: Disabled Multicast RS
[  743.099031][ T7517] lo speed is unknown, defaulting to 1000
[  743.136539][ T7319] bridge0: port 1(bridge_slave_0) entered blocking state
[  743.150806][ T7319] bridge0: port 1(bridge_slave_0) entered disabled state
[  743.158241][ T7319] bridge_slave_0: entered allmulticast mode
[  743.165326][ T7319] bridge_slave_0: entered promiscuous mode
[  743.173195][ T7319] bridge0: port 2(bridge_slave_1) entered blocking state
[  743.180345][ T7319] bridge0: port 2(bridge_slave_1) entered disabled state
[  743.187720][ T7319] bridge_slave_1: entered allmulticast mode
[  743.194699][ T7319] bridge_slave_1: entered promiscuous mode
[  743.223572][ T7319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  743.235423][ T7319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  743.255209][ T7525] __nla_validate_parse: 3 callbacks suppressed
[  743.255225][ T7525] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8847'.
[  743.259262][ T7319] team0: Port device team_slave_0 added
[  743.279301][ T7319] team0: Port device team_slave_1 added
[  743.286766][ T7525] netlink: 'syz.2.8847': attribute type 9 has an invalid length.
[  743.295443][ T7523] macsec0: entered allmulticast mode
[  743.345329][ T7319] batman_adv: batadv0: Adding interface: batadv_slave_0
[  743.360684][ T7319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  743.408761][ T7319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  743.425595][ T7319] batman_adv: batadv0: Adding interface: batadv_slave_1
[  743.439692][ T7319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  743.494644][ T7319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  743.507878][ T7517] lo speed is unknown, defaulting to 1000
[  743.548532][ T7319] hsr_slave_0: entered promiscuous mode
[  743.556200][ T7319] hsr_slave_1: entered promiscuous mode
[  743.562724][ T7319] debugfs: 'hsr0' already exists in 'hsr'
[  743.568584][ T7319] Cannot create hsr debugfs directory
[  743.581890][ T7521] dvmrp0: entered allmulticast mode
[  743.618650][T10452] IPVS: stop unused estimator thread 0...
[  743.660103][ T7541] xt_CONNSECMARK: invalid mode: 254
[  743.896076][T10452] nci: nci_rx_work: unknown MT 0x1
[  744.343010][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8856'.
[  744.352767][ T7568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8856'.
[  744.362545][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8856'.
[  744.372748][ T7568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8856'.
[  744.383064][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8856'.
[  744.392107][ T7568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8856'.
[  744.401376][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8856'.
[  744.410241][ T7568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8856'.
[  744.419599][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8856'.
[  744.453094][ T7573] xt_TCPMSS: Only works on TCP SYN packets
[  744.610786][T30385] Bluetooth: hci0: command tx timeout
[  744.657024][ T7547] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  744.662707][ T7578] syzkaller0: entered promiscuous mode
[  744.672465][ T7578] syzkaller0: entered allmulticast mode
[  744.679228][ T7319] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  744.693024][ T7319] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  744.701706][ T7319] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  744.714402][ T7319] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  744.732150][ T7319] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  744.743009][ T7319] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  744.750891][ T7319] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  744.760466][ T7319] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  744.846827][ T7319] 8021q: adding VLAN 0 to HW filter on device bond0
[  744.896385][ T7597] 8021q: adding VLAN 0 to HW filter on device bond14
[  744.914009][ T7319] 8021q: adding VLAN 0 to HW filter on device team0
[  744.930066][T10452] bridge0: port 1(bridge_slave_0) entered blocking state
[  744.937236][T10452] bridge0: port 1(bridge_slave_0) entered forwarding state
[  744.965429][ T7605] netlink: 'syz.1.8865': attribute type 13 has an invalid length.
[  744.967440][T10452] bridge0: port 2(bridge_slave_1) entered blocking state
[  744.980864][T10452] bridge0: port 2(bridge_slave_1) entered forwarding state
[  745.057806][ T7605] netlink: 'syz.1.8865': attribute type 2 has an invalid length.
[  745.068661][T29680] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  745.102032][ T7614] syzkaller1: entered promiscuous mode
[  745.118884][ T7614] syzkaller1: entered allmulticast mode
[  745.219186][ T7626] syzkaller1: entered promiscuous mode
[  745.224954][ T7626] syzkaller1: entered allmulticast mode
[  745.279505][ T7631] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  745.286800][ T7631] IPv6: NLM_F_CREATE should be set when creating new route
[  745.294082][ T7631] IPv6: NLM_F_CREATE should be set when creating new route
[  745.301333][ T7631] IPv6: NLM_F_CREATE should be set when creating new route
[  745.314705][ T7631] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  745.490707][    C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  745.558583][ T7319] 8021q: adding VLAN 0 to HW filter on device batadv0
[  745.673508][ T7671] bridge0: entered promiscuous mode
[  745.692093][ T7671] bridge0: entered allmulticast mode
[  745.707506][ T7671] team0: Port device bridge0 added
[  745.731372][T29680] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  745.793610][ T7676] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  745.868436][ T7319] veth0_vlan: entered promiscuous mode
[  745.910395][ T7319] veth1_vlan: entered promiscuous mode
[  746.007026][ T7319] veth0_macvtap: entered promiscuous mode
[  746.027162][ T7319] veth1_macvtap: entered promiscuous mode
[  746.045929][ T7319] batman_adv: batadv0: Interface activated: batadv_slave_0
[  746.059881][ T7319] batman_adv: batadv0: Interface activated: batadv_slave_1
[  746.082048][  T539] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  746.095042][  T539] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  746.105393][ T7702] tipc: Invalid UDP bearer configuration
[  746.105427][ T7702] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  746.119667][ T7710] ip6t_rpfilter: unknown options
[  746.137212][  T537] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  746.150327][  T537] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  746.210319][T10428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  746.221675][T10428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  746.256742][  T537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  746.265853][  T537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  746.289878][ T7725] netlink: 'syz.0.8894': attribute type 10 has an invalid length.
[  746.302277][ T7725] openvswitch: netlink: Flow key attr not present in new flow.
[  746.523295][ T7748] tipc: New replicast peer: 255.255.255.255
[  746.531495][ T7747] netlink: 'syz.4.8899': attribute type 1 has an invalid length.
[  746.543863][ T5622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  746.551913][ T5622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  746.561343][ T7748] tipc: Enabled bearer <udp:syz2>, priority 10
[  746.562123][ T5622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  746.584524][ T5622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  746.595212][ T5622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  746.620555][ T7752] 1·: renamed from 
c0·
[  746.634541][ T7752] 1·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  746.649294][ T7752] 1·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  746.662095][ T7752] 1·: entered allmulticast mode
[  746.667056][ T7752] hsr_slave_0: entered allmulticast mode
[  746.673578][ T7752] hsr_slave_1: entered allmulticast mode
[  746.680451][ T7752] A link change request failed with some changes committed already. Interface 
c1· may have been left with an inconsistent configuration, please check.
[  746.695870][T30385] Bluetooth: hci0: command tx timeout
[  746.733040][T10449] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  746.819049][T10449] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  746.897890][T10449] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  746.938228][ T7749] lo speed is unknown, defaulting to 1000
[  746.979504][T10449] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  747.076028][ T7749] lo speed is unknown, defaulting to 1000
[  747.100099][  T537] nci: nci_rx_work: unknown MT 0x4
[  747.126951][ T7779] netlink: 'syz.1.8904': attribute type 89 has an invalid length.
[  747.184741][T10449] dvmrp0: left allmulticast mode
[  747.284814][T10449] bond10 (unregistering): (slave ip6gre2): Releasing backup interface
[  747.293342][T10449] ip6gre2 (unregistering): left promiscuous mode
[  747.324667][ T7788] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  747.357381][T10449] bond12 (unregistering): (slave vti0): Releasing backup interface
[  747.365600][T10449] vti0 (unregistering): left promiscuous mode
[  747.408441][T10449] bond8 (unregistering): (slave geneve5): Releasing active interface
[  747.422351][T10449] bond3 (unregistering): (slave geneve2): Releasing active interface
[  747.443986][T10449] bond2 (unregistering): (slave bridge3): Releasing backup interface
[  747.455322][T10449] bond4 (unregistering): (slave bridge4): Releasing backup interface
[  747.466075][T10449] bond6 (unregistering): (slave bridge5): Releasing backup interface
[  747.483925][T10449] .` (unregistering): Released all slaves
[  747.492155][T10449] bond1 (unregistering): Released all slaves
[  747.501949][T10449] bond2 (unregistering): Released all slaves
[  747.513426][T10449] bond3 (unregistering): Released all slaves
[  747.525303][T10449] bond4 (unregistering): Released all slaves
[  747.535299][T10449] bond5 (unregistering): (slave veth5): Releasing active interface
[  747.550043][T10449] bond5 (unregistering): Released all slaves
[  747.559327][T10449] bond6 (unregistering): Released all slaves
[  747.569038][T10449] bond7 (unregistering): Released all slaves
[  747.580319][T10449] bond0 (unregistering): Released all slaves
[  747.590107][T10449] bond8 (unregistering): Released all slaves
[  747.599761][T10449] bond9 (unregistering): Released all slaves
[  747.609390][T10449] bond10 (unregistering): Released all slaves
[  747.619274][T10449] bond11 (unregistering): Released all slaves
[  747.635764][T10449] bond12 (unregistering): Released all slaves
[  747.646660][T10449] bond13 (unregistering): Released all slaves
[  747.656152][T10449] bond14 (unregistering): Released all slaves
[  747.693702][   T46] tipc: Node number set to 1225297558
[  747.789865][T10449] : left promiscuous mode
[  747.873868][T10449] tipc: Disabling bearer <udp:syz2>
[  747.879746][T10449] tipc: Disabling bearer <udp:s>
[  747.885348][T10449] tipc: Left network mode
[  747.932381][ T7808] lo speed is unknown, defaulting to 1000
[  748.268784][ T7846] mac80211_hwsim hwsim139 wlan0: entered promiscuous mode
[  748.282884][ T7846] mac80211_hwsim hwsim139 wlan0: entered allmulticast mode
[  748.299822][ T7846] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  748.360380][ T7749] bridge0: port 1(bridge_slave_0) entered blocking state
[  748.377779][ T7749] bridge0: port 1(bridge_slave_0) entered disabled state
[  748.387606][ T7749] bridge_slave_0: entered allmulticast mode
[  748.397125][ T7749] bridge_slave_0: entered promiscuous mode
[  748.404730][ T7808] lo speed is unknown, defaulting to 1000
[  748.416637][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1
[  748.424532][ T7749] bridge0: port 2(bridge_slave_1) entered blocking state
[  748.432010][ T7749] bridge0: port 2(bridge_slave_1) entered disabled state
[  748.439318][ T7749] bridge_slave_1: entered allmulticast mode
[  748.446678][ T7749] bridge_slave_1: entered promiscuous mode
[  748.500687][ T7749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  748.527004][ T7749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  748.563309][ T7749] team0: Port device team_slave_0 added
[  748.605643][ T7863] ip6t_srh: unknown srh match flags  4000
[  748.607259][ T7749] team0: Port device team_slave_1 added
[  748.619577][T30385] Bluetooth: hci5: command tx timeout
[  748.634592][ T7865] __nla_validate_parse: 77 callbacks suppressed
[  748.634608][ T7865] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8917'.
[  748.635250][ T7866] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8917'.
[  748.771053][T30385] Bluetooth: hci0: command tx timeout
[  748.777029][ T7749] batman_adv: batadv0: Adding interface: batadv_slave_0
[  748.811596][ T7749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  748.858722][ T7749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  748.903842][ T7749] batman_adv: batadv0: Adding interface: batadv_slave_1
[  748.915236][ T7749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  748.941930][ T7749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  749.019198][T10449] hsr_slave_0: left promiscuous mode
[  749.048871][T10449] hsr_slave_1: left promiscuous mode
[  749.071376][T10449] veth1_macvtap: left promiscuous mode
[  749.080400][T10449] veth0_macvtap: left promiscuous mode
[  749.101526][T10449] veth1_vlan: left promiscuous mode
[  749.115297][T10449] veth0_vlan: left promiscuous mode
[  749.146194][ T7897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  749.331357][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2
[  749.366613][ T7749] hsr_slave_0: entered promiscuous mode
[  749.381625][ T7749] hsr_slave_1: entered promiscuous mode
[  749.397029][ T7907] syzkaller0: entered promiscuous mode
[  749.404734][ T7907] syzkaller0: entered allmulticast mode
[  749.411870][ T7907] tipc: Resetting bearer <eth:syzkaller0>
[  749.503597][ T7918] netlink: 'syz.1.8929': attribute type 1 has an invalid length.
[  749.555916][ T7918] 8021q: adding VLAN 0 to HW filter on device bond17
[  749.600238][ T7918] 8021q: adding VLAN 0 to HW filter on device bond17
[  749.615887][ T7918] bond17: (slave gre2): The slave device specified does not support setting the MAC address
[  749.628400][ T5709] IPVS: starting estimator thread 0...
[  749.639154][ T7918] bond17: (slave gre2): Error -95 calling set_mac_address
[  749.656211][T10449] IPVS: stop unused estimator thread 0...
[  749.714674][ T7918] macvlan2: entered promiscuous mode
[  749.723431][ T7930] IPVS: using max 57 ests per chain, 136800 per kthread
[  749.740487][ T7918] macvlan2: entered allmulticast mode
[  749.748343][ T7918] bond17: entered promiscuous mode
[  749.754368][ T7918] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  749.788367][ T7918] bond17: left promiscuous mode
[  749.846788][ T7944] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  750.012886][ T7960] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8937'.
[  750.055782][ T7961] netlink: 'syz.3.8935': attribute type 4 has an invalid length.
[  750.102187][ T7961] netlink: 'syz.3.8935': attribute type 4 has an invalid length.
[  750.184444][ T7970] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8939'.
[  750.262696][ T7972] lo speed is unknown, defaulting to 1000
[  750.309052][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8941'.
[  750.449203][ T7987] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8943'.
[  750.465317][ T7972] lo speed is unknown, defaulting to 1000
[  750.691218][T30385] Bluetooth: hci5: command tx timeout
[  750.744808][ T8008] tunl0: Caught tx_queue_len zero misconfig
[  750.772483][ T7952] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  750.790471][ T7749] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  750.889007][ T7749] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  750.927607][ T8022] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8947'.
[  750.941442][ T7749] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  750.955143][ T7749] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  750.992045][ T7749] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  751.006429][ T7749] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  751.014367][ T7749] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  751.034438][ T7749] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  751.091448][ T1766] block nbd1: Possible stuck request ffff888092080380: control (read@2048,1024B). Runtime 90 seconds
[  751.102485][ T1766] block nbd1: Possible stuck request ffff888092080540: control (read@3072,1024B). Runtime 90 seconds
[  751.113503][ T1766] block nbd1: Possible stuck request ffff888092080000: control (read@0,1024B). Runtime 90 seconds
[  751.124584][ T1766] block nbd1: Possible stuck request ffff8880920801c0: control (read@1024,1024B). Runtime 90 seconds
[  751.282953][ T7749] 8021q: adding VLAN 0 to HW filter on device bond0
[  751.329891][ T7749] 8021q: adding VLAN 0 to HW filter on device team0
[  751.349069][  T537] bridge0: port 1(bridge_slave_0) entered blocking state
[  751.356252][  T537] bridge0: port 1(bridge_slave_0) entered forwarding state
[  751.372598][ T8052] netlink: 192 bytes leftover after parsing attributes in process `syz.3.8950'.
[  751.396204][  T537] bridge0: port 2(bridge_slave_1) entered blocking state
[  751.403378][  T537] bridge0: port 2(bridge_slave_1) entered forwarding state
[  751.434352][ T8059] lo speed is unknown, defaulting to 1000
[  751.680489][ T8059] lo speed is unknown, defaulting to 1000
[  751.717278][ T8091] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8957'.
[  751.775376][ T8094] netlink: 'syz.1.8957': attribute type 7 has an invalid length.
[  752.043824][ T7749] 8021q: adding VLAN 0 to HW filter on device batadv0
[  752.150369][ T7749] veth0_vlan: entered promiscuous mode
[  752.165971][ T7749] veth1_vlan: entered promiscuous mode
[  752.189808][ T7749] veth0_macvtap: entered promiscuous mode
[  752.199655][ T7749] veth1_macvtap: entered promiscuous mode
[  752.220111][ T7749] batman_adv: batadv0: Interface activated: batadv_slave_0
[  752.234489][ T7749] batman_adv: batadv0: Interface activated: batadv_slave_1
[  752.248432][  T539] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  752.268698][  T539] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  752.279489][  T539] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  752.295238][  T539] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  752.334286][  T539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  752.344582][  T539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  752.365272][T10428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  752.375568][T10428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  752.419321][ T8127] netlink: 'syz.0.8896': attribute type 2 has an invalid length.
[  752.427830][ T8127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8896'.
[  752.771619][T30385] Bluetooth: hci5: command tx timeout
[  753.032768][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  753.042700][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  753.051498][ T5622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  753.062821][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  753.070317][ T5622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  753.462154][ T8149] lo speed is unknown, defaulting to 1000
[  753.526650][ T8189] Bluetooth: MGMT ver 1.23
[  753.646642][ T8189] bridge0: port 2(bridge_slave_1) entered disabled state
[  753.654088][ T8189] bridge0: port 1(bridge_slave_0) entered disabled state
[  753.660747][    C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  753.735560][ T8189] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  753.748903][ T8189] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  753.843002][ T8198] tipc: Enabled bearer <eth:macvlan1>, priority 10
[  753.851888][ T8149] lo speed is unknown, defaulting to 1000
[  753.857677][ T1044] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  753.871262][ T8198] __nla_validate_parse: 1 callbacks suppressed
[  753.871280][ T8198] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8987'.
[  753.880746][ T1044] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  753.934998][ T1044] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  753.955334][ T1044] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  754.006003][ T8207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8989'.
[  754.077298][ T8207] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  754.167687][ T8214] netlink: 558 bytes leftover after parsing attributes in process `syz.3.8991'.
[  754.189173][ T8216] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8992'.
[  754.206202][ T8216] syzkaller1: entered promiscuous mode
[  754.213749][ T8216] syzkaller1: entered allmulticast mode
[  754.343373][ T8149] bridge0: port 1(bridge_slave_0) entered blocking state
[  754.350869][ T8149] bridge0: port 1(bridge_slave_0) entered disabled state
[  754.358182][ T8149] bridge_slave_0: entered allmulticast mode
[  754.366662][ T8149] bridge_slave_0: entered promiscuous mode
[  754.376082][ T8149] bridge0: port 2(bridge_slave_1) entered blocking state
[  754.383844][ T8149] bridge0: port 2(bridge_slave_1) entered disabled state
[  754.391437][ T8149] bridge_slave_1: entered allmulticast mode
[  754.398596][ T8149] bridge_slave_1: entered promiscuous mode
[  754.423550][ T8149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  754.435508][ T8149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  754.467559][ T8149] team0: Port device team_slave_0 added
[  754.477572][ T8149] team0: Port device team_slave_1 added
[  754.510186][ T8149] batman_adv: batadv0: Adding interface: batadv_slave_0
[  754.522832][ T8149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  754.537030][ T8229] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0
[  754.550917][ T8149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  754.570563][ T8149] batman_adv: batadv0: Adding interface: batadv_slave_1
[  754.577648][ T8149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  754.604045][ T8149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  754.626348][ T8231] Bluetooth: MGMT ver 1.23
[  754.645869][ T8149] hsr_slave_0: entered promiscuous mode
[  754.652597][ T8149] hsr_slave_1: entered promiscuous mode
[  754.658798][ T8149] debugfs: 'hsr0' already exists in 'hsr'
[  754.665873][ T8149] Cannot create hsr debugfs directory
[  754.801930][ T8149] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  754.850833][ T5622] Bluetooth: hci5: command tx timeout
[  754.900483][ T8149] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  754.915634][ T8251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9000'.
[  754.935607][ T8251] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9000'.
[  754.945787][ T8251] bond10: entered promiscuous mode
[  754.951183][ T8251] bond10: entered allmulticast mode
[  754.957059][ T8251] 8021q: adding VLAN 0 to HW filter on device bond10
[  754.965474][ T8149] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  754.977424][ T8251] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9000'.
[  754.986626][ T8251] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9000'.
[  754.995949][ T8251] tipc: Invalid UDP bearer configuration
[  754.995980][ T8251] tipc: Enabling of bearer <udp:sy{±> rejected, failed to enable media
[  755.013594][ T8149] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  755.044462][ T8254] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  755.085294][ T8149] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  755.094733][ T5622] Bluetooth: hci3: command tx timeout
[  755.096184][ T8149] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  755.111053][ T8149] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  755.120699][ T8149] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  755.128457][ T8149] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  755.137425][ T8149] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  755.148210][ T8149] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  755.158405][ T8149] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  755.237336][ T8265] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9003'.
[  755.249810][ T8265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9003'.
[  755.286829][ T8149] 8021q: adding VLAN 0 to HW filter on device bond0
[  755.302528][ T8269] syzkaller0: entered promiscuous mode
[  755.308160][ T8269] syzkaller0: entered allmulticast mode
[  755.314480][ T8272] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  755.316872][ T8270] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  755.339814][ T8149] 8021q: adding VLAN 0 to HW filter on device team0
[  755.348309][ T8267] tipc: Resetting bearer <eth:syzkaller0>
[  755.356609][ T8267] tipc: Disabling bearer <eth:syzkaller0>
[  755.372875][T10428] bridge0: port 1(bridge_slave_0) entered blocking state
[  755.379996][T10428] bridge0: port 1(bridge_slave_0) entered forwarding state
[  755.394607][T10428] bridge0: port 2(bridge_slave_1) entered blocking state
[  755.401748][T10428] bridge0: port 2(bridge_slave_1) entered forwarding state
[  755.690223][ T8306] sctp: [Deprecated]: syz.4.9013 (pid 8306) Use of int in max_burst socket option.
[  755.690223][ T8306] Use struct sctp_assoc_value instead
[  755.735066][ T8306] gretap0: entered promiscuous mode
[  755.764801][ T8306] 0ªî{X¹¦: renamed from gretap0
[  755.785904][ T8306] 0ªî{X¹¦: left promiscuous mode
[  755.794866][ T8306] 0ªî{X¹¦: entered allmulticast mode
[  755.805897][ T8306] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  755.955295][ T8149] 8021q: adding VLAN 0 to HW filter on device batadv0
[  755.968533][ T8323] vlan4: entered promiscuous mode
[  755.974135][ T8323] hsr0: entered promiscuous mode
[  755.982684][ T8323] vlan4: entered allmulticast mode
[  755.989361][ T8323] hsr0: entered allmulticast mode
[  755.991387][ T8332] netlink: 'syz.3.9021': attribute type 2 has an invalid length.
[  756.004817][ T8323] hsr_slave_0: entered allmulticast mode
[  756.072969][ T8339] xt_CT: You must specify a L4 protocol and not use inversions on it
[  756.074464][ T8332] 5nè‹Ò: entered promiscuous mode
[  756.091022][ T8340] xt_CT: You must specify a L4 protocol and not use inversions on it
[  756.146861][ T8346] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  756.183996][ T8349] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  756.220079][ T8149] veth0_vlan: entered promiscuous mode
[  756.241890][ T8149] veth1_vlan: entered promiscuous mode
[  756.285401][ T8360] vti0: entered promiscuous mode
[  756.342528][ T8149] veth0_macvtap: entered promiscuous mode
[  756.359709][ T8344] netlink: 'syz.0.9023': attribute type 1 has an invalid length.
[  756.365339][ T8149] veth1_macvtap: entered promiscuous mode
[  756.404345][ T8149] batman_adv: batadv0: Interface activated: batadv_slave_0
[  756.418718][ T8149] batman_adv: batadv0: Interface activated: batadv_slave_1
[  756.444572][ T8344] gretap1: entered promiscuous mode
[  756.453930][ T8371] tipc: Failed to obtain node identity
[  756.459487][ T8371] tipc: Enabling of bearer <ib:vxcan1> rejected, failed to enable media
[  756.480707][T10430] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  756.490112][T10430] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  756.506139][ T8347] macvlan2: entered promiscuous mode
[  756.513636][ T8347] macvlan2: entered allmulticast mode
[  756.527687][T10430] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  756.547576][T10430] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  756.619174][T10430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  756.638747][T10430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  756.663434][ T1044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  756.680881][ T1044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  756.715802][ T8387] netlink: 'syz.0.9037': attribute type 1 has an invalid length.
[  756.773838][ T8387] netlink: 'syz.0.9037': attribute type 4 has an invalid length.
[  757.171087][ T5622] Bluetooth: hci3: command tx timeout
[  757.185310][T30385] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  757.193979][T30385] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  757.201505][T30385] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  757.209546][T30385] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  757.217138][T30385] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  757.550754][ T8437] lo speed is unknown, defaulting to 1000
[  757.659727][ T8437] lo speed is unknown, defaulting to 1000
[  757.940945][ T8474] netlink: 'syz.1.9054': attribute type 58 has an invalid length.
[  758.038631][ T8437] bridge0: port 1(bridge_slave_0) entered blocking state
[  758.046003][ T8437] bridge0: port 1(bridge_slave_0) entered disabled state
[  758.056913][ T8437] bridge_slave_0: entered allmulticast mode
[  758.064490][ T8437] bridge_slave_0: entered promiscuous mode
[  758.072530][ T8437] bridge0: port 2(bridge_slave_1) entered blocking state
[  758.079956][ T8437] bridge0: port 2(bridge_slave_1) entered disabled state
[  758.088121][ T8437] bridge_slave_1: entered allmulticast mode
[  758.095697][ T8437] bridge_slave_1: entered promiscuous mode
[  758.158523][ T8437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  758.188330][ T8437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  758.249398][ T8437] team0: Port device team_slave_0 added
[  758.266025][ T8437] team0: Port device team_slave_1 added
[  758.413883][ T8437] batman_adv: batadv0: Adding interface: batadv_slave_0
[  758.440224][ T8437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  758.468490][ T8437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  758.481558][ T8437] batman_adv: batadv0: Adding interface: batadv_slave_1
[  758.488529][ T8437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  758.527349][ T8437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  758.593873][ T8437] hsr_slave_0: entered promiscuous mode
[  758.600360][ T8437] hsr_slave_1: entered promiscuous mode
[  758.610296][ T8437] debugfs: 'hsr0' already exists in 'hsr'
[  758.619598][ T8437] Cannot create hsr debugfs directory
[  758.628120][ T8525] netlink: 'syz.4.9061': attribute type 14 has an invalid length.
[  758.759920][ T8536] netlink: 'syz.0.9063': attribute type 4 has an invalid length.
[  759.004350][ T8437] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  759.013185][ T8437] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  759.021318][ T8437] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  759.029553][ T8437] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  759.037816][ T8437] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  759.046658][ T8437] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  759.054825][ T8437] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  759.063386][ T8437] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  759.107445][ T8437] 8021q: adding VLAN 0 to HW filter on device bond0
[  759.123541][ T8437] 8021q: adding VLAN 0 to HW filter on device team0
[  759.134287][ T1044] bridge0: port 1(bridge_slave_0) entered blocking state
[  759.141419][ T1044] bridge0: port 1(bridge_slave_0) entered forwarding state
[  759.155921][  T540] bridge0: port 2(bridge_slave_1) entered blocking state
[  759.163019][  T540] bridge0: port 2(bridge_slave_1) entered forwarding state
[  759.253123][T30385] Bluetooth: hci3: command tx timeout
[  759.258999][ T5622] Bluetooth: hci1: command tx timeout
[  759.363438][ T8437] 8021q: adding VLAN 0 to HW filter on device batadv0
[  759.393510][ T8437] veth0_vlan: entered promiscuous mode
[  759.403197][ T8437] veth1_vlan: entered promiscuous mode
[  759.424812][ T8437] veth0_macvtap: entered promiscuous mode
[  759.432930][ T8437] veth1_macvtap: entered promiscuous mode
[  759.446613][ T8437] batman_adv: batadv0: Interface activated: batadv_slave_0
[  759.460227][ T8437] batman_adv: batadv0: Interface activated: batadv_slave_1
[  759.473292][  T539] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  759.484166][  T539] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  759.494237][  T539] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  759.506161][ T8576] vlan2: entered allmulticast mode
[  759.511692][ T8576] bond0: entered allmulticast mode
[  759.516814][ T8576] bond_slave_0: entered allmulticast mode
[  759.522841][ T8576] bond_slave_1: entered allmulticast mode
[  759.530890][ T8576] __nla_validate_parse: 16 callbacks suppressed
[  759.530907][ T8576] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9069'.
[  759.548427][  T539] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  759.564064][ T8576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  759.573176][ T8576] bond_slave_0: left allmulticast mode
[  759.580476][ T8576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  759.590139][ T8576] bond_slave_1: left allmulticast mode
[  759.596964][ T8576] bond0 (unregistering): Released all slaves
[  759.631884][ T1044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  759.647437][ T1044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  759.669994][  T539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  759.678575][  T539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  759.782458][ T8585] netlink: 'syz.0.9072': attribute type 49 has an invalid length.
[  759.830492][ T8583] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9071'.
[  759.844516][ T8588] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9073'.
[  760.068978][ T8594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9076'.
[  760.099844][ T8594] netlink: 'syz.4.9076': attribute type 1 has an invalid length.
[  760.210097][ T8621] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  760.273241][ T8633] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input16
[  760.418034][ T8644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9088'.
[  760.427096][ T8644] netlink: 84 bytes leftover after parsing attributes in process `syz.2.9088'.
[  760.434989][ T8638] netlink: 'syz.0.9087': attribute type 1 has an invalid length.
[  760.442049][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9084'.
[  760.448193][ T8638] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  760.847252][ T8686] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9100'.
[  760.906137][ T8690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9099'.
[  760.918814][ T8690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9099'.
[  761.211222][ T8707] validate_nla: 2 callbacks suppressed
[  761.211241][ T8707] netlink: 'syz.4.9106': attribute type 9 has an invalid length.
[  761.232404][ T8707] netlink: 'syz.4.9106': attribute type 6 has an invalid length.
[  761.250364][ T8707] netlink: 'syz.4.9106': attribute type 7 has an invalid length.
[  761.267772][ T8707] netlink: 'syz.4.9106': attribute type 8 has an invalid length.
[  761.287665][ T8707] netlink: 'syz.4.9106': attribute type 2 has an invalid length.
[  761.333972][ T5622] Bluetooth: hci1: command tx timeout
[  761.339421][ T5622] Bluetooth: hci3: command tx timeout
[  761.343723][ T8721] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  761.957768][ T8761] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  762.066896][ T8768] xt_hashlimit: size too large, truncated to 1048576
[  762.124578][ T8774] netlink: 'syz.0.9128': attribute type 1 has an invalid length.
[  762.714480][ T8832] ip6t_srh: unknown srh match flags  4000
[  762.804801][ T8838] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[  762.825478][ T8838] bond0 (unregistering): Released all slaves
[  762.867550][ T8849] geneve2: entered promiscuous mode
[  762.874897][ T8849] geneve2: entered allmulticast mode
[  762.882354][ T1044] netdevsim netdevsim3 
€Â: set [1, 0] type 2 family 0 port 6081 - 0
[  762.900710][ T1044] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  762.929720][ T1044] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  762.957320][ T1044] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  763.038609][ T8864] hmó3)ó: entered promiscuous mode
[  763.280439][ T8889] ip6gre1: entered promiscuous mode
[  763.296270][ T8889] ip6gre1: entered allmulticast mode
[  763.335756][ T8894] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  763.405928][ T8899] syzkaller1: entered promiscuous mode
[  763.412978][ T8899] syzkaller1: entered allmulticast mode
[  763.414257][ T5622] Bluetooth: hci1: command tx timeout
[  763.454945][ T8902] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  763.491662][T29680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  763.565330][ T8913] netlink: 'syz.3.9175': attribute type 14 has an invalid length.
[  763.635249][ T8929] xt_hashlimit: invalid rate
[  763.678616][ T8923] netlink: 'syz.3.9177': attribute type 1 has an invalid length.
[  763.713579][ T8930] veth0_vlan: left promiscuous mode
[  763.720549][ T8930] veth0_vlan: entered promiscuous mode
[  763.762510][ T8930] mac80211_hwsim hwsim139 wlan0: left promiscuous mode
[  763.811106][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  764.159110][ T8976] bridge0: port 1(bridge_slave_0) entered disabled state
[  764.169092][ T8976] bridge0: port 2(bridge_slave_1) entered disabled state
[  764.273001][ T8985] netlink: 'syz.1.9195': attribute type 16 has an invalid length.
[  764.487728][ T9003] syzkaller1: entered promiscuous mode
[  764.493544][ T9003] syzkaller1: entered allmulticast mode
[  764.525091][ T8978] syzkaller1: entered promiscuous mode
[  764.532185][ T8978] syzkaller1: entered allmulticast mode
[  764.607604][ T9019] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  764.643032][ T9020] __nla_validate_parse: 42 callbacks suppressed
[  764.643051][ T9020] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9200'.
[  764.854491][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  765.491096][ T5622] Bluetooth: hci1: command tx timeout
[  765.891307][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  766.532939][ T9485] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  766.930902][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  767.506867][ T9006] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  767.517269][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9201'.
[  767.644352][ T9048] netlink: 256 bytes leftover after parsing attributes in process `syz.4.9209'.
[  767.703345][ T9059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9211'.
[  767.713159][ T9048] syzkaller0: entered promiscuous mode
[  767.740143][ T9048] syzkaller0: entered allmulticast mode
[  767.788124][ T9066] netlink: 'syz.3.9214': attribute type 1 has an invalid length.
[  767.803180][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9215'.
[  767.812802][ T9069] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  767.903956][ T9076] syzkaller0: entered promiscuous mode
[  767.920008][ T9076] syzkaller0: entered allmulticast mode
[  767.927284][ T9078] syzkaller0: entered promiscuous mode
[  767.940678][ T9078] syzkaller0: entered allmulticast mode
[  767.971200][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  768.224101][ T9101] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9223'.
[  768.373983][ T9485] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  768.382433][T29680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  768.447122][ T9127] netlink: 'syz.4.9232': attribute type 12 has an invalid length.
[  768.463009][ T9128] netlink: 'syz.4.9232': attribute type 12 has an invalid length.
[  768.723857][ T9148] netlink: 'syz.1.9238': attribute type 61 has an invalid length.
[  768.745975][ T9148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9238'.
[  768.760991][ T9150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9235'.
[  768.776217][ T9148] netlink: 'syz.1.9238': attribute type 1 has an invalid length.
[  768.778218][ T9150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9235'.
[  768.809369][ T9150] netlink: 'syz.0.9235': attribute type 12 has an invalid length.
[  768.830236][ T9150] netlink: 'syz.0.9235': attribute type 13 has an invalid length.
[  768.913715][ T9162] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9243'.
[  768.932664][ T9162] tc action pedit offset must be on 32 bit boundaries
[  768.939471][ T9162] tc action pedit offset must be on 32 bit boundaries
[  768.946291][ T9162] tc action pedit offset must be on 32 bit boundaries
[  768.953093][ T9162] tc action pedit offset must be on 32 bit boundaries
[  768.959862][ T9162] tc action pedit offset must be on 32 bit boundaries
[  768.966678][ T9162] tc action pedit offset must be on 32 bit boundaries
[  768.973469][ T9162] tc action pedit offset must be on 32 bit boundaries
[  768.980256][ T9162] tc action pedit offset must be on 32 bit boundaries
[  768.987075][ T9162] tc action pedit offset must be on 32 bit boundaries
[  768.993894][ T9162] tc action pedit offset must be on 32 bit boundaries
[  769.000699][ T9162] 0: reclassify loop, rule prio 0, protocol 800
[  769.014858][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  769.024857][T29680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  769.045715][ T9174] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  769.252031][ T9184] netlink: 'syz.1.9249': attribute type 4 has an invalid length.
[  769.268899][ T9193] pim6reg: entered allmulticast mode
[  769.306781][ T9193] pim6reg: left allmulticast mode
[  769.419652][ T9206] syzkaller0: entered promiscuous mode
[  769.425624][ T9206] syzkaller0: entered allmulticast mode
[  769.513773][ T9212] 8021q: VLANs not supported on ip6_vti0
[  769.554611][ T9215] bridge0: port 2(bridge_slave_1) entered disabled state
[  769.561921][ T9215] bridge0: port 1(bridge_slave_0) entered disabled state
[  769.650933][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  769.651359][    C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  769.748509][ T9217] __nla_validate_parse: 6 callbacks suppressed
[  769.748526][ T9217] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9260'.
[  769.765368][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9260'.
[  769.879464][ T9235] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9266'.
[  769.989863][ T9237] batadv1: entered promiscuous mode
[  770.005186][ T9237] batadv1: entered allmulticast mode
[  770.151250][ T9249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9272'.
[  770.191821][ T9249] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9272'.
[  770.263942][ T9260] netdevsim netdevsim2: Firmware load for './file0/file0/..' refused, path contains '..' component
[  770.287558][ T9260] block nbd2: not configured, cannot reconfigure
[  770.356137][ T9263] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9275'.
[  770.395336][ T9263] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9275'.
[  770.431100][ T9271] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input17
[  770.482296][ T9273] GUP no longer grows the stack in syz.3.9279 (9273): 200000003000-20000000a000 (200000001000)
[  770.500819][ T9273] CPU: 0 UID: 0 PID: 9273 Comm: syz.3.9279 Not tainted syzkaller #0 PREEMPT(full) 
[  770.500846][ T9273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  770.500861][ T9273] Call Trace:
[  770.500872][ T9273]  <TASK>
[  770.500880][ T9273]  dump_stack_lvl+0xe8/0x150
[  770.500909][ T9273]  __get_user_pages+0x238c/0x2720
[  770.500952][ T9273]  ? rcu_is_watching+0x15/0xb0
[  770.500979][ T9273]  ? __gup_longterm_locked+0xc3b/0x15c0
[  770.501001][ T9273]  ? rcu_is_watching+0x15/0xb0
[  770.501026][ T9273]  __gup_longterm_locked+0xd52/0x15c0
[  770.501045][ T9273]  ? gup_fast_fallback+0xbc4/0x20d0
[  770.501063][ T9273]  ? rcu_is_watching+0x15/0xb0
[  770.501079][ T9273]  ? rcu_is_watching+0x15/0xb0
[  770.501097][ T9273]  gup_fast_fallback+0x1d82/0x20d0
[  770.501135][ T9273]  ? __pfx_gup_fast_fallback+0x10/0x10
[  770.501154][ T9273]  ? __fget_files+0x2a/0x420
[  770.501173][ T9273]  ? is_valid_gup_args+0x11f/0x200
[  770.501190][ T9273]  ? get_user_pages_fast+0x4d/0xb0
[  770.501208][ T9273]  __iov_iter_get_pages_alloc+0x378/0xa40
[  770.501321][ T9273]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  770.501347][ T9273]  iov_iter_get_pages2+0x5e/0xa0
[  770.501369][ T9273]  __se_sys_vmsplice+0x7b5/0x1660
[  770.501396][ T9273]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  770.501418][ T9273]  ? __pfx_futex_wake+0x10/0x10
[  770.501472][ T9273]  ? rcu_is_watching+0x15/0xb0
[  770.501489][ T9273]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  770.501507][ T9273]  do_syscall_64+0x174/0x580
[  770.501530][ T9273]  ? trace_irq_disable+0x3b/0x140
[  770.501552][ T9273]  ? clear_bhb_loop+0x40/0x90
[  770.501570][ T9273]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  770.501586][ T9273] RIP: 0033:0x7f97f479ce59
[  770.501602][ T9273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  770.501618][ T9273] RSP: 002b:00007f97f55d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  770.501636][ T9273] RAX: ffffffffffffffda RBX: 00007f97f4a15fa0 RCX: 00007f97f479ce59
[  770.501649][ T9273] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a
[  770.501660][ T9273] RBP: 00007f97f4832e6f R08: 0000000000000000 R09: 0000000000000000
[  770.501672][ T9273] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  770.501682][ T9273] R13: 00007f97f4a16038 R14: 00007f97f4a15fa0 R15: 00007ffd8b2afcf8
[  770.501703][ T9273]  </TASK>
[  770.932049][   T24] net_ratelimit: 1 callbacks suppressed
[  770.932080][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  770.979383][ T9297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9285'.
[  771.101436][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  771.152082][ T9312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9289'.
[  771.707177][ T9341] netlink: 'syz.1.9294': attribute type 1 has an invalid length.
[  771.780770][ T9343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9295'.
[  771.970857][ T5622] Bluetooth: hci1: command tx timeout
[  772.003364][ T9315] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  772.112537][ T9357] netlink: 'syz.0.9298': attribute type 8 has an invalid length.
[  772.131889][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  772.163230][ T9359] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  772.177765][ T9365] sctp: [Deprecated]: syz.2.9301 (pid 9365) Use of int in maxseg socket option.
[  772.177765][ T9365] Use struct sctp_assoc_value instead
[  772.286579][ T9373] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  772.616281][ T9359] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  772.837284][ T9359] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  772.951063][ T9359] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  773.032824][ T9427] syzkaller0: entered promiscuous mode
[  773.038418][ T9427] syzkaller0: entered allmulticast mode
[  773.082264][ T1044] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  773.119936][ T9441] validate_nla: 1 callbacks suppressed
[  773.119952][ T9441] netlink: 'syz.2.9317': attribute type 1 has an invalid length.
[  773.132515][ T1044] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  773.158226][ T1044] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  773.176947][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  773.192785][ T1044] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  773.203607][ T9444] hmó3)ó
€: entered promiscuous mode
[  773.219700][ T9448] macvlan2: entered promiscuous mode
[  773.225692][ T9448] macvlan2: entered allmulticast mode
[  773.233177][ T9448] bond1: entered promiscuous mode
[  773.240282][ T9448] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  773.248555][ T9448] bond1: left promiscuous mode
[  773.560514][ T9491] syzkaller0: entered promiscuous mode
[  773.581137][ T9491] syzkaller0: entered allmulticast mode
[  773.712655][ T9508] netlink: 'syz.3.9334': attribute type 4 has an invalid length.
[  773.768444][ T9513] openvswitch: netlink: Message has 4 unknown bytes.
[  773.790950][ T9513] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  773.818930][ T9517] netlink: 'syz.1.9336': attribute type 12 has an invalid length.
[  773.828746][ T9516] netlink: 'syz.2.9337': attribute type 1 has an invalid length.
[  773.909732][ T9518] openvswitch: netlink: Flow key attr not present in new flow.
[  773.971053][ T9485] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  774.047198][ T9541] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  774.210921][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  774.403720][ T9562] syzkaller0: entered allmulticast mode
[  774.596265][ T9567] ip6tnl1: entered allmulticast mode
[  774.603587][  T537] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  774.617950][  T537] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  774.630814][ T5723] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  774.752394][ T9575] tap0: tun_chr_ioctl cmd 1074025677
[  774.758014][ T9575] tap0: linktype set to 823
[  774.865185][ T9586] vlan2: entered promiscuous mode
[  774.870268][ T9586] macvlan0: entered promiscuous mode
[  774.899500][ T9588] __nla_validate_parse: 9 callbacks suppressed
[  774.899518][ T9588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9357'.
[  774.926420][   T29] audit: type=1800 audit(1782004929.660:30): pid=9588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9357" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=330 res=0 errno=0
[  774.988193][ T9590] bond8: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  775.000963][ T5723] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  775.027679][ T5723] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  775.028617][ T9590] bond8 (unregistering): Released all slaves
[  775.086353][ T9606] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9362'.
[  775.096787][ T9606] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9362'.
[  775.134663][ T9610] netlink: 'syz.3.9363': attribute type 1 has an invalid length.
[  775.159644][ T9612] netlink: 'syz.0.9364': attribute type 2 has an invalid length.
[  775.167772][ T9612] netlink: 'syz.0.9364': attribute type 8 has an invalid length.
[  775.176506][ T9612] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9364'.
[  775.355967][ T9626] lo speed is unknown, defaulting to 1000
[  775.455661][ T9626] lo speed is unknown, defaulting to 1000
[  775.648106][ T9647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9376'.
[  775.663539][ T9647] xt_TCPMSS: Only works on TCP SYN packets
[  775.693237][ T5622] Bluetooth: hci2: link tx timeout
[  775.699353][ T5622] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  775.787058][ T9647] bridge_slave_1: left allmulticast mode
[  775.792997][ T9647] bridge_slave_1: left promiscuous mode
[  775.798818][ T9647] bridge0: port 2(bridge_slave_1) entered disabled state
[  775.815621][ T9647] bridge_slave_0: left allmulticast mode
[  775.821955][ T9647] bridge_slave_0: left promiscuous mode
[  775.827669][ T9647] bridge0: port 1(bridge_slave_0) entered disabled state
[  775.841974][T10428] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  775.906603][ T9653] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  775.948603][ T9665] syzkaller1: entered promiscuous mode
[  775.966001][ T9665] syzkaller1: entered allmulticast mode
[  775.978122][ T9669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9380'.
[  776.000077][ T9662] sctp: [Deprecated]: syz.2.9378 (pid 9662) Use of struct sctp_assoc_value in delayed_ack socket option.
[  776.000077][ T9662] Use struct sctp_sack_info instead
[  776.287023][ T9691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9384'.
[  776.301013][ T5744] net_ratelimit: 69 callbacks suppressed
[  776.301031][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  776.397645][ T9692] netlink: 'syz.0.9383': attribute type 1 has an invalid length.
[  776.734225][ T9711] syzkaller0: entered promiscuous mode
[  776.739753][ T9711] syzkaller0: entered allmulticast mode
[  776.764004][ T9713] sctp: [Deprecated]: syz.2.9390 (pid 9713) Use of int in max_burst socket option deprecated.
[  776.764004][ T9713] Use struct sctp_assoc_value instead
[  776.910025][ T9716] lo speed is unknown, defaulting to 1000
[  776.945409][ T9721] xt_CT: You must specify a L4 protocol and not use inversions on it
[  776.988772][ T9726] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9394'.
[  777.001483][ T9716] lo speed is unknown, defaulting to 1000
[  777.013314][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  777.355757][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  777.536943][ T9748] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  777.731249][T30385] Bluetooth: hci2: command 0x0405 tx timeout
[  777.927961][ T9776] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9406'.
[  778.148439][ T9793] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9407'.
[  778.166455][ T9796] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  778.278957][ T9793] openvswitch: netlink: IPv6 tunnel dst address is zero
[  778.293326][ T9804] dvmrp0: entered allmulticast mode
[  778.319201][ T9807] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  778.371856][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  778.557410][ T9829] veth4: entered allmulticast mode
[  778.590153][T10430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  778.608485][T10430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  778.739718][ T9846] bond1: Removing last arp target with arp_interval on
[  778.781105][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  778.924570][ T9861] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0
[  779.072824][ T9884] netlink: 'syz.1.9429': attribute type 10 has an invalid length.
[  779.187536][ T9897] netlink: 'syz.3.9430': attribute type 1 has an invalid length.
[  779.199883][ T9897] netlink: 'syz.3.9430': attribute type 1 has an invalid length.
[  779.260516][ T9906] 0ªî{X¹¦: left allmulticast mode
[  779.411000][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  779.459526][ T9906] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  779.486046][ T9906] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  779.652704][ T9906] mac80211_hwsim hwsim139 wlan0: left allmulticast mode
[  779.692859][ T9906] ip6tnl1: left allmulticast mode
[  779.702645][ T9906] vlan2: left promiscuous mode
[  779.707470][ T9906] macvlan0: left promiscuous mode
[  779.730430][ T1044] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  779.748351][ T1044] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  779.759053][ T1044] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  779.776395][ T1044] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  780.053214][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  780.075565][ T9968] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  780.174592][ T9984] __nla_validate_parse: 5 callbacks suppressed
[  780.174611][ T9984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9451'.
[  780.186055][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9450'.
[  780.291775][ T9995] erspan0: entered promiscuous mode
[  780.385043][  T537] syzkaller0: tun_net_xmit 76
[  780.405972][  T537] syzkaller0: tun_net_xmit 48
[  780.414518][ T5709] syzkaller0: tun_net_xmit 76
[  780.429352][ T9995] syzkaller0: create flow: hash 3546116534 index 1
[  780.451000][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  780.488376][ T9994] erspan0: left promiscuous mode
[  780.503593][ T5723] syzkaller0: tun_net_xmit 76
[  780.520913][ T9485] syzkaller0: tun_net_xmit 76
[  780.539997][ T9994] syzkaller0: delete flow: hash 3546116534 index 1
[  780.548148][T30385] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  780.561213][T30385] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  780.568587][T30385] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  780.576899][T30385] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  780.584521][T30385] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  780.719975][T10020] syzkaller1: tun_chr_ioctl cmd 1074025677
[  780.730944][T10020] syzkaller1: linktype set to 780
[  780.890156][T10038] netlink: 'syz.2.9462': attribute type 3 has an invalid length.
[  780.931278][ T1044] wlan1: Trigger new scan to find an IBSS to join
[  781.050033][T10027] bridge0: port 2(bridge_slave_1) entered disabled state
[  781.057563][T10027] bridge0: port 1(bridge_slave_0) entered disabled state
[  781.135473][T10027] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  781.149488][T10027] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  781.171814][ T1766] block nbd1: Possible stuck request ffff888092080380: control (read@2048,1024B). Runtime 120 seconds
[  781.183203][ T1766] block nbd1: Possible stuck request ffff888092080540: control (read@3072,1024B). Runtime 120 seconds
[  781.194601][ T1766] block nbd1: Possible stuck request ffff888092080000: control (read@0,1024B). Runtime 120 seconds
[  781.205991][ T1766] block nbd1: Possible stuck request ffff8880920801c0: control (read@1024,1024B). Runtime 120 seconds
[  781.332212][T10031] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9462'.
[  781.355520][T10033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9462'.
[  781.370053][T10430] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  781.370966][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9464'.
[  781.392824][  T540] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  781.443151][  T540] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  781.475964][  T540] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  781.538934][T10449] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  781.572675][T10449] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  781.678593][T10449] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  781.707973][T10449] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  781.761876][T10009] lo speed is unknown, defaulting to 1000
[  781.811585][T10449] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  781.818453][T10087] netlink: 'syz.1.9473': attribute type 27 has an invalid length.
[  781.846718][T10449] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  781.853873][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9473'.
[  781.877188][T10087] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  781.948556][T10449] netdevsim netdevsim3 
€Â (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  781.997313][T10449] netdevsim netdevsim3 
€Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  782.057761][T10009] lo speed is unknown, defaulting to 1000
[  782.091794][T10111] netlink: 'syz.1.9478': attribute type 11 has an invalid length.
[  782.194180][T10123] syzkaller0: entered promiscuous mode
[  782.207593][T10123] syzkaller0: entered allmulticast mode
[  782.292830][T10134] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9483'.
[  782.313361][T10134] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  782.538543][T10449] pimreg: left allmulticast mode
[  782.610739][ T5622] Bluetooth: hci4: command tx timeout
[  782.641548][T10161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9487'.
[  783.891084][T10430] wlan1: Trigger new scan to find an IBSS to join
[  784.690708][ T5622] Bluetooth: hci4: command tx timeout
[  785.196319][T10449] team0: Port device bridge0 removed
[  785.204493][T10449] bond0 (unregistering): Released all slaves
[  785.213290][T10449] bond1 (unregistering): Released all slaves
[  785.222870][T10449] bond2 (unregistering): (slave bond3): Releasing backup interface
[  785.231478][T10449] bond2 (unregistering): Released all slaves
[  785.242464][T10449] bond3 (unregistering): Released all slaves
[  785.259448][T10449] bond4 (unregistering): Released all slaves
[  785.270530][T10449] bond5 (unregistering): (slave veth7): Releasing active interface
[  785.280165][T10449] bond5 (unregistering): Released all slaves
[  785.289496][T10449] bond6 (unregistering): Released all slaves
[  785.298782][T10449] bond7 (unregistering): Released all slaves
[  785.405215][T10449] hmac(sha224: left promiscuous mode
[  785.510378][T10009] bridge0: port 1(bridge_slave_0) entered blocking state
[  785.542074][T10009] bridge0: port 1(bridge_slave_0) entered disabled state
[  785.552267][T10009] bridge_slave_0: entered allmulticast mode
[  785.564038][T10009] bridge_slave_0: entered promiscuous mode
[  785.586064][T10449] hmó3)óÿ: left promiscuous mode
[  785.693813][T10009] bridge0: port 2(bridge_slave_1) entered blocking state
[  785.719612][T10009] bridge0: port 2(bridge_slave_1) entered disabled state
[  785.735487][T10009] bridge_slave_1: entered allmulticast mode
[  785.754187][T10009] bridge_slave_1: entered promiscuous mode
[  785.795557][T10449] 5nè‹Ò: left promiscuous mode
[  785.863167][T10449] hmó3)ó: left promiscuous mode
[  785.895337][T10009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  785.929534][T10009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  785.977516][T10449] tipc: Disabling bearer <udp:syz2>
[  785.983876][T10449] tipc: Disabling bearer <eth:macvlan1>
[  785.989765][T10449] tipc: Left network mode
[  785.995870][T10221] siw: device registration error -23
[  786.004082][T10009] team0: Port device team_slave_0 added
[  786.012157][T10228] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9498'.
[  786.024086][T10009] team0: Port device team_slave_1 added
[  786.029787][T10229] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9498'.
[  786.063980][ T5282] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  786.087518][T10228] ip6gre1: entered promiscuous mode
[  786.093008][T10228] ip6gre1: entered allmulticast mode
[  786.100875][T10009] batman_adv: batadv0: Adding interface: batadv_slave_0
[  786.107967][T10009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  786.134290][T10009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  786.146486][T10009] batman_adv: batadv0: Adding interface: batadv_slave_1
[  786.154254][T10009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  786.180741][T10009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  786.235866][T10009] hsr_slave_0: entered promiscuous mode
[  786.242334][T10009] hsr_slave_1: entered promiscuous mode
[  786.248620][T10009] debugfs: 'hsr0' already exists in 'hsr'
[  786.258648][T10009] Cannot create hsr debugfs directory
[  786.326538][T10237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9501'.
[  786.346171][T10237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9501'.
[  786.375774][T10236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9501'.
[  786.420384][T10238] syzkaller1: entered promiscuous mode
[  786.430746][T10238] syzkaller1: entered allmulticast mode
[  786.605470][T10449] hsr_slave_0: left promiscuous mode
[  786.617100][T10248] netlink: 80 bytes leftover after parsing attributes in process `syz.0.9504'.
[  786.631056][T10449] hsr_slave_1: left promiscuous mode
[  786.770744][ T5622] Bluetooth: hci4: command tx timeout
[  786.931300][T10428] wlan1: Trigger new scan to find an IBSS to join
[  787.122867][T10449] IPVS: stop unused estimator thread 0...
[  787.467017][T10267] syzkaller0: entered promiscuous mode
[  787.472646][T10267] syzkaller0: entered allmulticast mode
[  787.811113][  T540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  788.851301][ T5622] Bluetooth: hci4: command tx timeout
[  800.370837][    C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  800.813394][T30385] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  800.820999][T30385] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  800.828242][T30385] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  800.836078][T30385] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  800.843942][T30385] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  800.971756][T10270] lo speed is unknown, defaulting to 1000
[  801.022504][T10270] lo speed is unknown, defaulting to 1000
[  801.121715][T10270] bridge0: port 1(bridge_slave_0) entered blocking state
[  801.128850][T10270] bridge0: port 1(bridge_slave_0) entered disabled state
[  801.136266][T10270] bridge_slave_0: entered allmulticast mode
[  801.142998][T10270] bridge_slave_0: entered promiscuous mode
[  801.150175][T10270] bridge0: port 2(bridge_slave_1) entered blocking state
[  801.157402][T10270] bridge0: port 2(bridge_slave_1) entered disabled state
[  801.164705][T10270] bridge_slave_1: entered allmulticast mode
[  801.171861][T10270] bridge_slave_1: entered promiscuous mode
[  801.188165][T10270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  801.199089][T10270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  801.218517][T10270] team0: Port device team_slave_0 added
[  801.225917][T10270] team0: Port device team_slave_1 added
[  801.242071][T10270] batman_adv: batadv0: Adding interface: batadv_slave_0
[  801.249016][T10270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  801.275301][T10270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  801.287066][T10270] batman_adv: batadv0: Adding interface: batadv_slave_1
[  801.294202][T10270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  801.320272][T10270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  801.347736][T10270] hsr_slave_0: entered promiscuous mode
[  801.354042][T10270] hsr_slave_1: entered promiscuous mode
[  801.360085][T10270] debugfs: 'hsr0' already exists in 'hsr'
[  801.365869][T10270] Cannot create hsr debugfs directory
[  801.826289][T30385] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  801.833653][T30385] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  801.841025][T30385] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  801.848683][T30385] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  801.856420][T30385] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  801.985719][T10288] lo speed is unknown, defaulting to 1000
[  802.036001][T10288] lo speed is unknown, defaulting to 1000
[  802.130183][T10288] bridge0: port 1(bridge_slave_0) entered blocking state
[  802.137783][T10288] bridge0: port 1(bridge_slave_0) entered disabled state
[  802.145251][T10288] bridge_slave_0: entered allmulticast mode
[  802.152015][T10288] bridge_slave_0: entered promiscuous mode
[  802.162046][T10288] bridge0: port 2(bridge_slave_1) entered blocking state
[  802.169229][T10288] bridge0: port 2(bridge_slave_1) entered disabled state
[  802.176661][T10288] bridge_slave_1: entered allmulticast mode
[  802.183358][T10288] bridge_slave_1: entered promiscuous mode
[  802.199801][T10288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  802.210954][T10288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  802.230721][T10288] team0: Port device team_slave_0 added
[  802.237826][T10288] team0: Port device team_slave_1 added
[  802.252651][T10288] batman_adv: batadv0: Adding interface: batadv_slave_0
[  802.259593][T10288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  802.286413][T10288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  802.298286][T10288] batman_adv: batadv0: Adding interface: batadv_slave_1
[  802.305463][T10288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  802.331732][T10288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  802.357218][T10288] hsr_slave_0: entered promiscuous mode
[  802.363469][T10288] hsr_slave_1: entered promiscuous mode
[  802.369469][T10288] debugfs: 'hsr0' already exists in 'hsr'
[  802.375604][T10288] Cannot create hsr debugfs directory
[  802.865345][T30385] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  802.873244][T30385] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  802.880553][T30385] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  802.887389][ T5618] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  802.888128][T30385] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  802.902107][ T5618] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  802.902432][T30385] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  802.909404][ T5618] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  802.924666][ T5618] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  802.932097][T30385] Bluetooth: hci2: command tx timeout
[  802.939907][ T5618] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  803.128715][T10307] lo speed is unknown, defaulting to 1000
[  803.192267][T10307] lo speed is unknown, defaulting to 1000
[  803.192310][T10309] lo speed is unknown, defaulting to 1000
[  803.272961][T10309] lo speed is unknown, defaulting to 1000
[  803.382365][T10307] bridge0: port 1(bridge_slave_0) entered blocking state
[  803.390270][T10307] bridge0: port 1(bridge_slave_0) entered disabled state
[  803.398274][T10307] bridge_slave_0: entered allmulticast mode
[  803.405082][T10307] bridge_slave_0: entered promiscuous mode
[  803.413420][T10307] bridge0: port 2(bridge_slave_1) entered blocking state
[  803.420568][T10307] bridge0: port 2(bridge_slave_1) entered disabled state
[  803.428705][T10307] bridge_slave_1: entered allmulticast mode
[  803.435494][T10307] bridge_slave_1: entered promiscuous mode
[  803.466826][T10307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  803.481081][T10307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  803.514947][T10307] team0: Port device team_slave_0 added
[  803.520943][T10309] bridge0: port 1(bridge_slave_0) entered blocking state
[  803.528074][T10309] bridge0: port 1(bridge_slave_0) entered disabled state
[  803.535575][T10309] bridge_slave_0: entered allmulticast mode
[  803.542372][T10309] bridge_slave_0: entered promiscuous mode
[  803.550420][T10307] team0: Port device team_slave_1 added
[  803.556543][T10309] bridge0: port 2(bridge_slave_1) entered blocking state
[  803.563737][T10309] bridge0: port 2(bridge_slave_1) entered disabled state
[  803.571819][T10309] bridge_slave_1: entered allmulticast mode
[  803.578427][T10309] bridge_slave_1: entered promiscuous mode
[  803.599858][T10307] batman_adv: batadv0: Adding interface: batadv_slave_0
[  803.607004][T10307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  803.633221][T10307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  803.649884][T10307] batman_adv: batadv0: Adding interface: batadv_slave_1
[  803.657052][T10307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  803.683215][T10307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  803.696074][T10309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  803.710134][T10309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  803.736180][T10309] team0: Port device team_slave_0 added
[  803.747675][T10309] team0: Port device team_slave_1 added
[  803.756376][T10307] hsr_slave_0: entered promiscuous mode
[  803.762850][T10307] hsr_slave_1: entered promiscuous mode
[  803.768857][T10307] debugfs: 'hsr0' already exists in 'hsr'
[  803.774785][T10307] Cannot create hsr debugfs directory
[  803.795623][T10309] batman_adv: batadv0: Adding interface: batadv_slave_0
[  803.802876][T10309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  803.829642][T10309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  803.844545][T10309] batman_adv: batadv0: Adding interface: batadv_slave_1
[  803.851671][T10309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  803.878024][T10309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  803.890901][   T50] Bluetooth: hci6: command tx timeout
[  803.928995][T10309] hsr_slave_0: entered promiscuous mode
[  803.935617][T10309] hsr_slave_1: entered promiscuous mode
[  803.942058][T10309] debugfs: 'hsr0' already exists in 'hsr'
[  803.947801][T10309] Cannot create hsr debugfs directory
[  804.930756][   T50] Bluetooth: hci7: command tx timeout
[  805.010823][   T50] Bluetooth: hci8: command tx timeout
[  805.011013][ T5618] Bluetooth: hci2: command tx timeout
[  805.970845][ T5618] Bluetooth: hci6: command tx timeout
[  807.010839][ T5618] Bluetooth: hci7: command tx timeout
[  807.091107][ T5618] Bluetooth: hci8: command tx timeout
[  807.091117][   T50] Bluetooth: hci2: command tx timeout
[  808.050984][   T50] Bluetooth: hci6: command tx timeout
[  809.090810][   T50] Bluetooth: hci7: command tx timeout
[  809.171091][   T50] Bluetooth: hci2: command tx timeout
[  809.172536][ T5618] Bluetooth: hci8: command tx timeout
[  810.130809][ T5618] Bluetooth: hci6: command tx timeout
[  811.170858][ T5618] Bluetooth: hci7: command tx timeout
[  811.251247][ T5618] Bluetooth: hci8: command tx timeout
[  811.255520][ T1766] block nbd1: Possible stuck request ffff888092080380: control (read@2048,1024B). Runtime 150 seconds
[  811.267661][ T1766] block nbd1: Possible stuck request ffff888092080540: control (read@3072,1024B). Runtime 150 seconds
[  811.279501][ T1766] block nbd1: Possible stuck request ffff888092080000: control (read@0,1024B). Runtime 150 seconds
[  811.290371][ T1766] block nbd1: Possible stuck request ffff8880920801c0: control (read@1024,1024B). Runtime 150 seconds
[  840.850080][   T50] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  840.857791][   T50] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  840.865138][   T50] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  840.873016][   T50] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  840.880495][   T50] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  841.016999][T10342] lo speed is unknown, defaulting to 1000
[  841.061594][T10342] lo speed is unknown, defaulting to 1000
[  841.159719][T10342] bridge0: port 1(bridge_slave_0) entered blocking state
[  841.167105][T10342] bridge0: port 1(bridge_slave_0) entered disabled state
[  841.174643][T10342] bridge_slave_0: entered allmulticast mode
[  841.181811][T10342] bridge_slave_0: entered promiscuous mode
[  841.189069][T10342] bridge0: port 2(bridge_slave_1) entered blocking state
[  841.196313][T10342] bridge0: port 2(bridge_slave_1) entered disabled state
[  841.203756][T10342] bridge_slave_1: entered allmulticast mode
[  841.210924][T10342] bridge_slave_1: entered promiscuous mode
[  841.227815][T10342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  841.238813][T10342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  841.257861][T10342] team0: Port device team_slave_0 added
[  841.265106][T10342] team0: Port device team_slave_1 added
[  841.281215][T10342] batman_adv: batadv0: Adding interface: batadv_slave_0
[  841.288149][T10342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  841.314546][T10342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  841.326593][T10342] batman_adv: batadv0: Adding interface: batadv_slave_1
[  841.333215][ T1766] block nbd1: Possible stuck request ffff888092080380: control (read@2048,1024B). Runtime 180 seconds
[  841.334041][T10342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  841.344561][ T1766] block nbd1: Possible stuck request ffff888092080540: control (read@3072,1024B). Runtime 180 seconds
[  841.370920][T10342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  841.382043][ T1766] block nbd1: Possible stuck request ffff888092080000: control (read@0,1024B). Runtime 180 seconds
[  841.403695][ T1766] block nbd1: Possible stuck request ffff8880920801c0: control (read@1024,1024B). Runtime 180 seconds
[  841.418697][T10342] hsr_slave_0: entered promiscuous mode
[  841.425364][T10342] hsr_slave_1: entered promiscuous mode
[  841.431755][T10342] debugfs: 'hsr0' already exists in 'hsr'
[  841.437490][T10342] Cannot create hsr debugfs directory
[  842.930836][ T5618] Bluetooth: hci9: command tx timeout
[  844.667674][ T4987] udevd[4987]: worker [2441] /devices/virtual/block/nbd1 timeout; kill it
[  844.676376][ T4987] udevd[4987]: seq 51302 '/devices/virtual/block/nbd1' killed
[  845.010793][ T5618] Bluetooth: hci9: command tx timeout
[  847.090894][ T5618] Bluetooth: hci9: command tx timeout
[  849.170761][ T5618] Bluetooth: hci9: command tx timeout
[  860.869703][   T50] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  860.878042][   T50] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  860.885609][   T50] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  860.893463][   T50] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  860.901239][   T50] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  861.028730][T10360] lo speed is unknown, defaulting to 1000
[  861.078919][T10360] lo speed is unknown, defaulting to 1000
[  861.184455][T10360] bridge0: port 1(bridge_slave_0) entered blocking state
[  861.192155][T10360] bridge0: port 1(bridge_slave_0) entered disabled state
[  861.199428][T10360] bridge_slave_0: entered allmulticast mode
[  861.206526][T10360] bridge_slave_0: entered promiscuous mode
[  861.214364][T10360] bridge0: port 2(bridge_slave_1) entered blocking state
[  861.221715][T10360] bridge0: port 2(bridge_slave_1) entered disabled state
[  861.229004][T10360] bridge_slave_1: entered allmulticast mode
[  861.235941][T10360] bridge_slave_1: entered promiscuous mode
[  861.254583][T10360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  861.265838][T10360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  861.285765][T10360] team0: Port device team_slave_0 added
[  861.293175][T10360] team0: Port device team_slave_1 added
[  861.309247][T10360] batman_adv: batadv0: Adding interface: batadv_slave_0
[  861.316343][T10360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  861.342984][T10360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  861.355381][T10360] batman_adv: batadv0: Adding interface: batadv_slave_1
[  861.362436][T10360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  861.388443][T10360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  861.415532][T10360] hsr_slave_0: entered promiscuous mode
[  861.422120][T10360] hsr_slave_1: entered promiscuous mode
[  861.428234][T10360] debugfs: 'hsr0' already exists in 'hsr'
[  861.434012][T10360] Cannot create hsr debugfs directory
[  861.879570][   T50] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  861.887121][   T50] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  861.894754][   T50] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  861.903367][   T50] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  861.911164][   T50] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  862.039823][T10378] lo speed is unknown, defaulting to 1000
[  862.091854][T10378] lo speed is unknown, defaulting to 1000
[  862.194287][T10378] bridge0: port 1(bridge_slave_0) entered blocking state
[  862.201569][T10378] bridge0: port 1(bridge_slave_0) entered disabled state
[  862.208912][T10378] bridge_slave_0: entered allmulticast mode
[  862.216602][T10378] bridge_slave_0: entered promiscuous mode
[  862.224800][T10378] bridge0: port 2(bridge_slave_1) entered blocking state
[  862.232090][T10378] bridge0: port 2(bridge_slave_1) entered disabled state
[  862.239340][T10378] bridge_slave_1: entered allmulticast mode
[  862.246213][T10378] bridge_slave_1: entered promiscuous mode
[  862.263340][T10378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  862.274649][T10378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  862.294266][T10378] team0: Port device team_slave_0 added
[  862.302399][T10378] team0: Port device team_slave_1 added
[  862.317491][T10378] batman_adv: batadv0: Adding interface: batadv_slave_0
[  862.324619][T10378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  862.350730][T10378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  862.362526][T10378] batman_adv: batadv0: Adding interface: batadv_slave_1
[  862.369458][T10378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  862.396087][T10378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  862.422828][T10378] hsr_slave_0: entered promiscuous mode
[  862.429101][T10378] hsr_slave_1: entered promiscuous mode
[  862.435341][T10378] debugfs: 'hsr0' already exists in 'hsr'
[  862.441110][T10378] Cannot create hsr debugfs directory
[  862.916549][   T50] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  862.924004][   T50] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  862.931522][   T50] Bluetooth: hci10: command tx timeout
[  862.936372][T10400] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  862.937186][ T5622] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  862.944726][T10400] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  862.952916][ T5622] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  862.959106][T10400] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  862.967135][ T5622] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  862.973825][T10400] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  862.988395][T10400] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  863.196480][T10397] lo speed is unknown, defaulting to 1000
[  863.249241][T10399] lo speed is unknown, defaulting to 1000
[  863.249241][T10397] lo speed is unknown, defaulting to 1000
[  863.330218][T10399] lo speed is unknown, defaulting to 1000
[  863.425757][T10397] bridge0: port 1(bridge_slave_0) entered blocking state
[  863.433226][T10397] bridge0: port 1(bridge_slave_0) entered disabled state
[  863.440486][T10397] bridge_slave_0: entered allmulticast mode
[  863.447511][T10397] bridge_slave_0: entered promiscuous mode
[  863.457573][T10397] bridge0: port 2(bridge_slave_1) entered blocking state
[  863.464781][T10397] bridge0: port 2(bridge_slave_1) entered disabled state
[  863.472139][T10397] bridge_slave_1: entered allmulticast mode
[  863.478810][T10397] bridge_slave_1: entered promiscuous mode
[  863.508351][T10397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  863.520383][T10397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  863.547771][T10397] team0: Port device team_slave_0 added
[  863.556058][T10397] team0: Port device team_slave_1 added
[  863.579784][T10397] batman_adv: batadv0: Adding interface: batadv_slave_0
[  863.587048][T10397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  863.613883][T10397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  863.630479][T10397] batman_adv: batadv0: Adding interface: batadv_slave_1
[  863.637691][T10397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  863.664219][T10397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  863.711350][T10399] bridge0: port 1(bridge_slave_0) entered blocking state
[  863.718506][T10399] bridge0: port 1(bridge_slave_0) entered disabled state
[  863.726129][T10399] bridge_slave_0: entered allmulticast mode
[  863.733537][T10399] bridge_slave_0: entered promiscuous mode
[  863.743409][T10397] hsr_slave_0: entered promiscuous mode
[  863.749702][T10397] hsr_slave_1: entered promiscuous mode
[  863.756094][T10397] debugfs: 'hsr0' already exists in 'hsr'
[  863.761849][T10397] Cannot create hsr debugfs directory
[  863.767605][T10399] bridge0: port 2(bridge_slave_1) entered blocking state
[  863.775008][T10399] bridge0: port 2(bridge_slave_1) entered disabled state
[  863.782427][T10399] bridge_slave_1: entered allmulticast mode
[  863.789193][T10399] bridge_slave_1: entered promiscuous mode
[  863.818558][T10399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  863.833533][T10399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  863.867493][T10399] team0: Port device team_slave_0 added
[  863.875505][T10399] team0: Port device team_slave_1 added
[  863.902207][T10399] batman_adv: batadv0: Adding interface: batadv_slave_0
[  863.909624][T10399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  863.935822][T10399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  863.951056][T10399] batman_adv: batadv0: Adding interface: batadv_slave_1
[  863.958089][T10399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  863.984423][T10400] Bluetooth: hci11: command tx timeout
[  863.984857][T10399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  864.040409][T10399] hsr_slave_0: entered promiscuous mode
[  864.047039][T10399] hsr_slave_1: entered promiscuous mode
[  864.053590][T10399] debugfs: 'hsr0' already exists in 'hsr'
[  864.059323][T10399] Cannot create hsr debugfs directory
[  865.010820][    C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  865.010844][T30385] Bluetooth: hci12: command tx timeout
[  865.020690][T10400] Bluetooth: hci13: command tx timeout
[  865.023904][ T5622] Bluetooth: hci10: command tx timeout
[  866.051386][ T5622] Bluetooth: hci11: command tx timeout
[  867.090884][ T5622] Bluetooth: hci10: command tx timeout
[  867.091163][T30385] Bluetooth: hci12: command tx timeout
[  867.096889][ T5622] Bluetooth: hci13: command tx timeout
[  868.130923][ T5622] Bluetooth: hci11: command tx timeout
[  869.170902][ T5622] Bluetooth: hci13: command tx timeout
[  869.170921][T10400] Bluetooth: hci10: command tx timeout
[  869.170949][T30385] Bluetooth: hci12: command tx timeout
[  870.210825][ T5622] Bluetooth: hci11: command tx timeout
[  871.250840][ T5622] Bluetooth: hci13: command tx timeout
[  871.250863][T10400] Bluetooth: hci12: command tx timeout
[  871.410989][ T1766] block nbd1: Possible stuck request ffff888092080380: control (read@2048,1024B). Runtime 210 seconds
[  871.422095][ T1766] block nbd1: Possible stuck request ffff888092080540: control (read@3072,1024B). Runtime 210 seconds
[  871.433141][ T1766] block nbd1: Possible stuck request ffff888092080000: control (read@0,1024B). Runtime 210 seconds
[  871.443950][ T1766] block nbd1: Possible stuck request ffff8880920801c0: control (read@1024,1024B). Runtime 210 seconds
[  872.210847][T10400] Bluetooth: hci5: command 0x0406 tx timeout
[  877.330856][T10400] Bluetooth: hci3: command 0x0406 tx timeout
[  900.850984][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  900.912209][ T5622] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  900.919581][ T5622] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  900.927115][ T5622] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  900.935304][ T5622] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  900.943141][ T5622] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  901.071300][T10438] lo speed is unknown, defaulting to 1000
[  901.119264][T10438] lo speed is unknown, defaulting to 1000
[  901.225935][T10438] bridge0: port 1(bridge_slave_0) entered blocking state
[  901.233128][T10438] bridge0: port 1(bridge_slave_0) entered disabled state
[  901.240485][T10438] bridge_slave_0: entered allmulticast mode
[  901.247409][T10438] bridge_slave_0: entered promiscuous mode
[  901.254960][T10438] bridge0: port 2(bridge_slave_1) entered blocking state
[  901.262153][T10438] bridge0: port 2(bridge_slave_1) entered disabled state
[  901.269446][T10438] bridge_slave_1: entered allmulticast mode
[  901.277119][T10438] bridge_slave_1: entered promiscuous mode
[  901.294763][T10438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  901.305999][T10438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  901.325362][T10438] team0: Port device team_slave_0 added
[  901.332832][T10438] team0: Port device team_slave_1 added
[  901.348817][T10438] batman_adv: batadv0: Adding interface: batadv_slave_0
[  901.355817][T10438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  901.382585][T10438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  901.394716][T10438] batman_adv: batadv0: Adding interface: batadv_slave_1
[  901.401815][T10438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  901.427871][T10438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  901.454776][T10438] hsr_slave_0: entered promiscuous mode
[  901.461249][T10438] hsr_slave_1: entered promiscuous mode
[  901.467358][T10438] debugfs: 'hsr0' already exists in 'hsr'
[  901.473378][T10438] Cannot create hsr debugfs directory
[  901.493453][ T1766] block nbd1: Possible stuck request ffff888092080380: control (read@2048,1024B). Runtime 240 seconds
[  901.504609][ T1766] block nbd1: Possible stuck request ffff888092080540: control (read@3072,1024B). Runtime 240 seconds
[  901.515678][ T1766] block nbd1: Possible stuck request ffff888092080000: control (read@0,1024B). Runtime 240 seconds
[  901.527209][ T1766] block nbd1: Possible stuck request ffff8880920801c0: control (read@1024,1024B). Runtime 240 seconds
[  902.931037][ T5622] Bluetooth: hci4: command 0x0406 tx timeout
[  902.931043][ T5618] Bluetooth: hci1: command 0x0406 tx timeout
[  903.010810][T30385] Bluetooth: hci14: command tx timeout
[  905.101289][T30385] Bluetooth: hci14: command tx timeout
[  907.170904][T30385] Bluetooth: hci14: command tx timeout
[  909.250920][T30385] Bluetooth: hci14: command tx timeout
[  921.474778][T10400] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  921.482250][T10400] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  921.489605][T10400] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  921.497694][T10400] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  921.505351][T10400] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  921.637971][T10458] lo speed is unknown, defaulting to 1000
[  921.689036][T10458] lo speed is unknown, defaulting to 1000
[  921.791373][T10458] bridge0: port 1(bridge_slave_0) entered blocking state
[  921.798513][T10458] bridge0: port 1(bridge_slave_0) entered disabled state
[  921.806546][T10458] bridge_slave_0: entered allmulticast mode
[  921.814044][T10458] bridge_slave_0: entered promiscuous mode
[  921.821715][T10458] bridge0: port 2(bridge_slave_1) entered blocking state
[  921.828857][T10458] bridge0: port 2(bridge_slave_1) entered disabled state
[  921.836208][T10458] bridge_slave_1: entered allmulticast mode
[  921.843033][T10458] bridge_slave_1: entered promiscuous mode
[  921.860389][T10458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  921.871882][T10458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  921.892521][T10458] team0: Port device team_slave_0 added
[  921.899811][T10458] team0: Port device team_slave_1 added
[  921.914953][T10458] batman_adv: batadv0: Adding interface: batadv_slave_0
[  921.922035][T10458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  921.948186][T10458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  921.960808][T10458] batman_adv: batadv0: Adding interface: batadv_slave_1
[  921.967767][T10458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  921.995694][T10458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  922.026343][T10400] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  922.033966][T10400] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  922.036318][T10458] hsr_slave_0: entered promiscuous mode
[  922.042054][T10400] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  922.047741][T10458] hsr_slave_1: entered promiscuous mode
[  922.055925][T10400] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  922.061255][T10458] debugfs: 'hsr0' already exists in 'hsr'
[  922.067315][T10400] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  922.073173][T10458] Cannot create hsr debugfs directory
[  922.248076][T10476] lo speed is unknown, defaulting to 1000
[  922.302747][T10476] lo speed is unknown, defaulting to 1000
[  922.441914][T10476] bridge0: port 1(bridge_slave_0) entered blocking state
[  922.449105][T10476] bridge0: port 1(bridge_slave_0) entered disabled state
[  922.457023][T10476] bridge_slave_0: entered allmulticast mode
[  922.464031][T10476] bridge_slave_0: entered promiscuous mode
[  922.475162][T10476] bridge0: port 2(bridge_slave_1) entered blocking state
[  922.482418][T10476] bridge0: port 2(bridge_slave_1) entered disabled state
[  922.489661][T10476] bridge_slave_1: entered allmulticast mode
[  922.496778][T10476] bridge_slave_1: entered promiscuous mode
[  922.519341][T10476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  922.532238][T10476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  922.552041][T10476] team0: Port device team_slave_0 added
[  922.559425][T10476] team0: Port device team_slave_1 added
[  922.575641][T10476] batman_adv: batadv0: Adding interface: batadv_slave_0
[  922.583083][T10476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  922.609552][T10476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  922.621601][T10476] batman_adv: batadv0: Adding interface: batadv_slave_1
[  922.628558][T10476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  922.654938][T10476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  922.682553][T10476] hsr_slave_0: entered promiscuous mode
[  922.689615][T10476] hsr_slave_1: entered promiscuous mode
[  922.696021][T10476] debugfs: 'hsr0' already exists in 'hsr'
[  922.701800][T10476] Cannot create hsr debugfs directory
[  923.016156][ T5618] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  923.023722][ T5618] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  923.031219][ T5618] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  923.038477][ T5618] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  923.045991][ T5618] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  923.047087][T10499] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  923.053516][ T5618] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  923.062045][T10499] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  923.068875][ T5618] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  923.083134][ T5618] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  923.283748][T10495] lo speed is unknown, defaulting to 1000
[  923.341212][T10495] lo speed is unknown, defaulting to 1000
[  923.341372][T10497] lo speed is unknown, defaulting to 1000
[  923.410808][ T5622] Bluetooth: hci2: command 0x0406 tx timeout
[  923.428690][T10497] lo speed is unknown, defaulting to 1000
[  923.525423][T10495] bridge0: port 1(bridge_slave_0) entered blocking state
[  923.532721][T10495] bridge0: port 1(bridge_slave_0) entered disabled state
[  923.540004][T10495] bridge_slave_0: entered allmulticast mode
[  923.547296][T10495] bridge_slave_0: entered promiscuous mode
[  923.568080][T10495] bridge0: port 2(bridge_slave_1) entered blocking state
[  923.575549][T10495] bridge0: port 2(bridge_slave_1) entered disabled state
[  923.583183][T30385] Bluetooth: hci15: command tx timeout
[  923.584050][T10495] bridge_slave_1: entered allmulticast mode
[  923.595592][T10495] bridge_slave_1: entered promiscuous mode
[  923.620980][T10495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  923.633252][T10495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  923.666239][T10495] team0: Port device team_slave_0 added
[  923.674230][T10495] team0: Port device team_slave_1 added
[  923.699471][T10495] batman_adv: batadv0: Adding interface: batadv_slave_0
[  923.707496][T10495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  923.734459][T10495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  923.750994][T10495] batman_adv: batadv0: Adding interface: batadv_slave_1
[  923.757937][T10495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  923.784343][T10495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  923.834815][T10495] hsr_slave_0: entered promiscuous mode
[  923.841478][T10495] hsr_slave_1: entered promiscuous mode
[  923.847649][T10495] debugfs: 'hsr0' already exists in 'hsr'
[  923.853458][T10495] Cannot create hsr debugfs directory
[  923.859051][T10497] bridge0: port 1(bridge_slave_0) entered blocking state
[  923.866278][T10497] bridge0: port 1(bridge_slave_0) entered disabled state
[  923.873745][T10497] bridge_slave_0: entered allmulticast mode
[  923.880488][T10497] bridge_slave_0: entered promiscuous mode
[  923.888193][T10497] bridge0: port 2(bridge_slave_1) entered blocking state
[  923.896032][T10497] bridge0: port 2(bridge_slave_1) entered disabled state
[  923.903535][T10497] bridge_slave_1: entered allmulticast mode
[  923.910285][T10497] bridge_slave_1: entered promiscuous mode
[  923.939220][T10497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  923.955807][T10497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  923.988626][T10497] team0: Port device team_slave_0 added
[  923.999317][T10497] team0: Port device team_slave_1 added
[  924.029159][T10497] batman_adv: batadv0: Adding interface: batadv_slave_0
[  924.036557][T10497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  924.062778][T10497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  924.078243][T10497] batman_adv: batadv0: Adding interface: batadv_slave_1
[  924.085337][T10497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  924.111856][T10497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  924.140744][T30385] Bluetooth: hci16: command tx timeout
[  924.158242][T10497] hsr_slave_0: entered promiscuous mode
[  924.165201][T10497] hsr_slave_1: entered promiscuous mode
[  924.172047][T10497] debugfs: 'hsr0' already exists in 'hsr'
[  924.177848][T10497] Cannot create hsr debugfs directory
[  925.091181][T30385] Bluetooth: hci17: command tx timeout
[  925.171197][T30385] Bluetooth: hci18: command tx timeout
[  925.651082][T30385] Bluetooth: hci15: command tx timeout
[  926.210897][T30385] Bluetooth: hci16: command tx timeout
[  927.170854][ T5622] Bluetooth: hci17: command tx timeout
[  927.250845][ T5622] Bluetooth: hci18: command tx timeout
[  927.730977][ T5622] Bluetooth: hci15: command tx timeout
[  928.290777][ T5622] Bluetooth: hci16: command tx timeout
[  928.531085][T10499] Bluetooth: hci8: command 0x0406 tx timeout
[  928.531152][ T5622] Bluetooth: hci6: command 0x0406 tx timeout
[  928.543866][ T5622] Bluetooth: hci7: command 0x0406 tx timeout
[  929.250894][ T5618] Bluetooth: hci17: command tx timeout
[  929.330864][ T5618] Bluetooth: hci18: command tx timeout
[  929.810800][ T5618] Bluetooth: hci15: command tx timeout
[  930.370807][ T5618] Bluetooth: hci16: command tx timeout
[  931.330887][ T5618] Bluetooth: hci17: command tx timeout
[  931.410814][ T5618] Bluetooth: hci18: command tx timeout
[  931.572401][ T4952] block nbd1: Possible stuck request ffff888092080380: control (read@2048,1024B). Runtime 270 seconds
[  931.583688][ T4952] block nbd1: Possible stuck request ffff888092080540: control (read@3072,1024B). Runtime 270 seconds
[  931.594890][ T4952] block nbd1: Possible stuck request ffff888092080000: control (read@0,1024B). Runtime 270 seconds
[  931.605725][ T4952] block nbd1: Possible stuck request ffff8880920801c0: control (read@1024,1024B). Runtime 270 seconds
[  936.051284][   T30] INFO: task dhcpcd:5281 blocked for more than 143 seconds.
[  936.059403][   T30]       Not tainted syzkaller #0
[  936.064584][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  936.073407][   T30] task:dhcpcd          state:D stack:23704 pid:5281  tgid:5281  ppid:1      task_flags:0x400140 flags:0x00080000
[  936.085394][   T30] Call Trace:
[  936.088677][   T30]  <TASK>
[  936.091897][   T30]  __schedule+0x17d9/0x56c0
[  936.096437][   T30]  ? lock_release+0x4b/0x3c0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  936.101214][   T30]  ? is_bpf_text_address+0x292/0x2b0
[  936.106950][   T30]  ? __pfx___schedule+0x10/0x10
[  936.112404][   T30]  ? rcu_is_watching+0x15/0xb0
[  936.117209][   T30]  ? rcu_is_watching+0x15/0xb0
[  936.122069][   T30]  ? lock_release+0x4b/0x3c0
[  936.126686][   T30]  ? rcu_is_watching+0x15/0xb0
[  936.131716][   T30]  schedule+0x164/0x360
[  936.135916][   T30]  schedule_preempt_disabled+0x13/0x30
[  936.141571][   T30]  __mutex_lock+0x7bf/0x1550
[  936.146574][   T30]  ? __mutex_lock+0x5d4/0x1550
[  936.151696][   T30]  ? genl_rcv_msg+0x10b/0x7a0
[  936.156468][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  936.161783][   T30]  ? __pfx_stack_trace_save+0x10/0x10
[  936.167236][   T30]  ? radix_tree_lookup+0x240/0x290
[  936.179223][   T30]  genl_rcv_msg+0x10b/0x7a0
[  936.194198][   T30]  ? __alloc_skb+0x276/0x7a0
[  936.202912][   T30]  ? netlink_sendmsg+0x5d4/0xb40
[  936.207923][   T30]  ? __x64_sys_sendmsg+0x1b1/0x290
[  936.213416][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  936.218488][   T30]  ? __netlink_lookup+0xc6/0x8b0
[  936.223690][   T30]  ? rcu_is_watching+0x15/0xb0
[  936.228494][   T30]  netlink_rcv_skb+0x226/0x4a0
[  936.233565][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  936.238620][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  936.244087][   T30]  ? down_read+0x2be/0x330
[  936.248628][   T30]  genl_rcv+0x28/0x40
[  936.252760][   T30]  netlink_unicast+0x7bb/0x940
[  936.257553][   T30]  netlink_sendmsg+0x813/0xb40
[  936.262510][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  936.267963][   T30]  ? irqentry_exit+0x218/0x8f0
[  936.273091][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  936.278073][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  936.283538][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  936.288848][   T30]  ____sys_sendmsg+0x9b9/0xa20
[  936.293936][   T30]  ? __pfx_____sys_sendmsg+0x10/0x10
[  936.299335][   T30]  ? import_iovec+0x73/0xa0
[  936.304344][   T30]  ___sys_sendmsg+0x2a5/0x360
[  936.309386][   T30]  ? __pfx____sys_sendmsg+0x10/0x10
[  936.314734][   T30]  ? netdev_run_todo+0x1045/0x10d0
[  936.319891][   T30]  ? __pfx_netdev_run_todo+0x10/0x10
[  936.325349][   T30]  __x64_sys_sendmsg+0x1b1/0x290
[  936.330320][   T30]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  936.335844][   T30]  ? __secure_computing+0xe7/0x2b0
[  936.341114][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  936.347197][   T30]  do_syscall_64+0x174/0x580
[  936.352020][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  936.358117][   T30]  ? clear_bhb_loop+0x40/0x90
[  936.362844][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  936.368744][   T30] RIP: 0033:0x7fda5e77e407
[  936.373551][   T30] RSP: 002b:00007ffc176c8770 EFLAGS: 00000202 ORIG_RAX: 000000000000002e
[  936.382325][   T30] RAX: ffffffffffffffda RBX: 00007fda5e6f4780 RCX: 00007fda5e77e407
[  936.390350][   T30] RDX: 0000000000000000 RSI: 00007ffc176c87f0 RDI: 000000000000000e
[  936.398427][   T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  936.407081][   T30] R10: 0000000000000000 R11: 0000000000000202 R12: 00005616055b8e10
[  936.415162][   T30] R13: 000000000000000e R14: 00007ffc176dccb0 R15: 00005616346c61b0
[  936.423184][   T30]  </TASK>
[  936.426350][   T30] INFO: task syz-executor:10009 blocked for more than 143 seconds.
[  936.434509][   T30]       Not tainted syzkaller #0
[  936.439448][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  936.448235][   T30] task:syz-executor    state:D stack:23176 pid:10009 tgid:10009 ppid:1      task_flags:0x400140 flags:0x00080002
[  936.460352][   T30] Call Trace:
[  936.463731][   T30]  <TASK>
[  936.466702][   T30]  __schedule+0x17d9/0x56c0
[  936.471263][   T30]  ? __kasan_slab_free+0x5c/0x80
[  936.476210][   T30]  ? really_probe+0x774/0xae0
[  936.481036][   T30]  ? device_initial_probe+0xa1/0xd0
[  936.486257][   T30]  ? bus_probe_device+0x12a/0x220
[  936.491514][   T30]  ? device_add+0x7d7/0xb80
[  936.496020][   T30]  ? new_device_store+0x37b/0x710
[  936.501270][   T30]  ? kernfs_fop_write_iter+0x3a4/0x540
[  936.506746][   T30]  ? vfs_write+0x612/0xba0
[  936.511925][   T30]  ? __pfx___schedule+0x10/0x10
[  936.516823][   T30]  ? rcu_is_watching+0x15/0xb0
[  936.521759][   T30]  ? rcu_is_watching+0x15/0xb0
[  936.526632][   T30]  ? lock_release+0x4b/0x3c0
[  936.531368][   T30]  ? rcu_is_watching+0x15/0xb0
[  936.536156][   T30]  schedule+0x164/0x360
[  936.540401][   T30]  schedule_preempt_disabled+0x13/0x30
[  936.546060][   T30]  __mutex_lock+0x7bf/0x1550
[  936.550703][   T30]  ? __mutex_lock+0x5d4/0x1550
[  936.555488][   T30]  ? genl_rcv_msg+0x10b/0x7a0
[  936.560186][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  936.565350][   T30]  ? __pfx_stack_trace_save+0x10/0x10
[  936.570837][   T30]  ? radix_tree_lookup+0x240/0x290
[  936.575956][   T30]  genl_rcv_msg+0x10b/0x7a0
[  936.580457][   T30]  ? __alloc_skb+0x276/0x7a0
[  936.585342][   T30]  ? netlink_sendmsg+0x5d4/0xb40
[  936.590429][   T30]  ? do_syscall_64+0x174/0x580
[  936.595483][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  936.600521][   T30]  ? __netlink_lookup+0xc6/0x8b0
[  936.605758][   T30]  ? rcu_is_watching+0x15/0xb0
[  936.610537][   T30]  netlink_rcv_skb+0x226/0x4a0
[  936.615934][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  936.621092][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  936.626503][   T30]  ? down_read+0x2be/0x330
[  936.630997][   T30]  genl_rcv+0x28/0x40
[  936.635044][   T30]  netlink_unicast+0x7bb/0x940
[  936.639797][   T30]  netlink_sendmsg+0x813/0xb40
[  936.644674][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  936.649985][   T30]  ? __might_fault+0xaf/0x130
[  936.654717][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  936.659661][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  936.665010][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  936.670544][   T30]  __sys_sendto+0x626/0x6c0
[  936.675334][   T30]  ? file_init_path+0x3b/0x5a0
[  936.680123][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  936.685337][   T30]  ? errseq_sample+0x40/0x70
[  936.690039][   T30]  ? rcu_is_watching+0x15/0xb0
[  936.695287][   T30]  ? fd_install+0x94/0x3d0
[  936.699714][   T30]  ? fd_install+0x306/0x3d0
[  936.704296][   T30]  __x64_sys_sendto+0xde/0x100
[  936.709094][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  936.715851][   T30]  do_syscall_64+0x174/0x580
[  936.720487][   T30]  ? clear_bhb_loop+0x40/0x90
[  936.725323][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  936.731319][   T30] RIP: 0033:0x7fc1c535d68e
[  936.735750][   T30] RSP: 002b:00007ffc38c9edd8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  936.744257][   T30] RAX: ffffffffffffffda RBX: 0000555569595500 RCX: 00007fc1c535d68e
[  936.752414][   T30] RDX: 0000000000000020 RSI: 00007fc1c6144670 RDI: 0000000000000005
[  936.760386][   T30] RBP: 0000000000000001 R08: 00007ffc38c9ee54 R09: 000000000000000c
[  936.768454][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  936.776566][   T30] R13: 00007ffc38c9eea8 R14: 00007fc1c6144670 R15: 0000000000000000
[  936.784789][   T30]  </TASK>
[  936.787846][   T30] INFO: task syz.1.9491:10175 blocked for more than 144 seconds.
[  936.796788][   T30]       Not tainted syzkaller #0
[  936.801853][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  936.810846][   T30] task:syz.1.9491      state:D stack:25592 pid:10175 tgid:10174 ppid:8149   task_flags:0x480140 flags:0x00080002
[  936.823402][   T30] Call Trace:
[  936.826710][   T30]  <TASK>
[  936.829630][   T30]  __schedule+0x17d9/0x56c0
[  936.834424][   T30]  ? do_raw_spin_lock+0x12b/0x2f0
[  936.839593][   T30]  ? rcu_is_watching+0x15/0xb0
[  936.844597][   T30]  ? __pfx___schedule+0x10/0x10
[  936.849959][   T30]  ? schedule+0x90/0x360
[  936.854531][   T30]  ? rcu_is_watching+0x15/0xb0
[  936.859336][   T30]  ? lock_release+0x4b/0x3c0
[  936.863984][   T30]  schedule+0x164/0x360
[  936.868145][   T30]  blk_mq_freeze_queue_wait+0x101/0x180
[  936.873865][   T30]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[  936.879979][   T30]  ? __pfx_autoremove_wake_function+0x10/0x10
[  936.886147][   T30]  queue_limits_commit_update_frozen+0x55/0xd0
[  936.892440][   T30]  nbd_set_size+0x454/0x680
[  936.897057][   T30]  ? __pfx_nbd_set_size+0x10/0x10
[  936.902286][   T30]  ? nla_memcpy+0x5b/0xc0
[  936.906725][   T30]  nbd_genl_reconfigure+0x7e9/0x1e80
[  936.912124][   T30]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  936.917875][   T30]  ? rcu_is_watching+0x15/0xb0
[  936.923557][   T30]  ? trace_kmalloc+0x2a/0xf0
[  936.928175][   T30]  ? __nla_parse+0x40/0x60
[  936.932860][   T30]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  936.939227][   T30]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  936.945675][   T30]  genl_family_rcv_msg_doit+0x233/0x340
[  936.951337][   T30]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  936.957418][   T30]  ? __pfx_stack_trace_save+0x10/0x10
[  936.962831][   T30]  genl_rcv_msg+0x614/0x7a0
[  936.967344][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  936.972453][   T30]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  936.978239][   T30]  ? __netlink_lookup+0xc6/0x8b0
[  936.983259][   T30]  ? rcu_is_watching+0x15/0xb0
[  936.988148][   T30]  netlink_rcv_skb+0x226/0x4a0
[  936.993023][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  936.998057][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  937.003633][   T30]  ? down_read+0x2be/0x330
[  937.008063][   T30]  genl_rcv+0x28/0x40
[  937.012127][   T30]  netlink_unicast+0x7bb/0x940
[  937.016917][   T30]  netlink_sendmsg+0x813/0xb40
[  937.022469][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  937.027796][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  937.032781][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  937.038078][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  937.043416][   T30]  ____sys_sendmsg+0x9b9/0xa20
[  937.048191][   T30]  ? __pfx_____sys_sendmsg+0x10/0x10
[  937.053553][   T30]  ? lock_release+0x4b/0x3c0
[  937.058271][   T30]  ? import_iovec+0x73/0xa0
[  937.062897][   T30]  ___sys_sendmsg+0x2a5/0x360
[  937.067600][   T30]  ? __pfx____sys_sendmsg+0x10/0x10
[  937.072843][   T30]  ? futex_wake+0x51b/0x5f0
[  937.077351][   T30]  ? __fget_files+0x2a/0x420
[  937.082172][   T30]  ? __fget_files+0x3a2/0x420
[  937.086851][   T30]  __x64_sys_sendmsg+0x1b1/0x290
[  937.092151][   T30]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  937.097644][   T30]  ? rcu_is_watching+0x15/0xb0
[  937.102558][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  937.108646][   T30]  do_syscall_64+0x174/0x580
[  937.113458][   T30]  ? trace_irq_disable+0x3b/0x140
[  937.118512][   T30]  ? clear_bhb_loop+0x40/0x90
[  937.123343][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  937.129271][   T30] RIP: 0033:0x7f2bee39ce59
[  937.133871][   T30] RSP: 002b:00007f2bef1c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  937.142460][   T30] RAX: ffffffffffffffda RBX: 00007f2bee615fa0 RCX: 00007f2bee39ce59
[  937.150458][   T30] RDX: 0000000004000000 RSI: 0000200000000280 RDI: 0000000000000009
[  937.158719][   T30] RBP: 00007f2bee432e6f R08: 0000000000000000 R09: 0000000000000000
[  937.166865][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  937.175045][   T30] R13: 00007f2bee616038 R14: 00007f2bee615fa0 R15: 00007ffe4ee8c3c8
[  937.183283][   T30]  </TASK>
[  937.186345][   T30] INFO: task syz.4.9498:10222 blocked for more than 144 seconds.
[  937.194179][   T30]       Not tainted syzkaller #0
[  937.199115][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  937.207862][   T30] task:syz.4.9498      state:D stack:28672 pid:10222 tgid:10219 ppid:7319   task_flags:0x400040 flags:0x00080002
[  937.220793][   T30] Call Trace:
[  937.224103][   T30]  <TASK>
[  937.227105][   T30]  __schedule+0x17d9/0x56c0
[  937.231735][   T30]  ? __update_page_owner_handle+0x5a/0x570
[  937.237580][   T30]  ? __pfx___schedule+0x10/0x10
[  937.242532][   T30]  ? rcu_is_watching+0x15/0xb0
[  937.247345][   T30]  ? rcu_is_watching+0x15/0xb0
[  937.252348][   T30]  ? lock_release+0x4b/0x3c0
[  937.256971][   T30]  ? rcu_is_watching+0x15/0xb0
[  937.261942][   T30]  schedule+0x164/0x360
[  937.266125][   T30]  schedule_preempt_disabled+0x13/0x30
[  937.271664][   T30]  __mutex_lock+0x7bf/0x1550
[  937.276277][   T30]  ? __mutex_lock+0x5d4/0x1550
[  937.281185][   T30]  ? genl_rcv_msg+0x10b/0x7a0
[  937.285885][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  937.290985][   T30]  ? __pfx_stack_trace_save+0x10/0x10
[  937.296375][   T30]  ? radix_tree_lookup+0x240/0x290
[  937.301618][   T30]  genl_rcv_msg+0x10b/0x7a0
[  937.306147][   T30]  ? __alloc_skb+0x276/0x7a0
[  937.310802][   T30]  ? netlink_sendmsg+0x5d4/0xb40
[  937.315747][   T30]  ? do_syscall_64+0x174/0x580
[  937.320499][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  937.325670][   T30]  ? __netlink_lookup+0xc6/0x8b0
[  937.330981][   T30]  ? rcu_is_watching+0x15/0xb0
[  937.335794][   T30]  netlink_rcv_skb+0x226/0x4a0
[  937.340552][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  937.345815][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  937.351234][   T30]  ? down_read+0x2be/0x330
[  937.355665][   T30]  genl_rcv+0x28/0x40
[  937.359653][   T30]  netlink_unicast+0x7bb/0x940
[  937.365023][   T30]  netlink_sendmsg+0x813/0xb40
[  937.369993][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  937.375460][   T30]  ? __might_fault+0xaf/0x130
[  937.380175][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  937.385278][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  937.390708][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  937.396038][   T30]  __sys_sendto+0x626/0x6c0
[  937.400555][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  937.405704][   T30]  ? do_user_addr_fault+0xc4a/0x1340
[  937.411414][   T30]  __x64_sys_sendto+0xde/0x100
[  937.416214][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  937.422397][   T30]  do_syscall_64+0x174/0x580
[  937.427013][   T30]  ? trace_irq_disable+0x3b/0x140
[  937.432181][   T30]  ? clear_bhb_loop+0x40/0x90
[  937.436872][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  937.442815][   T30] RIP: 0033:0x7f5e65b5d68e
[  937.447748][   T30] RSP: 002b:00007f5e66974e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  937.456232][   T30] RAX: ffffffffffffffda RBX: 00007f5e669766c0 RCX: 00007f5e65b5d68e
[  937.464408][   T30] RDX: 0000000000000020 RSI: 00007f5e66975000 RDI: 0000000000000004
[  937.472443][   T30] RBP: 0000000000000000 R08: 00007f5e66974f04 R09: 000000000000000c
[  937.480446][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  937.488598][   T30] R13: 00007f5e66974f58 R14: 00007f5e66975000 R15: 0000000000000000
[  937.496826][   T30]  </TASK>
[  937.499882][   T30] INFO: task syz.0.9508:10263 blocked for more than 144 seconds.
[  937.508274][   T30]       Not tainted syzkaller #0
[  937.513286][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  937.522002][   T30] task:syz.0.9508      state:D stack:27560 pid:10263 tgid:10262 ppid:7749   task_flags:0x400140 flags:0x00080002
[  937.534103][   T30] Call Trace:
[  937.537418][   T30]  <TASK>
[  937.540358][   T30]  __schedule+0x17d9/0x56c0
[  937.544963][   T30]  ? ima_match_policy+0x106/0x21c0
[  937.550155][   T30]  ? __update_page_owner_handle+0x5a/0x570
[  937.556049][   T30]  ? __pfx___schedule+0x10/0x10
[  937.561068][   T30]  ? rcu_is_watching+0x15/0xb0
[  937.565917][   T30]  ? rcu_is_watching+0x15/0xb0
[  937.571014][   T30]  ? lock_release+0x4b/0x3c0
[  937.575795][   T30]  ? rcu_is_watching+0x15/0xb0
[  937.580662][   T30]  schedule+0x164/0x360
[  937.584828][   T30]  schedule_preempt_disabled+0x13/0x30
[  937.590274][   T30]  __mutex_lock+0x7bf/0x1550
[  937.594992][   T30]  ? __mutex_lock+0x5d4/0x1550
[  937.599790][   T30]  ? genl_rcv_msg+0x10b/0x7a0
[  937.604649][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  937.609684][   T30]  ? __pfx_stack_trace_save+0x10/0x10
[  937.615225][   T30]  ? radix_tree_lookup+0x240/0x290
[  937.620391][   T30]  genl_rcv_msg+0x10b/0x7a0
[  937.625008][   T30]  ? __alloc_skb+0x276/0x7a0
[  937.629616][   T30]  ? netlink_sendmsg+0x5d4/0xb40
[  937.634617][   T30]  ? do_syscall_64+0x174/0x580
[  937.639457][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  937.644586][   T30]  ? __netlink_lookup+0xc6/0x8b0
[  937.649529][   T30]  ? rcu_is_watching+0x15/0xb0
[  937.654517][   T30]  netlink_rcv_skb+0x226/0x4a0
[  937.659322][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  937.664461][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  937.669786][   T30]  ? down_read+0x2be/0x330
[  937.674279][   T30]  genl_rcv+0x28/0x40
[  937.678268][   T30]  netlink_unicast+0x7bb/0x940
[  937.683264][   T30]  netlink_sendmsg+0x813/0xb40
[  937.688062][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  937.693438][   T30]  ? __might_fault+0xaf/0x130
[  937.698165][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  937.703227][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  937.708544][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  937.713887][   T30]  __sys_sendto+0x626/0x6c0
[  937.718398][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  937.723559][   T30]  ? do_user_addr_fault+0xc4a/0x1340
[  937.728893][   T30]  __x64_sys_sendto+0xde/0x100
[  937.733882][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  937.740034][   T30]  do_syscall_64+0x174/0x580
[  937.744697][   T30]  ? trace_irq_disable+0x3b/0x140
[  937.749727][   T30]  ? clear_bhb_loop+0x40/0x90
[  937.754456][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  937.760354][   T30] RIP: 0033:0x7f3c6375d68e
[  937.764920][   T30] RSP: 002b:00007f3c619ece88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  937.773410][   T30] RAX: ffffffffffffffda RBX: 00007f3c619ee6c0 RCX: 00007f3c6375d68e
[  937.781439][   T30] RDX: 0000000000000020 RSI: 00007f3c619ed000 RDI: 0000000000000006
[  937.789409][   T30] RBP: 0000000000000000 R08: 00007f3c619ecf04 R09: 000000000000000c
[  937.797497][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  937.805603][   T30] R13: 00007f3c619ecf58 R14: 00007f3c619ed000 R15: 0000000000000000
[  937.813883][   T30]  </TASK>
[  937.816959][   T30] INFO: task syz.0.9508:10264 blocked for more than 145 seconds.
[  937.824748][   T30]       Not tainted syzkaller #0
[  937.829677][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  937.838439][   T30] task:syz.0.9508      state:D stack:27256 pid:10264 tgid:10262 ppid:7749   task_flags:0x400140 flags:0x00080002
[  937.850481][   T30] Call Trace:
[  937.853813][   T30]  <TASK>
[  937.856763][   T30]  __schedule+0x17d9/0x56c0
[  937.861383][   T30]  ? lock_release+0x4b/0x3c0
[  937.866000][   T30]  ? is_bpf_text_address+0x292/0x2b0
[  937.871329][   T30]  ? __pfx___schedule+0x10/0x10
[  937.876179][   T30]  ? rcu_is_watching+0x15/0xb0
[  937.881001][   T30]  ? rcu_is_watching+0x15/0xb0
[  937.885869][   T30]  ? lock_release+0x4b/0x3c0
[  937.890454][   T30]  ? rcu_is_watching+0x15/0xb0
[  937.895552][   T30]  schedule+0x164/0x360
[  937.899741][   T30]  schedule_preempt_disabled+0x13/0x30
[  937.905329][   T30]  __mutex_lock+0x7bf/0x1550
[  937.909946][   T30]  ? __mutex_lock+0x5d4/0x1550
[  937.914781][   T30]  ? genl_rcv_msg+0x10b/0x7a0
[  937.919463][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  937.924623][   T30]  ? __pfx_stack_trace_save+0x10/0x10
[  937.930019][   T30]  ? radix_tree_lookup+0x240/0x290
[  937.935175][   T30]  genl_rcv_msg+0x10b/0x7a0
[  937.939688][   T30]  ? __alloc_skb+0x276/0x7a0
[  937.944473][   T30]  ? netlink_sendmsg+0x5d4/0xb40
[  937.949463][   T30]  ? __x64_sys_sendmsg+0x1b1/0x290
[  937.954639][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  937.959853][   T30]  ? __netlink_lookup+0xc6/0x8b0
[  937.964959][   T30]  ? rcu_is_watching+0x15/0xb0
[  937.969767][   T30]  netlink_rcv_skb+0x226/0x4a0
[  937.975406][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  937.980490][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  937.986030][   T30]  ? down_read+0x2be/0x330
[  937.990458][   T30]  genl_rcv+0x28/0x40
[  937.994525][   T30]  netlink_unicast+0x7bb/0x940
[  937.999304][   T30]  netlink_sendmsg+0x813/0xb40
[  938.004343][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  938.009725][   T30]  ? futex_unqueue+0x22/0x240
[  938.014527][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  938.019507][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  938.024854][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  938.030151][   T30]  ____sys_sendmsg+0x9b9/0xa20
[  938.035272][   T30]  ? __pfx_____sys_sendmsg+0x10/0x10
[  938.040960][   T30]  ? lock_release+0x4b/0x3c0
[  938.045644][   T30]  ? import_iovec+0x73/0xa0
[  938.050257][   T30]  ___sys_sendmsg+0x2a5/0x360
[  938.055209][   T30]  ? __pfx____sys_sendmsg+0x10/0x10
[  938.060734][   T30]  ? futex_wait+0x2a2/0x390
[  938.065296][   T30]  ? __fget_files+0x2a/0x420
[  938.070113][   T30]  ? __fget_files+0x3a2/0x420
[  938.075264][   T30]  __x64_sys_sendmsg+0x1b1/0x290
[  938.080229][   T30]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  938.085764][   T30]  ? rcu_is_watching+0x15/0xb0
[  938.090664][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  938.096845][   T30]  do_syscall_64+0x174/0x580
[  938.101515][   T30]  ? trace_irq_disable+0x3b/0x140
[  938.106575][   T30]  ? clear_bhb_loop+0x40/0x90
[  938.111325][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  938.117403][   T30] RIP: 0033:0x7f3c6379ce59
[  938.122192][   T30] RSP: 002b:00007f3c619cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  938.130723][   T30] RAX: ffffffffffffffda RBX: 00007f3c63a16090 RCX: 00007f3c6379ce59
[  938.138850][   T30] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000005
[  938.147285][   T30] RBP: 00007f3c63832e6f R08: 0000000000000000 R09: 0000000000000000
[  938.155494][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  938.163697][   T30] R13: 00007f3c63a16128 R14: 00007f3c63a16090 R15: 00007ffc5264afe8
[  938.172113][   T30]  </TASK>
[  938.175157][   T30] INFO: task syz.2.9509:10266 blocked for more than 145 seconds.
[  938.182957][   T30]       Not tainted syzkaller #0
[  938.187899][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  938.196814][   T30] task:syz.2.9509      state:D stack:28288 pid:10266 tgid:10265 ppid:8437   task_flags:0x400040 flags:0x00080002
[  938.209344][   T30] Call Trace:
[  938.212878][   T30]  <TASK>
[  938.215837][   T30]  __schedule+0x17d9/0x56c0
[  938.220472][   T30]  ? trace_irq_enable+0x3b/0x140
[  938.225488][   T30]  ? __pfx___schedule+0x10/0x10
[  938.231135][   T30]  ? rcu_is_watching+0x15/0xb0
[  938.235954][   T30]  ? rcu_is_watching+0x15/0xb0
[  938.240854][   T30]  ? lock_release+0x4b/0x3c0
[  938.245456][   T30]  ? rcu_is_watching+0x15/0xb0
[  938.250297][   T30]  schedule+0x164/0x360
[  938.254686][   T30]  schedule_preempt_disabled+0x13/0x30
[  938.260792][   T30]  __mutex_lock+0x7bf/0x1550
[  938.265412][   T30]  ? __mutex_lock+0x5d4/0x1550
[  938.270168][   T30]  ? genl_rcv_msg+0x10b/0x7a0
[  938.274989][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  938.280053][   T30]  ? __dev_queue_xmit+0x29b/0x37f0
[  938.285230][   T30]  ? radix_tree_lookup+0x240/0x290
[  938.290348][   T30]  genl_rcv_msg+0x10b/0x7a0
[  938.295050][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  938.300175][   T30]  ? ref_tracker_free+0x689/0x830
[  938.305343][   T30]  ? __pfx_ref_tracker_free+0x10/0x10
[  938.310804][   T30]  netlink_rcv_skb+0x226/0x4a0
[  938.315584][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  938.320678][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  938.326114][   T30]  ? down_read+0x2be/0x330
[  938.330557][   T30]  genl_rcv+0x28/0x40
[  938.334665][   T30]  netlink_unicast+0x7bb/0x940
[  938.339455][   T30]  netlink_sendmsg+0x813/0xb40
[  938.344372][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  938.349705][   T30]  ? __might_fault+0xaf/0x130
[  938.354519][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  938.359466][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  938.364927][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  938.370240][   T30]  __sys_sendto+0x626/0x6c0
[  938.374846][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  938.379884][   T30]  ? do_user_addr_fault+0xc4a/0x1340
[  938.385344][   T30]  __x64_sys_sendto+0xde/0x100
[  938.390193][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  938.396306][   T30]  do_syscall_64+0x174/0x580
[  938.400975][   T30]  ? trace_irq_disable+0x3b/0x140
[  938.406202][   T30]  ? clear_bhb_loop+0x40/0x90
[  938.411125][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  938.417027][   T30] RIP: 0033:0x7f5bed35d68e
[  938.421501][   T30] RSP: 002b:00007f5bee181e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  938.429913][   T30] RAX: ffffffffffffffda RBX: 00007f5bee1836c0 RCX: 00007f5bed35d68e
[  938.437954][   T30] RDX: 0000000000000020 RSI: 00007f5bee182000 RDI: 0000000000000004
[  938.446600][   T30] RBP: 0000000000000000 R08: 00007f5bee181f04 R09: 000000000000000c
[  938.454784][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  938.462887][   T30] R13: 00007f5bee181f58 R14: 00007f5bee182000 R15: 0000000000000000
[  938.471004][   T30]  </TASK>
[  938.474065][   T30] INFO: task syz.2.9509:10267 blocked for more than 145 seconds.
[  938.481859][   T30]       Not tainted syzkaller #0
[  938.486803][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  938.495554][   T30] task:syz.2.9509      state:D stack:27320 pid:10267 tgid:10265 ppid:8437   task_flags:0x400140 flags:0x00080002
[  938.507524][   T30] Call Trace:
[  938.510875][   T30]  <TASK>
[  938.513809][   T30]  __schedule+0x17d9/0x56c0
[  938.518301][   T30]  ? trace_irq_enable+0x3b/0x140
[  938.523283][   T30]  ? __pfx___schedule+0x10/0x10
[  938.528132][   T30]  ? rcu_is_watching+0x15/0xb0
[  938.533019][   T30]  ? rcu_is_watching+0x15/0xb0
[  938.537801][   T30]  ? lock_release+0x4b/0x3c0
[  938.542459][   T30]  ? rcu_is_watching+0x15/0xb0
[  938.547226][   T30]  schedule+0x164/0x360
[  938.551449][   T30]  schedule_preempt_disabled+0x13/0x30
[  938.557003][   T30]  __mutex_lock+0x7bf/0x1550
[  938.561733][   T30]  ? __mutex_lock+0x5d4/0x1550
[  938.566523][   T30]  ? genl_rcv_msg+0x10b/0x7a0
[  938.571252][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  938.576281][   T30]  ? __dev_queue_xmit+0x29b/0x37f0
[  938.581547][   T30]  ? radix_tree_lookup+0x240/0x290
[  938.586698][   T30]  genl_rcv_msg+0x10b/0x7a0
[  938.591250][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  938.596277][   T30]  ? ref_tracker_free+0x689/0x830
[  938.601439][   T30]  ? __pfx_ref_tracker_free+0x10/0x10
[  938.606855][   T30]  netlink_rcv_skb+0x226/0x4a0
[  938.611990][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  938.617058][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  938.622431][   T30]  ? down_read+0x2be/0x330
[  938.626860][   T30]  genl_rcv+0x28/0x40
[  938.630983][   T30]  netlink_unicast+0x7bb/0x940
[  938.635763][   T30]  netlink_sendmsg+0x813/0xb40
[  938.640527][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  938.645888][   T30]  ? __might_fault+0xaf/0x130
[  938.650574][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  938.655604][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  938.661158][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  938.666467][   T30]  __sys_sendto+0x626/0x6c0
[  938.671101][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  938.676153][   T30]  ? do_user_addr_fault+0xc4a/0x1340
[  938.681493][   T30]  __x64_sys_sendto+0xde/0x100
[  938.686272][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  938.692549][   T30]  do_syscall_64+0x174/0x580
[  938.697174][   T30]  ? trace_irq_disable+0x3b/0x140
[  938.702258][   T30]  ? clear_bhb_loop+0x40/0x90
[  938.706937][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  938.712971][   T30] RIP: 0033:0x7f5bed35d68e
[  938.717403][   T30] RSP: 002b:00007f5beb5f4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  938.725880][   T30] RAX: ffffffffffffffda RBX: 00007f5beb5f66c0 RCX: 00007f5bed35d68e
[  938.733910][   T30] RDX: 0000000000000020 RSI: 00007f5beb5f5000 RDI: 0000000000000009
[  938.741985][   T30] RBP: 0000000000000000 R08: 00007f5beb5f4f04 R09: 000000000000000c
[  938.749964][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009
[  938.758000][   T30] R13: 00007f5beb5f4f58 R14: 00007f5beb5f5000 R15: 0000000000000000
[  938.766191][   T30]  </TASK>
[  938.769333][   T30] INFO: lockdep is turned off.
[  938.774331][   T30] NMI backtrace for cpu 1
[  938.774348][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  938.774364][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  938.774373][   T30] Call Trace:
[  938.774380][   T30]  <TASK>
[  938.774387][   T30]  dump_stack_lvl+0xe8/0x150
[  938.774411][   T30]  nmi_cpu_backtrace+0x274/0x2d0
[  938.774430][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  938.774477][   T30]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  938.774496][   T30]  sys_info+0x135/0x170
[  938.774511][   T30]  watchdog+0xfd7/0x1030
[  938.774532][   T30]  ? watchdog+0x1c7/0x1030
[  938.774553][   T30]  kthread+0x388/0x470
[  938.774568][   T30]  ? __pfx_watchdog+0x10/0x10
[  938.774585][   T30]  ? __pfx_kthread+0x10/0x10
[  938.774599][   T30]  ret_from_fork+0x514/0xb70
[  938.774627][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  938.774642][   T30]  ? __switch_to+0xc89/0x1420
[  938.774664][   T30]  ? __pfx_kthread+0x10/0x10
[  938.774679][   T30]  ret_from_fork_asm+0x1a/0x30
[  938.774701][   T30]  </TASK>
[  938.774708][   T30] Sending NMI from CPU 1 to CPUs 0:
[  938.884227][    C0] NMI backtrace for cpu 0
[  938.884247][    C0] CPU: 0 UID: 0 PID: 540 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) 
[  938.884265][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  938.884276][    C0] Workqueue:  0x0 (bat_events)
[  938.884299][    C0] RIP: 0010:worker_enter_idle+0x31a/0x520
[  938.884325][    C0] Code: 8d bd 90 00 00 00 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 aa ff a2 00 49 83 3f 00 <74> 07 e8 ff aa 37 00 eb 3e e8 f8 aa 37 00 4d 8d bd 88 00 00 00 48
[  938.884339][    C0] RSP: 0018:ffffc9000dd4fca8 EFLAGS: 00000086
[  938.884352][    C0] RAX: 1ffff110035d4612 RBX: 0000000000000004 RCX: 0000000000000000
[  938.884364][    C0] RDX: ffff888082813e00 RSI: 0000000000000002 RDI: 0000000000000014
[  938.884375][    C0] RBP: 0000000000000002 R08: ffff8880313f8387 R09: 1ffff1100627f070
[  938.884386][    C0] R10: dffffc0000000000 R11: ffffed100627f071 R12: dffffc0000000000
[  938.884398][    C0] R13: ffff88801aea3000 R14: ffff88801aea3074 R15: ffff88801aea3090
[  938.884410][    C0] FS:  0000000000000000(0000) GS:ffff88812527c000(0000) knlGS:0000000000000000
[  938.884424][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  938.884441][    C0] CR2: 0000559c9f2cfee8 CR3: 000000000e746000 CR4: 00000000003526f0
[  938.884456][    C0] Call Trace:
[  938.884463][    C0]  <TASK>
[  938.884471][    C0]  worker_thread+0xb9e/0xfb0
[  938.884502][    C0]  kthread+0x388/0x470
[  938.884516][    C0]  ? __pfx_worker_thread+0x10/0x10
[  938.884535][    C0]  ? __pfx_kthread+0x10/0x10
[  938.884550][    C0]  ret_from_fork+0x514/0xb70
[  938.884567][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  938.884582][    C0]  ? __switch_to+0xc89/0x1420
[  938.884605][    C0]  ? __pfx_kthread+0x10/0x10
[  938.884619][    C0]  ret_from_fork_asm+0x1a/0x30
[  938.884643][    C0]  </TASK>
[  939.060991][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  939.067845][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  939.076934][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  939.086972][   T30] Call Trace:
[  939.090232][   T30]  <TASK>
[  939.093149][   T30]  vpanic+0x56c/0xa60
[  939.097144][   T30]  ? __pfx___schedule+0x10/0x10
[  939.101974][   T30]  ? __pfx_vpanic+0x10/0x10
[  939.106453][   T30]  ? nmi_trigger_cpumask_backtrace+0x1f4/0x300
[  939.112585][   T30]  panic+0xc5/0xd0
[  939.116287][   T30]  ? __pfx_panic+0x10/0x10
[  939.120681][   T30]  ? preempt_schedule_common+0x82/0xd0
[  939.126126][   T30]  ? preempt_schedule_thunk+0x16/0x40
[  939.131481][   T30]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  939.137617][   T30]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  939.143774][   T30]  watchdog+0x1030/0x1030
[  939.148087][   T30]  ? watchdog+0x1c7/0x1030
[  939.152502][   T30]  kthread+0x388/0x470
[  939.156548][   T30]  ? __pfx_watchdog+0x10/0x10
[  939.161204][   T30]  ? __pfx_kthread+0x10/0x10
[  939.165779][   T30]  ret_from_fork+0x514/0xb70
[  939.170354][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  939.175453][   T30]  ? __switch_to+0xc89/0x1420
[  939.180120][   T30]  ? __pfx_kthread+0x10/0x10
[  939.184702][   T30]  ret_from_fork_asm+0x1a/0x30
[  939.189454][   T30]  </TASK>
[  939.192738][   T30] Kernel Offset: disabled
[  939.197095][   T30] Rebooting in 86400 seconds..