last executing test programs:

19.272740901s ago: executing program 2 (id=5841):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_coalesce={0x33, 0x0, 0x7f2e, 0x0, 0xfffffffb, 0x2, 0x80000000, 0xfffffffe, 0xffff2ee0, 0x40, 0x8, 0x4000004, 0xfffffe00, 0x5, 0x0, 0xb, 0x0, 0x7, 0x20002, 0x0, 0x2, 0x0, 0x3ff}})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000200000008001b000000000010001a800c002d80080001"], 0x38}}, 0x0)

18.300191519s ago: executing program 2 (id=5856):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0xb, 0x3, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2], 0x3c}}, 0x40000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000000108000240000000000800044000000002080003400000000008000540000000080900010073797a30000000000900020073797a32"], 0x98}}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x63148, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000)

18.224762831s ago: executing program 1 (id=5858):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x782}, 0x94) (async)
r0 = socket(0x11, 0x3, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r2}, 0x38) (async, rerun: 64)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (rerun: 64)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x7cf, 0x1}, 0x38)
setsockopt(r0, 0x105, 0xf, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x4004) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) (async)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0)

17.940799446s ago: executing program 1 (id=5862):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x1c}}, 0x20000080)
sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async)
sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) (async)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000f1ffffff1c00000018000180140002006e657464657673696d30"], 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x4) (async)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000f1ffffff1c00000018000180140002006e657464657673696d30"], 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x4)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000140)=0x2, 0x4) (async)
setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000140)=0x2, 0x4)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x4040000)
setsockopt$inet_int(r1, 0x0, 0x17, 0x0, 0x0)

17.92017105s ago: executing program 4 (id=5863):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14}}}, 0x30}}, 0x0)
writev(r1, &(0x7f0000000940)=[{&(0x7f0000000240)='g*', 0x2}], 0x1)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) (async)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58)
socket$can_raw(0x1d, 0x3, 0x1) (async)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r5=>0x0})
sendmsg$can_raw(r4, &(0x7f00000000c0)={&(0x7f0000000140)={0x1d, r5}, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}}, 0x8004) (async)
sendmsg$can_raw(r4, &(0x7f00000000c0)={&(0x7f0000000140)={0x1d, r5}, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}}, 0x8004)
r6 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r6, 0x0)
setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000000000), 0x4)
r7 = socket(0x2, 0x80805, 0x0)
accept4$unix(r7, &(0x7f0000000100)=@abs, &(0x7f0000000300)=0x6e, 0xc00) (async)
accept4$unix(r7, &(0x7f0000000100)=@abs, &(0x7f0000000300)=0x6e, 0xc00)
setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, 0xfffffffffffffffe, 0x78) (async)
setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, 0xfffffffffffffffe, 0x78)
r8 = accept4(r0, 0x0, 0x0, 0x800)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r9, 0x0, 0x32, &(0x7f00000000c0), 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r8)

17.711523499s ago: executing program 4 (id=5866):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x6, 0x2}, {0x2, 0xfff1}, {0x2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040851}, 0x4041080)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in6=@loopback, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x2c}, 0x4d6, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x70bd2d, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598)

17.675843746s ago: executing program 2 (id=5867):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0xf8, 0xf8, 0x1f0, 0xffffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8001, 0x7}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, '\x00', 0xb}, [0xffffffff, 0xffffffff, 0xffffffff, 0xff000000], [0xff, 0x0, 0xffffffff, 0xff], 'veth0_to_batadv\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x1, 0x2, 0x9, 0x2}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010002b54f12649d81f22cce124299c82bd95010000000000000000000500000a0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006070100000000000c00044000000000243bed8c08ebf657"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000140)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002f00098027bd7000fbdbdf25040000000c0017"], 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000)

17.277666933s ago: executing program 0 (id=5868):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711243000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000240), 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000019140000001100", @ANYRES16=r0], 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010)

17.209378944s ago: executing program 2 (id=5869):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x3, [{}], "00ba00"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'k'}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000400)=""/188, 0x44, 0xbc, 0x1}, 0x28)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x10c, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x81}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_REG_RULES={0xc8, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x401}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffff9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x10}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffff000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xe}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffc}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x475}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xb}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1cb}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}]}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40020040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x8800)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r0], 0x18}}, 0x0)
close(0x4)
recvmmsg(r0, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000000340)}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000a00)=""/109, 0x6d}, {&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003740)=""/195, 0xc3}, {&(0x7f0000003840)=""/172, 0xac}, {&(0x7f0000003900)=""/151, 0x97}, {&(0x7f00000039c0)=""/97, 0x61}], 0x6, &(0x7f0000003ac0)=""/32, 0x20}, 0x9}, {{&(0x7f0000003b00)=@tipc=@name, 0x80, &(0x7f0000003c00)}, 0xf55f}, {{0x0, 0x0, &(0x7f0000004980)}, 0x7}], 0x6, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004)

17.208231171s ago: executing program 4 (id=5871):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000000c0), 0x12)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
readv(r3, &(0x7f0000001dc0)=[{&(0x7f0000000240)=""/225, 0xe1}, {&(0x7f0000000340)=""/16, 0x10}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/241, 0xf1}, {&(0x7f0000001d80)=""/22, 0x16}], 0x5)
sendmmsg$inet6(r5, &(0x7f0000004640)=[{{&(0x7f0000001e80)={0xa, 0x4e21, 0x5, @mcast1, 0x7fffffff}, 0x1c, 0x0, 0x0, &(0x7f00000021c0)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}], 0x28}}], 0x1, 0x20000000)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r4, 0x80286722, &(0x7f0000000180)={&(0x7f0000000080)=""/36, 0x24, 0x401})
r6 = openat$cgroup_procs(r4, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000c40), 0x12)

17.052408955s ago: executing program 0 (id=5872):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x33c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x288, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0x11, 0x8, 0x4}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x2}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "554b956aa3fcfbc4a187baf0437163b5d33108db016465f92a93480d2c246d90f03741da6ee916f7c9917dbd81da67d6150151679559af8402b932745d19fbfbd679c133c4714565f91cd05790d990818bac85598b6a844cb2c2d277aaca9a88ee0e6a834ba02b4e549f11fb13e9fe33730c55997f2d3b7e6469210db81587fc522295f49a78f4e08ddfb01172b12a19b303a0c47fa3500cdc3e6725a79dcd3731c37083c3bbe73c43e7e2ea82c72986a1499c677c565ea1cfc874e7e978e4ebe8d338f0b37807d40333ee570133982998623ec809826f1009856a9d9d8e839c65d3ead78c6b3cb8f7beee8e59f19de93d06628a2cdfa4333d96882b96c36cc3"}]}}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x26, 0xffff, 0x8, 0x2, 0x2, 0x8, 0x2}}, {0x8, 0x2, [0x6, 0x6]}}, {{0x1c, 0x1, {0x4, 0xc, 0x7f, 0x8, 0x0, 0x10, 0x3, 0x1}}, {0x6, 0x2, [0x5fd]}}, {{0x1c, 0x1, {0x7, 0x80, 0x0, 0x1000, 0x2, 0x7fffffff, 0x10088, 0x4}}, {0xc, 0x2, [0x4, 0xffff, 0xff52, 0x9]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0x10, 0x2}}]}, 0x33c}}, 0x0)
close(r1)
r4 = accept4$unix(r0, 0x0, &(0x7f0000000000), 0x80800)
sendmsg$unix(r4, &(0x7f0000000940)={&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000140)="650e616b4c8bc47ab9724cd0deb0b36272063b0cd2d82b1be8085b5cb25b0ba3318ee4426bc8c77a6c47008dc8da11ae0186c4cf24", 0x35}, {&(0x7f00000005c0)="6302603330129ff3370bda8d98612d4270a8b7e538b81c047eb19cb818792446496b85188df6dc8fae72e7fd712c95951af87f0b5a235dbf7419be02b5282dad9525520e39885e6587755c26813be3aae159f77a16fd6cf2c2a87e1c71d0a3a11f882bc02fede8f99344f726ab4ed83371433251bfe5d775228fa8ed54b21a10cee9291f01ccdd803ed5548ce2595407e3314202ecffef9c2784894af6e05b9430ca79b758446fe9b277b65a430c04ed01dccb756caef2a43ec6f0b4574fb78fdd81bbe8c9ed450cd9aa7d1121210d151d39925e744296eca07c5c087cdf6222156531591b95590ef0daa464", 0xec}, {&(0x7f00000006c0)="f6d8c374fdc77fb8e48f40990a82ba0c97cf201affda9044cca58f73da7dff6d9a3d4ff8bcc50ec0a87a8d4c576eebc0cb25f7cea6f58a3ac085bbc6b8f4552666b39e7b1ce6003448780244f5483599ff178db409052930b5b0f76ebfc1640a48354c09bbcebc4fd3ebfe1b10b31930f733a9650eac6d0e456a4e3948b3380ffca76869525316b01103a0c05f0264b259da996e78d254539a4b86f705f10c60eabbfcd6ec7577", 0xa7}, {&(0x7f0000000780)}, {&(0x7f00000007c0)="6828249d6f760294a1d82c6250b84b5b5688280912822d56910266d39c96a410d827", 0x22}, {&(0x7f0000000800)="eda4f9ebb880b274eae5de8fd92b2b09b3474e1fc3a3b42c58e7144cf9347e78a8a102ec0d214f24061f23a1aaea57a81fa2d9c8e1c60333c270f76d301f692d4d71dd250e2be475b3a77c5035ea9a3cd7311c830ef8645f18efae4efb9b36577db3e26b334426b6dcf899e23366793e72c8ac56a9edadc6c1c79991", 0x7c}, {&(0x7f0000000880)="6e0efa2d78f1a466d75d45b0bd0f", 0xe}], 0x7, 0x0, 0x0, 0x4095}, 0x20000801)

16.908265205s ago: executing program 4 (id=5874):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000090000000400000002"], 0x50) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, <r5=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r5, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6=r1, 0x1}, 0x20)
syz_emit_ethernet(0x14, &(0x7f0000000080)={@empty, @random='\x00\x00\x00\x00C7', @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@generic={0x88f5, "1f77"}}}, 0x0) (async)
close(r0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) (async)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r8, 0x6, 0x15, &(0x7f0000000240)=0x3, 0x4)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'veth0\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "80566ba2ba50dc45ee638dcd297d88e28ec00175e64b4fb24e448a24b9d9d771", "9d4a472fd54c2d8b439c2cbc8845efe7702ef8d0a7da9943eed625dfa8f6b887", "599b8ba4c1595abfdace8f553a9179c4de952dfebef8877b5681d4ee1bd9edd9", "1105ae55e8240295b492f1b864173f20374dcb1901a8cbd89f90df811a4bb5ad", "2280199939a2fec962d0f810b7e3c19a4d9013ac5f6850b23a353d17920dfa59", "000013f434bc0cdc6d4500", 0x235ffffd, 0x7, 0xc, 0x6, 0x800}}) (async)
mkdirat$cgroup(r6, &(0x7f0000000a00)='syz1\x00', 0x1ff) (async)
mkdirat$cgroup(r6, &(0x7f0000000080)='syz0\x00', 0x1ff)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_type(r9, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r10, &(0x7f0000000280), 0x9)

16.90678494s ago: executing program 1 (id=5875):
r0 = socket(0x2b, 0x80801, 0x1)
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000200)='bridge0\x00')
r1 = epoll_create1(0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
close(r2)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', <r5=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4800, 0x4)
bind$xdp(r3, &(0x7f00000003c0)={0x2c, 0x18, r5}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xa0028000})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000)
getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, 0x0, &(0x7f0000000280))

16.855634225s ago: executing program 3 (id=5876):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), r2)
sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001980)={0x14, r3, 0xc0f, 0x70bd29, 0x7}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0x1242f}, {}, {0xfff2, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x4, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240448d0}, 0x0)

16.817302837s ago: executing program 0 (id=5877):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES64=0x0, @ANYBLOB="211e7594b5b9279aea4d66e78defcfd27a44df5f9fa57b0f8ec43032ce82ca6b02bdf8d0b54fa22a9f10e68bf6ac8d4cc47c13eee8ae670348ccfc548f9cb575dfdb7fa09caca3f5e7b0afc5ef9404a1cfdde2230991e461569268999ef1", @ANYRES64=r1, @ANYRES32, @ANYBLOB="4ff2648c20ef172e7700042ac1c07b53c738c9505da2e7fd523ef7e73ecacdc5d306ceacb14c16ee8b2ac15a79dfe05395d6c0098f34ad610e2fd49256bff9ddd8478e3004c6a912268ed76b128d3184c6bc53603b7572e566beff2798314444752d2da25f6be6c2c6fe5f833a4ae513adba5befb50e7b170c13e7a47d4ce9fd351c4d0b2ebcb7d7ad6ffce34c348f790b3a32207a258e1f477e22ac92754100f57647c5e333f2c3f891743e6a2f978d623db138f2", @ANYRESHEX=r1], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0xa4)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r2)
setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6)

16.712654927s ago: executing program 4 (id=5878):
r0 = socket$inet6(0xa, 0x3, 0x6)
getsockname$unix(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x6e)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000240)="ff02040000b5fffffffffffff3ff2f2be82db1af00000000", 0x18)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x74df82b7, @private0={0xfc, 0x0, '\x00', 0x1}, 0xae3e}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000010000000000010000000000000001410000001c001700000000000000006574683a7379a4bee846fe4814f3348345"], 0x38}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000190001000000000000000000802000000011fea4110e1ae05a0600000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000d4}, 0x0)
sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x1, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100fdffffbf00010000e000000200000000000000000000000000000000000000000000ffff7f000001000320003c00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c25080000000000020000000000000083000000000000002b06000000000000fcffffffffffffffff7f0000000000001f00000000000000ff0100000000000006000000fcffffff000000002abd700000000000020000fd2000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x20000810)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=<r6=>0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x5, 0xa, 0x0, 0x0, 0x0, 0x0, r6}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d3, 0x6c}, 0xa, @in6=@loopback, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000, 0xffffffff}}, 0xe8)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c)

16.705219912s ago: executing program 0 (id=5879):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000100)={'team_slave_1\x00', 0x9f})

16.596837307s ago: executing program 0 (id=5880):
r0 = socket$inet(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000011c0)=@newqdisc={0x88, 0x24, 0xd0f, 0x70bd2d, 0x3, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0x6, 0xffff}, {0x4, 0x6}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x10, [0x2, 0x9, 0x6, 0x9, 0x4, 0x9, 0xa, 0x6, 0x5, 0x2, 0x2, 0x6, 0x8, 0x2, 0x2, 0xf], 0x0, [0x0, 0x3, 0xd, 0x6, 0x1, 0xf, 0x7, 0x8, 0x5, 0xfb42, 0xc4b, 0x7ff, 0x9, 0x0, 0xb, 0x54], [0xfff9, 0x9, 0xffff, 0xff, 0x2, 0x9f1, 0x1, 0x3b27, 0x1, 0xd, 0x337, 0x5, 0x91b, 0x3, 0x20, 0x7]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1d, 0x2, 0x6)
setsockopt$RDS_CANCEL_SENT_TO(r5, 0x6a, 0x1, 0x0, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e002000028008000100080000000a000900aaaaaaaaaa000000080007000000000008000500", @ANYRES32=r3], 0x60}}, 0x0)

16.476507588s ago: executing program 3 (id=5881):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000003c0)='%pI4   \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, <r2=>0xffffffffffffffff}, 0x4)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x6, 0x2}, {0x2, 0xfff1}, {0x2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040851}, 0x4041080)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000b1"], 0x0, 0x8000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

16.473393928s ago: executing program 4 (id=5882):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080), 0x20)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c00"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
r1 = socket$tipc(0x1e, 0x5, 0x0)
getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
sendmsg$NFT_BATCH(r0, 0x0, 0x40) (async, rerun: 64)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) (async, rerun: 64)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000002100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x8800) (async, rerun: 64)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0)
close(0x4) (async)
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000900)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000580)={0x33c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_SOCK={0x94, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa0}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xef2}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffe62a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf93ba46}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xefd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}]}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb35}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_NODE={0x170, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfb}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "385d2e63cb834f357f6466ff03976aa7a32b5674718bdfc14a5b7e9029"}}, @TIPC_NLA_NODE_ID={0x19, 0x3, "5403b161f3127f10fccfb53494c3c347860af8c2b7"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ID={0xe9, 0x3, "914ed20c835fe9266c9573bb933962eee352bdda3a18ef5bcb6e4ce2fbb9d83219bdf0a23798b30b3d240d822a22cc611c80dca4fda7719048b643ab6abf2d1be689942a8ce16e6ca248f0d656b1af7ca112262ba711334094d715f6fe92591ce76e93ea56969b621f27ec97741adb03f0568474ab5b1df1d3f88d658440fc7120a333834fb682c6a4e9ddf506cd37d00cc4f1705bcac51eaaec8a2f6e90f6694b1fb2f10731129a33a050fc14b38b2e129221e777aa6638ce8635fb43fd7f416207734245db525693dff84c213ee887ef04aaf440efb77d0ce1464499c4166e91a5eae3ff"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10001}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "aba90db072f2274af5776d90c8fa9ecc15012c6b10c1c0851e7b3d"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x82}, 0x4000041)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000dc0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x48)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, 0x0, 0x0) (async)
recvmmsg(r3, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000000340)}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000a00)=""/109, 0x6d}, {&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/21, 0x15}, {&(0x7f0000003740)=""/195, 0xc3}, {&(0x7f0000003840)=""/172, 0xac}, {&(0x7f0000003900)=""/151, 0x97}, {&(0x7f00000039c0)=""/97, 0x61}], 0x7, &(0x7f0000003ac0)=""/32, 0x20}, 0x9}, {{&(0x7f0000003b00)=@tipc=@name, 0x80, &(0x7f0000003c00)}, 0xf55f}, {{&(0x7f0000000c40)=@x25={0x9, @remote}, 0x80, &(0x7f0000004180)}}, {{0x0, 0x0, &(0x7f0000004980)}, 0x7}], 0x7, 0x0, 0x0)

16.356705884s ago: executing program 1 (id=5883):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x3, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000840}, 0x2004c880)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'ip6_vti0\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c041}, 0x4044094)

16.239661872s ago: executing program 2 (id=5884):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x3, 0xfffffffb, @vifc_lcl_ifindex, @empty}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x10, 0x2, {{0xffffffff, 0xffff, 0x5, 0x7, 0xf}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004044}, 0x0)
getsockopt$sock_int(r0, 0x1, 0x26, 0x0, &(0x7f0000000080)) (async)
getsockopt$sock_int(r0, 0x1, 0x26, 0x0, &(0x7f0000000080))
socket(0x400000000010, 0x3, 0x0) (async)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r4=>0x0})
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_DST={0x8, 0x1, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_DST={0x8, 0x1, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x2) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x2)
setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f00000002c0)='multiq\x00', 0x7) (async)
setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f00000002c0)='multiq\x00', 0x7)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@empty}, &(0x7f0000000100)=0x14) (async)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@empty, <r6=>0x0}, &(0x7f0000000100)=0x14)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', r6, 0x7, 0x1, 0x3, 0x8, {{0xe, 0x4, 0x1, 0x34, 0x38, 0x65, 0x0, 0x9, 0x4, 0x0, @multicast1, @local, {[@cipso={0x86, 0x24, 0xffffffffffffffff, [{0x6, 0x4, "9e18"}, {0x5, 0x7, "c6e1c8f800"}, {0x1, 0x2}, {0x2, 0x5, 'PS`'}, {0x2, 0xc, "c8a8a67747b3d61c03ce"}]}]}}}}})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
socket$alg(0x26, 0x5, 0x0) (async)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='V\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010027bd7800fbdbdf250b0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000002f000b0005000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x1, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}]}, @CTA_TUPLE_REPLY={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000c04)

16.165365045s ago: executing program 1 (id=5885):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000400)={{&(0x7f0000000100)=[{0x8, 0x4, 0x7fff, {0x3, 0x8}, 0xfffffffffffffff7, 0x400, 0x800}, {0x7fffffff, 0x7, 0x7, {0x9, 0xffff}, 0x1, 0x2, 0x80000001}, {0x9, 0x3, 0xc9, {}, 0x7fffffff, 0x7, 0x938}, {0x2, 0x6, 0x0, {0x7, 0x5}, 0xe, 0x4, 0xb}, {0x7, 0x19, 0x5, {}, 0x7, 0x0, 0xd8}], 0x5, 0x40, 0x1, 0x9}, {&(0x7f00000002c0), 0x0, 0x10, 0x1, 0x800000000db}, {&(0x7f0000000340)=[0x8, 0x80000000], 0x2, 0x8, 0x4f48, 0x3}, {&(0x7f0000000380)=[{0xd, 0x0, 0x4, 0x808, 0x5}], 0x1, 0x28, 0x5}, {&(0x7f00000003c0)=[0xf9, 0x3], 0x2, 0x8, 0xc26b, 0x7ff}})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r0], 0x4c}, 0x1, 0x0, 0x0, 0x4040845}, 0x4000850)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48200, 0x0)
write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="00006003ffffffffffffaaaaaaaab202080045008ea4e0e42e7c1765907800001fe1e0000001a0006558000c907841090000"], 0x32)

16.148422629s ago: executing program 0 (id=5886):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={<r7=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={<r8=>0xffffffffffffffff})
r9 = socket(0xf, 0x1, 0x200)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd4, r1, 0xe17, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SOCKETS={0x64, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, '+[\x8cy-},#:'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\\'}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20040040}, 0x24000000)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=<r11=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=<r12=>0x0)
sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xeb511df4dce66e64}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x110, r10, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_SE_APDU={0x36, 0x19, "acab2a218b41c294e72980bcd28e4d5904f4c2391e0dba732d928286dc8ce02d30f25b7084fff3b4d2185574e2558568f2bc"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_APDU={0x93, 0x19, "d950ad7dc92b0a5699b041abe5067651bca5728581cf04aa7cf927d0592c122ad95e1dd7c6b0fd751e4fe2d7c3b438ea0bc6b6a9b75979e186c1517496f4edeb2299ee65b784a55af973c152f802b5b3589ac3808b165e36f576b8c95eb9dc64fec6a2eadb139c44964714a94dc7704ece4fb407d16ff3d019b5abc8db7a54d04fd08ca6de58d45b2f3f60f227873b"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x3}]}, 0x110}, 0x1, 0x0, 0x0, 0x4004851}, 0x4008020)
sendmsg$inet(r3, &(0x7f0000000c00)={&(0x7f0000000640)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000680)="b04b67e6bb170e851bec15eb29f572311621ad2ea55a8e441bb9b5894b9c8f395c4b7d5d688b235df2d6761dcfea8c06c31eceb693efb91b3d631427950418ebc1468ef093b5fcdb6865968f82426717d22ee1e7", 0x54}, {&(0x7f0000000700)="c9e8010de15deeff88412c80abc259a538197aafa7062c2f4854602e255617a75eb032dc7f294217ed89bb765d0d14d99a4b7fcac4498217e8bcd152236fe32f1a01979e714e59797fbfaffff7981df9badeee5b6b02b9d052fc9459d30b7ba631a95e12314e951917c9aab51e7c6a77099bd12e0da14286ca16d73a8e737eb43bf81999d74bb19ea42b6a7cac71b65added565ec7316e7658949d8494f48bf396894f89248383b8", 0xa8}, {&(0x7f00000007c0)="0d28906f705cb21b3059792a775484a2a6d76bbb0bc258344289ce7e7adb23d30b99f4280b50b70da125cf31a51f849e4c8b1c1aa1dadc67463c55b37f9cf7a2169d9420747546e5e247ecc8694fea872dbad5e2d263ba27a4017592dcd1035c1f7ec5f6cb7c7369b24244ca7ed8d9efa949d7ccb03fe95a2695ae7c7eeceec7e5aff45bc12458d70336ac3c6cf14ca6933d0e0b8af8e92e568e79816d23af727b097ce8c4b6db520b35663c449c19ae14b77b3d77f22d9f40546db76c29ecbf15e4e969b29ca7", 0xc7}, {&(0x7f00000008c0)="eb2af917dd6c94913119af0e51b07b7cd411905419cadf0cfe664fcdf1a3e274519f82ee74b8115a044511891d4e49854e6d669e6527a11bdf016c2e23c58703073c8299a26b4fc9f49c93f588a5514d63daecd1b43bd07891ca8546076346987a725ed030298aad0318479b9807880c", 0x70}, {&(0x7f0000000940)="9679f60796bc1fbbc8e344183ba7944d51e7e61479527da5fe", 0x19}, {&(0x7f0000000980)="80de121c199a516de8d1e467ed50d012cdf6e8c4f3f2b08ac4d8533be73528f3feded404da23574c11d5fa2aa3155f78f67f3a82410abc7d789fae76ff876cff993bc5282d38da9726f20ae7f35d80bdd9d0e0983f52905a523024b1adb8e833692366c585c8995ad7112176906ddd4746809d00c1891ae46cfb91c862ce84e151b3", 0x82}], 0x6, &(0x7f0000000ac0)=[@ip_retopts={{0xc4, 0x0, 0x7, {[@rr={0x7, 0xb, 0x28, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x26}]}, @ssrr={0x89, 0x1b, 0x13, [@remote, @loopback, @multicast1, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102]}, @end, @generic={0x0, 0x12, "cc346ba62ec7b7b2f28fe9a403a9eeca"}, @timestamp_prespec={0x44, 0x4c, 0xa7, 0x3, 0x4, [{@broadcast, 0x3}, {@local, 0x1}, {@multicast1}, {@broadcast, 0x3}, {@broadcast, 0x1}, {@rand_addr=0x64010102, 0x21}, {@empty, 0x6}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x7a9e}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffb}]}, @timestamp={0x44, 0x18, 0xb5, 0x0, 0x5, [0x8001, 0x9, 0x84, 0xffffffff, 0x5]}, @ssrr={0x89, 0x17, 0xf0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @empty, @remote, @private=0xa010102]}]}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x56, 0x0, 0x8, [0x0, 0x66fed2d1, 0xffff8000]}, @rr={0x7, 0x7, 0x7a, [@loopback]}, @timestamp_addr={0x44, 0x14, 0x54, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9e9}, {@loopback, 0x5}]}]}}}], 0x108}, 0x4000000)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x20, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x40040)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r8)
sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x14, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040000}, 0x28800)

16.145753454s ago: executing program 3 (id=5887):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x2}]}}}]}, 0x3c}}, 0x4008000)

15.957357728s ago: executing program 2 (id=5888):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2)
sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4010)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x1c, 0x26, 0x301, 0x270bd1d, 0x25dfdbf4, {0x20}, [@typed={0x7, 0x167, 0x0, 0x0, @binary="8bd0ae"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000008300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'bond_slave_1\x00', &(0x7f00000000c0)=@ethtool_coalesce={0xf, 0x0, 0x3ff, 0x5, 0x1, 0x3, 0x7f, 0x1, 0x7, 0x6, 0x800, 0x5, 0x7, 0x32de, 0xfffffff8, 0xfffffffe, 0xc1, 0x9, 0xfdda, 0x10000003, 0xfffffff9, 0x3, 0x4}})
socket$packet(0x11, 0x3, 0x300)
socket$kcm(0x2, 0x200000000000001, 0x106) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) (async)
sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) (async)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4010) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x1c, 0x26, 0x301, 0x270bd1d, 0x25dfdbf4, {0x20}, [@typed={0x7, 0x167, 0x0, 0x0, @binary="8bd0ae"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000008300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'bond_slave_1\x00', &(0x7f00000000c0)=@ethtool_coalesce={0xf, 0x0, 0x3ff, 0x5, 0x1, 0x3, 0x7f, 0x1, 0x7, 0x6, 0x800, 0x5, 0x7, 0x32de, 0xfffffff8, 0xfffffffe, 0xc1, 0x9, 0xfdda, 0x10000003, 0xfffffff9, 0x3, 0x4}}) (async)
socket$packet(0x11, 0x3, 0x300) (async)

15.848936865s ago: executing program 1 (id=5889):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r1, 0x8, 0x70bd28, 0x5, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip_vti0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x29}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x84}}, 0x20000000) (async)
r2 = socket$netlink(0x10, 0x3, 0x1) (async)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x102, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8117e6dfa2e871af}, 0x8c4)
sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xcc, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xf4, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x70, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce1}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "ba511a720d48ecfaa2fd370d0731d17fa58bc6d37a4c963bb2b4762c4fe455f2"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8000}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xaf6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffff11e}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x4}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), r2)
sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xe0, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x160d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x58}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff9}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x800) (async)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8051}, 0x20008855)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DONE(r6, 0x0, 0xc9, 0x0, 0x0) (async)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2)
sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r7, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1942674b3581c106}, 0x6ce4f8f4a38804f7) (async)
r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000bc0), 0x8)
sendmsg$nl_generic(r8, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)={0xe4, 0x18, 0x4, 0x70bd2a, 0x25dfdbfd, {0x5}, [@generic="db9f59ee02a8544d15c30bc258a98840ed31f8dd39824b1ab35dadc542248155301531d03634cf971bfd533be63d4f7b624cdf94e85e610eba6826a181d57a6f9d3892e86327def39a5565619063aaa5c8d54f779a33ee8c0f5e4ec54933765112c87a634e31a7028c74df2c1a2a2581792fd0ffb4378f", @typed={0x8, 0x7e, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2a}}, @nested={0x50, 0xdc, 0x0, 0x1, [@typed={0x8, 0x19, 0x0, 0x0, @u32=0xff}, @generic="57ba9d0397a4c1c203e0f5b394123c269a2c8d2be55192299a3c51250d5adc8121d7cf9f16a9ff0a3b684ba7ffc28b8a9a87fae03c99f5d8389fb425127e54bb", @generic="d46ba52f"]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) (async)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5d8, 0x200, 0x0, 0x200, 0x2e8, 0x0, 0x540, 0x540, 0x540, 0x540, 0x540, 0x6, &(0x7f0000000dc0), {[{{@ip={@empty, @multicast1, 0xff000000, 0xffffff00, 'veth0_macvtap\x00', 'netdevsim0\x00', {0xff}, {}, 0x2, 0x2, 0x2b}, 0x0, 0x1a0, 0x200, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@inet=@recent1={{0x108}, {0x5, 0x5, 0x8, 0x1, 'syz1\x00', 0x40, [0x0, 0xff000000, 0xffffff00, 0x80000000]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x4, 0x4, 0x3, 0x3, 0x3], 0x2, 0x1}, {0x1, [0x2, 0x2, 0x6, 0x5, 0x2, 0x6], 0x3, 0x6}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x17}, 0xffffff00, 0xffffff00, 'gre0\x00', 'batadv0\x00', {0xff}, {}, 0x5c, 0x0, 0x5c}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x9}}}, {{@uncond, 0x0, 0xc0, 0xf0, 0x0, {}, [@common=@ah={{0x30}, {[0x2, 0x10001]}}, @common=@socket0={{0x20}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0xa8c, @dev={0xac, 0x14, 0x14, 0x43}, 0x4e23}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x4}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xb3b, 0x3, @broadcast, 0x4e21}}}, {{@ip={@empty, @broadcast, 0x0, 0xffffff00, 'geneve0\x00', 'dvmrp1\x00', {}, {}, 0x21, 0x1, 0x2}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x81, 0xad9, @rand_addr=0x64010101, 0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x638)
ioctl$BTRFS_IOC_DEV_REPLACE(r6, 0xca289435, &(0x7f0000001480)={0x3, 0x593, @status={[0x1, 0x9, 0x6, 0x8a4a, 0x4000000, 0x100000000000000]}, [0x0, 0x7, 0xfff, 0x3ec, 0x7, 0xfffffffffffffffc, 0x7, 0x6, 0x100000000, 0x2, 0x4, 0x9, 0x0, 0x8000, 0x17f0, 0x3, 0x200, 0x3ff, 0xe39, 0xd24e, 0x7, 0xfffffffffffffffa, 0xfff, 0xa0, 0x9, 0x9, 0x1, 0x9, 0x4, 0x0, 0x401, 0x5, 0x8001, 0x2e, 0x3, 0x1, 0xffffffff, 0xfff, 0xbf3, 0x8, 0x5, 0x4dd, 0x3, 0xd, 0x2, 0x6, 0x7fffffffffffffff, 0x5e1a, 0x1, 0x7, 0x9, 0x7fff, 0x9, 0x339f, 0x5, 0x6, 0x8, 0x0, 0x53, 0x9cd9, 0x4, 0x5, 0x4, 0x7]}) (async)
recvfrom(r8, &(0x7f0000001ec0)=""/32, 0x20, 0x40000083, 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f0000001f00))
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000001f40)={0x7, 0x3, 0x10001, 0xb}, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000001f80), r8)
setsockopt(r2, 0x2, 0xffff, &(0x7f0000001fc0)="22ea8060ea26345981c624fd63f2ddcab66cf168bf2556fe6721a376404cb128d6d43575130dd8dce6a55ab4e6495ff16c7dba2d4b", 0x35) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002040), r2)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000002080)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r8, &(0x7f00000021c0)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002180)={&(0x7f00000020c0)={0x88, r9, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x986, 0x6d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040000}, 0x4040800) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r8, 0x111, 0x4, 0x0, 0x4)

15.616852563s ago: executing program 3 (id=5890):
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=0x1, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710429000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async)
r1 = socket(0x40000000015, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x10, r2, 0x1, 0xfe, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)
getsockopt(r1, 0x200000000114, 0x2711, 0x0, &(0x7f0000000400)) (async)
r3 = openat$cgroup_ro(r0, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r3, &(0x7f0000000100)={0x10}) (async)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000000)=0x2, 0x8)

15.616407716s ago: executing program 3 (id=5891):
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
getpeername(r0, 0x0, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) (async)
r3 = socket(0x10, 0x3, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r4}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x50, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe89, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000080)=[{{0x2, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x10) (async)
write(r3, &(0x7f0000000000), 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'lo\x00', <r7=>0x0})
r8 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000011006bcc9e3be35c6e17aa31076b876c1c0000007ea60864160af36514001ac0080003008100020006a101c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044) (async)
openat$nci(0xffffffffffffff9c, &(0x7f0000001ac0), 0x2, 0x0) (async)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x119, 0x487, 0x0, &(0x7f0000000480))
syz_emit_ethernet(0x11b0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0) (async)
r10 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r10, 0x8915, &(0x7f0000001b40)={'\x00', {0x2, 0x0, @remote}}) (async)
r11 = bpf$ITER_CREATE(0x21, &(0x7f0000001b00)={r9}, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x16, &(0x7f0000000380)=@raw=[@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}}, @ldst={0x3, 0x1, 0x4, 0x9, 0x2, 0x80, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3658584f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f0000000440)='GPL\x00', 0x7fff, 0xfe, &(0x7f0000000480)=""/254, 0x41000, 0x46, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0xa, 0x4, 0x1000}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000600)=[r11, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000640)=[{0x0, 0x1, 0xf, 0x5}, {0x1, 0x4, 0xa, 0x6}, {0x1, 0x5, 0x7, 0x6}, {0x4, 0x1, 0x7, 0x6}, {0x1, 0x1, 0x5, 0x1}, {0x1, 0x1, 0x10, 0xb}, {0x2, 0x2, 0x3, 0x2}, {0x2, 0x2, 0xa, 0x8}, {0x3, 0x4, 0xd}, {0x4, 0x4, 0xd, 0x6}], 0x10, 0x7}, 0x94)

15.507908037s ago: executing program 3 (id=5892):
r0 = socket$inet6(0xa, 0x3, 0x1)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r1, 0xb18, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x47}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x41}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x12}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x40)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e23, 0x5, 0x4e23, 0x3, 0xa}, {0x100000000, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x4}, {0x9, 0xfffffffffffffffe, 0x1, 0xd}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4cf, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfffffffb}}, 0xe8)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0)

1.215115178s ago: executing program 32 (id=5882):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080), 0x20)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c00"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
r1 = socket$tipc(0x1e, 0x5, 0x0)
getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
sendmsg$NFT_BATCH(r0, 0x0, 0x40) (async, rerun: 64)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) (async, rerun: 64)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000002100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x8800) (async, rerun: 64)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0)
close(0x4) (async)
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000900)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000580)={0x33c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_SOCK={0x94, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa0}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xef2}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffe62a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf93ba46}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xefd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}]}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb35}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_NODE={0x170, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfb}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "385d2e63cb834f357f6466ff03976aa7a32b5674718bdfc14a5b7e9029"}}, @TIPC_NLA_NODE_ID={0x19, 0x3, "5403b161f3127f10fccfb53494c3c347860af8c2b7"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ID={0xe9, 0x3, "914ed20c835fe9266c9573bb933962eee352bdda3a18ef5bcb6e4ce2fbb9d83219bdf0a23798b30b3d240d822a22cc611c80dca4fda7719048b643ab6abf2d1be689942a8ce16e6ca248f0d656b1af7ca112262ba711334094d715f6fe92591ce76e93ea56969b621f27ec97741adb03f0568474ab5b1df1d3f88d658440fc7120a333834fb682c6a4e9ddf506cd37d00cc4f1705bcac51eaaec8a2f6e90f6694b1fb2f10731129a33a050fc14b38b2e129221e777aa6638ce8635fb43fd7f416207734245db525693dff84c213ee887ef04aaf440efb77d0ce1464499c4166e91a5eae3ff"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10001}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "aba90db072f2274af5776d90c8fa9ecc15012c6b10c1c0851e7b3d"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x82}, 0x4000041)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000dc0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x48)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, 0x0, 0x0) (async)
recvmmsg(r3, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000000340)}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000a00)=""/109, 0x6d}, {&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/21, 0x15}, {&(0x7f0000003740)=""/195, 0xc3}, {&(0x7f0000003840)=""/172, 0xac}, {&(0x7f0000003900)=""/151, 0x97}, {&(0x7f00000039c0)=""/97, 0x61}], 0x7, &(0x7f0000003ac0)=""/32, 0x20}, 0x9}, {{&(0x7f0000003b00)=@tipc=@name, 0x80, &(0x7f0000003c00)}, 0xf55f}, {{&(0x7f0000000c40)=@x25={0x9, @remote}, 0x80, &(0x7f0000004180)}}, {{0x0, 0x0, &(0x7f0000004980)}, 0x7}], 0x7, 0x0, 0x0)

171.087762ms ago: executing program 33 (id=5886):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={<r7=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={<r8=>0xffffffffffffffff})
r9 = socket(0xf, 0x1, 0x200)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd4, r1, 0xe17, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SOCKETS={0x64, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, '+[\x8cy-},#:'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\\'}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20040040}, 0x24000000)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=<r11=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=<r12=>0x0)
sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xeb511df4dce66e64}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x110, r10, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_SE_APDU={0x36, 0x19, "acab2a218b41c294e72980bcd28e4d5904f4c2391e0dba732d928286dc8ce02d30f25b7084fff3b4d2185574e2558568f2bc"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_APDU={0x93, 0x19, "d950ad7dc92b0a5699b041abe5067651bca5728581cf04aa7cf927d0592c122ad95e1dd7c6b0fd751e4fe2d7c3b438ea0bc6b6a9b75979e186c1517496f4edeb2299ee65b784a55af973c152f802b5b3589ac3808b165e36f576b8c95eb9dc64fec6a2eadb139c44964714a94dc7704ece4fb407d16ff3d019b5abc8db7a54d04fd08ca6de58d45b2f3f60f227873b"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x3}]}, 0x110}, 0x1, 0x0, 0x0, 0x4004851}, 0x4008020)
sendmsg$inet(r3, &(0x7f0000000c00)={&(0x7f0000000640)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000680)="b04b67e6bb170e851bec15eb29f572311621ad2ea55a8e441bb9b5894b9c8f395c4b7d5d688b235df2d6761dcfea8c06c31eceb693efb91b3d631427950418ebc1468ef093b5fcdb6865968f82426717d22ee1e7", 0x54}, {&(0x7f0000000700)="c9e8010de15deeff88412c80abc259a538197aafa7062c2f4854602e255617a75eb032dc7f294217ed89bb765d0d14d99a4b7fcac4498217e8bcd152236fe32f1a01979e714e59797fbfaffff7981df9badeee5b6b02b9d052fc9459d30b7ba631a95e12314e951917c9aab51e7c6a77099bd12e0da14286ca16d73a8e737eb43bf81999d74bb19ea42b6a7cac71b65added565ec7316e7658949d8494f48bf396894f89248383b8", 0xa8}, {&(0x7f00000007c0)="0d28906f705cb21b3059792a775484a2a6d76bbb0bc258344289ce7e7adb23d30b99f4280b50b70da125cf31a51f849e4c8b1c1aa1dadc67463c55b37f9cf7a2169d9420747546e5e247ecc8694fea872dbad5e2d263ba27a4017592dcd1035c1f7ec5f6cb7c7369b24244ca7ed8d9efa949d7ccb03fe95a2695ae7c7eeceec7e5aff45bc12458d70336ac3c6cf14ca6933d0e0b8af8e92e568e79816d23af727b097ce8c4b6db520b35663c449c19ae14b77b3d77f22d9f40546db76c29ecbf15e4e969b29ca7", 0xc7}, {&(0x7f00000008c0)="eb2af917dd6c94913119af0e51b07b7cd411905419cadf0cfe664fcdf1a3e274519f82ee74b8115a044511891d4e49854e6d669e6527a11bdf016c2e23c58703073c8299a26b4fc9f49c93f588a5514d63daecd1b43bd07891ca8546076346987a725ed030298aad0318479b9807880c", 0x70}, {&(0x7f0000000940)="9679f60796bc1fbbc8e344183ba7944d51e7e61479527da5fe", 0x19}, {&(0x7f0000000980)="80de121c199a516de8d1e467ed50d012cdf6e8c4f3f2b08ac4d8533be73528f3feded404da23574c11d5fa2aa3155f78f67f3a82410abc7d789fae76ff876cff993bc5282d38da9726f20ae7f35d80bdd9d0e0983f52905a523024b1adb8e833692366c585c8995ad7112176906ddd4746809d00c1891ae46cfb91c862ce84e151b3", 0x82}], 0x6, &(0x7f0000000ac0)=[@ip_retopts={{0xc4, 0x0, 0x7, {[@rr={0x7, 0xb, 0x28, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x26}]}, @ssrr={0x89, 0x1b, 0x13, [@remote, @loopback, @multicast1, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102]}, @end, @generic={0x0, 0x12, "cc346ba62ec7b7b2f28fe9a403a9eeca"}, @timestamp_prespec={0x44, 0x4c, 0xa7, 0x3, 0x4, [{@broadcast, 0x3}, {@local, 0x1}, {@multicast1}, {@broadcast, 0x3}, {@broadcast, 0x1}, {@rand_addr=0x64010102, 0x21}, {@empty, 0x6}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x7a9e}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffb}]}, @timestamp={0x44, 0x18, 0xb5, 0x0, 0x5, [0x8001, 0x9, 0x84, 0xffffffff, 0x5]}, @ssrr={0x89, 0x17, 0xf0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @empty, @remote, @private=0xa010102]}]}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x56, 0x0, 0x8, [0x0, 0x66fed2d1, 0xffff8000]}, @rr={0x7, 0x7, 0x7a, [@loopback]}, @timestamp_addr={0x44, 0x14, 0x54, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9e9}, {@loopback, 0x5}]}]}}}], 0x108}, 0x4000000)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x20, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x40040)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r8)
sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x14, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040000}, 0x28800)

107.739605ms ago: executing program 34 (id=5889):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r1, 0x8, 0x70bd28, 0x5, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip_vti0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x29}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x84}}, 0x20000000) (async)
r2 = socket$netlink(0x10, 0x3, 0x1) (async)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x102, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8117e6dfa2e871af}, 0x8c4)
sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xcc, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xf4, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x70, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce1}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "ba511a720d48ecfaa2fd370d0731d17fa58bc6d37a4c963bb2b4762c4fe455f2"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8000}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xaf6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffff11e}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x4}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), r2)
sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xe0, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x160d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x58}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff9}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x800) (async)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8051}, 0x20008855)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DONE(r6, 0x0, 0xc9, 0x0, 0x0) (async)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2)
sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r7, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1942674b3581c106}, 0x6ce4f8f4a38804f7) (async)
r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000bc0), 0x8)
sendmsg$nl_generic(r8, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)={0xe4, 0x18, 0x4, 0x70bd2a, 0x25dfdbfd, {0x5}, [@generic="db9f59ee02a8544d15c30bc258a98840ed31f8dd39824b1ab35dadc542248155301531d03634cf971bfd533be63d4f7b624cdf94e85e610eba6826a181d57a6f9d3892e86327def39a5565619063aaa5c8d54f779a33ee8c0f5e4ec54933765112c87a634e31a7028c74df2c1a2a2581792fd0ffb4378f", @typed={0x8, 0x7e, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2a}}, @nested={0x50, 0xdc, 0x0, 0x1, [@typed={0x8, 0x19, 0x0, 0x0, @u32=0xff}, @generic="57ba9d0397a4c1c203e0f5b394123c269a2c8d2be55192299a3c51250d5adc8121d7cf9f16a9ff0a3b684ba7ffc28b8a9a87fae03c99f5d8389fb425127e54bb", @generic="d46ba52f"]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) (async)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5d8, 0x200, 0x0, 0x200, 0x2e8, 0x0, 0x540, 0x540, 0x540, 0x540, 0x540, 0x6, &(0x7f0000000dc0), {[{{@ip={@empty, @multicast1, 0xff000000, 0xffffff00, 'veth0_macvtap\x00', 'netdevsim0\x00', {0xff}, {}, 0x2, 0x2, 0x2b}, 0x0, 0x1a0, 0x200, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@inet=@recent1={{0x108}, {0x5, 0x5, 0x8, 0x1, 'syz1\x00', 0x40, [0x0, 0xff000000, 0xffffff00, 0x80000000]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x4, 0x4, 0x3, 0x3, 0x3], 0x2, 0x1}, {0x1, [0x2, 0x2, 0x6, 0x5, 0x2, 0x6], 0x3, 0x6}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x17}, 0xffffff00, 0xffffff00, 'gre0\x00', 'batadv0\x00', {0xff}, {}, 0x5c, 0x0, 0x5c}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x9}}}, {{@uncond, 0x0, 0xc0, 0xf0, 0x0, {}, [@common=@ah={{0x30}, {[0x2, 0x10001]}}, @common=@socket0={{0x20}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0xa8c, @dev={0xac, 0x14, 0x14, 0x43}, 0x4e23}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x4}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xb3b, 0x3, @broadcast, 0x4e21}}}, {{@ip={@empty, @broadcast, 0x0, 0xffffff00, 'geneve0\x00', 'dvmrp1\x00', {}, {}, 0x21, 0x1, 0x2}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x81, 0xad9, @rand_addr=0x64010101, 0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x638)
ioctl$BTRFS_IOC_DEV_REPLACE(r6, 0xca289435, &(0x7f0000001480)={0x3, 0x593, @status={[0x1, 0x9, 0x6, 0x8a4a, 0x4000000, 0x100000000000000]}, [0x0, 0x7, 0xfff, 0x3ec, 0x7, 0xfffffffffffffffc, 0x7, 0x6, 0x100000000, 0x2, 0x4, 0x9, 0x0, 0x8000, 0x17f0, 0x3, 0x200, 0x3ff, 0xe39, 0xd24e, 0x7, 0xfffffffffffffffa, 0xfff, 0xa0, 0x9, 0x9, 0x1, 0x9, 0x4, 0x0, 0x401, 0x5, 0x8001, 0x2e, 0x3, 0x1, 0xffffffff, 0xfff, 0xbf3, 0x8, 0x5, 0x4dd, 0x3, 0xd, 0x2, 0x6, 0x7fffffffffffffff, 0x5e1a, 0x1, 0x7, 0x9, 0x7fff, 0x9, 0x339f, 0x5, 0x6, 0x8, 0x0, 0x53, 0x9cd9, 0x4, 0x5, 0x4, 0x7]}) (async)
recvfrom(r8, &(0x7f0000001ec0)=""/32, 0x20, 0x40000083, 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f0000001f00))
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000001f40)={0x7, 0x3, 0x10001, 0xb}, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000001f80), r8)
setsockopt(r2, 0x2, 0xffff, &(0x7f0000001fc0)="22ea8060ea26345981c624fd63f2ddcab66cf168bf2556fe6721a376404cb128d6d43575130dd8dce6a55ab4e6495ff16c7dba2d4b", 0x35) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002040), r2)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000002080)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r8, &(0x7f00000021c0)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002180)={&(0x7f00000020c0)={0x88, r9, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x986, 0x6d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040000}, 0x4040800) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r8, 0x111, 0x4, 0x0, 0x4)

64.007449ms ago: executing program 35 (id=5888):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2)
sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4010)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x1c, 0x26, 0x301, 0x270bd1d, 0x25dfdbf4, {0x20}, [@typed={0x7, 0x167, 0x0, 0x0, @binary="8bd0ae"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000008300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'bond_slave_1\x00', &(0x7f00000000c0)=@ethtool_coalesce={0xf, 0x0, 0x3ff, 0x5, 0x1, 0x3, 0x7f, 0x1, 0x7, 0x6, 0x800, 0x5, 0x7, 0x32de, 0xfffffff8, 0xfffffffe, 0xc1, 0x9, 0xfdda, 0x10000003, 0xfffffff9, 0x3, 0x4}})
socket$packet(0x11, 0x3, 0x300)
socket$kcm(0x2, 0x200000000000001, 0x106) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) (async)
sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) (async)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4010) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x1c, 0x26, 0x301, 0x270bd1d, 0x25dfdbf4, {0x20}, [@typed={0x7, 0x167, 0x0, 0x0, @binary="8bd0ae"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000008300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'bond_slave_1\x00', &(0x7f00000000c0)=@ethtool_coalesce={0xf, 0x0, 0x3ff, 0x5, 0x1, 0x3, 0x7f, 0x1, 0x7, 0x6, 0x800, 0x5, 0x7, 0x32de, 0xfffffff8, 0xfffffffe, 0xc1, 0x9, 0xfdda, 0x10000003, 0xfffffff9, 0x3, 0x4}}) (async)
socket$packet(0x11, 0x3, 0x300) (async)

0s ago: executing program 36 (id=5892):
r0 = socket$inet6(0xa, 0x3, 0x1)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r1, 0xb18, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x47}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x41}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x12}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x40)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e23, 0x5, 0x4e23, 0x3, 0xa}, {0x100000000, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x4}, {0x9, 0xfffffffffffffffe, 0x1, 0xd}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4cf, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfffffffb}}, 0xe8)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0)

kernel console output (not intermixed with test programs):

dge0: port 1(bridge_slave_0) entered forwarding state
[  603.298444][ T8370] bridge0: port 2(bridge_slave_1) entered blocking state
[  603.305886][ T8370] bridge0: port 2(bridge_slave_1) entered forwarding state
[  603.392398][T23161] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4548'.
[  603.414411][T15519] gretap1: entered promiscuous mode
[  603.466613][ T8361] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  603.515728][ T8361] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  603.636751][ T8361] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  603.663583][  T510] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  603.676354][T23184] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4556'.
[  603.738985][T23183] syzkaller1: entered promiscuous mode
[  603.757729][T23183] syzkaller1: entered allmulticast mode
[  603.782378][ T8367] ip6_tunnel: L xmit: Local address not yet configured!
[  603.817010][ T8367] ip6_tunnel: L xmit: Local address not yet configured!
[  603.828935][T10290] ip6_tunnel: L xmit: Local address not yet configured!
[  603.933004][T10276] ip6_tunnel: L xmit: Local address not yet configured!
[  603.963492][T23203] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4560'.
[  604.022858][T10276] ip6_tunnel: L xmit: Local address not yet configured!
[  604.158652][T23210] netlink: 'syz.4.4561': attribute type 2 has an invalid length.
[  604.266450][T23218] netlink: 'syz.2.4564': attribute type 1 has an invalid length.
[  604.297309][T23218] netlink: 'syz.2.4564': attribute type 1 has an invalid length.
[  604.528695][T23229] netlink: 'syz.3.4566': attribute type 10 has an invalid length.
[  605.606882][T23284] netlink: 'syz.1.4580': attribute type 2 has an invalid length.
[  605.651463][T23284] netlink: 'syz.1.4580': attribute type 8 has an invalid length.
[  605.703141][T23284] __nla_validate_parse: 5 callbacks suppressed
[  605.703160][T23284] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4580'.
[  605.813903][T20462] block nbd1: Receive control failed (result -32)
[  605.919736][T23296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4585'.
[  605.976677][T23296] 8021q: adding VLAN 0 to HW filter on device macsec1
[  606.006121][ T5747] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  606.224788][T23317] netlink: 165 bytes leftover after parsing attributes in process `syz.4.4589'.
[  606.302884][T23301] bond7: entered promiscuous mode
[  606.339018][T23301] bond7: entered allmulticast mode
[  606.378393][T23301] 8021q: adding VLAN 0 to HW filter on device bond7
[  606.451287][T23324] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4591'.
[  606.495261][T23324] xt_policy: neither incoming nor outgoing policy selected
[  606.699560][T23337] netlink: 'syz.4.4594': attribute type 1 has an invalid length.
[  606.748820][T23336] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  606.773498][T23336] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  606.788961][T23336] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  606.803534][T23337] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4594'.
[  606.846634][T23337] 8021q: adding VLAN 0 to HW filter on device bond4
[  607.086242][T23359] netlink: 'syz.1.4600': attribute type 39 has an invalid length.
[  607.580306][T23370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4602'.
[  607.901428][    C0] ip6_tunnel: L xmit: Local address not yet configured!
[  609.634709][T23333] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  609.854470][T23383] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4608'.
[  609.878194][T23388] netlink: 604 bytes leftover after parsing attributes in process `syz.3.4608'.
[  609.899069][T23385] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4608'.
[  609.912318][T23384] netlink: 'syz.0.4605': attribute type 13 has an invalid length.
[  609.993583][T23391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4609'.
[  610.126477][T23390] ip6tnl0: Caught tx_queue_len zero misconfig
[  610.139992][T10288] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  610.541449][T10288] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  610.733301][T23426] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  610.733301][T23426] Please contact the netfilter-devel mailing list or update your nftables rules.
[  610.965421][T23435] netlink: 'syz.3.4616': attribute type 1 has an invalid length.
[  610.977078][T23435] __nla_validate_parse: 1 callbacks suppressed
[  610.977098][T23435] netlink: 200 bytes leftover after parsing attributes in process `syz.3.4616'.
[  611.187429][T23447] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4621'.
[  611.197638][T23446] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4617'.
[  611.590537][T23464] netlink: 'syz.0.4623': attribute type 1 has an invalid length.
[  613.951806][T23464] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  614.054098][T23475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4627'.
[  614.074643][T23475] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4627'.
[  614.103505][T23476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4627'.
[  614.146895][T23476] batman_adv: batadv0: Removing interface: batadv_slave_0
[  614.237220][T23480] netlink: 'syz.3.4628': attribute type 4 has an invalid length.
[  614.267189][T23480] netlink: 'syz.3.4628': attribute type 4 has an invalid length.
[  614.358166][T23487] vcan2: entered promiscuous mode
[  614.375524][T23487] vcan2: entered allmulticast mode
[  614.406028][T23487] team0: Device vcan2 is of different type
[  614.564524][T23495] syzkaller0: entered promiscuous mode
[  614.573414][T23495] syzkaller0: entered allmulticast mode
[  614.773542][T23507] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4636'.
[  615.129569][T23523] syzkaller0: entered promiscuous mode
[  615.146871][T23523] syzkaller0: entered allmulticast mode
[  615.173530][T23523] netlink: 1192 bytes leftover after parsing attributes in process `syz.2.4641'.
[  615.468019][T23543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4646'.
[  615.705584][T23552] net_ratelimit: 72 callbacks suppressed
[  615.705602][T23552] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  615.765042][T23552] netlink: 'syz.3.4651': attribute type 1 has an invalid length.
[  615.766499][T23555] netlink: 'syz.2.4652': attribute type 1 has an invalid length.
[  615.808201][T23558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4653'.
[  615.833724][T23555] bond7: (slave gretap1): making interface the new active one
[  615.842849][T23555] bond7: (slave gretap1): Enslaving as an active interface with an up link
[  615.889660][T23559] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  616.037453][T23567] __nla_validate_parse: 1 callbacks suppressed
[  616.037472][T23567] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4656'.
[  616.120156][T23576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4658'.
[  616.141867][    C0] ip6_tunnel: L xmit: Local address not yet configured!
[  616.161919][T23576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4658'.
[  616.176443][T23576] netlink: 'syz.3.4658': attribute type 14 has an invalid length.
[  616.193059][T23576] netlink: 'syz.3.4658': attribute type 13 has an invalid length.
[  616.232494][T23567] can: request_module (can-proto-4) failed.
[  616.487157][T23588] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4662'.
[  616.587090][T23593] xt_hashlimit: size too large, truncated to 1048576
[  616.694215][T23603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4662'.
[  616.947766][T23601] syzkaller0: entered promiscuous mode
[  617.039260][T23601] syzkaller0: entered allmulticast mode
[  617.095832][T23610] syzkaller0: entered promiscuous mode
[  617.112138][T23610] syzkaller0: entered allmulticast mode
[  617.405435][T23630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4669'.
[  618.050073][T23666] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4680'.
[  618.294287][T23677] tap0: tun_chr_ioctl cmd 1074025672
[  618.303944][T23677] tap0: ignored: set checksum disabled
[  618.325525][T23677] IPv6: sit3: Disabled Multicast RS
[  618.343118][T23677] sit3: entered allmulticast mode
[  618.535232][T23689] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4685'.
[  618.699208][T23690] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4686'.
[  618.747083][T23703] FAULT_INJECTION: forcing a failure.
[  618.747083][T23703] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  618.761772][T23703] CPU: 0 UID: 0 PID: 23703 Comm: syz.4.4689 Not tainted syzkaller #0 PREEMPT(full) 
[  618.761800][T23703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  618.761825][T23703] Call Trace:
[  618.761834][T23703]  <TASK>
[  618.761842][T23703]  dump_stack_lvl+0xe8/0x150
[  618.761881][T23703]  should_fail_ex+0x40c/0x560
[  618.761915][T23703]  _copy_from_user+0x2d/0xb0
[  618.761937][T23703]  ___sys_sendmsg+0x1c6/0x360
[  618.761961][T23703]  ? __lock_acquire+0x683/0x2cf0
[  618.762005][T23703]  ? __pfx____sys_sendmsg+0x10/0x10
[  618.762072][T23703]  ? __fget_files+0x2a/0x420
[  618.762101][T23703]  ? __fget_files+0x3a2/0x420
[  618.762139][T23703]  __x64_sys_sendmsg+0x1b1/0x290
[  618.762167][T23703]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  618.762211][T23703]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  618.762234][T23703]  do_syscall_64+0x174/0x580
[  618.762257][T23703]  ? trace_irq_disable+0x3b/0x140
[  618.762285][T23703]  ? clear_bhb_loop+0x40/0x90
[  618.762312][T23703]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  618.762333][T23703] RIP: 0033:0x7f62c819de99
[  618.762353][T23703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  618.762371][T23703] RSP: 002b:00007f62c907f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  618.762401][T23703] RAX: ffffffffffffffda RBX: 00007f62c8425fa0 RCX: 00007f62c819de99
[  618.762417][T23703] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000004
[  618.762430][T23703] RBP: 00007f62c907f090 R08: 0000000000000000 R09: 0000000000000000
[  618.762442][T23703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  618.762454][T23703] R13: 00007f62c8426038 R14: 00007f62c8425fa0 R15: 00007fff776a4d28
[  618.762488][T23703]  </TASK>
[  619.077489][T23708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4690'.
[  619.107462][T23713] tc_dump_action: action bad kind
[  619.139721][T23713] macsec1: entered promiscuous mode
[  619.145155][T23713] bridge0: entered promiscuous mode
[  619.150780][T23713] macsec1: entered allmulticast mode
[  619.156269][T23713] bridge0: entered allmulticast mode
[  619.163632][T23713] bridge0: port 3(macsec1) entered blocking state
[  619.170348][T23713] bridge0: port 3(macsec1) entered disabled state
[  619.205959][T23713] bridge0: left allmulticast mode
[  619.280677][T23708] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4
[  619.335620][T23708] gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue
[  619.349365][T23708] gretap4: entered promiscuous mode
[  619.354861][T23708] gretap4: entered allmulticast mode
[  619.365754][T10288] bridge0: left promiscuous mode
[  619.386365][T23719] bridge_slave_1: left allmulticast mode
[  619.392373][T23719] bridge_slave_1: left promiscuous mode
[  619.406274][T23719] bridge0: port 2(bridge_slave_1) entered disabled state
[  619.449252][T23719] bridge_slave_0: left allmulticast mode
[  619.459638][T23719] bridge_slave_0: left promiscuous mode
[  619.519012][T23719] bridge0: port 1(bridge_slave_0) entered disabled state
[  619.889134][T23746] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  620.375318][T23771] A link change request failed with some changes committed already. Interface dvmrp0 may have been left with an inconsistent configuration, please check.
[  620.399109][T10288] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  620.525121][T23783] netlink: 'syz.1.4710': attribute type 4 has an invalid length.
[  620.599934][T23783] netlink: 'syz.1.4710': attribute type 4 has an invalid length.
[  621.105873][T23804] netlink: 'syz.4.4716': attribute type 11 has an invalid length.
[  621.145005][T23804] netlink: 'syz.4.4716': attribute type 4 has an invalid length.
[  621.165454][T23804] __nla_validate_parse: 12 callbacks suppressed
[  621.165474][T23804] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4716'.
[  621.181733][T10288] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  621.219624][T23793] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  621.478615][T23793] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  621.496546][T23817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4720'.
[  621.617746][T23822] netlink: 184 bytes leftover after parsing attributes in process `syz.2.4719'.
[  621.659165][T23824] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  621.703792][T23820] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4720'.
[  621.856272][T23793] bond0: (slave netdevsim1): Releasing backup interface
[  621.889267][T23793] netdevsim netdevsim1 netdevsim1 (unregistering): left promiscuous mode
[  621.907209][T23793] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  622.080063][T23793] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  622.158088][T23841] syzkaller1: tun_chr_ioctl cmd 62724
[  622.173268][T23841] syzkaller1: tun_chr_ioctl cmd 1074025677
[  622.179448][T23841] syzkaller1: linktype set to 823
[  622.547652][ T8361] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  622.617611][T23858] FAULT_INJECTION: forcing a failure.
[  622.617611][T23858] name failslab, interval 1, probability 0, space 0, times 1
[  622.654128][T23858] CPU: 0 UID: 0 PID: 23858 Comm: syz.4.4730 Not tainted syzkaller #0 PREEMPT(full) 
[  622.654153][T23858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  622.654165][T23858] Call Trace:
[  622.654172][T23858]  <TASK>
[  622.654179][T23858]  dump_stack_lvl+0xe8/0x150
[  622.654210][T23858]  should_fail_ex+0x40c/0x560
[  622.654236][T23858]  should_failslab+0xa8/0x100
[  622.654265][T23858]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  622.654287][T23858]  ? local_lock_release+0x9c/0x160
[  622.654324][T23858]  ? __alloc_skb+0x1d7/0x7a0
[  622.654338][T23858]  ? __alloc_skb+0x1d7/0x7a0
[  622.654358][T23858]  __alloc_skb+0x1d7/0x7a0
[  622.654378][T23858]  netlink_sendmsg+0x5d4/0xb40
[  622.654407][T23858]  ? __pfx_netlink_sendmsg+0x10/0x10
[  622.654430][T23858]  ? aa_sock_msg_perm+0xf1/0x1b0
[  622.654454][T23858]  ? __pfx_netlink_sendmsg+0x10/0x10
[  622.654472][T23858]  sock_sendmsg_nosec+0x13a/0x180
[  622.654499][T23858]  ____sys_sendmsg+0x54e/0x850
[  622.654522][T23858]  ? __pfx_____sys_sendmsg+0x10/0x10
[  622.654548][T23858]  ? import_iovec+0x73/0xa0
[  622.654577][T23858]  ___sys_sendmsg+0x2a5/0x360
[  622.654594][T23858]  ? __lock_acquire+0x683/0x2cf0
[  622.654623][T23858]  ? __pfx____sys_sendmsg+0x10/0x10
[  622.654670][T23858]  ? __fget_files+0x2a/0x420
[  622.654694][T23858]  ? __fget_files+0x3a2/0x420
[  622.654726][T23858]  __x64_sys_sendmsg+0x1b1/0x290
[  622.654747][T23858]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  622.654782][T23858]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  622.654803][T23858]  do_syscall_64+0x174/0x580
[  622.654822][T23858]  ? trace_irq_disable+0x3b/0x140
[  622.654849][T23858]  ? clear_bhb_loop+0x40/0x90
[  622.654871][T23858]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  622.654888][T23858] RIP: 0033:0x7f62c819de99
[  622.654905][T23858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  622.654919][T23858] RSP: 002b:00007f62c907f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  622.654937][T23858] RAX: ffffffffffffffda RBX: 00007f62c8425fa0 RCX: 00007f62c819de99
[  622.654949][T23858] RDX: 0000000000040010 RSI: 0000200000006040 RDI: 0000000000000004
[  622.654960][T23858] RBP: 00007f62c907f090 R08: 0000000000000000 R09: 0000000000000000
[  622.654970][T23858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  622.654980][T23858] R13: 00007f62c8426038 R14: 00007f62c8425fa0 R15: 00007fff776a4d28
[  622.655008][T23858]  </TASK>
[  622.947221][   T81] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  623.078202][   T81] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  623.101594][   T81] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  623.716746][T23925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4741'.
[  623.783952][T23925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4741'.
[  624.010866][T23936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4744'.
[  624.084426][T23937] syzkaller0: entered promiscuous mode
[  624.107625][T23937] syzkaller0: entered allmulticast mode
[  624.462615][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  624.755219][T23969] netlink: 'syz.2.4748': attribute type 1 has an invalid length.
[  624.787365][T23969] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4748'.
[  624.812009][T23948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4748'.
[  625.059554][T23983] Cannot find add_set index 0 as target
[  625.425311][T24000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4757'.
[  625.876458][T24023] xt_hashlimit: size too large, truncated to 1048576
[  626.155661][T24033] syzkaller0: entered promiscuous mode
[  626.187353][T24033] syzkaller0: entered allmulticast mode
[  626.393167][T24049] __nla_validate_parse: 4 callbacks suppressed
[  626.393187][T24049] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4766'.
[  627.358050][T24088] xt_hl: Unknown TTL match mode: 255
[  627.385292][T24087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4777'.
[  627.412109][T24087] veth0: Caught tx_queue_len zero misconfig
[  627.525918][T24099] netlink: 'syz.2.4780': attribute type 1 has an invalid length.
[  627.548856][T24099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4780'.
[  627.679533][T24108] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4785'.
[  628.000258][T24122] netlink: 'syz.3.4790': attribute type 11 has an invalid length.
[  628.047351][T24124] openvswitch: netlink: IP tunnel dst address not specified
[  628.220209][T24138] netlink: 'syz.4.4794': attribute type 7 has an invalid length.
[  628.245941][T24138] netlink: 'syz.4.4794': attribute type 8 has an invalid length.
[  628.300547][T24141] 8021q: adding VLAN 0 to HW filter on device bond8
[  628.313014][T24141] bond0: (slave bond8): Enslaving as an active interface with an up link
[  628.445929][T24147] netlink: 45 bytes leftover after parsing attributes in process `syz.4.4798'.
[  628.456952][T24148] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  628.717214][T24163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4802'.
[  628.755389][  T510] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  628.767432][  T510] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  628.798560][  T510] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  628.829437][  T510] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  628.908332][T24169] netlink: 'syz.0.4804': attribute type 1 has an invalid length.
[  628.989588][T24176] sock: sock_timestamping_bind_phc: sock not bind to device
[  629.023803][T24169] 8021q: adding VLAN 0 to HW filter on device bond9
[  629.090459][T24175] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  629.162753][T24182] macvlan0: entered promiscuous mode
[  629.175879][T24182] macvlan0: entered allmulticast mode
[  629.185996][T24182] bond9: entered promiscuous mode
[  629.192116][T24182] veth0_to_bond: entered promiscuous mode
[  629.199889][T24182] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  629.213192][T24182] bond9: left promiscuous mode
[  629.218379][T24182] veth0_to_bond: left promiscuous mode
[  629.252041][T24191] syzkaller0: entered promiscuous mode
[  629.266838][T24191] syzkaller0: entered allmulticast mode
[  629.445845][T24200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4815'.
[  629.463824][T24201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4813'.
[  629.479743][T24201] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4813'.
[  629.493223][T24201] netlink: 'syz.2.4813': attribute type 5 has an invalid length.
[  629.503571][T24200] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4815'.
[  629.517391][T24204] netlink: 'syz.4.4814': attribute type 13 has an invalid length.
[  629.539030][T24204] macsec0: entered allmulticast mode
[  629.843017][T24214] lo: Caught tx_queue_len zero misconfig
[  630.555423][T24253] tipc: New replicast peer: 0.0.0.0
[  630.562458][T24253] tipc: Enabled bearer <udp:syz2>, priority 10
[  630.569844][T24251] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  630.932539][T18844] IPVS: starting estimator thread 0...
[  631.041386][T24273] IPVS: using max 27 ests per chain, 64800 per kthread
[  631.060774][T24277] ÿÿÿÿÿÿ: renamed from vlan1 (while UP)
[  631.168510][T24279] netlink: 'syz.2.4839': attribute type 21 has an invalid length.
[  631.383545][ T3324] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  631.416143][ T3324] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  631.437845][ T3324] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  631.455332][ T3324] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  631.692516][ T5747] tipc: Node number set to 2199777857
[  631.800029][T24309] __nla_validate_parse: 9 callbacks suppressed
[  631.800050][T24309] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4847'.
[  631.928076][T24317] IPVS: set_ctl: invalid protocol: 135 172.30.1.5:20000
[  632.020270][T24322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4850'.
[  632.059796][T24316] bond12: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  632.079031][T24322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4850'.
[  632.097128][T24316] bond12 (unregistering): Released all slaves
[  632.149050][T24323] bridge4: entered promiscuous mode
[  632.156591][T24323] bridge4: entered allmulticast mode
[  632.392047][T24334] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4855'.
[  632.415094][T24334] bridge0: port 4(vlan4) entered disabled state
[  632.421690][T24334] bridge0: port 2(bridge_slave_1) entered disabled state
[  632.431725][T24334] bridge0: port 1(bridge_slave_0) entered disabled state
[  632.454562][T24336] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4855'.
[  632.599122][T24336] bridge0: port 4(vlan4) entered blocking state
[  632.605625][T24336] bridge0: port 4(vlan4) entered forwarding state
[  632.612472][T24336] bridge0: port 2(bridge_slave_1) entered blocking state
[  632.619672][T24336] bridge0: port 2(bridge_slave_1) entered forwarding state
[  632.627248][T24336] bridge0: port 1(bridge_slave_0) entered blocking state
[  632.634486][T24336] bridge0: port 1(bridge_slave_0) entered forwarding state
[  632.747072][T24336] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4855'.
[  632.780184][T24336] bridge0: port 4(vlan4) entered disabled state
[  632.786920][T24336] bridge0: port 2(bridge_slave_1) entered disabled state
[  632.794230][T24336] bridge0: port 1(bridge_slave_0) entered disabled state
[  633.010793][T24362] tipc: Enabled bearer <ib:batadv_slave_1>, priority 10
[  633.029914][T24363] xt_bpf: check failed: parse error
[  633.109598][T24365] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4862'.
[  633.150182][T24365] veth0_to_bond: default FDB implementation only supports local addresses
[  633.421344][    C0] ip6_tunnel: L xmit: Local address not yet configured!
[  633.472619][T24385] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4865'.
[  633.497199][T24384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4866'.
[  633.724468][T24392] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4868'.
[  637.347156][T20462] Bluetooth: hci4: link tx timeout
[  637.359786][T24447] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  637.380028][T20462] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  637.625433][T24458] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4884'.
[  637.670595][T24461] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4885'.
[  637.683962][T24460] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4885'.
[  638.178741][T24482] xt_hashlimit: size too large, truncated to 1048576
[  638.386865][T24496] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4891'.
[  639.260804][T24525] rdma_rxe: rxe_newlink: failed to add lo
[  639.421521][T20462] Bluetooth: hci4: command 0x0405 tx timeout
[  639.463831][T24530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4899'.
[  639.782293][T24549] netlink: 268 bytes leftover after parsing attributes in process `syz.1.4906'.
[  640.290335][T24568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4912'.
[  640.378239][T24568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4912'.
[  640.476049][T24579] netlink: 'syz.3.4915': attribute type 2 has an invalid length.
[  640.507955][T24576] syzkaller0: entered allmulticast mode
[  640.533207][T24579] netlink: 'syz.3.4915': attribute type 8 has an invalid length.
[  640.573835][T24579] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4915'.
[  641.158424][T24618] netlink: 'syz.3.4925': attribute type 11 has an invalid length.
[  641.212219][T24627] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4926'.
[  641.283922][T24632] bond0: Error: Cannot enslave bond to itself.
[  641.507691][T24639] syzkaller1: entered promiscuous mode
[  641.528329][T24639] syzkaller1: entered allmulticast mode
[  642.626684][T24696] nbd: couldn't find a device at index 36
[  642.652633][T24695] nbd: couldn't find a device at index 36
[  643.004941][T24708] netlink: 'syz.1.4948': attribute type 30 has an invalid length.
[  643.193414][T24718] __nla_validate_parse: 2 callbacks suppressed
[  643.193434][T24718] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4950'.
[  643.440577][T24726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4954'.
[  643.468421][T24725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4953'.
[  643.477945][T24725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4953'.
[  643.516400][T24725] x_tables: duplicate underflow at hook 2
[  643.545389][T24729] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4955'.
[  643.627161][T24733] openvswitch: netlink: Key type 146 is out of range max 32
[  643.720448][T24740] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4958'.
[  643.763017][T24741] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4958'.
[  643.809205][T24748] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4960'.
[  643.970352][T24752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4962'.
[  644.004798][T24752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4962'.
[  644.218574][T24762] bridge5: entered promiscuous mode
[  644.237032][T24762] bridge5: entered allmulticast mode
[  644.613416][T24792] netlink: 'syz.1.4976': attribute type 1 has an invalid length.
[  644.835554][T24792] bond12: entered promiscuous mode
[  644.862263][T24792] 8021q: adding VLAN 0 to HW filter on device bond12
[  645.034666][T24797] bond12: (slave bridge4): making interface the new active one
[  645.057378][T24797] bridge4: entered promiscuous mode
[  645.066055][T24797] bond12: (slave bridge4): Enslaving as an active interface with an up link
[  645.080782][T24816] netlink: 'syz.2.4980': attribute type 5 has an invalid length.
[  645.195758][T24816] geneve2: entered promiscuous mode
[  645.213933][T24816] geneve2: entered allmulticast mode
[  645.237958][  T510] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  645.277288][  T510] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  645.315052][T24827] netlink: 'syz.0.4981': attribute type 2 has an invalid length.
[  645.317014][  T510] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  645.406777][T24824] mac80211_hwsim hwsim19 wlan0: entered promiscuous mode
[  645.431898][  T160] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  645.557471][T24833] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  645.573207][T24836] veth0: entered promiscuous mode
[  645.585055][T24836] batadv_slave_1: entered promiscuous mode
[  645.608792][T24835] batadv_slave_1: left promiscuous mode
[  645.626477][T24835] veth0: left promiscuous mode
[  645.761388][T24843] netlink: 'syz.4.4990': attribute type 4 has an invalid length.
[  645.883303][T24855] x_tables: duplicate underflow at hook 1
[  645.922322][T24856] x_tables: duplicate underflow at hook 1
[  646.200714][T24868] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  647.177019][T24922] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  647.734672][T24941] bond5 (unregistering): Released all slaves
[  648.213304][T24978] netlink: 'syz.4.5025': attribute type 9 has an invalid length.
[  648.260161][T24982] __nla_validate_parse: 13 callbacks suppressed
[  648.260182][T24982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5024'.
[  648.374472][T24987] netlink: 'syz.2.5026': attribute type 12 has an invalid length.
[  648.401692][T24982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5024'.
[  648.536179][T24990] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5028'.
[  648.546956][T24990] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5028'.
[  648.561088][T24990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5028'.
[  648.599208][T24982] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5024'.
[  648.856201][T25017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5033'.
[  648.876331][T25016] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5031'.
[  648.897750][T25017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5033'.
[  648.933572][T25017] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5033'.
[  650.320796][T25097] x_tables: duplicate underflow at hook 1
[  650.330161][T25096] xt_l2tp: invalid flags combination: 8
[  650.346433][T25096] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  650.388998][T25099] netlink: 'syz.1.5055': attribute type 29 has an invalid length.
[  650.408652][T25099] netlink: 'syz.1.5055': attribute type 29 has an invalid length.
[  650.494127][T25101] netlink: 'syz.4.5056': attribute type 12 has an invalid length.
[  650.519572][T25099] syzkaller1: entered promiscuous mode
[  650.538062][T25099] syzkaller1: entered allmulticast mode
[  650.569104][T25101] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  650.587098][T25104] netlink: 'syz.2.5057': attribute type 1 has an invalid length.
[  650.806015][T25121] netlink: 'syz.2.5060': attribute type 1 has an invalid length.
[  650.948252][T25121] 8021q: adding VLAN 0 to HW filter on device bond9
[  651.091886][T25130] syzkaller0: entered promiscuous mode
[  651.111371][T25130] syzkaller0: entered allmulticast mode
[  651.659262][T25163] xt_connbytes: Forcing CT accounting to be enabled
[  651.667775][T25154] xt_hashlimit: size too large, truncated to 1048576
[  651.692063][T25161] veth1_to_bond: entered allmulticast mode
[  651.707362][T25166] veth1_to_bond: entered promiscuous mode
[  651.760680][T25161] veth1_to_bond (unregistering): left allmulticast mode
[  651.792630][T25161] veth1_to_bond (unregistering): left promiscuous mode
[  651.846259][T25161] bond0: (slave bond_slave_1): Releasing backup interface
[  652.037319][T25173] TCP: TCP_TX_DELAY enabled
[  652.699407][T25205] syzkaller0: entered promiscuous mode
[  652.725451][T25205] syzkaller0: entered allmulticast mode
[  652.855796][T25212] netlink: 'syz.3.5084': attribute type 1 has an invalid length.
[  653.524546][T25241] netlink: 'syz.0.5093': attribute type 1 has an invalid length.
[  653.644424][T25246] __nla_validate_parse: 15 callbacks suppressed
[  653.644444][T25246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5095'.
[  653.660469][T25246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5095'.
[  654.084967][T25258] xt_CT: No such helper "snmp_trap"
[  655.274517][T25329] netlink: 'syz.3.5116': attribute type 32 has an invalid length.
[  655.295705][T25331] netlink: 26 bytes leftover after parsing attributes in process `syz.0.5117'.
[  655.298118][T25329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5116'.
[  655.402188][T25329] bond6: option coupled_control: invalid value (123)
[  655.412682][T25329] bond6 (unregistering): Released all slaves
[  655.688510][T25340] netlink: 'syz.3.5120': attribute type 9 has an invalid length.
[  655.944354][T25346] rdma_rxe: rxe_newlink: failed to add veth0_macvtap
[  655.962593][T25346] syzkaller0: entered promiscuous mode
[  655.974855][T25346] syzkaller0: entered allmulticast mode
[  656.216552][   T30] audit: type=1107 audit(1784931771.306:8): pid=25360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='WÓ©pŸw„’®(ólßqXç~4¢ƒï†k¶¤\Ðfc›ϯ…õÜpþ0Õ.Hù@?­*îÅéâ%�ÐØÒzgou�Åz¾±�wÎü(I'
[  656.429960][T25370] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5128'.
[  656.482941][T25371] vlan0: entered promiscuous mode
[  656.592305][T25374] Unsupported ieee802154 address type: 0
[  657.145959][T25390] netlink: 'syz.0.5134': attribute type 33 has an invalid length.
[  657.258021][T25415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5138'.
[  657.305660][T25390] bond11: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  657.331604][T25390] bond11 (unregistering): Released all slaves
[  657.732794][T25441] x_tables: duplicate underflow at hook 1
[  657.738919][T25443] x_tables: duplicate underflow at hook 1
[  657.866242][T25446] netlink: 184 bytes leftover after parsing attributes in process `syz.3.5145'.
[  658.211145][T25454] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5149'.
[  659.747490][T25402] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  659.958041][T25469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5153'.
[  660.009669][T25473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5156'.
[  660.094004][T25474] bond5: option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  660.124147][T25489] netlink: 'syz.2.5158': attribute type 1 has an invalid length.
[  660.150797][T25474] bond5 (unregistering): Released all slaves
[  660.183110][T25489] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5158'.
[  660.504954][ T8367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  660.532417][ T8367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  660.600156][T25496] syzkaller0: entered promiscuous mode
[  660.617889][T25496] syzkaller0: entered allmulticast mode
[  660.669199][T25516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5164'.
[  660.709288][T25516] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5164'.
[  660.779070][T25508] bond11: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  660.796645][T25508] bond11 (unregistering): Released all slaves
[  661.045872][T25529] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  661.070222][T25527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5167'.
[  661.092002][T25536] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5170'.
[  661.126406][T25527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5167'.
[  661.155425][T25536] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5170'.
[  661.181567][T25536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5170'.
[  661.199174][T25537] vcan1: entered promiscuous mode
[  661.212701][T25537] vcan1: entered allmulticast mode
[  662.043725][T25575] syzkaller0: entered promiscuous mode
[  662.070386][T25575] syzkaller0: entered allmulticast mode
[  662.163109][T25591] netlink: 'syz.4.5187': attribute type 4 has an invalid length.
[  662.466179][T25603] bridge0: entered promiscuous mode
[  662.495464][T25603] bridge0: entered allmulticast mode
[  663.386632][T25648] netlink: 'syz.3.5203': attribute type 15 has an invalid length.
[  663.579830][T25657] netlink: 'syz.0.5208': attribute type 1 has an invalid length.
[  663.877366][T25662] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  663.904995][T25661] tipc: Disabling bearer <eth:syzkaller0>
[  664.022783][T25669] bond0: (slave bond_slave_1): Releasing backup interface
[  664.045657][T25669] bond_slave_1: left promiscuous mode
[  664.241517][T25675] bond_slave_1: entered promiscuous mode
[  664.248365][T25675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  664.621712][T25689] syzkaller0: entered promiscuous mode
[  664.636053][T25689] syzkaller0: entered allmulticast mode
[  664.745288][T25689] nbd3: detected capacity change from 0 to 63
[  664.753201][T25705] block nbd3: NBD_DISCONNECT
[  664.795280][T25705] block nbd3: Disconnected due to user request.
[  664.805697][T25705] block nbd3: shutting down sockets
[  664.815924][T25699] bond11: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  664.835088][    C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  664.845023][    C0] Buffer I/O error on dev nbd3, logical block 0, async page read
[  664.852982][    C0] Buffer I/O error on dev nbd3, logical block 1, async page read
[  664.860899][    C0] Buffer I/O error on dev nbd3, logical block 2, async page read
[  664.868784][    C0] Buffer I/O error on dev nbd3, logical block 3, async page read
[  664.896863][  T419] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  664.912673][  T419] Buffer I/O error on dev nbd3, logical block 0, async page read
[  664.926030][  T419] Buffer I/O error on dev nbd3, logical block 1, async page read
[  664.934254][  T419] Buffer I/O error on dev nbd3, logical block 2, async page read
[  664.946484][  T419] Buffer I/O error on dev nbd3, logical block 3, async page read
[  664.957714][  T419] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  664.969798][  T419] Buffer I/O error on dev nbd3, logical block 0, async page read
[  664.978226][T25699] bond11 (unregistering): Released all slaves
[  664.985003][  T419] Buffer I/O error on dev nbd3, logical block 1, async page read
[  664.993189][   T11] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  665.009073][   T11] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  665.019114][   T11] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  665.029273][   T11] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  665.045406][   T11] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  665.055262][T20731] ldm_validate_partition_table(): Disk read failed.
[  665.069716][T25693] tunl0: Caught tx_queue_len zero misconfig
[  665.078351][T25716] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  665.088809][T25716] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  665.100386][T20731] Dev nbd3: unable to read RDB block 0
[  665.130050][T20731]  nbd3: unable to read partition table
[  665.150812][T20731] ldm_validate_partition_table(): Disk read failed.
[  665.164505][T20731] Dev nbd3: unable to read RDB block 0
[  665.175116][T20731]  nbd3: unable to read partition table
[  665.232026][T25718] netlink: 'syz.2.5227': attribute type 7 has an invalid length.
[  665.268181][T25718] __nla_validate_parse: 12 callbacks suppressed
[  665.268201][T25718] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5227'.
[  665.355612][T25721] syzkaller0: entered promiscuous mode
[  665.381286][T25721] syzkaller0: entered allmulticast mode
[  665.436390][T25726] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5231'.
[  665.716244][T25738] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5235'.
[  665.746016][T25738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5235'.
[  665.766713][T25738] x_tables: duplicate entry at hook 2
[  665.784855][T25744] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5236'.
[  665.802499][T25743] netlink: 'syz.3.5237': attribute type 4 has an invalid length.
[  665.829554][T25743] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5237'.
[  665.853859][T25738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  665.952449][T25749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5236'.
[  666.278071][T25765] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.5244'.
[  666.290812][T25765] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.5244'.
[  666.457733][T25777] bridge0: port 4(vlan4) entered blocking state
[  666.464271][T25777] bridge0: port 4(vlan4) entered forwarding state
[  666.471255][T25777] bridge0: port 2(bridge_slave_1) entered blocking state
[  666.478499][T25777] bridge0: port 2(bridge_slave_1) entered forwarding state
[  666.486082][T25777] bridge0: port 1(bridge_slave_0) entered blocking state
[  666.493318][T25777] bridge0: port 1(bridge_slave_0) entered forwarding state
[  666.612485][T10288] ip6_tunnel: L xmit: Local address not yet configured!
[  666.686720][T25777] 8021q: adding VLAN 0 to HW filter on device eth0
[  666.698855][T25785] netlink: 576 bytes leftover after parsing attributes in process `syz.4.5250'.
[  666.719801][T25777] 8021q: adding VLAN 0 to HW filter on device eth1
[  666.731809][T25777] 8021q: adding VLAN 0 to HW filter on device eth2
[  666.743808][T25777] 8021q: adding VLAN 0 to HW filter on device eth3
[  666.797123][ T8365] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  666.818288][ T8365] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  666.837773][ T8366] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  666.846688][ T8366] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  667.000526][T25790] nbd: must specify an index to disconnect
[  667.077200][T25794] netlink: 'syz.4.5254': attribute type 1 has an invalid length.
[  667.118212][T25794] netlink: 'syz.4.5254': attribute type 1 has an invalid length.
[  667.247570][T25804] xt_hashlimit: size too large, truncated to 1048576
[  667.373029][ T5747] ip6_tunnel: L xmit: Local address not yet configured!
[  667.484253][T25812] bond13: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  667.502890][T25812] bond13 (unregistering): Released all slaves
[  667.696388][T25814] netlink: 'syz.2.5258': attribute type 2 has an invalid length.
[  667.800516][T25832] openvswitch: netlink: Flow actions attr not present in new flow.
[  667.981193][    C0] ip6_tunnel: L xmit: Local address not yet configured!
[  668.089914][T25849] netlink: 'syz.1.5269': attribute type 23 has an invalid length.
[  668.138099][T25846] bridge0: entered promiscuous mode
[  668.144315][T25846] bridge0: entered allmulticast mode
[  668.266121][T25852] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  668.325944][T25855] syzkaller0: entered promiscuous mode
[  668.354134][T25855] syzkaller0: entered allmulticast mode
[  668.383919][ T5747] hid-generic 0005:0007:0007.0001: item fetching failed at offset 0/1
[  668.396111][ T5747] hid-generic 0005:0007:0007.0001: probe with driver hid-generic failed with error -22
[  668.672465][T25881] x_tables: unsorted underflow at hook 3
[  668.738940][T25884] netlink: 'syz.2.5278': attribute type 1 has an invalid length.
[  668.939665][T25891] tipc: New replicast peer: 255.255.255.255
[  668.972045][T25891] tipc: Enabled bearer <udp:syz2>, priority 10
[  669.582919][T25930] x_tables: duplicate underflow at hook 1
[  669.683434][T25922] sit1: left allmulticast mode
[  669.715759][T25922] veth7: left allmulticast mode
[  669.735691][T25922] bond3: left allmulticast mode
[  669.767473][T25922] vcan1: left allmulticast mode
[  669.801843][T25922] bridge0: left allmulticast mode
[  669.968278][T25945] netlink: 'syz.2.5298': attribute type 1 has an invalid length.
[  669.988014][T25945] netlink: 'syz.2.5298': attribute type 3 has an invalid length.
[  670.005691][T25945] NCSI netlink: No device for ifindex 813332851
[  670.091831][T18844] tipc: Node number set to 2066873833
[  670.158925][   T30] audit: type=1107 audit(1784931785.246:9): pid=25956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ä”=
þ»Ly…·ÒgdRâj“G÷7VÂ@~EÊEc0Î+âØQ0ýý¤è.¢�nj¬saÖ”§IvKø¯È²VI§ö�\·Œ[¤fA܉¾[«oÝ—¯³4.bo÷A¿'Âal+�#èÅMÎǘ>éÒÁLò0
[  670.158925][   T30] lðÎx³)Á±È6»üÊ$Œ˜²d¹w„¼KVݯè~v*?cÉü§Î
ï/›�I”²ÿ+âÓ�!ªZÓF6”5©'b‘÷&¦—ÍܪFK	ÓÚ¡Zµe“ôíx…‹i	5	²)`hGçUbs$hùËÓ/;Ô2éPlcß/ÐôŠË²3 BJbo)'°¥àSÚ2¢~¦º!Ëm³GVeý̬öŸxîp¨ÛàŠHý®B»ËT�ÙFm]‚'ö(}Ì›ÆêÇÀ”¬aÜ„§ã�§ñ’òGíìI¥z”7ÏÞé¨ð’í°”ºLH7:¬”…¿ç	ò_6‰iûçãÕ•oœúÕ›˜
[  670.158925][   T30] òj`¨Ú“”Šuò¶{ÊÔÖѹý9Qôjø#|D‰ù–šnÂ@Frè„fS‰Ä4Œ£ßPtTdq¥áø'
[  670.283899][T25967] netlink: 'syz.2.5305': attribute type 13 has an invalid length.
[  670.329670][T25967] gretap0: refused to change device tx_queue_len
[  670.358478][T25967] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  670.408987][T25972] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  670.454649][T25972] __nla_validate_parse: 13 callbacks suppressed
[  670.454668][T25972] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5306'.
[  670.469435][T25974] netlink: 'syz.4.5307': attribute type 9 has an invalid length.
[  670.508036][T25974] netlink: 'syz.4.5307': attribute type 6 has an invalid length.
[  670.740634][T25992] netlink: 'syz.4.5311': attribute type 12 has an invalid length.
[  670.755314][T25990] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5312'.
[  670.904771][T25991] netlink: 'syz.4.5311': attribute type 12 has an invalid length.
[  670.920373][T25994] x_tables: ip_tables: udp match: only valid for protocol 17
[  671.132444][T26010] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5317'.
[  671.193287][T25994] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5313'.
[  671.417343][T26018] bond13 (unregistering): Released all slaves
[  671.553540][T26035] xt_hashlimit: size too large, truncated to 1048576
[  672.398646][T26073] xt_hashlimit: max too large, truncated to 1048576
[  672.416059][T26073] No such timeout policy "syz1"
[  672.589750][T26077] team_slave_1: Caught tx_queue_len zero misconfig
[  672.608390][T26081] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5336'.
[  672.969274][T26102] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5343'.
[  673.459512][T26119] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5346'.
[  673.612947][T26123] bridge6: entered promiscuous mode
[  673.987940][T26146] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  674.112734][T26152] team0 (unregistering): left promiscuous mode
[  674.138989][T26152] team_slave_0: left promiscuous mode
[  674.164539][T26152] team_slave_1: left promiscuous mode
[  674.173922][T26152] dummy0: left promiscuous mode
[  674.212271][T26152] team0 (unregistering): Port device team_slave_0 removed
[  674.245120][T26152] team0 (unregistering): Port device team_slave_1 removed
[  674.276413][T26152] team0 (unregistering): Port device dummy0 removed
[  674.307870][T26164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5361'.
[  674.461171][T26164] bond5: Unable to set up delay as MII monitoring is disabled
[  674.482184][T26164] bond5 (unregistering): Released all slaves
[  674.547833][T26175] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5363'.
[  674.590061][T26177] x_tables: duplicate entry at hook 1
[  674.650707][T26177] validate_nla: 1 callbacks suppressed
[  674.650727][T26177] netlink: 'syz.3.5362': attribute type 1 has an invalid length.
[  674.845473][T26191] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5367'.
[  674.955558][T26198] xt_socket: unknown flags 0x50
[  675.117171][T26207] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  675.248786][T26195] 8021q: adding VLAN 0 to HW filter on device bond0
[  675.316028][T26218] netlink: 'syz.0.5371': attribute type 1 has an invalid length.
[  675.335891][T26195] 8021q: adding VLAN 0 to HW filter on device batadv0
[  675.496072][T26195] batman_adv: batadv0: Interface activated: batadv_slave_1
[  675.536744][T26195] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  675.575760][T26221] nbd0: detected capacity change from 0 to 63
[  675.588961][T26195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  675.648874][T26195] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  675.698836][T26195] veth1_vlan: left promiscuous mode
[  675.727330][T26195] veth0_vlan: left promiscuous mode
[  675.758077][T26195] veth0_vlan: entered promiscuous mode
[  675.787809][T26195] veth1_vlan: entered promiscuous mode
[  675.813925][T26195] veth1_macvtap: left promiscuous mode
[  675.823499][T26195] veth0_macvtap: left promiscuous mode
[  675.830839][T26195] veth0_macvtap: entered promiscuous mode
[  675.839602][T26195] veth1_macvtap: entered promiscuous mode
[  675.846579][T26195] veth1_macvtap: entered allmulticast mode
[  675.866062][T26195] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  675.876056][T26195] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  675.886895][T26195] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  675.907141][T26195] ip6erspan0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  675.922615][T26195] 8021q: adding VLAN 0 to HW filter on device bond1
[  675.930769][T26195] 8021q: adding VLAN 0 to HW filter on device bond2
[  675.940317][T26195] ip6erspan1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  676.015000][T26195] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check.
[  676.090281][T26218] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  676.153714][ T5288] veth0_vlan: left promiscuous mode
[  676.216417][T19720] block nbd0: Receive control failed (result -104)
[  676.226871][ T8365] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  676.279044][ T8365] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  676.347780][T10289] veth0_vlan: entered promiscuous mode
[  676.425555][ T8365] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  676.450133][ T8365] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  676.738412][ T8367] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  676.789986][T26253] syzkaller0: entered promiscuous mode
[  676.821406][T26253] syzkaller0: entered allmulticast mode
[  676.828259][T26266] netlink: 'syz.4.5381': attribute type 10 has an invalid length.
[  676.828643][T26267] netlink: 'syz.3.5382': attribute type 13 has an invalid length.
[  676.870546][T26266] netlink: 'syz.4.5381': attribute type 10 has an invalid length.
[  677.017825][T19720] block nbd3: Receive control failed (result -32)
[  677.594677][T26303] __nla_validate_parse: 2 callbacks suppressed
[  677.594699][T26303] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5391'.
[  677.653053][T26306] batadv_slave_0: entered promiscuous mode
[  677.671748][T26305] batadv_slave_0: left promiscuous mode
[  677.853415][T26317] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  678.389024][T26335] vlan0: entered promiscuous mode
[  678.405483][T26335] vlan0: entered allmulticast mode
[  678.426883][T26335] veth0_vlan: entered allmulticast mode
[  678.465369][T26335] team0: Port device vlan0 added
[  678.591699][T26308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5393'.
[  678.780791][T26347] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5401'.
[  678.799447][T26347] netlink: 'syz.1.5401': attribute type 2 has an invalid length.
[  678.994465][T26356] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5403'.
[  679.014883][T26308] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  679.051531][T26350] syzkaller1: entered promiscuous mode
[  679.090012][T26350] syzkaller1: entered allmulticast mode
[  679.477299][T26367] netlink: 'syz.0.5407': attribute type 1 has an invalid length.
[  679.500321][T26367] netlink: 'syz.0.5407': attribute type 3 has an invalid length.
[  679.522898][T26367] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5407'.
[  679.778862][T26379] ipvlan2: entered promiscuous mode
[  679.859733][T26392] netlink: 'syz.0.5416': attribute type 2 has an invalid length.
[  679.942141][T26392] : entered promiscuous mode
[  680.275934][T26415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5423'.
[  680.320298][T26416] batadv_slave_0: Caught tx_queue_len zero misconfig
[  680.461564][    C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  680.493650][T26418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5426'.
[  680.539821][T26428] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5430'.
[  680.553981][T26428] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5430'.
[  680.568324][T26428] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5430'.
[  680.587359][T26418] openvswitch: netlink: Missing key (keys=40, expected=100)
[  680.638688][T26432] macsec1: entered promiscuous mode
[  680.644232][T26432] bridge0: entered promiscuous mode
[  680.649745][T26432] macsec1: entered allmulticast mode
[  680.655964][T26432] bridge0: entered allmulticast mode
[  680.664671][T26432] bridge0: port 3(macsec1) entered blocking state
[  680.675940][T26432] bridge0: port 3(macsec1) entered disabled state
[  680.693031][T26432] bridge0: left allmulticast mode
[  680.716040][T26438] netlink: 'syz.2.5431': attribute type 21 has an invalid length.
[  680.752867][T15519] bridge0: left promiscuous mode
[  681.005469][T26453] netlink: 'syz.4.5437': attribute type 2 has an invalid length.
[  681.274236][T26472] netlink: 'syz.2.5442': attribute type 1 has an invalid length.
[  681.598547][T26488] netlink: 'syz.0.5446': attribute type 1 has an invalid length.
[  682.040218][T26511] vxcan1 speed is unknown, defaulting to 1000
[  682.420358][T26511] lo speed is unknown, defaulting to 1000
[  682.429680][T26511] wlan1 speed is unknown, defaulting to 1000
[  684.565950][T26487] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  684.945471][T26553] __nla_validate_parse: 6 callbacks suppressed
[  684.945493][T26553] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5462'.
[  684.996807][T26558] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5464'.
[  685.009580][T26558] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5464'.
[  685.099060][T26565] bridge_slave_0: invalid flags given to default FDB implementation
[  685.201216][T26565] kthread_run failed with err -4
[  685.258468][T26575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5468'.
[  685.302318][T26568] bridge_slave_0: invalid flags given to default FDB implementation
[  685.452617][T26583] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  686.156234][T26621] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5479'.
[  686.182798][T26621] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  686.196377][T26622] netlink: 'syz.0.5481': attribute type 32 has an invalid length.
[  686.510008][T26636] syzkaller0: entered promiscuous mode
[  686.542382][T26636] syzkaller0: entered allmulticast mode
[  687.169083][T26657] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5494'.
[  687.456865][T26670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5499'.
[  687.490610][T26673] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5498'.
[  687.524257][T26673] bridge0: port 4(vlan4) entered disabled state
[  687.530929][T26673] bridge0: port 2(bridge_slave_1) entered disabled state
[  687.538351][T26673] bridge0: port 1(bridge_slave_0) entered disabled state
[  687.821316][    C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  687.919286][T26681] macvlan3: entered promiscuous mode
[  687.932320][T26681] macvlan3: entered allmulticast mode
[  688.218595][T26704] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  688.293042][T26709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5508'.
[  688.396153][T26711] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5509'.
[  688.478867][T26722] netlink: 'syz.3.5513': attribute type 7 has an invalid length.
[  688.577708][T26726] netlink: 'syz.1.5514': attribute type 2 has an invalid length.
[  688.680086][T26737] sctp: [Deprecated]: syz.4.5517 (pid 26737) Use of int in max_burst socket option.
[  688.680086][T26737] Use struct sctp_assoc_value instead
[  688.923964][T26750] netlink: 'syz.4.5521': attribute type 1 has an invalid length.
[  688.937808][T26747] block nbd2: reconnected socket
[  688.944934][T26752] netlink: 'syz.4.5521': attribute type 1 has an invalid length.
[  688.959023][T26753] pimreg: entered allmulticast mode
[  688.977492][T21047] block nbd2: NBD_DISCONNECT
[  689.004545][T26749] netlink: 'syz.4.5521': attribute type 2 has an invalid length.
[  689.017184][T21047] block nbd2: Disconnected due to user request.
[  689.043394][T21047] block nbd2: shutting down sockets
[  689.159213][T26749] : entered promiscuous mode
[  689.253297][T26763] netlink: 'syz.3.5524': attribute type 1 has an invalid length.
[  689.276873][T26763] netlink: 'syz.3.5524': attribute type 2 has an invalid length.
[  689.287952][T26763] netlink: 'syz.3.5524': attribute type 11 has an invalid length.
[  689.409229][T26767] bridge_slave_1: left allmulticast mode
[  689.448098][T26767] bridge_slave_1: left promiscuous mode
[  689.489927][T26767] bridge0: port 2(bridge_slave_1) entered disabled state
[  689.564785][T26767] bridge_slave_0: left allmulticast mode
[  689.585911][T26767] bridge_slave_0: left promiscuous mode
[  689.608156][T26767] bridge0: port 1(bridge_slave_0) entered disabled state
[  689.778973][T10290] wlan1 speed is unknown, defaulting to 1000
[  689.799815][T26787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  689.809839][T10290] syz1: Port: 1 Link ACTIVE
[  689.959595][T26800] pim6reg: entered allmulticast mode
[  690.167507][T26811] siw: device registration error -23
[  690.246579][T26811] veth0: entered promiscuous mode
[  690.260383][T26814] block nbd3: reconnected socket
[  690.309449][T21047] block nbd3: NBD_DISCONNECT
[  690.320321][T26819] __nla_validate_parse: 10 callbacks suppressed
[  690.320356][T26819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5539'.
[  690.342560][T21047] block nbd3: Send disconnect failed -32
[  690.372077][T21047] block nbd3: Disconnected due to user request.
[  690.388084][T26810] veth0: left promiscuous mode
[  690.400429][T21047] block nbd3: shutting down sockets
[  690.514987][T26819] netlink: 'syz.2.5539': attribute type 6 has an invalid length.
[  690.556574][T26819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5539'.
[  690.578278][T26819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5539'.
[  690.605541][T26831] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5542'.
[  690.641410][T26819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5539'.
[  690.677786][T26819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5539'.
[  690.725561][T26819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5539'.
[  690.774897][T26819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5539'.
[  690.809688][T26819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5539'.
[  690.833869][T26837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5544'.
[  691.130019][T26854] veth0: entered promiscuous mode
[  691.233814][T26851] veth0: left promiscuous mode
[  691.745705][T26882] A link change request failed with some changes committed already. Interface dvmrp0 may have been left with an inconsistent configuration, please check.
[  691.772823][T18844] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  691.828405][T26886] 8021q: VLANs not supported on wg2
[  691.991128][T18844] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  691.999247][T26888] validate_nla: 84 callbacks suppressed
[  691.999267][T26888] netlink: 'syz.3.5559': attribute type 5 has an invalid length.
[  692.291483][T26875] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  692.345540][T26896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.900431][T26910] netlink: 'syz.1.5564': attribute type 9 has an invalid length.
[  693.756100][T26923] gtp1: entered promiscuous mode
[  693.767194][T26923] gtp1: entered allmulticast mode
[  694.494605][T26961] mac80211_hwsim hwsim25 syzkaller0: entered promiscuous mode
[  694.504974][T26961] mac80211_hwsim hwsim25 syzkaller0: entered allmulticast mode
[  694.797606][T26973] netlink: 'syz.4.5579': attribute type 13 has an invalid length.
[  694.824518][T26973] veth1_macvtap: left allmulticast mode
[  694.839485][T26973] veth1_macvtap: left promiscuous mode
[  695.114293][T26992] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  695.149216][T26990] block nbd1: reconnected socket
[  695.163011][T20513] block nbd1: NBD_DISCONNECT
[  695.190705][T20513] block nbd1: Disconnected due to user request.
[  695.193190][T26994] tipc: Bearer <eth:ipvlan1>: already 2 bearers with priority 10
[  695.208506][T20513] block nbd1: shutting down sockets
[  695.232168][T26994] tipc: Bearer <eth:ipvlan1>: trying with adjusted priority
[  695.239780][T26994] tipc: Enabled bearer <eth:ipvlan1>, priority 9
[  695.265003][T26994] netlink: 'syz.3.5586': attribute type 1 has an invalid length.
[  696.062114][T27043] x_tables: ip_tables: icmp match: only valid for protocol 1
[  696.134567][T27036] sctp: [Deprecated]: syz.0.5599 (pid 27036) Use of int in max_burst socket option deprecated.
[  696.134567][T27036] Use struct sctp_assoc_value instead
[  696.165154][T27047] netlink: 'syz.2.5602': attribute type 1 has an invalid length.
[  696.180688][T27048] __nla_validate_parse: 166 callbacks suppressed
[  696.180709][T27048] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5602'.
[  696.253556][T27051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5603'.
[  696.363611][T27060] netlink: 'syz.2.5602': attribute type 1 has an invalid length.
[  696.518463][T27066] netlink: 'syz.4.5603': attribute type 13 has an invalid length.
[  696.585781][T27066] erspan0: refused to change device tx_queue_len
[  696.600824][T27066] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  696.796891][T27079] macvlan0: entered promiscuous mode
[  696.895275][T27084] gretap5: entered promiscuous mode
[  697.029084][T27092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5614'.
[  697.060529][T27092] netlink: 'syz.2.5614': attribute type 6 has an invalid length.
[  697.073684][T27089] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5612'.
[  697.144497][T27099] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5613'.
[  697.257240][T27105] netlink: 'syz.4.5617': attribute type 1 has an invalid length.
[  697.315395][T27105] bond5: entered promiscuous mode
[  697.324462][T27105] 8021q: adding VLAN 0 to HW filter on device bond5
[  697.525011][T27120] bond0: Device is already in use.
[  697.577973][T27122] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5621'.
[  697.667556][T27128] xt_hashlimit: size too large, truncated to 1048576
[  698.235846][T27151] syzkaller0: entered promiscuous mode
[  698.255075][T27151] syzkaller0: entered allmulticast mode
[  698.364630][    C1] vxcan0: j1939_tp_rxtimer: 0xffff88805504b400: rx timeout, send abort
[  698.450460][T27163] netlink: 'syz.2.5633': attribute type 2 has an invalid length.
[  698.594919][T27177] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5636'.
[  698.618398][T27176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5635'.
[  698.707776][T27183] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5637'.
[  698.757949][T27182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5637'.
[  698.828402][T27191] xt_CT: You must specify a L4 protocol and not use inversions on it
[  698.863162][T27191] syzkaller1: entered promiscuous mode
[  698.878032][    C1] vxcan0: j1939_tp_rxtimer: 0xffff88805504b400: abort rx timeout. Force session deactivation
[  698.926118][T27191] syzkaller1: entered allmulticast mode
[  699.123494][T27209] IPVS: set_ctl: invalid protocol: 98 100.1.1.0:20002
[  699.217825][T27208] syzkaller0: entered promiscuous mode
[  699.247977][T27208] syzkaller0: entered allmulticast mode
[  699.497714][T27227] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  699.619607][T27235] xt_hashlimit: size too large, truncated to 1048576
[  700.246051][T27262] bond6: option arp_all_targets: invalid value (18446744073709551613)
[  700.277403][T27262] bond6 (unregistering): Released all slaves
[  700.480270][T27274] vlan6: entered promiscuous mode
[  700.494557][T27274] bridge0: entered promiscuous mode
[  700.506436][T27274] vlan6: entered allmulticast mode
[  700.512906][T27274] bridge0: entered allmulticast mode
[  700.534545][T27283] bridge0: port 1(bridge_slave_0) entered blocking state
[  700.542401][T27283] bridge0: port 1(bridge_slave_0) entered disabled state
[  700.549929][T27283] bridge_slave_0: entered allmulticast mode
[  700.562204][T27283] bridge_slave_0: entered promiscuous mode
[  700.571450][T27283] bridge0: port 1(bridge_slave_0) entered blocking state
[  700.578707][T27283] bridge0: port 1(bridge_slave_0) entered forwarding state
[  701.073015][T27311] nbd: couldn't find a device at index 2
[  701.338038][T27323] veth0_to_bridge: Caught tx_queue_len zero misconfig
[  701.493389][T27337] netlink: 'syz.3.5683': attribute type 1 has an invalid length.
[  701.655821][T27337] bond6: entered promiscuous mode
[  701.689938][T27337] 8021q: adding VLAN 0 to HW filter on device bond6
[  701.793747][T27347] 8021q: adding VLAN 0 to HW filter on device bond6
[  701.802688][T27347] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  701.826439][T27347] bond6: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  701.842076][T27347] bond6: (slave ip6gre1): making interface the new active one
[  701.852191][T27347] ip6gre1: entered promiscuous mode
[  701.866972][T27347] bond6: (slave ip6gre1): Enslaving as an active interface with an up link
[  701.879255][T27344] syzkaller1: entered promiscuous mode
[  701.899116][T27344] syzkaller1: entered allmulticast mode
[  701.929406][T27348] vxcan1 speed is unknown, defaulting to 1000
[  702.270238][T27348] lo speed is unknown, defaulting to 1000
[  702.283903][T27348] wlan1 speed is unknown, defaulting to 1000
[  702.359904][T27366] netlink: 'syz.3.5689': attribute type 4 has an invalid length.
[  702.373432][T27366] __nla_validate_parse: 11 callbacks suppressed
[  702.373455][T27366] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5689'.
[  702.419226][T27366] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  702.451994][T27369] nbd: couldn't find a device at index 1
[  702.541651][    C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  702.728910][T27373] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5692'.
[  702.798327][T27375] syzkaller0: entered promiscuous mode
[  702.814653][T27377] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5694'.
[  702.831539][T27375] syzkaller0: entered allmulticast mode
[  702.934882][T27384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5696'.
[  703.009189][T27389] xt_ecn: cannot match TCP bits for non-tcp packets
[  703.116191][T27389] veth5: entered allmulticast mode
[  703.130309][T27396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5698'.
[  705.747277][T25716] block nbd0: Possible stuck request ffff88804c515080: control (read@0,1024B). Runtime 30 seconds
[  705.759689][T25716] block nbd0: Possible stuck request ffff88804c515240: control (read@1024,1024B). Runtime 30 seconds
[  705.770774][T25716] block nbd0: Possible stuck request ffff88804c515400: control (read@2048,1024B). Runtime 30 seconds
[  705.781907][T25716] block nbd0: Possible stuck request ffff88804c5155c0: control (read@3072,1024B). Runtime 30 seconds
[  706.099146][T27393] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  706.377449][T27456] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5711'.
[  706.413975][T27442] IPVS: set_ctl: invalid protocol: 135 10.1.1.0:20000
[  706.726413][T27478] bond0: Caught tx_queue_len zero misconfig
[  706.964057][T27492] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  707.017725][T27495] netlink: 'syz.4.5723': attribute type 1 has an invalid length.
[  707.028112][T27496] netlink: 'syz.3.5722': attribute type 64 has an invalid length.
[  707.058916][T27496] netlink: 'syz.3.5722': attribute type 64 has an invalid length.
[  707.119224][T27495] 8021q: adding VLAN 0 to HW filter on device bond6
[  707.175989][T27495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5723'.
[  707.196306][T27503] bond6: (slave veth0_to_bond): making interface the new active one
[  707.226432][T27503] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  707.247084][T27495] bond6: entered allmulticast mode
[  707.252651][T27495] veth0_to_bond: entered allmulticast mode
[  707.650641][T27526] netlink: 71 bytes leftover after parsing attributes in process `syz.4.5732'.
[  707.746740][T10289] wlan1 speed is unknown, defaulting to 1000
[  707.758855][T10289] syz1: Port: 1 Link DOWN
[  708.038171][T27544] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5737'.
[  708.135435][T27553] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma?
[  708.149127][T27552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5739'.
[  708.199652][T27553] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  708.590398][T27579] netlink: 'syz.4.5746': attribute type 2 has an invalid length.
[  708.609730][T27582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5747'.
[  708.633561][T27582] openvswitch: netlink: Flow actions attr not present in new flow.
[  708.646918][T27572] bond7 (unregistering): Released all slaves
[  708.938370][T27593] A link change request failed with some changes committed already. Interface 
2
6±ÿª¨ú
rBº“ may have been left with an inconsistent configuration, please check.
[  708.974782][T27599] openvswitch: netlink: Key type 64 is out of range max 32
[  709.293128][T27610] bond11: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  709.347599][T27610] bond11 (unregistering): Released all slaves
[  709.434196][T27605] vxcan1 speed is unknown, defaulting to 1000
[  709.568533][T27625] IPv6: NLM_F_CREATE should be specified when creating new route
[  709.579953][T27623] netlink: 'syz.1.5757': attribute type 15 has an invalid length.
[  709.880704][T27605] lo speed is unknown, defaulting to 1000
[  709.890841][T27605] wlan1 speed is unknown, defaulting to 1000
[  710.040483][T27643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  710.328900][T27657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5766'.
[  710.374836][T27660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5766'.
[  710.426650][T27656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5766'.
[  710.498158][T27664] syzkaller0: entered promiscuous mode
[  710.519709][T27664] syzkaller0: entered allmulticast mode
[  710.735743][T27676] netlink: zone id is out of range
[  710.741166][T27676] netlink: zone id is out of range
[  710.751379][T27676] netlink: del zone limit has 8 unknown bytes
[  711.264573][T27691] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5778'.
[  711.347329][T27702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5781'.
[  711.363490][T27702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5781'.
[  712.663166][T27743] tc action pedit 'at' offset -2147483648 out of bounds
[  713.066400][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807bc76000: rx timeout, send abort
[  713.566512][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880627de000: rx timeout, send abort
[  713.575245][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807bc76000: abort rx timeout. Force session deactivation
[  714.074882][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880627de000: abort rx timeout. Force session deactivation
[  714.177071][T27701] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  714.423886][T27771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5799'.
[  714.436926][T27777] netlink: 'syz.4.5802': attribute type 32 has an invalid length.
[  714.482779][T27781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5803'.
[  714.576078][T27787] netlink: 'syz.1.5799': attribute type 3 has an invalid length.
[  714.613411][T27787] netlink: 'syz.1.5799': attribute type 3 has an invalid length.
[  714.641854][T27789] sctp: [Deprecated]: syz.3.5803 (pid 27789) Use of struct sctp_assoc_value in delayed_ack socket option.
[  714.641854][T27789] Use struct sctp_sack_info instead
[  714.919244][T27802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5806'.
[  715.029828][T27809] netlink: 216 bytes leftover after parsing attributes in process `syz.1.5810'.
[  715.174470][T27812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5811'.
[  715.205294][T27812] netlink: 'syz.1.5811': attribute type 5 has an invalid length.
[  715.225607][T27812] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5811'.
[  715.258465][T27812] geneve2: entered promiscuous mode
[  715.281001][T27812] geneve2: entered allmulticast mode
[  715.314824][T27448] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  715.347080][T27448] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  715.360424][T27821] netlink: 'syz.0.5814': attribute type 33 has an invalid length.
[  715.380940][T27448] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  715.404845][T27448] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  715.530032][T27829] ip6t_srh: unknown srh invflags 4000
[  715.577114][T27821] bond12: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  715.614294][T27831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5818'.
[  715.630238][T27821] bond12 (unregistering): Released all slaves
[  715.697992][T27835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5817'.
[  715.934607][T27847] netlink: 'syz.3.5817': attribute type 21 has an invalid length.
[  715.965854][T27847] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5817'.
[  716.127271][T27846] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  716.157951][T27847] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5817'.
[  716.549890][T27871] block nbd4: not configured, cannot reconfigure
[  716.849206][T27879] No such timeout policy "syz0"
[  716.878093][T27884] bond0: Device is already in use.
[  717.046451][T27890] netlink: 'syz.0.5830': attribute type 4 has an invalid length.
[  717.299752][T27901] gretap0: entered promiscuous mode
[  717.312544][T27901] vlan3: entered promiscuous mode
[  717.325547][T27907] nbd: couldn't find a device at index 1
[  717.552518][T27915] pim6reg1: entered promiscuous mode
[  717.577429][T27915] pim6reg1: entered allmulticast mode
[  717.587963][T27919] netdevsim netdevsim2: Direct firmware load for . failed with error -2
[  717.606719][T27919] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  718.114987][T27951] nbd: couldn't find a device at index 3
[  718.537393][T27971] netlink: 'syz.4.5855': attribute type 1 has an invalid length.
[  718.577417][T27971] netlink: 'syz.4.5855': attribute type 4 has an invalid length.
[  718.792858][T27991] block nbd4: not configured, cannot reconfigure
[  718.842479][T27973] bridge9: entered promiscuous mode
[  718.996351][T27998] bridge0: port 4(vlan4) entered blocking state
[  719.002897][T27998] bridge0: port 4(vlan4) entered forwarding state
[  719.009704][T27998] bridge0: port 2(bridge_slave_1) entered blocking state
[  719.016949][T27998] bridge0: port 2(bridge_slave_1) entered forwarding state
[  719.024514][T27998] bridge0: port 1(bridge_slave_0) entered blocking state
[  719.031841][T27998] bridge0: port 1(bridge_slave_0) entered forwarding state
[  719.202015][T10286] ip6_tunnel: L xmit: Local address not yet configured!
[  719.353920][T27998] 8021q: adding VLAN 0 to HW filter on device bond13
[  719.381939][T18844] ip6_tunnel: L xmit: Local address not yet configured!
[  719.392539][T28019] netlink: 'syz.2.5867': attribute type 23 has an invalid length.
[  719.424203][T15519] syz0: Port: 1 Link ACTIVE
[  719.827937][T28031] ip6tnl0: Caught tx_queue_len zero misconfig
[  719.837955][T28033] nbd: couldn't find a device at index 3
[  720.072234][T28044] netlink: 'syz.3.5876': attribute type 2 has an invalid length.
[  720.310311][T28057] __nla_validate_parse: 11 callbacks suppressed
[  720.310333][T28057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5880'.
[  720.339125][T28057] netlink: 'syz.0.5880': attribute type 9 has an invalid length.
[  720.917441][T28080] bond7: Unable to set peer notification delay as MII monitoring is disabled
[  720.950223][T28080] bond7 (unregistering): Released all slaves
[  731.341733][    C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  735.645464][T20462] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  735.658981][T20462] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  735.670150][T20462] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  735.682750][T20462] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  735.690397][T20462] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  735.823642][T25716] block nbd0: Possible stuck request ffff88804c515080: control (read@0,1024B). Runtime 60 seconds
[  735.834514][T25716] block nbd0: Possible stuck request ffff88804c515240: control (read@1024,1024B). Runtime 60 seconds
[  735.845695][T25716] block nbd0: Possible stuck request ffff88804c515400: control (read@2048,1024B). Runtime 60 seconds
[  735.856770][T25716] block nbd0: Possible stuck request ffff88804c5155c0: control (read@3072,1024B). Runtime 60 seconds
[  736.007563][T28112] vxcan1 speed is unknown, defaulting to 1000
[  736.160716][T28112] lo speed is unknown, defaulting to 1000
[  736.168741][T28112] wlan1 speed is unknown, defaulting to 1000
[  736.563090][T28112] bridge0: port 1(bridge_slave_0) entered blocking state
[  736.583479][T28112] bridge0: port 1(bridge_slave_0) entered disabled state
[  736.597562][T28112] bridge_slave_0: entered allmulticast mode
[  736.606035][T28112] bridge_slave_0: entered promiscuous mode
[  736.618730][T28112] bridge0: port 2(bridge_slave_1) entered blocking state
[  736.633525][T28112] bridge0: port 2(bridge_slave_1) entered disabled state
[  736.651849][T28112] bridge_slave_1: entered allmulticast mode
[  736.667459][T28112] bridge_slave_1: entered promiscuous mode
[  736.848246][T28112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  736.899539][T28112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  737.020585][T28112] team0: Port device team_slave_0 added
[  737.045960][T20462] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  737.060178][T20462] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  737.079474][   T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  737.091449][   T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  737.103662][    C0] ip6_tunnel: L xmit: Local address not yet configured!
[  737.117859][T20462] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  737.132246][T20462] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  737.140478][T20462] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  737.150087][   T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  737.173606][T19720] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  737.192216][T28112] team0: Port device team_slave_1 added
[  737.207607][   T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  737.269994][T20356] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  737.306472][T28143] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  737.315956][T28143] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  737.325144][T28143] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  737.340768][T28141] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  737.351743][T28143] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  737.364121][T28143] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  737.367385][T28141] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  737.382973][T28143] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  737.395834][ T5629] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  737.535170][T28112] batman_adv: batadv0: Adding interface: batadv_slave_0
[  737.551758][T28112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  737.596150][T28112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  737.635454][T28112] batman_adv: batadv0: Adding interface: batadv_slave_1
[  737.661617][T28112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  737.725289][T28112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  737.746236][T28141] Bluetooth: hci2: command tx timeout
[  737.960193][T28112] hsr_slave_0: entered promiscuous mode
[  737.992250][T28112] hsr_slave_1: entered promiscuous mode
[  738.002126][T28112] debugfs: 'hsr0' already exists in 'hsr'
[  738.026789][T28112] Cannot create hsr debugfs directory
[  738.441510][T28133] vxcan1 speed is unknown, defaulting to 1000
[  738.691085][T28134] vxcan1 speed is unknown, defaulting to 1000
[  738.691085][T28133] lo speed is unknown, defaulting to 1000
[  738.705547][T28133] wlan1 speed is unknown, defaulting to 1000
[  738.960540][T28134] lo speed is unknown, defaulting to 1000
[  738.960556][T28136] vxcan1 speed is unknown, defaulting to 1000
[  738.988065][T28134] wlan1 speed is unknown, defaulting to 1000
[  739.262127][T19720] Bluetooth: hci6: command tx timeout
[  739.270443][T28141] Bluetooth: hci7: command tx timeout
[  739.382295][T28136] lo speed is unknown, defaulting to 1000
[  739.393219][T28137] vxcan1 speed is unknown, defaulting to 1000
[  739.410340][T28136] wlan1 speed is unknown, defaulting to 1000
[  739.421295][T28141] Bluetooth: hci8: command tx timeout
[  739.501731][T28141] Bluetooth: hci9: command tx timeout
[  739.659004][T28133] bridge0: port 1(bridge_slave_0) entered blocking state
[  739.684245][T28133] bridge0: port 1(bridge_slave_0) entered disabled state
[  739.704798][T28133] bridge_slave_0: entered allmulticast mode
[  739.716542][T28133] bridge_slave_0: entered promiscuous mode
[  739.737179][T28133] bridge0: port 2(bridge_slave_1) entered blocking state
[  739.755592][T28133] bridge0: port 2(bridge_slave_1) entered disabled state
[  739.771583][T28133] bridge_slave_1: entered allmulticast mode
[  739.779822][T28133] bridge_slave_1: entered promiscuous mode
[  739.809977][T28137] lo speed is unknown, defaulting to 1000
[  739.822737][T28141] Bluetooth: hci2: command tx timeout
[  739.846469][T28137] wlan1 speed is unknown, defaulting to 1000
[  739.856754][T28133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  739.884555][T28133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  740.022307][T28133] team0: Port device team_slave_0 added
[  740.058572][T28133] team0: Port device team_slave_1 added
[  740.195246][T28133] batman_adv: batadv0: Adding interface: batadv_slave_0
[  740.205917][T28133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  740.255691][T28133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  740.288884][T28133] batman_adv: batadv0: Adding interface: batadv_slave_1
[  740.298300][T28133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  740.326582][T28133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  740.487418][T28133] hsr_slave_0: entered promiscuous mode
[  740.494431][T28133] hsr_slave_1: entered promiscuous mode
[  740.500702][T28133] debugfs: 'hsr0' already exists in 'hsr'
[  740.507009][T28133] Cannot create hsr debugfs directory
[  740.547749][T28134] bridge0: port 1(bridge_slave_0) entered blocking state
[  740.555077][T28134] bridge0: port 1(bridge_slave_0) entered disabled state
[  740.564573][T28134] bridge_slave_0: entered allmulticast mode
[  740.573744][T28134] bridge_slave_0: entered promiscuous mode
[  740.605212][T28134] bridge0: port 2(bridge_slave_1) entered blocking state
[  740.613085][T28134] bridge0: port 2(bridge_slave_1) entered disabled state
[  740.620401][T28134] bridge_slave_1: entered allmulticast mode
[  740.629282][T28134] bridge_slave_1: entered promiscuous mode
[  740.717099][T28134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  740.731346][T28134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  740.829842][T28134] team0: Port device team_slave_0 added
[  740.840696][T28134] team0: Port device team_slave_1 added
[  740.925083][T28134] batman_adv: batadv0: Adding interface: batadv_slave_0
[  740.932307][T28134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  740.960482][T28134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  740.999473][T28134] batman_adv: batadv0: Adding interface: batadv_slave_1
[  741.006673][T28134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  741.033985][T28134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  741.253416][T28134] hsr_slave_0: entered promiscuous mode
[  741.260071][T28134] hsr_slave_1: entered promiscuous mode
[  741.267550][T28134] debugfs: 'hsr0' already exists in 'hsr'
[  741.273354][T28134] Cannot create hsr debugfs directory
[  741.305618][T28136] bridge0: port 1(bridge_slave_0) entered blocking state
[  741.313105][T28136] bridge0: port 1(bridge_slave_0) entered disabled state
[  741.320601][T28136] bridge_slave_0: entered allmulticast mode
[  741.329046][T28136] bridge_slave_0: entered promiscuous mode
[  741.344068][T19720] Bluetooth: hci6: command tx timeout
[  741.349668][T28141] Bluetooth: hci7: command tx timeout
[  741.389531][T28136] bridge0: port 2(bridge_slave_1) entered blocking state
[  741.397459][T28136] bridge0: port 2(bridge_slave_1) entered disabled state
[  741.406327][T28136] bridge_slave_1: entered allmulticast mode
[  741.414248][T28136] bridge_slave_1: entered promiscuous mode
[  741.497906][T28136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  741.502605][T28141] Bluetooth: hci8: command tx timeout
[  741.552600][T28136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  741.574832][T28137] bridge0: port 1(bridge_slave_0) entered blocking state
[  741.585474][T28141] Bluetooth: hci9: command tx timeout
[  741.587714][T28137] bridge0: port 1(bridge_slave_0) entered disabled state
[  741.598856][T28137] bridge_slave_0: entered allmulticast mode
[  741.610744][T28137] bridge_slave_0: entered promiscuous mode
[  741.647914][T28137] bridge0: port 2(bridge_slave_1) entered blocking state
[  741.656053][T28137] bridge0: port 2(bridge_slave_1) entered disabled state
[  741.663936][T28137] bridge_slave_1: entered allmulticast mode
[  741.671955][T28137] bridge_slave_1: entered promiscuous mode
[  741.726640][T28136] team0: Port device team_slave_0 added
[  741.755947][T28136] team0: Port device team_slave_1 added
[  741.776435][T28137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  741.808398][T28137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  741.828295][T28136] batman_adv: batadv0: Adding interface: batadv_slave_0
[  741.835540][T28136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  741.863346][T28136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  741.900021][T28136] batman_adv: batadv0: Adding interface: batadv_slave_1
[  741.907485][T28136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  741.907692][T28141] Bluetooth: hci2: command tx timeout
[  741.936315][T28136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  741.994980][T28137] team0: Port device team_slave_0 added
[  742.023027][T28137] team0: Port device team_slave_1 added
[  742.079127][T28136] hsr_slave_0: entered promiscuous mode
[  742.086848][T28136] hsr_slave_1: entered promiscuous mode
[  742.094853][T28136] debugfs: 'hsr0' already exists in 'hsr'
[  742.100621][T28136] Cannot create hsr debugfs directory
[  742.120532][T28137] batman_adv: batadv0: Adding interface: batadv_slave_0
[  742.127852][T28137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  742.155892][T28137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  742.169956][T28137] batman_adv: batadv0: Adding interface: batadv_slave_1
[  742.177170][T28137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  742.204721][T28137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  742.221474][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  742.335798][T28137] hsr_slave_0: entered promiscuous mode
[  742.342573][T28137] hsr_slave_1: entered promiscuous mode
[  742.349456][T28137] debugfs: 'hsr0' already exists in 'hsr'
[  742.355762][T28137] Cannot create hsr debugfs directory
[  743.421902][T19720] Bluetooth: hci6: command tx timeout
[  743.428701][T28141] Bluetooth: hci7: command tx timeout
[  743.585833][T28141] Bluetooth: hci8: command tx timeout
[  743.661384][T28141] Bluetooth: hci9: command tx timeout
[  743.982871][T28141] Bluetooth: hci2: command tx timeout
[  745.501731][T28141] Bluetooth: hci7: command tx timeout
[  745.505451][T19720] Bluetooth: hci6: command tx timeout
[  745.661208][T19720] Bluetooth: hci8: command tx timeout
[  745.742107][T19720] Bluetooth: hci9: command tx timeout
[  745.756304][ T4993] udevd[4993]: worker [20731] /devices/virtual/block/nbd0 is taking a long time
[  765.901549][T25716] block nbd0: Possible stuck request ffff88804c515080: control (read@0,1024B). Runtime 90 seconds
[  765.915095][T25716] block nbd0: Possible stuck request ffff88804c515240: control (read@1024,1024B). Runtime 90 seconds
[  765.927890][T25716] block nbd0: Possible stuck request ffff88804c515400: control (read@2048,1024B). Runtime 90 seconds
[  765.938890][T25716] block nbd0: Possible stuck request ffff88804c5155c0: control (read@3072,1024B). Runtime 90 seconds
[  788.301674][    C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  795.981670][T25716] block nbd0: Possible stuck request ffff88804c515080: control (read@0,1024B). Runtime 120 seconds
[  795.992821][T25716] block nbd0: Possible stuck request ffff88804c515240: control (read@1024,1024B). Runtime 120 seconds
[  796.004157][T25716] block nbd0: Possible stuck request ffff88804c515400: control (read@2048,1024B). Runtime 120 seconds
[  796.015432][T25716] block nbd0: Possible stuck request ffff88804c5155c0: control (read@3072,1024B). Runtime 120 seconds
[  796.203718][T28141] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  796.213916][T28141] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  796.225223][T28141] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  796.236041][T28141] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  796.244358][T28141] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  796.528859][T28212] vxcan1 speed is unknown, defaulting to 1000
[  796.682469][T28212] lo speed is unknown, defaulting to 1000
[  796.689549][T28212] wlan1 speed is unknown, defaulting to 1000
[  797.073881][T28212] bridge0: port 1(bridge_slave_0) entered blocking state
[  797.081347][T28212] bridge0: port 1(bridge_slave_0) entered disabled state
[  797.088786][T28212] bridge_slave_0: entered allmulticast mode
[  797.097553][T28212] bridge_slave_0: entered promiscuous mode
[  797.108867][T28212] bridge0: port 2(bridge_slave_1) entered blocking state
[  797.116246][T28212] bridge0: port 2(bridge_slave_1) entered disabled state
[  797.124157][T28212] bridge_slave_1: entered allmulticast mode
[  797.134162][T28212] bridge_slave_1: entered promiscuous mode
[  797.177928][T28212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  797.192936][T28212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  797.279430][T28212] team0: Port device team_slave_0 added
[  797.304841][T28212] team0: Port device team_slave_1 added
[  797.395535][T28212] batman_adv: batadv0: Adding interface: batadv_slave_0
[  797.413492][T28212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  797.476839][T28212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  797.512405][T28141] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  797.516977][T28212] batman_adv: batadv0: Adding interface: batadv_slave_1
[  797.528967][T28212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  797.566430][T28141] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  797.585737][T28212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  797.597859][T28141] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  797.606306][T28141] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  797.616607][T28141] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  797.711857][T28212] hsr_slave_0: entered promiscuous mode
[  797.737061][T19720] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  797.742198][T28212] hsr_slave_1: entered promiscuous mode
[  797.755012][T28212] debugfs: 'hsr0' already exists in 'hsr'
[  797.759256][T19720] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  797.760793][T28212] Cannot create hsr debugfs directory
[  797.783789][T19720] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  797.803141][T19720] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  797.811339][T19720] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  797.967817][T19720] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  797.987038][T19720] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  797.995565][T19720] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  798.010249][T19720] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  798.018371][T19720] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  798.100554][T19720] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  798.124645][T19720] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  798.136112][T19720] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  798.157206][T19720] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  798.166300][T19720] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  798.302534][T28141] Bluetooth: hci10: command tx timeout
[  798.888648][T28242] vxcan1 speed is unknown, defaulting to 1000
[  799.249169][T28242] lo speed is unknown, defaulting to 1000
[  799.268084][T28233] vxcan1 speed is unknown, defaulting to 1000
[  799.268122][T28242] wlan1 speed is unknown, defaulting to 1000
[  799.522457][T28236] vxcan1 speed is unknown, defaulting to 1000
[  799.529589][T28233] lo speed is unknown, defaulting to 1000
[  799.545092][T28233] wlan1 speed is unknown, defaulting to 1000
[  799.661491][T28141] Bluetooth: hci11: command tx timeout
[  799.911288][T28141] Bluetooth: hci12: command tx timeout
[  799.973921][T28240] vxcan1 speed is unknown, defaulting to 1000
[  799.997427][T28236] lo speed is unknown, defaulting to 1000
[  800.000780][T28242] bridge0: port 1(bridge_slave_0) entered blocking state
[  800.010445][T28242] bridge0: port 1(bridge_slave_0) entered disabled state
[  800.019408][T28242] bridge_slave_0: entered allmulticast mode
[  800.027928][T28242] bridge_slave_0: entered promiscuous mode
[  800.036848][T28236] wlan1 speed is unknown, defaulting to 1000
[  800.039701][T28242] bridge0: port 2(bridge_slave_1) entered blocking state
[  800.051729][T28242] bridge0: port 2(bridge_slave_1) entered disabled state
[  800.059132][T28242] bridge_slave_1: entered allmulticast mode
[  800.067407][T28242] bridge_slave_1: entered promiscuous mode
[  800.115825][T28242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  800.135576][T28242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  800.151224][T28141] Bluetooth: hci13: command tx timeout
[  800.232721][T28141] Bluetooth: hci14: command tx timeout
[  800.251209][T28242] team0: Port device team_slave_0 added
[  800.278748][T28242] team0: Port device team_slave_1 added
[  800.381436][T28141] Bluetooth: hci10: command tx timeout
[  800.417423][T28242] batman_adv: batadv0: Adding interface: batadv_slave_0
[  800.438315][T28242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  800.492161][T28242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  800.534042][T28242] batman_adv: batadv0: Adding interface: batadv_slave_1
[  800.543402][T28242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  800.571203][T28242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  800.585639][T28240] lo speed is unknown, defaulting to 1000
[  800.602143][T28240] wlan1 speed is unknown, defaulting to 1000
[  800.752517][T28242] hsr_slave_0: entered promiscuous mode
[  800.759539][T28242] hsr_slave_1: entered promiscuous mode
[  800.767662][T28242] debugfs: 'hsr0' already exists in 'hsr'
[  800.773745][T28242] Cannot create hsr debugfs directory
[  801.259504][T28233] bridge0: port 1(bridge_slave_0) entered blocking state
[  801.267297][T28233] bridge0: port 1(bridge_slave_0) entered disabled state
[  801.276166][T28233] bridge_slave_0: entered allmulticast mode
[  801.286202][T28233] bridge_slave_0: entered promiscuous mode
[  801.296039][T28233] bridge0: port 2(bridge_slave_1) entered blocking state
[  801.303669][T28233] bridge0: port 2(bridge_slave_1) entered disabled state
[  801.312847][T28233] bridge_slave_1: entered allmulticast mode
[  801.321396][T28233] bridge_slave_1: entered promiscuous mode
[  801.359287][T28233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  801.374627][T28233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  801.514534][T28233] team0: Port device team_slave_0 added
[  801.556509][T28233] team0: Port device team_slave_1 added
[  801.683418][T28233] batman_adv: batadv0: Adding interface: batadv_slave_0
[  801.690438][T28233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  801.719056][T28233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  801.733632][T28233] batman_adv: batadv0: Adding interface: batadv_slave_1
[  801.740794][T28233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  801.743027][T28141] Bluetooth: hci11: command tx timeout
[  801.778765][T28233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  801.810537][T28236] bridge0: port 1(bridge_slave_0) entered blocking state
[  801.818233][T28236] bridge0: port 1(bridge_slave_0) entered disabled state
[  801.829526][T28236] bridge_slave_0: entered allmulticast mode
[  801.838809][T28236] bridge_slave_0: entered promiscuous mode
[  801.859657][T28236] bridge0: port 2(bridge_slave_1) entered blocking state
[  801.868218][T28236] bridge0: port 2(bridge_slave_1) entered disabled state
[  801.875926][T28236] bridge_slave_1: entered allmulticast mode
[  801.883829][T28236] bridge_slave_1: entered promiscuous mode
[  801.939998][T28236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  801.982781][T28141] Bluetooth: hci12: command tx timeout
[  802.000805][T28236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  802.040238][T28233] hsr_slave_0: entered promiscuous mode
[  802.048281][T28233] hsr_slave_1: entered promiscuous mode
[  802.055054][T28233] debugfs: 'hsr0' already exists in 'hsr'
[  802.061806][T28233] Cannot create hsr debugfs directory
[  802.108660][T28236] team0: Port device team_slave_0 added
[  802.146576][T28236] team0: Port device team_slave_1 added
[  802.222583][T28141] Bluetooth: hci13: command tx timeout
[  802.247196][T28240] bridge0: port 1(bridge_slave_0) entered blocking state
[  802.254905][T28240] bridge0: port 1(bridge_slave_0) entered disabled state
[  802.263158][T28240] bridge_slave_0: entered allmulticast mode
[  802.270737][T28240] bridge_slave_0: entered promiscuous mode
[  802.301288][T28141] Bluetooth: hci14: command tx timeout
[  802.315492][T28236] batman_adv: batadv0: Adding interface: batadv_slave_0
[  802.323170][T28236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  802.349615][T28236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  802.375917][T28240] bridge0: port 2(bridge_slave_1) entered blocking state
[  802.386642][T28240] bridge0: port 2(bridge_slave_1) entered disabled state
[  802.394622][T28240] bridge_slave_1: entered allmulticast mode
[  802.405427][T28240] bridge_slave_1: entered promiscuous mode
[  802.427942][T28236] batman_adv: batadv0: Adding interface: batadv_slave_1
[  802.436249][T28236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  802.463906][T28141] Bluetooth: hci10: command tx timeout
[  802.471585][T28236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  802.527572][T28240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  802.540992][T28240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  802.627522][T28240] team0: Port device team_slave_0 added
[  802.638279][T28240] team0: Port device team_slave_1 added
[  802.704697][T28236] hsr_slave_0: entered promiscuous mode
[  802.711915][T28236] hsr_slave_1: entered promiscuous mode
[  802.718758][T28236] debugfs: 'hsr0' already exists in 'hsr'
[  802.724806][T28236] Cannot create hsr debugfs directory
[  802.770031][T28240] batman_adv: batadv0: Adding interface: batadv_slave_0
[  802.777565][T28240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  802.804825][T28240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  802.838100][T28240] batman_adv: batadv0: Adding interface: batadv_slave_1
[  802.845920][T28240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  802.874072][T28240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  802.976656][T28240] hsr_slave_0: entered promiscuous mode
[  802.984280][T28240] hsr_slave_1: entered promiscuous mode
[  802.990631][T28240] debugfs: 'hsr0' already exists in 'hsr'
[  802.996912][T28240] Cannot create hsr debugfs directory
[  803.821517][T28141] Bluetooth: hci11: command tx timeout
[  804.062257][T28141] Bluetooth: hci12: command tx timeout
[  804.301473][T28141] Bluetooth: hci13: command tx timeout
[  804.381274][T28141] Bluetooth: hci14: command tx timeout
[  804.541478][T28141] Bluetooth: hci10: command tx timeout
[  805.901447][T28141] Bluetooth: hci11: command tx timeout
[  806.141586][T28141] Bluetooth: hci12: command tx timeout
[  806.382993][T28141] Bluetooth: hci13: command tx timeout
[  806.471213][T28141] Bluetooth: hci14: command tx timeout
[  826.063314][T25716] block nbd0: Possible stuck request ffff88804c515080: control (read@0,1024B). Runtime 150 seconds
[  826.074171][T25716] block nbd0: Possible stuck request ffff88804c515240: control (read@1024,1024B). Runtime 150 seconds
[  826.085942][T25716] block nbd0: Possible stuck request ffff88804c515400: control (read@2048,1024B). Runtime 150 seconds
[  826.097271][T25716] block nbd0: Possible stuck request ffff88804c5155c0: control (read@3072,1024B). Runtime 150 seconds
[  846.701120][T19720] Bluetooth: hci4: command 0x0405 tx timeout
[  855.722676][ T4993] udevd[4993]: worker [20731] /devices/virtual/block/nbd0 timeout; kill it
[  855.731633][ T4993] udevd[4993]: seq 31868 '/devices/virtual/block/nbd0' killed
[  856.145717][T25716] block nbd0: Possible stuck request ffff88804c515080: control (read@0,1024B). Runtime 180 seconds
[  856.156669][T25716] block nbd0: Possible stuck request ffff88804c515240: control (read@1024,1024B). Runtime 180 seconds
[  856.168660][T25716] block nbd0: Possible stuck request ffff88804c515400: control (read@2048,1024B). Runtime 180 seconds
[  856.179838][T25716] block nbd0: Possible stuck request ffff88804c5155c0: control (read@3072,1024B). Runtime 180 seconds
[  856.304534][T19720] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  856.314927][T19720] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  856.324269][T19720] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  856.337123][T19720] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  856.347945][T19720] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  856.630279][T28310] vxcan1 speed is unknown, defaulting to 1000
[  856.788467][T28310] lo speed is unknown, defaulting to 1000
[  856.796368][T28310] wlan1 speed is unknown, defaulting to 1000
[  857.193518][T28310] bridge0: port 1(bridge_slave_0) entered blocking state
[  857.200883][T28310] bridge0: port 1(bridge_slave_0) entered disabled state
[  857.208633][T28310] bridge_slave_0: entered allmulticast mode
[  857.217269][T28310] bridge_slave_0: entered promiscuous mode
[  857.228856][T28310] bridge0: port 2(bridge_slave_1) entered blocking state
[  857.236459][T28310] bridge0: port 2(bridge_slave_1) entered disabled state
[  857.244836][T28310] bridge_slave_1: entered allmulticast mode
[  857.253602][T28310] bridge_slave_1: entered promiscuous mode
[  857.298353][T28310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  857.313337][T28310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  857.361235][T28310] team0: Port device team_slave_0 added
[  857.371646][T28310] team0: Port device team_slave_1 added
[  857.416952][T28310] batman_adv: batadv0: Adding interface: batadv_slave_0
[  857.424822][T28310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  857.452429][T28310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  857.465848][T28310] batman_adv: batadv0: Adding interface: batadv_slave_1
[  857.473417][T28310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  857.504825][T28310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  857.533793][T28141] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  857.551864][T28141] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  857.560316][T28141] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  857.571685][T28141] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  857.580426][T28141] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  857.639458][T28310] hsr_slave_0: entered promiscuous mode
[  857.646970][T28310] hsr_slave_1: entered promiscuous mode
[  857.654828][T28310] debugfs: 'hsr0' already exists in 'hsr'
[  857.660646][T28310] Cannot create hsr debugfs directory
[  858.030153][T28328] vxcan1 speed is unknown, defaulting to 1000
[  858.250641][T28328] lo speed is unknown, defaulting to 1000
[  858.258473][T28328] wlan1 speed is unknown, defaulting to 1000
[  858.382418][T28141] Bluetooth: hci15: command tx timeout
[  858.612936][T28143] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  858.634697][ T5629] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  858.656519][T28143] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  858.658485][ T5629] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  858.675779][ T5629] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  858.687560][T28143] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  858.697122][T28143] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  858.709656][ T5629] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  858.719526][T28143] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  858.734218][T28141] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  858.858237][T28143] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1
[  858.879040][T28143] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9
[  858.893420][T28143] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9
[  858.907551][T28143] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4
[  858.918233][T28143] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2
[  859.652837][T28328] bridge0: port 1(bridge_slave_0) entered blocking state
[  859.660577][T28328] bridge0: port 1(bridge_slave_0) entered disabled state
[  859.669351][T28328] bridge_slave_0: entered allmulticast mode
[  859.675359][T19720] Bluetooth: hci16: command tx timeout
[  859.684921][T28328] bridge_slave_0: entered promiscuous mode
[  859.704900][T28328] bridge0: port 2(bridge_slave_1) entered blocking state
[  859.712334][T28328] bridge0: port 2(bridge_slave_1) entered disabled state
[  859.719670][T28328] bridge_slave_1: entered allmulticast mode
[  859.727796][T28328] bridge_slave_1: entered promiscuous mode
[  859.743513][T28342] vxcan1 speed is unknown, defaulting to 1000
[  859.794904][T28328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  859.808642][T28328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  859.867250][T28328] team0: Port device team_slave_0 added
[  859.876714][T28328] team0: Port device team_slave_1 added
[  859.924855][T28328] batman_adv: batadv0: Adding interface: batadv_slave_0
[  859.933328][T28328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  859.960287][T28328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  859.974126][T28328] batman_adv: batadv0: Adding interface: batadv_slave_1
[  860.002355][T28328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  860.029390][T28328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  860.100238][T28328] hsr_slave_0: entered promiscuous mode
[  860.107809][T28328] hsr_slave_1: entered promiscuous mode
[  860.115091][T28328] debugfs: 'hsr0' already exists in 'hsr'
[  860.122792][T28328] Cannot create hsr debugfs directory
[  860.150429][T28342] lo speed is unknown, defaulting to 1000
[  860.151011][T28341] vxcan1 speed is unknown, defaulting to 1000
[  860.178917][T28342] wlan1 speed is unknown, defaulting to 1000
[  860.461388][T20462] Bluetooth: hci15: command tx timeout
[  860.521589][T28341] lo speed is unknown, defaulting to 1000
[  860.527449][T28347] vxcan1 speed is unknown, defaulting to 1000
[  860.545961][T28341] wlan1 speed is unknown, defaulting to 1000
[  860.783588][T20462] Bluetooth: hci17: command tx timeout
[  860.861928][T20462] Bluetooth: hci18: command tx timeout
[  861.021317][T20462] Bluetooth: hci19: command tx timeout
[  861.047099][T28347] lo speed is unknown, defaulting to 1000
[  861.083101][T28347] wlan1 speed is unknown, defaulting to 1000
[  861.332394][T28342] bridge0: port 1(bridge_slave_0) entered blocking state
[  861.339851][T28342] bridge0: port 1(bridge_slave_0) entered disabled state
[  861.349369][T28342] bridge_slave_0: entered allmulticast mode
[  861.362041][T28342] bridge_slave_0: entered promiscuous mode
[  861.387013][T28342] bridge0: port 2(bridge_slave_1) entered blocking state
[  861.397597][T28342] bridge0: port 2(bridge_slave_1) entered disabled state
[  861.405624][T28342] bridge_slave_1: entered allmulticast mode
[  861.416824][T28342] bridge_slave_1: entered promiscuous mode
[  861.505817][T28342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  861.549717][T28342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  861.640309][T28342] team0: Port device team_slave_0 added
[  861.650556][T28342] team0: Port device team_slave_1 added
[  861.706918][T28342] batman_adv: batadv0: Adding interface: batadv_slave_0
[  861.715219][T28342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  861.743960][T28342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  861.757572][T20462] Bluetooth: hci16: command tx timeout
[  861.767113][T28342] batman_adv: batadv0: Adding interface: batadv_slave_1
[  861.774528][T28342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  861.801871][T28342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  861.955185][T28342] hsr_slave_0: entered promiscuous mode
[  861.962275][T28342] hsr_slave_1: entered promiscuous mode
[  861.968833][T28342] debugfs: 'hsr0' already exists in 'hsr'
[  861.974866][T28342] Cannot create hsr debugfs directory
[  862.001028][T28341] bridge0: port 1(bridge_slave_0) entered blocking state
[  862.008262][T28341] bridge0: port 1(bridge_slave_0) entered disabled state
[  862.015905][T28341] bridge_slave_0: entered allmulticast mode
[  862.024090][T28341] bridge_slave_0: entered promiscuous mode
[  862.033508][T28341] bridge0: port 2(bridge_slave_1) entered blocking state
[  862.040635][T28341] bridge0: port 2(bridge_slave_1) entered disabled state
[  862.048529][T28341] bridge_slave_1: entered allmulticast mode
[  862.056547][T28341] bridge_slave_1: entered promiscuous mode
[  862.080605][T20462] Bluetooth: hci9: command 0x0406 tx timeout
[  862.089988][   T50] Bluetooth: hci2: command 0x0406 tx timeout
[  862.097479][   T50] Bluetooth: hci6: command 0x0406 tx timeout
[  862.104061][T28393] Bluetooth: hci8: command 0x0406 tx timeout
[  862.110496][T28393] Bluetooth: hci7: command 0x0406 tx timeout
[  862.332671][T28341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  862.362429][T28341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  862.457562][T28341] team0: Port device team_slave_0 added
[  862.467931][T28341] team0: Port device team_slave_1 added
[  862.541479][T20356] Bluetooth: hci15: command tx timeout
[  862.573227][T28341] batman_adv: batadv0: Adding interface: batadv_slave_0
[  862.580201][T28341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  862.606532][T28341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  862.636214][T28341] batman_adv: batadv0: Adding interface: batadv_slave_1
[  862.643505][T28341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  862.670158][T28341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  862.727855][T28347] bridge0: port 1(bridge_slave_0) entered blocking state
[  862.736434][T28347] bridge0: port 1(bridge_slave_0) entered disabled state
[  862.745537][T28347] bridge_slave_0: entered allmulticast mode
[  862.754522][T28347] bridge_slave_0: entered promiscuous mode
[  862.763435][T28347] bridge0: port 2(bridge_slave_1) entered blocking state
[  862.770587][T28347] bridge0: port 2(bridge_slave_1) entered disabled state
[  862.778876][T28347] bridge_slave_1: entered allmulticast mode
[  862.788206][T28347] bridge_slave_1: entered promiscuous mode
[  862.857496][T28347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  862.866901][T20356] Bluetooth: hci17: command tx timeout
[  862.877282][T28347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  862.919423][T28341] hsr_slave_0: entered promiscuous mode
[  862.926370][T28341] hsr_slave_1: entered promiscuous mode
[  862.933236][T28341] debugfs: 'hsr0' already exists in 'hsr'
[  862.939139][T28341] Cannot create hsr debugfs directory
[  862.944832][T20356] Bluetooth: hci18: command tx timeout
[  862.967569][T28347] team0: Port device team_slave_0 added
[  862.999069][T28347] team0: Port device team_slave_1 added
[  863.054604][T28347] batman_adv: batadv0: Adding interface: batadv_slave_0
[  863.063269][T28347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  863.092680][T28347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  863.103310][T20356] Bluetooth: hci19: command tx timeout
[  863.128777][T28347] batman_adv: batadv0: Adding interface: batadv_slave_1
[  863.136168][T28347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  863.163289][T28347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  863.276298][T28347] hsr_slave_0: entered promiscuous mode
[  863.285601][T28347] hsr_slave_1: entered promiscuous mode
[  863.293519][T28347] debugfs: 'hsr0' already exists in 'hsr'
[  863.299372][T28347] Cannot create hsr debugfs directory
[  863.823557][T20356] Bluetooth: hci16: command tx timeout
[  864.621567][T20356] Bluetooth: hci15: command tx timeout
[  864.941581][T20356] Bluetooth: hci17: command tx timeout
[  865.021447][T20356] Bluetooth: hci18: command tx timeout
[  865.181262][T20356] Bluetooth: hci19: command tx timeout
[  865.901264][T20356] Bluetooth: hci16: command tx timeout
[  867.021359][T20356] Bluetooth: hci17: command tx timeout
[  867.101146][T20356] Bluetooth: hci18: command tx timeout
[  867.261167][T20356] Bluetooth: hci19: command tx timeout
[  870.221740][    C0] ip6_tunnel: L xmit: Local address not yet configured!
[  877.902088][   T31] INFO: task syz.4.5882:28060 blocked for more than 143 seconds.
[  877.910153][   T31]       Not tainted syzkaller #0
[  877.915254][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  877.924129][   T31] task:syz.4.5882      state:D stack:25512 pid:28060 tgid:28058 ppid:17404  task_flags:0x400140 flags:0x00080002
[  877.937378][   T31] Call Trace:
[  877.940728][   T31]  <TASK>
[  877.944307][   T31]  __schedule+0x17d9/0x56c0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  877.948886][   T31]  ? __lock_acquire+0x683/0x2cf0
[  877.955375][   T31]  ? __lock_acquire+0x683/0x2cf0
[  877.961666][   T31]  ? __pfx___schedule+0x10/0x10
[  877.966606][   T31]  ? schedule+0x90/0x2b0
[  877.971396][   T31]  schedule+0x164/0x2b0
[  877.975618][   T31]  schedule_preempt_disabled+0x13/0x30
[  877.986115][   T31]  __mutex_lock+0x7bf/0x1550
[  877.991778][   T31]  ? __mutex_lock+0x5d4/0x1550
[  877.996629][   T31]  ? genl_rcv_msg+0x10b/0x7a0
[  878.002348][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  878.037599][   T31]  ? __dev_queue_xmit+0x29b/0x3820
[  878.072162][   T31]  ? radix_tree_lookup+0x240/0x290
[  878.085975][   T31]  genl_rcv_msg+0x10b/0x7a0
[  878.091747][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  878.096865][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  878.104676][   T31]  netlink_rcv_skb+0x226/0x4a0
[  878.109526][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  878.114661][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  878.119996][   T31]  ? down_read+0x2be/0x330
[  878.124689][   T31]  genl_rcv+0x28/0x40
[  878.128767][   T31]  netlink_unicast+0x7bb/0x940
[  878.135457][   T31]  netlink_sendmsg+0x813/0xb40
[  878.140343][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  878.145974][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  878.151058][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  878.156386][   T31]  sock_sendmsg_nosec+0x13a/0x180
[  878.162705][   T31]  __sys_sendto+0x408/0x5a0
[  878.167255][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  878.173221][   T31]  ? rcu_is_watching+0x15/0xb0
[  878.178070][   T31]  __x64_sys_sendto+0xde/0x100
[  878.183088][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  878.189231][   T31]  do_syscall_64+0x174/0x580
[  878.195256][   T31]  ? trace_irq_disable+0x3b/0x140
[  878.200358][   T31]  ? clear_bhb_loop+0x40/0x90
[  878.205279][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  878.211434][   T31] RIP: 0033:0x7f62c815e6ce
[  878.215921][   T31] RSP: 002b:00007f62c907de88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  878.226518][   T31] RAX: ffffffffffffffda RBX: 00007f62c907f6c0 RCX: 00007f62c815e6ce
[  878.234834][   T31] RDX: 000000000000001c RSI: 00007f62c907e000 RDI: 0000000000000047
[  878.243192][   T31] RBP: 0000000000000000 R08: 00007f62c907df04 R09: 000000000000000c
[  878.252587][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000047
[  878.260631][   T31] R13: 00007f62c907df58 R14: 00007f62c907e000 R15: 0000000000000000
[  878.268901][   T31]  </TASK>
[  878.272081][   T31] INFO: task syz.0.5886:28077 blocked for more than 143 seconds.
[  878.279824][   T31]       Not tainted syzkaller #0
[  878.286084][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  878.294895][   T31] task:syz.0.5886      state:D stack:26376 pid:28077 tgid:28074 ppid:16619  task_flags:0x480140 flags:0x00080002
[  878.307395][   T31] Call Trace:
[  878.310744][   T31]  <TASK>
[  878.314346][   T31]  __schedule+0x17d9/0x56c0
[  878.318930][   T31]  ? __lock_acquire+0x683/0x2cf0
[  878.324575][   T31]  ? __pfx___schedule+0x10/0x10
[  878.329765][   T31]  ? schedule+0x90/0x2b0
[  878.334383][   T31]  schedule+0x164/0x2b0
[  878.338690][   T31]  blk_mq_freeze_queue_wait+0x101/0x180
[  878.345445][   T31]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[  878.351872][   T31]  ? queue_limits_commit_update_frozen+0x55/0xd0
[  878.358274][   T31]  ? __pfx_autoremove_wake_function+0x10/0x10
[  878.364586][   T31]  queue_limits_commit_update_frozen+0x55/0xd0
[  878.372127][   T31]  nbd_set_size+0x454/0x680
[  878.376688][   T31]  ? __pfx_nbd_set_size+0x10/0x10
[  878.382354][   T31]  ? nla_memcpy+0x5b/0xc0
[  878.386826][   T31]  nbd_genl_reconfigure+0x7e9/0x1e80
[  878.392326][   T31]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  878.398099][   T31]  ? rcu_is_watching+0x15/0xb0
[  878.404105][   T31]  ? trace_kmalloc+0x2a/0xf0
[  878.408749][   T31]  ? __kmalloc_noprof+0x396/0x720
[  878.413990][   T31]  ? __nla_parse+0x40/0x60
[  878.418483][   T31]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  878.425083][   T31]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  878.432425][   T31]  genl_family_rcv_msg_doit+0x233/0x340
[  878.438174][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  878.444513][   T31]  ? __lock_acquire+0x683/0x2cf0
[  878.449545][   T31]  genl_rcv_msg+0x614/0x7a0
[  878.454161][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  878.459234][   T31]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  878.466495][   T31]  netlink_rcv_skb+0x226/0x4a0
[  878.472267][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  878.477484][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  878.483843][   T31]  ? down_read+0x2be/0x330
[  878.488362][   T31]  genl_rcv+0x28/0x40
[  878.492552][   T31]  netlink_unicast+0x7bb/0x940
[  878.497360][   T31]  netlink_sendmsg+0x813/0xb40
[  878.502569][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  878.507945][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  878.513022][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  878.518341][   T31]  sock_sendmsg_nosec+0x13a/0x180
[  878.524983][   T31]  ____sys_sendmsg+0x54e/0x850
[  878.529923][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  878.535340][   T31]  ? import_iovec+0x73/0xa0
[  878.539892][   T31]  ___sys_sendmsg+0x2a5/0x360
[  878.545475][   T31]  ? __lock_acquire+0x683/0x2cf0
[  878.550492][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  878.557398][   T31]  ? futex_wait+0x2a2/0x390
[  878.562219][   T31]  ? __fget_files+0x2a/0x420
[  878.566872][   T31]  ? __fget_files+0x3a2/0x420
[  878.571961][   T31]  __x64_sys_sendmsg+0x1b1/0x290
[  878.577015][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  878.583953][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  878.590114][   T31]  do_syscall_64+0x174/0x580
[  878.595029][   T31]  ? trace_irq_disable+0x3b/0x140
[  878.600127][   T31]  ? clear_bhb_loop+0x40/0x90
[  878.605073][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  878.611506][   T31] RIP: 0033:0x7f36a559de99
[  878.615975][   T31] RSP: 002b:00007f36a6529028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  878.625738][   T31] RAX: ffffffffffffffda RBX: 00007f36a5825fa0 RCX: 00007f36a559de99
[  878.634383][   T31] RDX: 0000000024000000 RSI: 0000200000000340 RDI: 0000000000000004
[  878.642441][   T31] RBP: 00007f36a5633eaf R08: 0000000000000000 R09: 0000000000000000
[  878.650694][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  878.658920][   T31] R13: 00007f36a5826038 R14: 00007f36a5825fa0 R15: 00007ffe93feb898
[  878.667436][   T31]  </TASK>
[  878.670585][   T31] INFO: task syz.0.5886:28081 blocked for more than 144 seconds.
[  878.682016][   T31]       Not tainted syzkaller #0
[  878.687033][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  878.696507][   T31] task:syz.0.5886      state:D stack:28808 pid:28081 tgid:28074 ppid:16619  task_flags:0x400040 flags:0x00080002
[  878.709083][   T31] Call Trace:
[  878.712505][   T31]  <TASK>
[  878.715478][   T31]  __schedule+0x17d9/0x56c0
[  878.720029][   T31]  ? __lock_acquire+0x683/0x2cf0
[  878.725259][   T31]  ? __lock_acquire+0x683/0x2cf0
[  878.730315][   T31]  ? unwind_next_frame+0x8f/0x2550
[  878.735917][   T31]  ? __pfx___schedule+0x10/0x10
[  878.741230][   T31]  ? schedule+0x90/0x2b0
[  878.745717][   T31]  schedule+0x164/0x2b0
[  878.749892][   T31]  schedule_preempt_disabled+0x13/0x30
[  878.755491][   T31]  __mutex_lock+0x7bf/0x1550
[  878.760125][   T31]  ? __mutex_lock+0x5d4/0x1550
[  878.765062][   T31]  ? genl_rcv_msg+0x10b/0x7a0
[  878.769803][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  878.774962][   T31]  ? stack_trace_save+0xa9/0x100
[  878.779950][   T31]  ? __lock_acquire+0x683/0x2cf0
[  878.785559][   T31]  ? radix_tree_lookup+0x240/0x290
[  878.790755][   T31]  genl_rcv_msg+0x10b/0x7a0
[  878.795862][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  878.801199][   T31]  ? __lock_acquire+0x683/0x2cf0
[  878.806320][   T31]  netlink_rcv_skb+0x226/0x4a0
[  878.811503][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  878.816938][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  878.822748][   T31]  ? down_read+0x2be/0x330
[  878.828709][   T31]  genl_rcv+0x28/0x40
[  878.833081][   T31]  netlink_unicast+0x7bb/0x940
[  878.837923][   T31]  netlink_sendmsg+0x813/0xb40
[  878.842944][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  878.848601][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  878.855354][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  878.861352][   T31]  sock_sendmsg_nosec+0x13a/0x180
[  878.866448][   T31]  __sys_sendto+0x408/0x5a0
[  878.871467][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  878.876596][   T31]  ? do_user_addr_fault+0xc4a/0x1340
[  878.883198][   T31]  __x64_sys_sendto+0xde/0x100
[  878.888056][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  878.894542][   T31]  do_syscall_64+0x174/0x580
[  878.899197][   T31]  ? trace_irq_disable+0x3b/0x140
[  878.904528][   T31]  ? clear_bhb_loop+0x40/0x90
[  878.909262][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  878.916520][   T31] RIP: 0033:0x7f36a555e6ce
[  878.921315][   T31] RSP: 002b:00007f36a6506e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  878.929800][   T31] RAX: ffffffffffffffda RBX: 00007f36a65086c0 RCX: 00007f36a555e6ce
[  878.938520][   T31] RDX: 000000000000001c RSI: 00007f36a6507000 RDI: 0000000000000004
[  878.948002][   T31] RBP: 0000000000000000 R08: 00007f36a6506f04 R09: 000000000000000c
[  878.956566][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  878.964733][   T31] R13: 00007f36a6506f58 R14: 00007f36a6507000 R15: 0000000000000000
[  878.974214][   T31]  </TASK>
[  878.977306][   T31] INFO: task syz.0.5886:28083 blocked for more than 144 seconds.
[  878.990045][   T31]       Not tainted syzkaller #0
[  878.995209][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  879.004898][   T31] task:syz.0.5886      state:D stack:27872 pid:28083 tgid:28074 ppid:16619  task_flags:0x400140 flags:0x00080002
[  879.017091][   T31] Call Trace:
[  879.020423][   T31]  <TASK>
[  879.024318][   T31]  __schedule+0x17d9/0x56c0
[  879.028908][   T31]  ? __lock_acquire+0x683/0x2cf0
[  879.035071][   T31]  ? __lock_acquire+0x683/0x2cf0
[  879.040090][   T31]  ? __pfx___schedule+0x10/0x10
[  879.045828][   T31]  ? schedule+0x90/0x2b0
[  879.050152][   T31]  schedule+0x164/0x2b0
[  879.055021][   T31]  schedule_preempt_disabled+0x13/0x30
[  879.060550][   T31]  __mutex_lock+0x7bf/0x1550
[  879.066216][   T31]  ? __mutex_lock+0x5d4/0x1550
[  879.071587][   T31]  ? genl_rcv_msg+0x10b/0x7a0
[  879.076419][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  879.081787][   T31]  ? __dev_queue_xmit+0x29b/0x3820
[  879.086990][   T31]  ? radix_tree_lookup+0x240/0x290
[  879.093600][   T31]  genl_rcv_msg+0x10b/0x7a0
[  879.098213][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  879.103587][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  879.109051][   T31]  netlink_rcv_skb+0x226/0x4a0
[  879.114098][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  879.119213][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  879.125713][   T31]  ? down_read+0x2be/0x330
[  879.130200][   T31]  genl_rcv+0x28/0x40
[  879.134448][   T31]  netlink_unicast+0x7bb/0x940
[  879.139273][   T31]  netlink_sendmsg+0x813/0xb40
[  879.144289][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  879.149653][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  879.156094][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  879.162195][   T31]  sock_sendmsg_nosec+0x13a/0x180
[  879.167308][   T31]  __sys_sendto+0x408/0x5a0
[  879.172422][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  879.177508][   T31]  ? errseq_sample+0x40/0x70
[  879.184018][   T31]  ? fd_install+0x94/0x3d0
[  879.188510][   T31]  ? fd_install+0x306/0x3d0
[  879.193279][   T31]  __x64_sys_sendto+0xde/0x100
[  879.198124][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  879.204434][   T31]  do_syscall_64+0x174/0x580
[  879.209066][   T31]  ? trace_irq_disable+0x3b/0x140
[  879.215537][   T31]  ? clear_bhb_loop+0x40/0x90
[  879.220288][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  879.226315][   T31] RIP: 0033:0x7f36a555e6ce
[  879.230763][   T31] RSP: 002b:00007f36a64e5e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  879.239514][   T31] RAX: ffffffffffffffda RBX: 00007f36a64e76c0 RCX: 00007f36a555e6ce
[  879.248590][   T31] RDX: 0000000000000020 RSI: 00007f36a64e6000 RDI: 000000000000000e
[  879.256886][   T31] RBP: 0000000000000000 R08: 00007f36a64e5f04 R09: 000000000000000c
[  879.265147][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e
[  879.274651][   T31] R13: 00007f36a64e5f58 R14: 00007f36a64e6000 R15: 0000000000000000
[  879.282808][   T31]  </TASK>
[  879.285888][   T31] INFO: task syz.2.5888:28085 blocked for more than 144 seconds.
[  879.293975][   T31]       Not tainted syzkaller #0
[  879.298968][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  879.308683][   T31] task:syz.2.5888      state:D stack:28424 pid:28085 tgid:28084 ppid:18167  task_flags:0x400140 flags:0x00080002
[  879.321017][   T31] Call Trace:
[  879.324370][   T31]  <TASK>
[  879.327351][   T31]  __schedule+0x17d9/0x56c0
[  879.333221][   T31]  ? __lock_acquire+0x683/0x2cf0
[  879.338230][   T31]  ? __lock_acquire+0x683/0x2cf0
[  879.343486][   T31]  ? unwind_next_frame+0x8f/0x2550
[  879.348715][   T31]  ? __pfx___schedule+0x10/0x10
[  879.353689][   T31]  ? schedule+0x90/0x2b0
[  879.357984][   T31]  schedule+0x164/0x2b0
[  879.363826][   T31]  schedule_preempt_disabled+0x13/0x30
[  879.369375][   T31]  __mutex_lock+0x7bf/0x1550
[  879.374101][   T31]  ? __mutex_lock+0x5d4/0x1550
[  879.378907][   T31]  ? genl_rcv_msg+0x10b/0x7a0
[  879.383877][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  879.388995][   T31]  ? stack_trace_save+0xa9/0x100
[  879.395095][   T31]  ? __lock_acquire+0x683/0x2cf0
[  879.400067][   T31]  ? radix_tree_lookup+0x240/0x290
[  879.405476][   T31]  genl_rcv_msg+0x10b/0x7a0
[  879.410064][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  879.415218][   T31]  ? __lock_acquire+0x683/0x2cf0
[  879.420220][   T31]  netlink_rcv_skb+0x226/0x4a0
[  879.426355][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  879.431523][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  879.436865][   T31]  ? down_read+0x2be/0x330
[  879.441523][   T31]  genl_rcv+0x28/0x40
[  879.445590][   T31]  netlink_unicast+0x7bb/0x940
[  879.450439][   T31]  netlink_sendmsg+0x813/0xb40
[  879.456400][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  879.461915][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  879.467021][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  879.472560][   T31]  sock_sendmsg_nosec+0x13a/0x180
[  879.477683][   T31]  __sys_sendto+0x408/0x5a0
[  879.483365][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  879.488473][   T31]  ? rcu_is_watching+0x15/0xb0
[  879.493425][   T31]  __x64_sys_sendto+0xde/0x100
[  879.498264][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  879.504801][   T31]  do_syscall_64+0x174/0x580
[  879.509463][   T31]  ? trace_irq_disable+0x3b/0x140
[  879.515910][   T31]  ? clear_bhb_loop+0x40/0x90
[  879.520987][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  879.526958][   T31] RIP: 0033:0x7f56d815e6ce
[  879.531502][   T31] RSP: 002b:00007f56d910ae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  879.539984][   T31] RAX: ffffffffffffffda RBX: 00007f56d910c6c0 RCX: 00007f56d815e6ce
[  879.549155][   T31] RDX: 0000000000000024 RSI: 00007f56d910b000 RDI: 0000000000000006
[  879.557282][   T31] RBP: 0000000000000000 R08: 00007f56d910af04 R09: 000000000000000c
[  879.565680][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  879.574843][   T31] R13: 00007f56d910af58 R14: 00007f56d910b000 R15: 0000000000000000
[  879.583189][   T31]  </TASK>
[  879.586292][   T31] INFO: task syz.1.5889:28089 blocked for more than 145 seconds.
[  879.594328][   T31]       Not tainted syzkaller #0
[  879.599323][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  879.609184][   T31] task:syz.1.5889      state:D stack:27872 pid:28089 tgid:28088 ppid:16284  task_flags:0x400140 flags:0x00080002
[  879.621469][   T31] Call Trace:
[  879.624812][   T31]  <TASK>
[  879.627759][   T31]  __schedule+0x17d9/0x56c0
[  879.633586][   T31]  ? __lock_acquire+0x683/0x2cf0
[  879.638602][   T31]  ? __lock_acquire+0x683/0x2cf0
[  879.643832][   T31]  ? __pfx___schedule+0x10/0x10
[  879.648776][   T31]  ? schedule+0x90/0x2b0
[  879.653100][   T31]  schedule+0x164/0x2b0
[  879.657289][   T31]  schedule_preempt_disabled+0x13/0x30
[  879.664351][   T31]  __mutex_lock+0x7bf/0x1550
[  879.669120][   T31]  ? __mutex_lock+0x5d4/0x1550
[  879.674000][   T31]  ? genl_rcv_msg+0x10b/0x7a0
[  879.678725][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  879.683990][   T31]  ? __dev_queue_xmit+0x29b/0x3820
[  879.689188][   T31]  ? radix_tree_lookup+0x240/0x290
[  879.695688][   T31]  genl_rcv_msg+0x10b/0x7a0
[  879.700265][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  879.705812][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  879.713363][   T31]  netlink_rcv_skb+0x226/0x4a0
[  879.718326][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  879.724775][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  879.730186][   T31]  ? down_read+0x2be/0x330
[  879.734954][   T31]  genl_rcv+0x28/0x40
[  879.739009][   T31]  netlink_unicast+0x7bb/0x940
[  879.746735][   T31]  netlink_sendmsg+0x813/0xb40
[  879.751798][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  879.757195][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  879.762390][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  879.767754][   T31]  sock_sendmsg_nosec+0x13a/0x180
[  879.773748][   T31]  __sys_sendto+0x408/0x5a0
[  879.778327][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  879.783840][   T31]  ? errseq_sample+0x40/0x70
[  879.788514][   T31]  ? fd_install+0x94/0x3d0
[  879.793196][   T31]  ? fd_install+0x306/0x3d0
[  879.797777][   T31]  __x64_sys_sendto+0xde/0x100
[  879.802788][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  879.808945][   T31]  do_syscall_64+0x174/0x580
[  879.813719][   T31]  ? trace_irq_disable+0x3b/0x140
[  879.818829][   T31]  ? clear_bhb_loop+0x40/0x90
[  879.824276][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  879.830253][   T31] RIP: 0033:0x7f629d15e6ce
[  879.835017][   T31] RSP: 002b:00007f629b3f4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  879.843676][   T31] RAX: ffffffffffffffda RBX: 00007f629b3f66c0 RCX: 00007f629d15e6ce
[  879.852493][   T31] RDX: 0000000000000020 RSI: 00007f629b3f5000 RDI: 0000000000000003
[  879.860692][   T31] RBP: 0000000000000000 R08: 00007f629b3f4f04 R09: 000000000000000c
[  879.868907][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  879.877266][   T31] R13: 00007f629b3f4f58 R14: 00007f629b3f5000 R15: 0000000000000000
[  879.885867][   T31]  </TASK>
[  879.888996][   T31] INFO: task syz.1.5889:28090 blocked for more than 145 seconds.
[  879.897285][   T31]       Not tainted syzkaller #0
[  879.903844][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  879.912807][   T31] task:syz.1.5889      state:D stack:27872 pid:28090 tgid:28088 ppid:16284  task_flags:0x400040 flags:0x00080002
[  879.925206][   T31] Call Trace:
[  879.928563][   T31]  <TASK>
[  879.932766][   T31]  __schedule+0x17d9/0x56c0
[  879.937347][   T31]  ? __lock_acquire+0x683/0x2cf0
[  879.942686][   T31]  ? __lock_acquire+0x683/0x2cf0
[  879.947733][   T31]  ? __pfx___schedule+0x10/0x10
[  879.952724][   T31]  ? schedule+0x90/0x2b0
[  879.957018][   T31]  schedule+0x164/0x2b0
[  879.963179][   T31]  schedule_preempt_disabled+0x13/0x30
[  879.968726][   T31]  __mutex_lock+0x7bf/0x1550
[  879.973519][   T31]  ? __mutex_lock+0x5d4/0x1550
[  879.978439][   T31]  ? genl_rcv_msg+0x10b/0x7a0
[  879.983589][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  879.988692][   T31]  ? __dev_queue_xmit+0x29b/0x3820
[  879.995578][   T31]  ? radix_tree_lookup+0x240/0x290
[  880.000976][   T31]  genl_rcv_msg+0x10b/0x7a0
[  880.005572][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  880.010642][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  880.016268][   T31]  netlink_rcv_skb+0x226/0x4a0
[  880.022390][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  880.027487][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  880.032948][   T31]  ? down_read+0x2be/0x330
[  880.037425][   T31]  genl_rcv+0x28/0x40
[  880.041716][   T31]  netlink_unicast+0x7bb/0x940
[  880.046577][   T31]  netlink_sendmsg+0x813/0xb40
[  880.052677][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  880.058030][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  880.063747][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  880.069098][   T31]  sock_sendmsg_nosec+0x13a/0x180
[  880.074355][   T31]  __sys_sendto+0x408/0x5a0
[  880.078997][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  880.085496][   T31]  ? do_user_addr_fault+0xc4a/0x1340
[  880.090979][   T31]  __x64_sys_sendto+0xde/0x100
[  880.095782][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  880.102137][   T31]  do_syscall_64+0x174/0x580
[  880.106808][   T31]  ? trace_irq_disable+0x3b/0x140
[  880.112999][   T31]  ? clear_bhb_loop+0x40/0x90
[  880.117725][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  880.123974][   T31] RIP: 0033:0x7f629d15e6ce
[  880.128475][   T31] RSP: 002b:00007f629b3d3e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  880.137149][   T31] RAX: ffffffffffffffda RBX: 00007f629b3d56c0 RCX: 00007f629d15e6ce
[  880.146184][   T31] RDX: 0000000000000024 RSI: 00007f629b3d4000 RDI: 0000000000000005
[  880.154277][   T31] RBP: 0000000000000000 R08: 00007f629b3d3f04 R09: 000000000000000c
[  880.162450][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  880.170476][   T31] R13: 00007f629b3d3f58 R14: 00007f629b3d4000 R15: 0000000000000000
[  880.179747][   T31]  </TASK>
[  880.183162][   T31] INFO: task syz.1.5889:28094 blocked for more than 145 seconds.
[  880.194298][   T31]       Not tainted syzkaller #0
[  880.199317][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  880.208845][   T31] task:syz.1.5889      state:D stack:27872 pid:28094 tgid:28088 ppid:16284  task_flags:0x400040 flags:0x00080002
[  880.221211][   T31] Call Trace:
[  880.224529][   T31]  <TASK>
[  880.227472][   T31]  __schedule+0x17d9/0x56c0
[  880.233676][   T31]  ? __lock_acquire+0x683/0x2cf0
[  880.238723][   T31]  ? __lock_acquire+0x683/0x2cf0
[  880.244351][   T31]  ? __pfx___schedule+0x10/0x10
[  880.249278][   T31]  ? schedule+0x90/0x2b0
[  880.253864][   T31]  schedule+0x164/0x2b0
[  880.258219][   T31]  schedule_preempt_disabled+0x13/0x30
[  880.264979][   T31]  __mutex_lock+0x7bf/0x1550
[  880.269629][   T31]  ? __mutex_lock+0x5d4/0x1550
[  880.274601][   T31]  ? genl_rcv_msg+0x10b/0x7a0
[  880.279349][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  880.284760][   T31]  ? __dev_queue_xmit+0x29b/0x3820
[  880.289932][   T31]  ? radix_tree_lookup+0x240/0x290
[  880.295391][   T31]  genl_rcv_msg+0x10b/0x7a0
[  880.299987][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  880.305601][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  880.311245][   T31]  netlink_rcv_skb+0x226/0x4a0
[  880.317211][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  880.323688][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  880.329037][   T31]  ? down_read+0x2be/0x330
[  880.333795][   T31]  genl_rcv+0x28/0x40
[  880.337843][   T31]  netlink_unicast+0x7bb/0x940
[  880.342733][   T31]  netlink_sendmsg+0x813/0xb40
[  880.347557][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  880.354327][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  880.359314][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  880.364744][   T31]  sock_sendmsg_nosec+0x13a/0x180
[  880.369820][   T31]  __sys_sendto+0x408/0x5a0
[  880.374609][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  880.379688][   T31]  ? errseq_sample+0x40/0x70
[  880.386194][   T31]  ? rcu_is_watching+0x15/0xb0
[  880.391270][   T31]  __x64_sys_sendto+0xde/0x100
[  880.396118][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  880.402350][   T31]  do_syscall_64+0x174/0x580
[  880.406989][   T31]  ? trace_irq_disable+0x3b/0x140
[  880.413221][   T31]  ? clear_bhb_loop+0x40/0x90
[  880.417969][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  880.424423][   T31] RIP: 0033:0x7f629d15e6ce
[  880.428887][   T31] RSP: 002b:00007f629b3b2e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  880.437584][   T31] RAX: ffffffffffffffda RBX: 00007f629b3b46c0 RCX: 00007f629d15e6ce
[  880.446694][   T31] RDX: 0000000000000020 RSI: 00007f629b3b3000 RDI: 0000000000000006
[  880.454911][   T31] RBP: 0000000000000000 R08: 00007f629b3b2f04 R09: 000000000000000c
[  880.464725][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  880.474648][   T31] R13: 00007f629b3b2f58 R14: 00007f629b3b3000 R15: 0000000000000000
[  880.483061][   T31]  </TASK>
[  880.486362][   T31] INFO: task syz.3.5892:28109 blocked for more than 145 seconds.
[  880.494322][   T31]       Not tainted syzkaller #0
[  880.499498][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  880.509367][   T31] task:syz.3.5892      state:D stack:27872 pid:28109 tgid:28108 ppid:18536  task_flags:0x400140 flags:0x00080002
[  880.521756][   T31] Call Trace:
[  880.525129][   T31]  <TASK>
[  880.528078][   T31]  __schedule+0x17d9/0x56c0
[  880.533842][   T31]  ? __lock_acquire+0x683/0x2cf0
[  880.538835][   T31]  ? __lock_acquire+0x683/0x2cf0
[  880.544163][   T31]  ? __pfx___schedule+0x10/0x10
[  880.549101][   T31]  ? schedule+0x90/0x2b0
[  880.554558][   T31]  schedule+0x164/0x2b0
[  880.558880][   T31]  schedule_preempt_disabled+0x13/0x30
[  880.565569][   T31]  __mutex_lock+0x7bf/0x1550
[  880.570225][   T31]  ? __mutex_lock+0x5d4/0x1550
[  880.575589][   T31]  ? genl_rcv_msg+0x10b/0x7a0
[  880.580351][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  880.586000][   T31]  ? __dev_queue_xmit+0x29b/0x3820
[  880.591694][   T31]  ? radix_tree_lookup+0x240/0x290
[  880.596901][   T31]  genl_rcv_msg+0x10b/0x7a0
[  880.601605][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  880.606707][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  880.612315][   T31]  netlink_rcv_skb+0x226/0x4a0
[  880.617152][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  880.622496][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  880.627876][   T31]  ? down_read+0x2be/0x330
[  880.632577][   T31]  genl_rcv+0x28/0x40
[  880.636687][   T31]  netlink_unicast+0x7bb/0x940
[  880.642034][   T31]  netlink_sendmsg+0x813/0xb40
[  880.646922][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  880.652807][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  880.657830][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  880.663579][   T31]  sock_sendmsg_nosec+0x13a/0x180
[  880.668680][   T31]  __sys_sendto+0x408/0x5a0
[  880.673430][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  880.678589][   T31]  ? do_user_addr_fault+0xc4a/0x1340
[  880.684181][   T31]  __x64_sys_sendto+0xde/0x100
[  880.689007][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  880.695586][   T31]  do_syscall_64+0x174/0x580
[  880.700267][   T31]  ? trace_irq_disable+0x3b/0x140
[  880.705775][   T31]  ? clear_bhb_loop+0x40/0x90
[  880.710528][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  880.716915][   T31] RIP: 0033:0x7f880815e6ce
[  880.721502][   T31] RSP: 002b:00007f8809048e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  880.730092][   T31] RAX: ffffffffffffffda RBX: 00007f880904a6c0 RCX: 00007f880815e6ce
[  880.738284][   T31] RDX: 0000000000000020 RSI: 00007f8809049000 RDI: 0000000000000004
[  880.746553][   T31] RBP: 0000000000000000 R08: 00007f8809048f04 R09: 000000000000000c
[  880.754970][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  880.763098][   T31] R13: 00007f8809048f58 R14: 00007f8809049000 R15: 0000000000000000
[  880.771352][   T31]  </TASK>
[  880.775505][   T31] 
[  880.775505][   T31] Showing all locks held in the system:
[  880.783767][   T31] 1 lock held by khungtaskd/31:
[  880.788670][   T31]  #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  880.799392][   T31] 2 locks held by getty/5381:
[  880.804171][   T31]  #0: ffff888035c360a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  880.814110][   T31]  #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  880.824388][   T31] 1 lock held by udevd/20731:
[  880.829076][   T31]  #0: ffff888065c0d350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[  880.838440][   T31] 2 locks held by syz.4.5882/28060:
[  880.843857][   T31]  #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  880.852229][   T31]  #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  880.861691][   T31] 6 locks held by syz.0.5886/28077:
[  880.866966][   T31]  #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  880.875548][   T31]  #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  880.885003][   T31]  #2: ffff888054d7f260 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4bc/0x1e80
[  880.895862][   T31]  #3: ffff88802a1f1938 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680
[  880.905596][   T31]  #4: ffff88802a1f1300 (&q->q_usage_counter(io)#70){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  880.917857][   T31]  #5: ffff88802a1f1338 (&q->q_usage_counter(queue)#52){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  880.930290][   T31] 2 locks held by syz.0.5886/28081:
[  880.935671][   T31]  #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  880.944346][   T31]  #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  880.953515][   T31] 2 locks held by syz.0.5886/28083:
[  880.958740][   T31]  #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  880.967158][   T31]  #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  880.976552][   T31] 2 locks held by syz.2.5888/28085:
[  880.983153][   T31]  #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  880.991969][   T31]  #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  881.001803][   T31] 2 locks held by syz.1.5889/28089:
[  881.007071][   T31]  #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  881.016519][   T31]  #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  881.026716][   T31] 2 locks held by syz.1.5889/28090:
[  881.032104][   T31]  #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  881.040471][   T31]  #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  881.049655][   T31] 2 locks held by syz.1.5889/28094:
[  881.055189][   T31]  #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  881.063669][   T31]  #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  881.074013][   T31] 2 locks held by syz.3.5892/28109:
[  881.079399][   T31]  #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  881.087932][   T31]  #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  881.097271][   T31] 2 locks held by syz-executor/28112:
[  881.103975][   T31]  #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  881.112606][   T31]  #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  881.121815][   T31] 2 locks held by syz-executor/28133:
[  881.127239][   T31]  #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  881.135693][   T31]  #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  881.144993][   T31] 2 locks held by syz-executor/28134:
[  881.150464][   T31]  #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  881.158790][   T31]  #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  881.167933][   T31] 2 locks held by syz-executor/28136:
[  881.173438][   T31]  #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  881.182490][   T31]  #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  881.191908][   T31] 2 locks held by syz-executor/28137:
[  881.197324][   T31]  #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  881.205891][   T31]  #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  881.214997][   T31] 2 locks held by syz-executor/28212:
[  881.220376][   T31]  #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  881.229117][   T31]  #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  881.238433][   T31] 2 locks held by syz-executor/28233:
[  881.244087][   T31]  #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  881.252450][   T31]  #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  881.261963][   T31] 2 locks held by syz-executor/28236:
[  881.267398][   T31]  #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  881.275741][   T31]  #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  881.285025][   T31] 2 locks held by syz-executor/28240:
[  881.290448][   T31]  #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  881.298794][   T31]  #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  881.308321][   T31] 2 locks held by syz-executor/28242:
[  881.313801][   T31]  #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  881.322129][   T31]  #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  881.331539][   T31] 2 locks held by syz-executor/28310:
[  881.336942][   T31]  #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  881.345467][   T31]  #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  881.354676][   T31] 2 locks held by syz-executor/28328:
[  881.360118][   T31]  #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  881.368596][   T31]  #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  881.377812][   T31] 2 locks held by syz-executor/28341:
[  881.383297][   T31]  #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  881.391666][   T31]  #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  881.400740][   T31] 2 locks held by syz-executor/28342:
[  881.406274][   T31]  #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  881.415065][   T31]  #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  881.424443][   T31] 2 locks held by syz-executor/28347:
[  881.429881][   T31]  #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  881.438258][   T31]  #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  881.447398][   T31] 
[  881.449764][   T31] =============================================
[  881.449764][   T31] 
[  881.458335][   T31] NMI backtrace for cpu 0
[  881.458355][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  881.458390][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  881.458403][   T31] Call Trace:
[  881.458412][   T31]  <TASK>
[  881.458420][   T31]  dump_stack_lvl+0xe8/0x150
[  881.458458][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  881.458490][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  881.458524][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[  881.458560][   T31]  sys_info+0x135/0x170
[  881.458587][   T31]  watchdog+0xfd7/0x1030
[  881.458633][   T31]  ? watchdog+0x1c7/0x1030
[  881.458670][   T31]  kthread+0x388/0x470
[  881.458702][   T31]  ? __pfx_watchdog+0x10/0x10
[  881.458728][   T31]  ? __pfx_kthread+0x10/0x10
[  881.458761][   T31]  ret_from_fork+0x514/0xb70
[  881.458798][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  881.458831][   T31]  ? __switch_to+0xc89/0x1420
[  881.458863][   T31]  ? __pfx_kthread+0x10/0x10
[  881.458926][   T31]  ret_from_fork_asm+0x1a/0x30
[  881.458964][   T31]  </TASK>
[  881.458973][   T31] Sending NMI from CPU 0 to CPUs 1:
[  881.570487][    C1] NMI backtrace for cpu 1
[  881.570508][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  881.570529][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  881.570541][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  881.570568][    C1] Code: 0c 7f 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 ce 18 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  881.570586][    C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000242
[  881.570603][    C1] RAX: 00000000002c9e1f RBX: ffffffff819b4450 RCX: 0000000080000001
[  881.570617][    C1] RDX: 0000000000000001 RSI: ffffffff8e22be44 RDI: ffffffff8c4bdb80
[  881.570631][    C1] RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b
[  881.570645][    C1] R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000
[  881.570659][    C1] R13: 1ffff11003c50000 R14: 1ffff92000032fd0 R15: dffffc0000000000
[  881.570674][    C1] FS:  0000000000000000(0000) GS:ffff888125051000(0000) knlGS:0000000000000000
[  881.570695][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  881.570709][    C1] CR2: 000055f35bb3d168 CR3: 000000000e946000 CR4: 00000000003526f0
[  881.570726][    C1] Call Trace:
[  881.570734][    C1]  <TASK>
[  881.570741][    C1]  default_idle+0x9/0x20
[  881.570764][    C1]  default_idle_call+0x72/0xb0
[  881.570794][    C1]  do_idle+0x2e0/0x540
[  881.570825][    C1]  ? __pfx_do_idle+0x10/0x10
[  881.570856][    C1]  cpu_startup_entry+0x43/0x60
[  881.570883][    C1]  start_secondary+0x101/0x110
[  881.570910][    C1]  common_startup_64+0x13e/0x157
[  881.570949][    C1]  </TASK>
[  881.572237][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  881.572290][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  881.572359][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  881.572393][   T31] Call Trace:
[  881.572432][   T31]  <TASK>
[  881.572464][   T31]  vpanic+0x56c/0xa60
[  881.572600][   T31]  ? __pfx___schedule+0x10/0x10
[  881.572663][   T31]  ? __pfx_vpanic+0x10/0x10
[  881.572779][   T31]  panic+0xc5/0xd0
[  881.572868][   T31]  ? __pfx_panic+0x10/0x10
[  881.572938][   T31]  ? preempt_schedule_common+0x82/0xd0
[  881.573010][   T31]  ? preempt_schedule_thunk+0x16/0x40
[  881.573090][   T31]  ? nmi_trigger_cpumask_backtrace+0x314/0x380
[  881.573186][   T31]  ? nmi_trigger_cpumask_backtrace+0x319/0x380
[  881.573298][   T31]  watchdog+0x1030/0x1030
[  881.573390][   T31]  ? watchdog+0x1c7/0x1030
[  881.573489][   T31]  kthread+0x388/0x470
[  881.573579][   T31]  ? __pfx_watchdog+0x10/0x10
[  881.573646][   T31]  ? __pfx_kthread+0x10/0x10
[  881.573728][   T31]  ret_from_fork+0x514/0xb70
[  881.573819][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  881.573928][   T31]  ? __switch_to+0xc89/0x1420
[  881.574022][   T31]  ? __pfx_kthread+0x10/0x10
[  881.574105][   T31]  ret_from_fork_asm+0x1a/0x30
[  881.574210][   T31]  </TASK>
[  881.856192][   T31] Kernel Offset: disabled
[  881.860526][   T31] Rebooting in 86400 seconds..