last executing test programs:

19.975065783s ago: executing program 3 (id=1835):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0))
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r0}, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000080007b8af8ff00000000b7080000800000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
pipe(&(0x7f0000000100))
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r5=>0x0})
r6 = socket$inet(0x2, 0x2000000080002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x2b0)
setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x2, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a100ffff0000080026008d03000008009f"], 0x40}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e00140002800800010010000000080003000200000008000500", @ANYRESHEX=r2, @ANYBLOB="a549970e1e311809e3e63a9200c7a55e3c44ec853bd9e3a7735b9dae6977944d853d5c32d731a5361696e3db180fd36cb74b309d702586f285ba6f36ea9d9689cb238496985ce8ae23baa8fed3e7624e47ef5d98b5e08378be7de7e408197516564f9e1a452f3e9992da160749c1468d034da588adfb20579f8b2bdd876912e754bcd3e97642698f605b547465abd59bad547850be5966f89a98eeff85a4054190fa8953f54ecfa7000835d47d728b167007"], 0x4c}}, 0x0)

19.753393696s ago: executing program 3 (id=1838):
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xe0b7378a2395a420, &(0x7f00000007c0)={0xa, 0x4e20, 0x0, @local}, 0x1c)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'gretap0\x00', <r1=>0x0, 0x1, 0xc4953665f0d67253, 0x8, 0x0, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x2, 0x2f, 0x0, @remote, @empty, {[@ssrr={0x89, 0x7, 0x67, [@dev]}]}}}}})
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.stat\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x11, 0x623f38b4, 0x20000, 0x60, 0x0, r0, 0x8, '\x00', r1, r2, 0x0, 0x0, 0x2}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x1c, r3, 0x2, 0x70bd28, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x1c}}, 0x814)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000280)={'batadv0\x00', &(0x7f0000000240)=@ethtool_sset_info={0x37, 0x0, 0xfffffffffffffffe}})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}, @ptr={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto]}}, 0x0, 0x4a}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="54010000", @ANYRES16=r6, @ANYBLOB="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"], 0x154}}, 0x0)

19.483757708s ago: executing program 3 (id=1842):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)={0xfc, r2, 0x405, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_PEERS={0xbc, 0x8, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5577e9880050c7f502e96f1152ac2aa4cd9a9de7aa3f159b65412d9b8c39cac4"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @local}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @local}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}]}, 0xfc}}, 0x0)

19.22032001s ago: executing program 3 (id=1848):
r0 = socket$inet(0x2, 0x5, 0x3)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000), 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000140)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", 'ae\x00', "dfa27021fe106750"}, 0x38)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000000c0)=0x24, 0x4)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
socket$inet6(0xa, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e25, 0x0, @private2, 0x1002}, 0x1c)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e22, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000040), 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1_to_bond\x00'})
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000100001040000000000", @ANYRES16, @ANYRES32=r3], 0x38}}, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r5}, 0x10)
socket$kcm(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113700200000008510000002000000850000000800000095000810000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xb3, &(0x7f000000cf3d)=""/179, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000001340)=""/4098, 0x1002}], 0x1, &(0x7f0000000100)=""/20, 0x14, 0xd571012c}, 0x12c)

18.291630364s ago: executing program 3 (id=1854):
r0 = socket(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
getpeername$packet(r0, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000040a0640900000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000001"], 0xb8}}, 0x0)

18.080151931s ago: executing program 3 (id=1855):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x100, 0x0, 0xff, 0xb}, 0x20) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x100, 0x0, 0xff, 0xb}, 0x20)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f0000000100)="128c3a718cd5", 0x6)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={r8, @in={{0x2, 0x4e21, @empty}}}, &(0x7f00000001c0)=0x9c)
openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) (async)
r9 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_procs(r4, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) (async)
r10 = openat$cgroup_procs(r4, &(0x7f0000000240)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r10, &(0x7f00000000c0), 0x12)
write$cgroup_freezer_state(r9, &(0x7f0000000400)='FROZEN\x00', 0x7)
r11 = openat$cgroup_freezer_state(r4, &(0x7f0000000280), 0x2, 0x0)
sendfile(r2, r11, 0x0, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x100, 0x0, 0x2, 0x2}, 0x20)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2)
socket$nl_netfilter(0x10, 0x3, 0xc)

6.926650685s ago: executing program 0 (id=1969):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140), 0x4)

6.815391662s ago: executing program 0 (id=1971):
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
r2 = socket$caif_seqpacket(0x25, 0x5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000180)={0x30000000})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x2000200c}) (async)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x2000200c})
socketpair(0x2c, 0xa, 0x4, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000080)=0x8)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'dummy0\x00'}, 0x18) (async)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'dummy0\x00'}, 0x18)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x111000, 0x0)
ioctl$PPPIOCSNPMODE(r7, 0x4008744b, &(0x7f00000001c0)={0x2bc, 0x2})
setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000040)={0x2, 'ip_vti0\x00'}, 0x18) (async)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000040)={0x2, 'ip_vti0\x00'}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r8}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x70}}, 0x60000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040))
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) (async)
ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000))
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000100), 0x4) (async)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000100), 0x4)

6.750281982s ago: executing program 4 (id=1972):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$inet6(0xa, 0x80001, 0x0)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff020000000000000000000000000001"], 0x90)

6.639458771s ago: executing program 0 (id=1973):
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket(0x10, 0x80000, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xff, [{0x0, 0x3}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0xfffffffd}]}, @const]}}, &(0x7f0000000340)=""/5, 0x52, 0x5, 0x1}, 0x20)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r2, r1, 0x5}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r2, r3, 0x4}, 0x10)
r4 = socket(0x1, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000680), &(0x7f0000000080)=@udp6=r4}, 0x20)
r5 = socket(0x1, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000240), &(0x7f0000000180)=@tcp=r5}, 0x20)
ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2})

6.585958303s ago: executing program 4 (id=1975):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000240)={0x7, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000020030006000000000002"], 0x50}}, 0x0)

6.391524311s ago: executing program 4 (id=1977):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x8, 0x1}, 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0xc040480)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x0, 0xd, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000000000000000850000008200000085000000000000000800000000000000e644d3ce128c5f91f52964bf69002153ec4cbc8aa479d401ecf92f5a55b8dd96139b17d693999e9089fa4acedcebf23aac5c0b12e54576798cb0042896a36e08d519715292754273b266ac7796e0e53931b5ac78b6c15958c07e3b1d4c68a09e279f1992747a5146cd1defbf61a5501fbd0de5a7"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0xf69f, 0x0, r1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1}, 0x48)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000d40)={'gretap0\x00', <r4=>0x0, 0x7800, 0x8000, 0x40004d, 0x1, {{0x11, 0x4, 0x2, 0x3e, 0x44, 0x68, 0x0, 0x5, 0x4, 0x0, @multicast1, @loopback, {[@ssrr={0x89, 0x3, 0x4}, @timestamp_prespec={0x44, 0x4, 0xb7}, @timestamp_addr={0x44, 0x1c, 0xd3, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@remote, 0x200}, {@loopback, 0x1}]}, @generic={0x88, 0xa, "63ebc9cadada9933"}]}}}}})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000540)={<r5=>0xffffffffffffffff})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000fcf700000000000000002100850000003600000095000700000000005f5468c018fad346663d83186ab9180b8a05f3a827877e0bb75ad17bc31809697df25d82089f6026e4b8b9082c7aeb09ef6b959293651de1a646c6e5e9fc1150867b0e843f846967b669d5ab9b62b6900d097c03cb760a6a5ca7295d210a24857a9890fd5dc25240a7e2616851797605985e3ec3c7921fbba3c69bd7145ef094606b3f061e365d5963db035582bb559f90b01d78662b014c6040f9dee9812ef5b7fe61cc7a8ce4701117c170afb6f4503e3f765a320f52724b1b86d17e42163e42fbd75ac56f094dc94bb787ea19f20999a0f4f2fe15c1447f4a2c674a2697bddb4f84633051cbe0a4226750ffc2be4596f8bd8156f37a8ae352c05995dcc051ad21887ae698b2776c5203be01df63759ce0c3219f6b653390d26bbf974ce902e55183792dfe30ee2bae2fbf6809dea6a63b62e37b69235194be919810a48c2ddd8a6a6d1d39249b1736da98b49cd7722f8f3b80f6b733c58aa9cb0fe8a53b73c4909c3788d32123c30d1fff20ba304b304f1620d8c1f8c7817fd68c347c2464a935ef71d2497b8699f5d6f3b0219c2d237d7b01b93cff76c152c5e7dd44d0de1177d8c5b444250fe9860c2520dca1042034172d422c5acd6f1f832d8e96d6f15a762f29e2f0f00365d191de4a923ff83b3a101db3babdc3a32ba582a11356cff11096ac38ab10e7ccbf4efec5e678d913461ea8d14560ade7093017fa9ad1cbf918ae7f55517c3c79d9e90b03d41c077078a9fb3bbe14d0dac9fc77d6a2bc2567b84b44db7ce6ebf5dc5dd7b24143b6d1f905e940a148dbd91193dea72f1ec787c2de1c49a21101734bec2c5757d52f7fb506e60dd12cc7c1b5add60c3f6e67c9df36c1982497750d9ae8995b3ca07f52f81261cba3669e386a754e6e601b861efd5911c60e77eb7784f7e65722b15ec5f9233f8856ee8540e98741163ea12e22c92d7ffcadfbb90e7e85ceb53656dceb6e400691fe9f5cd32629e00a541e6bcfd0301b430a2e007adea5ddd8913ac031abff33ec202cce815f147646dec1920cb8e905e45a8c66f9e3a783efa76aacfc64a202eb9258479aadf40f3e1ba58ca81ce117cc13a7ec15ef9b86afc12fc8e62a9d15bda7ab4ba50eb03b82eb3e0810f26fff0e60fcb67c49c52482e971b820619491a718b2b798a42e000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096}, 0x70)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001cc0)={r7, &(0x7f0000001c80)}, 0x20)
r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x9, 0x10}, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, <r9=>0xffffffffffffffff}, &(0x7f0000000080), 0x0}, 0x20)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x30}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0x6, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r10}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'ip6tnl0\x00', <r12=>0x0, 0x2f, 0x97, 0x0, 0x69f3, 0x10, @local, @remote, 0x80, 0x7, 0x8}})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f0000000580)=""/100, 0x64, <r13=>0x0, &(0x7f0000000a00)=""/169, 0xa9}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xc, 0x1a, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000c50b000000000000010000009500000000000000082100000800000018140000", @ANYRES32, @ANYBLOB="f91f000000000000181d0000", @ANYRES32=r8, @ANYBLOB="000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000010001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018270000", @ANYRES32=r10, @ANYBLOB="00000000010000001837000005000000000000000000000018000000fbffffff0000000008000000185000000f00000000000000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x3, 0x38, &(0x7f0000000400)=""/56, 0x41100, 0x0, '\x00', r12, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0xc, 0x80000001, 0x3}, 0x10, r13, r6, 0x6, 0x0, &(0x7f0000000ac0)=[{0x2, 0x2, 0x0, 0x6}, {0x0, 0x0, 0x3, 0x6}, {0x0, 0x4, 0x5, 0x9}, {0x1, 0x4, 0xb, 0x1}, {0x4, 0x2, 0x4}, {0x5, 0x4, 0x0, 0xb}], 0x10, 0x38000}, 0x90)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x18}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x200, 0x0, 0x0, 0x41000, 0x72, '\x00', r4, 0x2a, r5, 0x8, &(0x7f0000000580)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x9, 0x7fff}, 0x10, r13, r0, 0x0, &(0x7f0000000700), 0x0, 0x10, 0x5}, 0x90)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000100)="e02742e8680d85ff9782", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))

3.999773187s ago: executing program 0 (id=1982):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r0, &(0x7f00000000c0), 0x10)
sendto$l2tp(r0, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, &(0x7f0000000000)=0x7f, 0x3)
recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

3.089080541s ago: executing program 0 (id=1989):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRES8=r0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f0000000440), 0x4)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000040)={'wg1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={&(0x7f0000000a40)="63d719522ba00183ec370649c931f93760f1e666a84b2480471c4ba34f41bb74a766ec3cd3ff36fdeb54ebd1ad58d03607fa1aa399a143be1ccd298cdd6ff1accaf2577b724f9110c7ebcbb1232152d5eebfafca9b1d1b301abd8032d12e826ba59b453ee90488f7cf0914394387a8e1dc47d9d92bcda1d25aac2aff2c8d7e8ee1c41f4788293ae69b7a29505071f9226730fa541946c850ee79fc57444dab17ec3cb12ff3de4920843a514f8a6b98282837966232f38ef7a3af7a26ba", &(0x7f0000000b00)=""/242, &(0x7f0000000c00)="73f9ddf78f5d3ad4933d69cdc49b3917c9ec6dd025b664732b31045f1bb8f70b463c087512724b578daf0596915baa3f327ed693368ba6b6928d86ff7ad599091d01fd74a050288826ed6bcd4f16fbff89b72e3e9336362aa426d5ae8bae8a461055f84105f6151a3803cb292569cc3d3623a2a3fdfc1d3aff1a19edb1edf3d155e0a6cafe9c5fc1f3", &(0x7f0000000cc0)="d00a202d82e01adf07f38cff3c7e95179ed439b5f243e6b27980f855868d248f39899b8abbf5d9d7483cb816e6c649565c19d0e637ebdd991c1ac71f8f6956da84ca1b4a947ced0ee2e3dd68bd5f549cc743bf26f547d1bacb6eae142f6724cdde786e48e6b661ee1a57f0e8f86afcab0cfdd9e44c185f07efcf1698bbfd73809d1dd91819d3d59cddbe0475a5b52148cbe70c0d934ac0f4cd3a464153f059373a4025a797e6ce44b3dcd5a7ea129ec369643414ee12a9ae92625b85dbeb3f251a0e1e5f41", 0x3}, 0x38)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x4c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{}, {}, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, "0262c80200", @short="094c1f2501e02962"}}}}]}, 0x4c}}, 0x0)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r7, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="300029bd7000fedbdf255300000008000300", @ANYRES32=r11, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)={0x104, r6, 0x405, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PEERS={0xbc, 0x8, 0x0, 0x1, [{0xffffff9c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5577e9880050c7f502e96f1152ac2aa4cd9a9de7aa3f159b65412d9b8c39cac4"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @local}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @local}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6}]}, 0x104}}, 0x0)
getsockopt$rose(r3, 0x104, 0x6, 0x0, &(0x7f00000002c0))
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x3, &(0x7f0000000580)=@framed, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r13, 0x0, 0x8, 0x7, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
r14 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r15 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r15, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x150, 0x150, 0xd0, 0x90a, 0x1c0, 0x238, 0x238, 0x1c0, 0x238, 0xf, 0x0, {[{{@uncond, 0x500, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x8}}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'dvmrp0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)

2.727197759s ago: executing program 0 (id=1991):
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket(0x10, 0x80000, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xff, [{0x0, 0x3}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0xfffffffd}]}, @const]}}, &(0x7f0000000340)=""/5, 0x52, 0x5, 0x1}, 0x20)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r2, r1, 0x5}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r2, r3, 0x4}, 0x10)
r4 = socket(0x1, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000680), &(0x7f0000000080)=@udp6=r4}, 0x20)
r5 = socket(0x1, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000240), &(0x7f0000000180)=@tcp=r5}, 0x20)
ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2})

2.415603276s ago: executing program 2 (id=1993):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000280012000900"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x49c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x470, 0x2, [@TCA_U32_SEL={0x464, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x5, 0x5, 0x9b}, {0x4, 0x0, 0x69, 0x1000}, {0xffff, 0x190f, 0xe6be, 0x6}, {0x20000, 0x0, 0x8000, 0x6}, {0xa, 0x0, 0x7fff, 0x1000}, {0x40, 0x4, 0x9, 0x99}, {0x2, 0x8, 0x10000, 0x3}, {0xbbed, 0x9, 0x3, 0x400}, {0x3ff, 0x3, 0x7, 0x4}, {0x9, 0x2, 0xffffffff, 0x3}, {0xace, 0x8, 0x1d, 0x9}, {0xff, 0x4, 0x4, 0xf6}, {0x2, 0x6, 0x4, 0xae5}, {0x7, 0x1, 0x8, 0x7}, {0x7, 0x80, 0x2, 0x9}, {0x2, 0x6, 0xf, 0x7}, {0x9, 0xffff, 0x7, 0xb}, {0xffff, 0x6, 0xfffffffb, 0x3}, {0x4, 0x6, 0x1, 0x8000}, {0x2, 0x60a, 0xdc, 0x10001}, {0x5, 0x6, 0xffffffff, 0x7526}, {0x8000, 0x6, 0x7, 0x8}, {0x7fffffff, 0xfffffffd, 0x4, 0x81}, {0x6, 0xffffa745, 0x1, 0x4}, {0x3, 0x8, 0x1163}, {0x4, 0x0, 0x7, 0x5}, {0x0, 0xb, 0x7, 0x2}, {0xffff, 0x800, 0xfffffff9, 0xfffffbff}, {0x6, 0x0, 0x4, 0x7}, {0x36, 0x1, 0x2, 0x9}, {0x4, 0x1, 0xbac, 0x6}, {0x8, 0x0, 0x1000, 0x3}, {0x8, 0x1b84, 0x8, 0x4}, {0x3, 0x2, 0xb3f, 0x81}, {0x5, 0x5, 0x0, 0x81}, {0xe, 0x0, 0x7fff, 0x1}, {0x0, 0xfbe, 0x7, 0x2}, {0xe, 0x2, 0x8, 0x1}, {0x0, 0x4, 0x7fffffff, 0x400}, {0x7ff, 0x8, 0x1ff, 0x17f1}, {0xcd, 0x3, 0x8, 0x6}, {0xfffffe00, 0x9f4, 0xc3d}, {0xb, 0xfdb, 0xffffff80, 0x1}, {0xede, 0x8, 0x2, 0x401}, {0x0, 0x3, 0x6, 0x3}, {0x7, 0x3, 0x6, 0x3}, {0xfff, 0x401, 0x9, 0xffffff7b}, {0x800, 0x722, 0x6, 0x7a8a}, {0x5, 0x7, 0x3, 0x3}, {0x8000, 0x9, 0xff, 0x3}, {0x8, 0x80000001, 0x0, 0x4}, {0xcc0c, 0x80000001, 0x9, 0x5}, {0x6e8, 0x0, 0x4, 0x8}, {0x3, 0xff, 0x4, 0xffff1b63}, {0x9, 0x2, 0x81, 0x5}, {0x5, 0x4000, 0x5, 0x7ff}, {0xa057, 0x5, 0xa2c, 0x9}, {0x7ff, 0xbe, 0x5, 0x101}, {0xb, 0x2, 0x5, 0x80000000}, {0x401, 0x4, 0x3ff, 0x7}, {0x1, 0x1efa, 0x7, 0x9}, {0x3, 0x1, 0x4}, {0x8, 0xfff, 0xc, 0x2}, {0x10001, 0xcc87, 0xfffffffe, 0x4}, {0x0, 0x2, 0x2, 0x3}, {0x1, 0x3ca2e9ba, 0x47cb, 0x2}, {0x1ba, 0x5, 0x1, 0x1}, {0x101, 0x1, 0x1c00, 0x8}, {0x0, 0x8, 0x800, 0x8}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x2, 0x6}}]}}]}, 0x49c}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.162100146s ago: executing program 2 (id=1995):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
recvmmsg(r0, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/27, 0x1b}], 0x1}}], 0x1, 0x0, 0x0)
recvmmsg$unix(r0, &(0x7f0000004140)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000300)=""/57, 0x39}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000000000)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000400)={0xa, 0x0, 0x0, @dev}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000100)="8000102e", 0x4}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000004ffe400290000001700000000000000000000000f4c8db7293e262b8f0c44f90b906492cf3d8dee0c35539c632897ad481505ffb1727493232d6c5bedb21b860519bdb163f6133a8cf88f8f13a9d802d5b1f137249e3786cf9dba52756cc483030221c5c04175963e5d5f2a2eefef484df5476efeda428f4035362804a3b7be7ac46f26c262a08339ba121a6a1ad50010e9d6fd3b49f23a887663dc8e6e49546c0b0e"], 0x18}}], 0x1, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
write(r4, &(0x7f00000000c0), 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='memory.numa_stat\x00', 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="38004000000082800000000000000000020000000000000900000000060015000400000014001680100008800c0002800800010000000000"], 0x38}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r10=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001700000008000300", @ANYRES32=r10, @ANYBLOB='H\x000'], 0x64}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b702000000000000060000000000000015000000000000009500000000ef94d5"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, r5}, 0x90)
getpeername$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r11, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)

1.361329455s ago: executing program 1 (id=1999):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x49)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000480)={0x0, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xe3, &(0x7f0000000340), 0x0, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xf3, 0x8, 0x8, &(0x7f0000000400)}}, 0x10)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000580)={@rand_addr, @loopback, <r10=>0x0}, &(0x7f00000005c0)=0xc)
socket(0x1, 0x803, 0x0)
r11 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACSEC_WINDOW={0x8, 0x3, 0x8}, @IFLA_MACSEC_SCI={0xc}, @IFLA_MACSEC_REPLAY_PROTECT={0x5}]}}}, @IFLA_LINK={0x8}]}, 0x58}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000680)={'gretap0\x00', <r12=>0x0, 0x80, 0x20, 0x7, 0x10, {{0x6, 0x4, 0x0, 0x2, 0x18, 0x68, 0x0, 0xc0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @multicast2, {[@generic={0x88, 0x4, "d9d0"}]}}}}})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f00000008c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000700)={0x118, r5, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000000}, 0x840)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x40, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r13}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]]}, 0x40}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000010000000000000000000000791207000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fbff", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000005, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x401}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0)

1.164941713s ago: executing program 2 (id=2000):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRES8=r0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f0000000440), 0x4)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000040)={'wg1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={&(0x7f0000000a40)="63d719522ba00183ec370649c931f93760f1e666a84b2480471c4ba34f41bb74a766ec3cd3ff36fdeb54ebd1ad58d03607fa1aa399a143be1ccd298cdd6ff1accaf2577b724f9110c7ebcbb1232152d5eebfafca9b1d1b301abd8032d12e826ba59b453ee90488f7cf0914394387a8e1dc47d9d92bcda1d25aac2aff2c8d7e8ee1c41f4788293ae69b7a29505071f9226730fa541946c850ee79fc57444dab17ec3cb12ff3de4920843a514f8a6b98282837966232f38ef7a3af7a26ba", &(0x7f0000000b00)=""/242, &(0x7f0000000c00)="73f9ddf78f5d3ad4933d69cdc49b3917c9ec6dd025b664732b31045f1bb8f70b463c087512724b578daf0596915baa3f327ed693368ba6b6928d86ff7ad599091d01fd74a050288826ed6bcd4f16fbff89b72e3e9336362aa426d5ae8bae8a461055f84105f6151a3803cb292569cc3d3623a2a3fdfc1d3aff1a19edb1edf3d155e0a6cafe9c5fc1f3", &(0x7f0000000cc0)="d00a202d82e01adf07f38cff3c7e95179ed439b5f243e6b27980f855868d248f39899b8abbf5d9d7483cb816e6c649565c19d0e637ebdd991c1ac71f8f6956da84ca1b4a947ced0ee2e3dd68bd5f549cc743bf26f547d1bacb6eae142f6724cdde786e48e6b661ee1a57f0e8f86afcab0cfdd9e44c185f07efcf1698bbfd73809d1dd91819d3d59cddbe0475a5b52148cbe70c0d934ac0f4cd3a464153f059373a4025a797e6ce44b3dcd5a7ea129ec369643414ee12a9ae92625b85dbeb3f251a0e1e5f41", 0x3}, 0x38)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x4c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{}, {}, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, "0262c80200", @short="094c1f2501e02962"}}}}]}, 0x4c}}, 0x0)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r7, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="300029bd7000fedbdf255300000008000300", @ANYRES32=r11, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)={0x104, r6, 0x405, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PEERS={0xbc, 0x8, 0x0, 0x1, [{0xffffff9c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5577e9880050c7f502e96f1152ac2aa4cd9a9de7aa3f159b65412d9b8c39cac4"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @local}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @local}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6}]}, 0x104}}, 0x0)
getsockopt$rose(r3, 0x104, 0x6, 0x0, &(0x7f00000002c0))
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x3, &(0x7f0000000580)=@framed, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r13, 0x0, 0x8, 0x7, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
r14 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r15 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r15, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x150, 0x150, 0xd0, 0x90a, 0x1c0, 0x238, 0x238, 0x1c0, 0x238, 0xf, 0x0, {[{{@uncond, 0x500, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x8}}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'dvmrp0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)

1.000394731s ago: executing program 4 (id=2001):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x0, 0x84)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd608a35f200180600fe80000000001138245181a6", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000008"], 0x0)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000ffe80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1)
syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local, @random="82341801d5e3", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @remote, @link_local, @remote}}}}, 0x0)

769.069793ms ago: executing program 1 (id=2002):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="54000000100001040000000000000000000000004662226f2fe707ea20b3c174f2c422d0c364c216143c566115fe63336f7c053678140219397c214c23c7dba49329aea7ca2dc673a8a2f3e90224dfe7ce6e5ed7037e362934d483abdc5de54afcdd94e4c77ce0e749b663a401003cac8b7d357ba5b92425b98ceaea2620db2ac1eb1a0885d9d18ea53c23d12dd16b5774f4571f"], 0x54}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000240)={'syztnl2\x00', <r3=>0x0, 0x700, 0x700, 0x0, 0x0, {{0xc, 0x4, 0x3, 0x8, 0x30, 0x64, 0x0, 0x4e, 0x0, 0x0, @broadcast, @local, {[@cipso={0x86, 0x1a, 0x7ffffffffffffffc, [{0x0, 0x2}, {0x0, 0x2}, {0x0, 0x10, "e1c064acb807f419be229aefc9fa"}]}]}}}}})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000540)={&(0x7f0000000180), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3f}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), 0xffffffffffffffff)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="f400", @ANYRES16=0x0, @ANYBLOB="000000000000000000003b00000008000300", @ANYRES32=0x0, @ANYBLOB="d800330040000000ff90801f42ffffffffffffffffffffffffff000000000301007206032503030303dd1fb32cae2bf99dc87a60d47aec103bbffea56b0df2c0c137be24242afc2fa14426f7c63874fb2e5806a90ccc719b9f850e62038c66a1a8c3d81caeb65ef8b3dd5164163408efc3435e758edfddedd9694377bf56b47882d43e39a6d8cd7d26f7f61482d14855e31c66d11419b2c30201072acdea7978a6a2c611b5877e373d90e906f86359e464912bd24aad69"], 0xf4}}, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@bloom_filter={0x1e, 0xffff, 0x401, 0x7, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="1801f8ff00000000bfa100000000000007010000f8ff00800000000008000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2}, 0x10, 0x874d, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000600)=[{0x0, 0x2, 0x0, 0x5}]}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x1a, &(0x7f0000000340)=@raw=[@jmp, @snprintf, @ringbuf_query, @jmp, @kfunc, @ringbuf_query, @btf_id], &(0x7f0000000440)='GPL\x00', 0x401, 0x93, &(0x7f0000000480)=""/147, 0x41000, 0x0, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000780), &(0x7f0000000980)=[{0x1, 0x1}, {0x5, 0x2, 0x6}, {0x0, 0x3, 0x6}, {0x0, 0x1}, {0x0, 0x0, 0x5, 0x5}, {0x0, 0x3, 0x0, 0x8}], 0x10, 0x7}, 0x90)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r7}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r7}, 0x38)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400080000000a008000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)

735.130169ms ago: executing program 4 (id=2003):
socket$packet(0x11, 0x3, 0x300) (async)
socket(0x11, 0x3, 0x0) (async)
socket(0x2, 0x3, 0x8) (async)
r0 = socket$inet6(0xa, 0x3, 0x3c)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 64)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) (rerun: 64)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000600000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000), 0x4) (async)
getsockopt$inet6_buf(r0, 0x29, 0x10, 0x0, &(0x7f0000000040))
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
socket$pptp(0x18, 0x1, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
socket$inet_udp(0x2, 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x184}}, 0x0) (async)
unshare(0x2000400) (async, rerun: 64)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x70, 0x2, 0x107, 0x70bd29, 0x0, {0x4, 0x7c}, [@nested={0x5c, 0x1, 0x0, 0x1, [@generic="0696750d097cd99756c481dfb3f355e13732cad03f8a9db0236c210496c189ec448f08ba204bcbf5291189a461f33d0acb5e5304651ae602f3b264fcdc794ddf25eabb546da3ddf883ce3c5cae541caae10fdd0e91e5781d"]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

727.258425ms ago: executing program 2 (id=2004):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000280012000900"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x49c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x470, 0x2, [@TCA_U32_SEL={0x464, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x5, 0x5, 0x9b}, {0x4, 0x0, 0x69, 0x1000}, {0xffff, 0x190f, 0xe6be, 0x6}, {0x20000, 0x0, 0x8000, 0x6}, {0xa, 0x0, 0x7fff, 0x1000}, {0x40, 0x4, 0x9, 0x99}, {0x2, 0x8, 0x10000, 0x3}, {0xbbed, 0x9, 0x3, 0x400}, {0x3ff, 0x3, 0x7, 0x4}, {0x9, 0x2, 0xffffffff, 0x3}, {0xace, 0x8, 0x1d, 0x9}, {0xff, 0x4, 0x4, 0xf6}, {0x2, 0x6, 0x4, 0xae5}, {0x7, 0x1, 0x8, 0x7}, {0x7, 0x80, 0x2, 0x9}, {0x2, 0x6, 0xf, 0x7}, {0x9, 0xffff, 0x7, 0xb}, {0xffff, 0x6, 0xfffffffb, 0x3}, {0x4, 0x6, 0x1, 0x8000}, {0x2, 0x60a, 0xdc, 0x10001}, {0x5, 0x6, 0xffffffff, 0x7526}, {0x8000, 0x6, 0x7, 0x8}, {0x7fffffff, 0xfffffffd, 0x4, 0x81}, {0x6, 0xffffa745, 0x1, 0x4}, {0x3, 0x8, 0x1163}, {0x4, 0x0, 0x7, 0x5}, {0x0, 0xb, 0x7, 0x2}, {0xffff, 0x800, 0xfffffff9, 0xfffffbff}, {0x6, 0x0, 0x4, 0x7}, {0x36, 0x1, 0x2, 0x9}, {0x4, 0x1, 0xbac, 0x6}, {0x8, 0x0, 0x1000, 0x3}, {0x8, 0x1b84, 0x8, 0x4}, {0x3, 0x2, 0xb3f, 0x81}, {0x5, 0x5, 0x0, 0x81}, {0xe, 0x0, 0x7fff, 0x1}, {0x0, 0xfbe, 0x7, 0x2}, {0xe, 0x2, 0x8, 0x1}, {0x0, 0x4, 0x7fffffff, 0x400}, {0x7ff, 0x8, 0x1ff, 0x17f1}, {0xcd, 0x3, 0x8, 0x6}, {0xfffffe00, 0x9f4, 0xc3d}, {0xb, 0xfdb, 0xffffff80, 0x1}, {0xede, 0x8, 0x2, 0x401}, {0x0, 0x3, 0x6, 0x3}, {0x7, 0x3, 0x6, 0x3}, {0xfff, 0x401, 0x9, 0xffffff7b}, {0x800, 0x722, 0x6, 0x7a8a}, {0x5, 0x7, 0x3, 0x3}, {0x8000, 0x9, 0xff, 0x3}, {0x8, 0x80000001, 0x0, 0x4}, {0xcc0c, 0x80000001, 0x9, 0x5}, {0x6e8, 0x0, 0x4, 0x8}, {0x3, 0xff, 0x4, 0xffff1b63}, {0x9, 0x2, 0x81, 0x5}, {0x5, 0x4000, 0x5, 0x7ff}, {0xa057, 0x5, 0xa2c, 0x9}, {0x7ff, 0xbe, 0x5, 0x101}, {0xb, 0x2, 0x5, 0x80000000}, {0x401, 0x4, 0x3ff, 0x7}, {0x1, 0x1efa, 0x7, 0x9}, {0x3, 0x1, 0x4}, {0x8, 0xfff, 0xc, 0x2}, {0x10001, 0xcc87, 0xfffffffe, 0x4}, {0x0, 0x2, 0x2, 0x3}, {0x1, 0x3ca2e9ba, 0x47cb, 0x2}, {0x1ba, 0x5, 0x1, 0x1}, {0x101, 0x1, 0x1c00, 0x8}, {0x0, 0x8, 0x800, 0x8}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x2, 0x6}}]}}]}, 0x49c}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

561.033466ms ago: executing program 1 (id=2005):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="cd", 0x1}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000840000000500000000000000000000001800000000000000840000000000"], 0x50}], 0x1, 0x4044040)

547.170632ms ago: executing program 2 (id=2006):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001d40), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x14, r1, 0x1}, 0x14}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, r2, 0xff7bc437091e83af, 0x0, 0x0, {0x33}}, 0x14}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240c8080, &(0x7f0000000280)={0xa, 0x2e22, 0x0, @mcast2}, 0x1c)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x88, 0x1, &(0x7f0000000080), 0x4)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1f02ffff0000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r5], 0x40}}, 0x0)

460.556623ms ago: executing program 4 (id=2007):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x0, 0x5}, 0x48)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_extract_tcp_res$synack(0x0, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d)
sendmsg$unix(r2, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000440)="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", 0x146}], 0x1}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r3}, 0x20)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r4, &(0x7f0000000040), 0x20000000}, 0x20)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001600010000000000000000000a0000000400008004000700fd586907c936c241efbc65c77b"], 0x1c}}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan1\x00'})
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r6)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="140e00008be2d46c7870a4", @ANYRES16=r8, @ANYBLOB="0103000000000000000005000000"], 0x14}}, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000480)={'wpan3\x00', <r10=>0x0})
sendmsg$NL802154_CMD_SET_TX_POWER(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7000fedbdf257fc5001008000b00090000000001000000000000000003a11dd96e0000000000000000", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000100010000000c0006000000000000000000"], 0x54}}, 0x24004800)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', <r11=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fbdbdf252b00000008000200", @ANYRES32=r10, @ANYBLOB="08000200", @ANYRES32=r11, @ANYBLOB="78e8b2b3ec9446462f9e6e54d93428c60062f248b7d7a8c179678a7c153c343b1e45d43ed4d531847b04bb78b74257d1e786f72735adf650204aa1374c62ab20c88288e48a61af6261c11c2a8fb0c5c7c756ec72355739d58e9309c38bfddc09f2762a2c7877aa55676e7943d8f237848637833b4a858bb84007947992b4807c8e22f738cbfdcd15fa58c636f8dec949d8feac32679bfb31ef80df13e568489dc066965a9606955ffd2031751e1b140e38254edf93c7868ba71386daf98bd0a96f5f5185b07710efb4eb8219e15ae6"], 0x24}, 0x1, 0x0, 0x0, 0x40000d0}, 0x4000000)
sendfile(r1, r2, 0x0, 0x10007)

460.184381ms ago: executing program 1 (id=2008):
unshare(0x400)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
close(r2)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153}, 0x15)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r4, 0x11, 0x0, 0x0, @prog_id}, 0x20)

283.635464ms ago: executing program 1 (id=2009):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x41, 0x2}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, "774c3302b1f1b066a380bfe207b87eee3eae02bd83c2a1221c61cc28de9738dd65a7087c64eb12c6b6de92c94c30ac369a9c40de052c528fa8db2e5e374fb46ca3db74fa6de1fc0d3b3daed2a0227652"}, 0xd8)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="ec00000021000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100e0000001000000000000000000000000ac1414aa000000000000000000000000ac1414aa00000000000000000000000000000000000000000400e1d26a4030aec84ed660da487ebb000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000ffffe000000200000000000000000000000000000000ac141400"/164], 0xec}}, 0x0)
sendmsg$tipc(r3, &(0x7f0000000840)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x55, 0x0}, 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000600)={'vxcan1\x00'})
socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r7)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r12}, 0x10)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
write$cgroup_int(r13, &(0x7f0000000100), 0x1001)
ioctl$SIOCSIFHWADDR(r13, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x2, 0x80, 0xc2, 0xc}})
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)={0x24, r9, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x24}}, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0xe)

176.356018ms ago: executing program 2 (id=2010):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00'})
syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0)

0s ago: executing program 1 (id=2011):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='rss_stat\x00', r1}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x1}, 0x18)
r5 = epoll_create(0x7)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000280))
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
r6 = openat$cgroup_ro(r2, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x0, 0x0)
preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x13, &(0x7f0000000140)={0x0}, 0x10)

kernel console output (not intermixed with test programs):

25900][ T8755]  ? __pfx_tun_get_user+0x10/0x10
[  165.830939][ T8755]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  165.836398][ T8755]  ? tun_get+0x1e/0x2f0
[  165.840548][ T8755]  ? __pfx_lock_release+0x10/0x10
[  165.845581][ T8755]  ? tun_get+0x1e/0x2f0
[  165.849732][ T8755]  ? tun_get+0x27d/0x2f0
[  165.853975][ T8755]  tun_chr_write_iter+0x113/0x1f0
[  165.859000][ T8755]  vfs_write+0xa72/0xc90
[  165.863241][ T8755]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  165.868788][ T8755]  ? __pfx_vfs_write+0x10/0x10
[  165.873562][ T8755]  ksys_write+0x1a0/0x2c0
[  165.877892][ T8755]  ? __pfx_ksys_write+0x10/0x10
[  165.882742][ T8755]  ? do_syscall_64+0x100/0x230
[  165.887502][ T8755]  ? do_syscall_64+0xb6/0x230
[  165.892172][ T8755]  do_syscall_64+0xf3/0x230
[  165.896760][ T8755]  ? clear_bhb_loop+0x35/0x90
[  165.901692][ T8755]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.907584][ T8755] RIP: 0033:0x7f4e44b75e9f
[  165.912006][ T8755] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8d 02 00 48
[  165.931689][ T8755] RSP: 002b:00007f4e445ff010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  165.940193][ T8755] RAX: ffffffffffffffda RBX: 00007f4e44d05f80 RCX: 00007f4e44b75e9f
[  165.948160][ T8755] RDX: 0000000000000036 RSI: 00000000200003c0 RDI: 00000000000000c8
[  165.956124][ T8755] RBP: 00007f4e445ff0a0 R08: 0000000000000000 R09: 0000000000000000
[  165.964085][ T8755] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001
[  165.972048][ T8755] R13: 000000000000000b R14: 00007f4e44d05f80 R15: 00007ffdee47cdd8
[  165.980024][ T8755]  </TASK>
[  166.137248][ T8761] batman_adv: batadv0: Adding interface: gretap1
[  166.138611][ T5232] block nbd4: Receive control failed (result -107)
[  166.143967][ T8761] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.177194][ T8761] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  166.197304][ T8750] nbd4: detected capacity change from 0 to 256
[  166.228523][ T5233] block nbd4: Dead connection, failed to find a fallback
[  166.235610][ T5233] block nbd4: shutting down sockets
[  166.301781][ T5233] blk_print_req_error: 64 callbacks suppressed
[  166.301808][ T5233] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  166.357615][ T5233] buffer_io_error: 64 callbacks suppressed
[  166.357634][ T5233] Buffer I/O error on dev nbd4, logical block 0, async page read
[  166.404073][ T5233] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  166.435849][ T5233] Buffer I/O error on dev nbd4, logical block 0, async page read
[  166.470079][ T5233] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  166.475601][ T8779] __nla_validate_parse: 8 callbacks suppressed
[  166.475619][ T8779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1218'.
[  166.496115][ T5233] Buffer I/O error on dev nbd4, logical block 0, async page read
[  166.496253][ T5233] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  166.496282][ T5233] Buffer I/O error on dev nbd4, logical block 0, async page read
[  166.496353][ T5233] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  166.535248][ T8779] tipc: Cannot configure node identity twice
[  166.573156][ T5233] Buffer I/O error on dev nbd4, logical block 0, async page read
[  166.593244][ T5233] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  166.630281][ T5233] Buffer I/O error on dev nbd4, logical block 0, async page read
[  166.657098][ T5233] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  166.701339][ T5233] Buffer I/O error on dev nbd4, logical block 0, async page read
[  166.733167][ T5233] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  166.760581][ T8785] netlink: 'syz.3.1219': attribute type 1 has an invalid length.
[  166.764140][ T5233] Buffer I/O error on dev nbd4, logical block 0, async page read
[  166.795292][ T5233] ldm_validate_partition_table(): Disk read failed.
[  166.807769][ T5233] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  166.817587][ T5233] Buffer I/O error on dev nbd4, logical block 0, async page read
[  166.825545][ T5233] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  166.835038][ T5233] Buffer I/O error on dev nbd4, logical block 0, async page read
[  166.843627][ T5233] Dev nbd4: unable to read RDB block 0
[  166.849842][ T5233]  nbd4: unable to read partition table
[  166.887363][ T8785] bond1: entered promiscuous mode
[  166.894631][ T5233] ldm_validate_partition_table(): Disk read failed.
[  166.927839][ T8785] 8021q: adding VLAN 0 to HW filter on device bond1
[  166.956069][ T5233] Dev nbd4: unable to read RDB block 0
[  166.971708][ T8787] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1219'.
[  166.981475][ T5233]  nbd4: unable to read partition table
[  166.993473][ T8800] netlink: 'syz.0.1222': attribute type 30 has an invalid length.
[  167.344895][ T8813] netlink: 'syz.0.1225': attribute type 30 has an invalid length.
[  167.395028][ T8817] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1226'.
[  167.680221][ T8834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1230'.
[  167.711062][ T8834] tipc: Cannot configure node identity twice
[  167.837485][ T8843] netlink: 'syz.2.1235': attribute type 30 has an invalid length.
[  168.098734][ T8856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1238'.
[  168.158183][ T8856] IPVS: set_ctl: invalid protocol: 136 172.30.0.3:20004
[  168.201700][  T943] IPVS: starting estimator thread 0...
[  168.316877][ T8864] IPVS: using max 21 ests per chain, 50400 per kthread
[  168.358851][ T8873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1241'.
[  168.521972][    C0] eth0: bad gso: type: 1, size: 1408
[  168.662008][ T8884] netlink: 'syz.1.1243': attribute type 10 has an invalid length.
[  168.726771][ T8884] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  168.750728][ T8893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1245'.
[  168.787491][ T8893] tipc: Cannot configure node identity twice
[  168.870847][ T8897] netlink: 'syz.0.1247': attribute type 30 has an invalid length.
[  169.029648][ T8904] xt_ecn: cannot match TCP bits for non-tcp packets
[  169.308979][ T8922] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1255'.
[  169.348179][ T8925] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1254'.
[  169.491959][ T8925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1254'.
[  169.640643][ T5237] block nbd16: Receive control failed (result -107)
[  169.678811][ T8938] nbd16: detected capacity change from 0 to 256
[  169.699201][ T5233] block nbd16: Dead connection, failed to find a fallback
[  169.736848][ T5233] block nbd16: shutting down sockets
[  169.754105][ T5233] ldm_validate_partition_table(): Disk read failed.
[  169.761385][ T5233] Dev nbd16: unable to read RDB block 0
[  169.769071][ T5233]  nbd16: unable to read partition table
[  169.785527][ T5233] ldm_validate_partition_table(): Disk read failed.
[  169.802925][ T5233] Dev nbd16: unable to read RDB block 0
[  169.823394][ T5233]  nbd16: unable to read partition table
[  169.898078][ T8950] netlink: 'syz.1.1262': attribute type 30 has an invalid length.
[  169.956404][ T8953] FAULT_INJECTION: forcing a failure.
[  169.956404][ T8953] name failslab, interval 1, probability 0, space 0, times 0
[  169.976150][ T8953] CPU: 0 UID: 0 PID: 8953 Comm: syz.0.1264 Not tainted 6.10.0-syzkaller-12613-g84383b5ef4cd #0
[  169.986533][ T8953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  169.996610][ T8953] Call Trace:
[  169.999920][ T8953]  <TASK>
[  170.002877][ T8953]  dump_stack_lvl+0x241/0x360
[  170.007588][ T8953]  ? __pfx_dump_stack_lvl+0x10/0x10
[  170.012814][ T8953]  ? __pfx__printk+0x10/0x10
[  170.017436][ T8953]  ? kmem_cache_alloc_noprof+0x44/0x2a0
[  170.023006][ T8953]  ? __pfx___might_resched+0x10/0x10
[  170.028332][ T8953]  should_fail_ex+0x3b0/0x4e0
[  170.033133][ T8953]  ? __kernfs_new_node+0xd8/0x870
[  170.038197][ T8953]  should_failslab+0xac/0x100
[  170.042907][ T8953]  ? __kernfs_new_node+0xd8/0x870
[  170.047954][ T8953]  kmem_cache_alloc_noprof+0x6c/0x2a0
[  170.053347][ T8953]  __kernfs_new_node+0xd8/0x870
[  170.058236][ T8953]  ? up_write+0x1a9/0x590
[  170.062574][ T8953]  ? __pfx___kernfs_new_node+0x10/0x10
[  170.068127][ T8953]  ? __pfx_up_write+0x10/0x10
[  170.072835][ T8953]  kernfs_new_node+0x137/0x240
[  170.077626][ T8953]  __kernfs_create_file+0x49/0x2e0
[  170.082756][ T8953]  sysfs_add_file_mode_ns+0x24a/0x310
[  170.088144][ T8953]  internal_create_group+0x7a7/0x11d0
[  170.093551][ T8953]  ? __pfx_internal_create_group+0x10/0x10
[  170.099379][ T8953]  sysfs_create_groups+0x56/0x120
[  170.104428][ T8953]  device_add_attrs+0xe5/0x600
[  170.109296][ T8953]  ? __pfx_device_add_attrs+0x10/0x10
[  170.114715][ T8953]  device_add+0x576/0xbf0
[  170.119057][ T8953]  ? device_initialize+0x266/0x460
[  170.124186][ T8953]  netdev_register_kobject+0x17e/0x320
[  170.129654][ T8953]  register_netdevice+0x12c5/0x1b00
[  170.134899][ T8953]  ? __pfx_register_netdevice+0x10/0x10
[  170.140461][ T8953]  ? dev_addr_mod+0xbd/0x330
[  170.145057][ T8953]  macvlan_common_newlink+0x1189/0x1930
[  170.150707][ T8953]  ? __pfx_macvlan_common_newlink+0x10/0x10
[  170.156623][ T8953]  ? __pfx_tap_handle_frame+0x10/0x10
[  170.162004][ T8953]  ? lockdep_rtnl_is_held+0x26/0x40
[  170.167224][ T8953]  ? netdev_rx_handler_register+0x78/0xe0
[  170.172958][ T8953]  macvtap_newlink+0x154/0x1d0
[  170.177818][ T8953]  ? __pfx_macvtap_newlink+0x10/0x10
[  170.183117][ T8953]  rtnl_newlink+0x1591/0x20a0
[  170.187845][ T8953]  ? __pfx_rtnl_newlink+0x10/0x10
[  170.192888][ T8953]  ? __pfx___mutex_trylock_common+0x10/0x10
[  170.198793][ T8953]  ? rcu_is_watching+0x15/0xb0
[  170.203590][ T8953]  ? trace_contention_end+0x3c/0x120
[  170.208908][ T8953]  ? __mutex_lock+0x2ef/0xd70
[  170.213713][ T8953]  ? __pfx_lock_release+0x10/0x10
[  170.218786][ T8953]  ? __pfx_rtnl_newlink+0x10/0x10
[  170.223836][ T8953]  rtnetlink_rcv_msg+0x73f/0xcf0
[  170.228795][ T8953]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  170.233936][ T8953]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  170.239436][ T8953]  ? ref_tracker_free+0x643/0x7e0
[  170.244589][ T8953]  netlink_rcv_skb+0x1e3/0x430
[  170.249366][ T8953]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  170.254839][ T8953]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  170.260165][ T8953]  ? netlink_deliver_tap+0x2e/0x1b0
[  170.265382][ T8953]  netlink_unicast+0x7f0/0x990
[  170.270156][ T8953]  ? __pfx_netlink_unicast+0x10/0x10
[  170.275433][ T8953]  ? __virt_addr_valid+0x183/0x530
[  170.280581][ T8953]  ? __check_object_size+0x49c/0x900
[  170.285887][ T8953]  ? bpf_lsm_netlink_send+0x9/0x10
[  170.291025][ T8953]  netlink_sendmsg+0x8e4/0xcb0
[  170.295895][ T8953]  ? __pfx_netlink_sendmsg+0x10/0x10
[  170.301184][ T8953]  ? __import_iovec+0x536/0x820
[  170.306041][ T8953]  ? aa_sock_msg_perm+0x91/0x160
[  170.311016][ T8953]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  170.316323][ T8953]  ? security_socket_sendmsg+0x87/0xb0
[  170.321799][ T8953]  ? __pfx_netlink_sendmsg+0x10/0x10
[  170.327107][ T8953]  __sock_sendmsg+0x221/0x270
[  170.331806][ T8953]  ____sys_sendmsg+0x525/0x7d0
[  170.336608][ T8953]  ? __pfx_____sys_sendmsg+0x10/0x10
[  170.341917][ T8953]  __sys_sendmsg+0x2b0/0x3a0
[  170.346524][ T8953]  ? __pfx___sys_sendmsg+0x10/0x10
[  170.351661][ T8953]  ? vfs_write+0x7c4/0xc90
[  170.356354][ T8953]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  170.362684][ T8953]  ? do_syscall_64+0x100/0x230
[  170.367462][ T8953]  ? do_syscall_64+0xb6/0x230
[  170.372168][ T8953]  do_syscall_64+0xf3/0x230
[  170.376694][ T8953]  ? clear_bhb_loop+0x35/0x90
[  170.381385][ T8953]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.387287][ T8953] RIP: 0033:0x7fa9c6f773b9
[  170.391712][ T8953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  170.411409][ T8953] RSP: 002b:00007fa9c7d3b048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  170.419841][ T8953] RAX: ffffffffffffffda RBX: 00007fa9c7105f80 RCX: 00007fa9c6f773b9
[  170.427818][ T8953] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000011
[  170.435828][ T8953] RBP: 00007fa9c7d3b0a0 R08: 0000000000000000 R09: 0000000000000000
[  170.443794][ T8953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  170.451774][ T8953] R13: 000000000000000b R14: 00007fa9c7105f80 R15: 00007fffce51c1d8
[  170.459774][ T8953]  </TASK>
[  170.555680][ T8956] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  170.565312][ T8956] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  170.574393][ T8956] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  170.583355][ T8956] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  170.635593][ T8956] vxlan0: entered promiscuous mode
[  171.035310][ T8982] netlink: 'syz.1.1276': attribute type 30 has an invalid length.
[  171.228004][ T8988] FAULT_INJECTION: forcing a failure.
[  171.228004][ T8988] name failslab, interval 1, probability 0, space 0, times 0
[  171.259235][ T8988] CPU: 1 UID: 0 PID: 8988 Comm: syz.2.1279 Not tainted 6.10.0-syzkaller-12613-g84383b5ef4cd #0
[  171.269621][ T8988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  171.279692][ T8988] Call Trace:
[  171.282977][ T8988]  <TASK>
[  171.285908][ T8988]  dump_stack_lvl+0x241/0x360
[  171.290590][ T8988]  ? __pfx_dump_stack_lvl+0x10/0x10
[  171.295781][ T8988]  ? __pfx__printk+0x10/0x10
[  171.300366][ T8988]  ? kmem_cache_alloc_noprof+0x44/0x2a0
[  171.305904][ T8988]  ? __pfx___might_resched+0x10/0x10
[  171.311184][ T8988]  should_fail_ex+0x3b0/0x4e0
[  171.315864][ T8988]  ? __kernfs_new_node+0xd8/0x870
[  171.320976][ T8988]  should_failslab+0xac/0x100
[  171.325656][ T8988]  ? __kernfs_new_node+0xd8/0x870
[  171.330675][ T8988]  kmem_cache_alloc_noprof+0x6c/0x2a0
[  171.336061][ T8988]  __kernfs_new_node+0xd8/0x870
[  171.340929][ T8988]  ? up_write+0x1a9/0x590
[  171.345268][ T8988]  ? __pfx___kernfs_new_node+0x10/0x10
[  171.350768][ T8988]  ? __pfx_up_write+0x10/0x10
[  171.355456][ T8988]  kernfs_new_node+0x137/0x240
[  171.360224][ T8988]  __kernfs_create_file+0x49/0x2e0
[  171.365336][ T8988]  sysfs_add_file_mode_ns+0x24a/0x310
[  171.370724][ T8988]  internal_create_group+0x7a7/0x11d0
[  171.376102][ T8988]  ? __pfx_internal_create_group+0x10/0x10
[  171.381909][ T8988]  sysfs_create_groups+0x56/0x120
[  171.386937][ T8988]  device_add_attrs+0xe5/0x600
[  171.391711][ T8988]  ? __pfx_device_add_attrs+0x10/0x10
[  171.397084][ T8988]  device_add+0x576/0xbf0
[  171.401407][ T8988]  ? device_initialize+0x266/0x460
[  171.406514][ T8988]  netdev_register_kobject+0x17e/0x320
[  171.412059][ T8988]  register_netdevice+0x12c5/0x1b00
[  171.417272][ T8988]  ? __pfx_register_netdevice+0x10/0x10
[  171.422812][ T8988]  ? dev_addr_mod+0xbd/0x330
[  171.427407][ T8988]  macvlan_common_newlink+0x1189/0x1930
[  171.432957][ T8988]  ? __pfx_macvlan_common_newlink+0x10/0x10
[  171.438845][ T8988]  ? __pfx_tap_handle_frame+0x10/0x10
[  171.444210][ T8988]  ? lockdep_rtnl_is_held+0x26/0x40
[  171.449405][ T8988]  ? netdev_rx_handler_register+0x78/0xe0
[  171.455128][ T8988]  macvtap_newlink+0x154/0x1d0
[  171.459891][ T8988]  ? __pfx_macvtap_newlink+0x10/0x10
[  171.465172][ T8988]  rtnl_newlink+0x1591/0x20a0
[  171.469866][ T8988]  ? __pfx_rtnl_newlink+0x10/0x10
[  171.474889][ T8988]  ? do_raw_spin_unlock+0x13c/0x8b0
[  171.480087][ T8988]  ? __mutex_lock+0x9a5/0xd70
[  171.484761][ T8988]  ? __mutex_lock+0x527/0xd70
[  171.489448][ T8988]  ? __pfx_rtnl_newlink+0x10/0x10
[  171.494472][ T8988]  rtnetlink_rcv_msg+0x73f/0xcf0
[  171.499402][ T8988]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  171.504510][ T8988]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  171.509976][ T8988]  ? ref_tracker_free+0x643/0x7e0
[  171.515019][ T8988]  netlink_rcv_skb+0x1e3/0x430
[  171.519784][ T8988]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  171.525258][ T8988]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  171.530568][ T8988]  ? netlink_deliver_tap+0x2e/0x1b0
[  171.535776][ T8988]  netlink_unicast+0x7f0/0x990
[  171.540638][ T8988]  ? __pfx_netlink_unicast+0x10/0x10
[  171.545920][ T8988]  ? __virt_addr_valid+0x183/0x530
[  171.551033][ T8988]  ? __check_object_size+0x49c/0x900
[  171.556338][ T8988]  ? bpf_lsm_netlink_send+0x9/0x10
[  171.561472][ T8988]  netlink_sendmsg+0x8e4/0xcb0
[  171.566262][ T8988]  ? __pfx_netlink_sendmsg+0x10/0x10
[  171.571564][ T8988]  ? __import_iovec+0x536/0x820
[  171.576506][ T8988]  ? aa_sock_msg_perm+0x91/0x160
[  171.581445][ T8988]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  171.586736][ T8988]  ? security_socket_sendmsg+0x87/0xb0
[  171.592219][ T8988]  ? __pfx_netlink_sendmsg+0x10/0x10
[  171.597512][ T8988]  __sock_sendmsg+0x221/0x270
[  171.602187][ T8988]  ____sys_sendmsg+0x525/0x7d0
[  171.606954][ T8988]  ? __pfx_____sys_sendmsg+0x10/0x10
[  171.612247][ T8988]  __sys_sendmsg+0x2b0/0x3a0
[  171.616837][ T8988]  ? __pfx___sys_sendmsg+0x10/0x10
[  171.621966][ T8988]  ? vfs_write+0x7c4/0xc90
[  171.626424][ T8988]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  171.632756][ T8988]  ? do_syscall_64+0x100/0x230
[  171.637534][ T8988]  ? do_syscall_64+0xb6/0x230
[  171.642216][ T8988]  do_syscall_64+0xf3/0x230
[  171.646729][ T8988]  ? clear_bhb_loop+0x35/0x90
[  171.651492][ T8988]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.657478][ T8988] RIP: 0033:0x7f4e44b773b9
[  171.661890][ T8988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  171.681494][ T8988] RSP: 002b:00007f4e445ff048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  171.689908][ T8988] RAX: ffffffffffffffda RBX: 00007f4e44d05f80 RCX: 00007f4e44b773b9
[  171.697872][ T8988] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000011
[  171.705859][ T8988] RBP: 00007f4e445ff0a0 R08: 0000000000000000 R09: 0000000000000000
[  171.713942][ T8988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  171.721919][ T8988] R13: 000000000000000b R14: 00007f4e44d05f80 R15: 00007ffdee47cdd8
[  171.729921][ T8988]  </TASK>
[  171.854077][ T8997] __nla_validate_parse: 6 callbacks suppressed
[  171.854097][ T8997] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1281'.
[  171.894758][ T8999] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1283'.
[  171.905086][ T8997] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1281'.
[  172.339803][ T9021] netlink: 'syz.3.1290': attribute type 30 has an invalid length.
[  172.358846][ T9019] xt_ecn: cannot match TCP bits for non-tcp packets
[  172.631273][ T9033] bond_slave_0: entered promiscuous mode
[  172.637070][ T9033] bond_slave_1: entered promiscuous mode
[  172.657771][ T9033] vlan2: entered promiscuous mode
[  172.669583][ T9033] bond0: entered promiscuous mode
[  172.689791][ T9033] bond0: left promiscuous mode
[  172.703030][ T9033] bond_slave_0: left promiscuous mode
[  172.708621][ T9033] bond_slave_1: left promiscuous mode
[  172.955740][ T9049] netlink: 'syz.2.1299': attribute type 1 has an invalid length.
[  172.989105][ T9051] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  173.008126][ T9051] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  173.053715][ T2959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.066782][ T2959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.116948][ T9060] netlink: 'syz.4.1303': attribute type 30 has an invalid length.
[  173.162084][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1302'.
[  173.309645][ T9059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1302'.
[  173.404684][ T5232] block nbd17: Receive control failed (result -107)
[  173.472221][ T9059] nbd17: detected capacity change from 0 to 256
[  173.506985][ T5233] block nbd17: Dead connection, failed to find a fallback
[  173.534943][ T9082] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1311'.
[  173.552403][ T5233] block nbd17: shutting down sockets
[  173.569222][ T5233] blk_print_req_error: 64 callbacks suppressed
[  173.569241][ T5233] I/O error, dev nbd17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  173.599871][ T5233] buffer_io_error: 64 callbacks suppressed
[  173.599889][ T5233] Buffer I/O error on dev nbd17, logical block 0, async page read
[  173.656808][ T5233] I/O error, dev nbd17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  173.697856][ T5233] Buffer I/O error on dev nbd17, logical block 0, async page read
[  173.716318][ T5233] I/O error, dev nbd17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  173.730264][ T9093] netlink: 'syz.2.1314': attribute type 30 has an invalid length.
[  173.744345][ T5233] Buffer I/O error on dev nbd17, logical block 0, async page read
[  173.771016][ T5233] I/O error, dev nbd17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  173.798492][ T5233] Buffer I/O error on dev nbd17, logical block 0, async page read
[  173.825599][ T5233] I/O error, dev nbd17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  173.860288][ T5233] Buffer I/O error on dev nbd17, logical block 0, async page read
[  173.889756][ T5233] I/O error, dev nbd17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  173.932368][ T5233] Buffer I/O error on dev nbd17, logical block 0, async page read
[  173.959928][ T5233] I/O error, dev nbd17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  173.976246][ T5233] Buffer I/O error on dev nbd17, logical block 0, async page read
[  173.995001][ T5233] I/O error, dev nbd17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  174.013494][ T5233] Buffer I/O error on dev nbd17, logical block 0, async page read
[  174.045090][ T5233] ldm_validate_partition_table(): Disk read failed.
[  174.069426][ T5233] I/O error, dev nbd17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  174.099200][ T5233] Buffer I/O error on dev nbd17, logical block 0, async page read
[  174.134455][ T9110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1321'.
[  174.134751][ T5233] I/O error, dev nbd17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  174.185462][ T5233] Buffer I/O error on dev nbd17, logical block 0, async page read
[  174.237388][ T5233] Dev nbd17: unable to read RDB block 0
[  174.267828][ T5233]  nbd17: unable to read partition table
[  174.282499][ T5233] ldm_validate_partition_table(): Disk read failed.
[  174.291783][ T5233] Dev nbd17: unable to read RDB block 0
[  174.296852][ T9110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1321'.
[  174.299368][ T5233]  nbd17: unable to read partition table
[  174.378278][ T5232] block nbd18: Receive control failed (result -107)
[  174.449379][ T9110] nbd18: detected capacity change from 0 to 256
[  174.463715][ T5233] block nbd18: Dead connection, failed to find a fallback
[  174.474602][ T9123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1325'.
[  174.474666][ T5233] block nbd18: shutting down sockets
[  174.490713][ T5233] ldm_validate_partition_table(): Disk read failed.
[  174.506853][ T8348] IPVS: starting estimator thread 0...
[  174.515432][ T5233] Dev nbd18: unable to read RDB block 0
[  174.524633][ T5233]  nbd18: unable to read partition table
[  174.541357][ T5233] ldm_validate_partition_table(): Disk read failed.
[  174.557485][ T5233] Dev nbd18: unable to read RDB block 0
[  174.566348][ T5233]  nbd18: unable to read partition table
[  174.579117][ T9123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1325'.
[  174.637246][ T9128] IPVS: using max 19 ests per chain, 45600 per kthread
[  174.679504][ T5232] block nbd19: Receive control failed (result -107)
[  174.720561][ T9123] nbd19: detected capacity change from 0 to 256
[  174.754709][ T5233] block nbd19: Dead connection, failed to find a fallback
[  174.826091][ T9134] Cannot find add_set index 0 as target
[  174.846765][ T5233] block nbd19: shutting down sockets
[  174.852642][ T5233] ldm_validate_partition_table(): Disk read failed.
[  174.919988][ T5233] Dev nbd19: unable to read RDB block 0
[  174.925950][ T5233]  nbd19: unable to read partition table
[  174.961023][ T5233] ldm_validate_partition_table(): Disk read failed.
[  174.990712][ T5233] Dev nbd19: unable to read RDB block 0
[  175.001260][ T5233]  nbd19: unable to read partition table
[  175.067319][ T9141] netlink: 'syz.3.1329': attribute type 30 has an invalid length.
[  175.279541][ T9152] xt_l2tp: v2 doesn't support IP mode
[  175.821284][ T5232] block nbd20: Receive control failed (result -107)
[  175.878056][ T9167] nbd20: detected capacity change from 0 to 256
[  175.914505][ T5233] block nbd20: Dead connection, failed to find a fallback
[  175.945847][ T5233] block nbd20: shutting down sockets
[  175.957544][ T5233] ldm_validate_partition_table(): Disk read failed.
[  175.977811][ T5233] Dev nbd20: unable to read RDB block 0
[  176.003464][ T9181] SET target dimension over the limit!
[  176.013357][ T5233]  nbd20: unable to read partition table
[  176.032439][ T9187] netlink: 'syz.1.1343': attribute type 30 has an invalid length.
[  176.054338][ T5233] ldm_validate_partition_table(): Disk read failed.
[  176.093189][ T5233] Dev nbd20: unable to read RDB block 0
[  176.118782][ T5233]  nbd20: unable to read partition table
[  176.328265][ T9199] vlan2: entered promiscuous mode
[  176.372807][ T9199] team0: Port device vlan2 added
[  176.810821][ T9222] SET target dimension over the limit!
[  176.930984][ T9230] netlink: 'syz.4.1360': attribute type 3 has an invalid length.
[  176.951765][ T9228] netlink: 'syz.0.1359': attribute type 30 has an invalid length.
[  176.956403][ T9230] __nla_validate_parse: 7 callbacks suppressed
[  176.956419][ T9230] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1360'.
[  176.996402][ T9230] netlink: 'syz.4.1360': attribute type 3 has an invalid length.
[  177.012206][ T9230] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1360'.
[  177.028961][ T9230] netlink: 'syz.4.1360': attribute type 3 has an invalid length.
[  177.041717][ T9230] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1360'.
[  177.053837][ T9230] netlink: 'syz.4.1360': attribute type 3 has an invalid length.
[  177.083425][ T9230] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1360'.
[  177.113078][ T9230] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1360'.
[  177.163586][ T9240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1362'.
[  177.168072][ T9230] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1360'.
[  177.220507][ T9230] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1360'.
[  177.236314][ T9230] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1360'.
[  177.255482][ T9230] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1360'.
[  177.384869][ T9248] SET target dimension over the limit!
[  177.820425][ T5232] block nbd21: Receive control failed (result -107)
[  177.847972][ T9267] nbd21: detected capacity change from 0 to 256
[  177.863712][ T5233] block nbd21: Dead connection, failed to find a fallback
[  177.873126][ T5233] block nbd21: shutting down sockets
[  177.887526][ T5233] ldm_validate_partition_table(): Disk read failed.
[  177.906235][ T5233] Dev nbd21: unable to read RDB block 0
[  177.938444][ T5233]  nbd21: unable to read partition table
[  177.975061][ T5233] ldm_validate_partition_table(): Disk read failed.
[  177.984830][ T5233] Dev nbd21: unable to read RDB block 0
[  178.003562][ T5233]  nbd21: unable to read partition table
[  178.069548][ T9280] ipvlan3: entered allmulticast mode
[  178.074977][ T9280] veth0_vlan: entered allmulticast mode
[  178.315204][ T9291] validate_nla: 30 callbacks suppressed
[  178.315224][ T9291] netlink: 'syz.4.1382': attribute type 4 has an invalid length.
[  178.342405][ T9291] netlink: 'syz.4.1382': attribute type 4 has an invalid length.
[  178.405049][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802ca4d000: rx timeout, send abort
[  178.415881][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802ca4d000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  178.746850][ T9312] netlink: 'syz.3.1389': attribute type 1 has an invalid length.
[  178.781330][ T5232] block nbd22: Receive control failed (result -107)
[  178.838371][ T9305] nbd22: detected capacity change from 0 to 256
[  178.853432][ T9312] bond2: entered promiscuous mode
[  178.854073][ T5233] block nbd22: Dead connection, failed to find a fallback
[  178.867251][ T5233] block nbd22: shutting down sockets
[  178.872606][ T5233] blk_print_req_error: 175 callbacks suppressed
[  178.872621][ T5233] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  178.879956][ T9312] 8021q: adding VLAN 0 to HW filter on device bond2
[  178.888955][ T5233] buffer_io_error: 175 callbacks suppressed
[  178.888968][ T5233] Buffer I/O error on dev nbd22, logical block 0, async page read
[  178.927868][ T5233] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  178.937473][ T5233] Buffer I/O error on dev nbd22, logical block 0, async page read
[  178.945451][ T5233] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  178.948874][ T9319] team0: entered promiscuous mode
[  178.955279][ T5233] Buffer I/O error on dev nbd22, logical block 0, async page read
[  178.968600][ T5233] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  178.979590][ T9319] team_slave_0: entered promiscuous mode
[  178.986187][ T9319] team_slave_1: entered promiscuous mode
[  179.022934][ T5233] Buffer I/O error on dev nbd22, logical block 0, async page read
[  179.034331][ T5233] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  179.056756][ T9316] team_slave_0: entered allmulticast mode
[  179.066140][ T5233] Buffer I/O error on dev nbd22, logical block 0, async page read
[  179.076250][ T5233] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  179.106185][ T9316] team0: Port device team_slave_0 removed
[  179.112867][ T5233] Buffer I/O error on dev nbd22, logical block 0, async page read
[  179.135482][ T5233] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  179.148590][ T9315] team0: left promiscuous mode
[  179.154659][ T9315] team_slave_1: left promiscuous mode
[  179.170955][ T5233] Buffer I/O error on dev nbd22, logical block 0, async page read
[  179.205699][ T5233] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  179.217462][ T5233] Buffer I/O error on dev nbd22, logical block 0, async page read
[  179.225687][ T5233] ldm_validate_partition_table(): Disk read failed.
[  179.256412][ T5233] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  179.292059][ T5233] Buffer I/O error on dev nbd22, logical block 0, async page read
[  179.336878][ T5233] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  179.365702][ T5233] Buffer I/O error on dev nbd22, logical block 0, async page read
[  179.406947][ T5233] Dev nbd22: unable to read RDB block 0
[  179.422905][ T5233]  nbd22: unable to read partition table
[  179.438745][ T5233] ldm_validate_partition_table(): Disk read failed.
[  179.453786][ T5233] Dev nbd22: unable to read RDB block 0
[  179.483469][ T5233]  nbd22: unable to read partition table
[  179.714465][ T9342] 8021q: adding VLAN 0 to HW filter on device ipvlan4
[  179.840886][ T9355] netlink: 'syz.1.1403': attribute type 1 has an invalid length.
[  179.951924][ T9355] bond1: entered promiscuous mode
[  180.059820][ T9355] lo: entered promiscuous mode
[  180.075568][ T9355] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  180.159399][ T9355] bond1: (slave lo): making interface the new active one
[  180.173908][ T9355] bond1: (slave lo): Enslaving as an active interface with an up link
[  180.620487][   T55] block nbd23: Receive control failed (result -107)
[  180.677804][ T9388] nbd23: detected capacity change from 0 to 256
[  180.689242][ T5233] block nbd23: Dead connection, failed to find a fallback
[  180.705344][ T9391] ip6t_srh: unknown srh invflags A757
[  180.724967][ T5233] block nbd23: shutting down sockets
[  180.747769][ T5233] ldm_validate_partition_table(): Disk read failed.
[  180.798489][ T5233] Dev nbd23: unable to read RDB block 0
[  180.816047][ T5233]  nbd23: unable to read partition table
[  180.844446][ T5233] ldm_validate_partition_table(): Disk read failed.
[  180.853766][ T5233] Dev nbd23: unable to read RDB block 0
[  180.867790][ T5233]  nbd23: unable to read partition table
[  181.279771][   T55] block nbd24: Receive control failed (result -107)
[  181.317179][   T55] Bluetooth: hci3: command 0x1407 tx timeout
[  181.317234][ T5241] Bluetooth: hci1: command 0x0406 tx timeout
[  181.326197][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  181.339355][ T9418] nbd24: detected capacity change from 0 to 256
[  181.352273][ T9423] dummy0: entered promiscuous mode
[  181.363657][ T5233] block nbd24: Dead connection, failed to find a fallback
[  181.369201][ T9423] macvtap1: entered promiscuous mode
[  181.376448][ T9423] macvtap1: entered allmulticast mode
[  181.385912][ T9423] dummy0: entered allmulticast mode
[  181.390205][ T5233] block nbd24: shutting down sockets
[  181.438811][ T5233] ldm_validate_partition_table(): Disk read failed.
[  181.445728][ T5233] Dev nbd24: unable to read RDB block 0
[  181.452863][ T5233]  nbd24: unable to read partition table
[  181.464571][ T5233] ldm_validate_partition_table(): Disk read failed.
[  181.477800][ T5233] Dev nbd24: unable to read RDB block 0
[  181.483740][ T5233]  nbd24: unable to read partition table
[  181.584927][ T9433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  181.975996][ T9459] __nla_validate_parse: 43 callbacks suppressed
[  181.976019][ T9459] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1437'.
[  182.062290][ T9459] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1437'.
[  182.106493][ T9465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1441'.
[  182.245194][ T9463] syzkaller0: entered promiscuous mode
[  182.253341][ T9463] syzkaller0: entered allmulticast mode
[  182.256923][ T9465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1441'.
[  182.338932][ T5232] block nbd25: Receive control failed (result -107)
[  182.387499][ T9465] nbd25: detected capacity change from 0 to 256
[  182.443435][ T8380] block nbd25: Dead connection, failed to find a fallback
[  182.475939][ T8380] block nbd25: shutting down sockets
[  182.487239][ T9484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1445'.
[  182.497316][ T8380] ldm_validate_partition_table(): Disk read failed.
[  182.504230][ T8380] Dev nbd25: unable to read RDB block 0
[  182.532313][ T8380]  nbd25: unable to read partition table
[  182.553538][ T8380] ldm_validate_partition_table(): Disk read failed.
[  182.569308][ T8380] Dev nbd25: unable to read RDB block 0
[  182.575377][ T8380]  nbd25: unable to read partition table
[  183.785478][ T9480] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1445'.
[  183.801951][ T9482] vlan2: entered promiscuous mode
[  184.040101][ T9509] netlink: 'syz.1.1452': attribute type 4 has an invalid length.
[  184.083437][ T9510] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1454'.
[  184.127365][ T9510] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1454'.
[  184.627449][ T9533] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1462'.
[  184.712175][ T9533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1462'.
[  184.986339][ T9551] bond_slave_0: entered promiscuous mode
[  184.992162][ T9551] bond_slave_1: entered promiscuous mode
[  185.030107][ T9551] vlan2: entered promiscuous mode
[  185.053155][ T9551] bond0: entered promiscuous mode
[  185.176322][ T9551] bond0: left promiscuous mode
[  185.183108][ T9551] bond_slave_0: left promiscuous mode
[  185.188639][ T9551] bond_slave_1: left promiscuous mode
[  185.394046][ T9566] tun0: tun_chr_ioctl cmd 1074025692
[  185.883983][ T9594] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  186.052550][ T9603] netlink: 'syz.3.1482': attribute type 10 has an invalid length.
[  186.078241][ T9603] netlink: 'syz.3.1482': attribute type 10 has an invalid length.
[  186.094829][ T9603] team0: Port device netdevsim0 removed
[  186.145153][ T9603] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  186.362463][ T9618] veth1_macvtap: left promiscuous mode
[  186.472309][ T9630] netlink: 'syz.0.1487': attribute type 3 has an invalid length.
[  186.622745][ T5232] block nbd26: Receive control failed (result -107)
[  186.656809][    C0] eth0: bad gso: type: 1, size: 1408
[  186.664336][    C0] eth0: bad gso: type: 1, size: 1408
[  186.667522][ T9633] nbd26: detected capacity change from 0 to 256
[  186.716896][ T5233] block nbd26: Dead connection, failed to find a fallback
[  186.757229][ T5233] block nbd26: shutting down sockets
[  186.762601][ T5233] blk_print_req_error: 138 callbacks suppressed
[  186.762616][ T5233] I/O error, dev nbd26, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  186.827621][ T5233] buffer_io_error: 138 callbacks suppressed
[  186.827642][ T5233] Buffer I/O error on dev nbd26, logical block 0, async page read
[  186.886794][ T5233] I/O error, dev nbd26, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  186.907388][ T5233] Buffer I/O error on dev nbd26, logical block 0, async page read
[  186.915345][ T5233] I/O error, dev nbd26, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  186.931799][ T5233] Buffer I/O error on dev nbd26, logical block 0, async page read
[  186.940112][ T5233] I/O error, dev nbd26, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  186.949614][ T5233] Buffer I/O error on dev nbd26, logical block 0, async page read
[  186.959060][ T5233] I/O error, dev nbd26, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  186.968517][ T5233] Buffer I/O error on dev nbd26, logical block 0, async page read
[  186.976791][ T5233] I/O error, dev nbd26, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  186.986007][ T5233] Buffer I/O error on dev nbd26, logical block 0, async page read
[  187.006724][ T5233] I/O error, dev nbd26, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  187.015890][ T5233] Buffer I/O error on dev nbd26, logical block 0, async page read
[  187.053324][ T5233] I/O error, dev nbd26, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  187.072347][ T5233] Buffer I/O error on dev nbd26, logical block 0, async page read
[  187.078855][ T9648] tap0: tun_chr_ioctl cmd 1074025677
[  187.085719][ T5233] ldm_validate_partition_table(): Disk read failed.
[  187.096960][ T9648] tap0: linktype set to 147
[  187.119530][ T5233] I/O error, dev nbd26, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  187.139576][ T5233] Buffer I/O error on dev nbd26, logical block 0, async page read
[  187.154905][ T5233] I/O error, dev nbd26, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  187.205660][ T5233] Buffer I/O error on dev nbd26, logical block 0, async page read
[  187.225021][ T5233] Dev nbd26: unable to read RDB block 0
[  187.245353][ T5233]  nbd26: unable to read partition table
[  187.264193][ T5233] ldm_validate_partition_table(): Disk read failed.
[  187.273588][ T5233] Dev nbd26: unable to read RDB block 0
[  187.280090][ T5233]  nbd26: unable to read partition table
[  187.572373][ T9689] syzkaller1: entered promiscuous mode
[  187.593820][ T9689] syzkaller1: entered allmulticast mode
[  187.645902][ T9689] __nla_validate_parse: 8 callbacks suppressed
[  187.645921][ T9689] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1503'.
[  187.672296][ T9684] netlink: 'syz.4.1502': attribute type 1 has an invalid length.
[  187.710858][ T9684] bond2: entered promiscuous mode
[  187.781822][ T9706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1506'.
[  187.877543][ T9706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1506'.
[  187.928831][ T5232] block nbd27: Receive control failed (result -107)
[  187.967256][ T9706] nbd27: detected capacity change from 0 to 256
[  187.986746][ T5233] block nbd27: Dead connection, failed to find a fallback
[  188.014412][ T5233] block nbd27: shutting down sockets
[  188.033129][ T9709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1507'.
[  188.034801][ T5233] ldm_validate_partition_table(): Disk read failed.
[  188.063450][ T5233] Dev nbd27: unable to read RDB block 0
[  188.071958][ T5233]  nbd27: unable to read partition table
[  188.090578][ T5233] ldm_validate_partition_table(): Disk read failed.
[  188.110203][ T5233] Dev nbd27: unable to read RDB block 0
[  188.117892][ T5233]  nbd27: unable to read partition table
[  188.126970][ T9709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1507'.
[  188.188513][ T5232] block nbd28: Receive control failed (result -107)
[  188.227324][ T9709] nbd28: detected capacity change from 0 to 256
[  188.246344][ T5233] block nbd28: Dead connection, failed to find a fallback
[  188.280308][ T5233] block nbd28: shutting down sockets
[  188.287089][ T5233] ldm_validate_partition_table(): Disk read failed.
[  188.294364][ T5233] Dev nbd28: unable to read RDB block 0
[  188.300813][ T5233]  nbd28: unable to read partition table
[  188.302567][ T9720] tap0: tun_chr_ioctl cmd 1074025675
[  188.320004][ T9720] tap0: persist enabled
[  188.323430][ T5233] ldm_validate_partition_table(): Disk read failed.
[  188.325741][ T9720] tap0: tun_chr_ioctl cmd 1074025675
[  188.348124][ T9720] tap0: persist enabled
[  188.361714][ T5233] Dev nbd28: unable to read RDB block 0
[  188.373138][ T5233]  nbd28: unable to read partition table
[  188.393980][ T9720] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  188.615695][ T9729] bond_slave_0: entered promiscuous mode
[  188.621891][ T9729] bond_slave_1: entered promiscuous mode
[  188.627765][ T9729] team_slave_0: entered promiscuous mode
[  188.633808][ T9729] team_slave_1: entered promiscuous mode
[  188.639594][ T9729] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  188.694719][ T9729] vlan2: entered promiscuous mode
[  188.720103][ T9742] FAULT_INJECTION: forcing a failure.
[  188.720103][ T9742] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  188.729209][ T9729] bond0: entered promiscuous mode
[  188.761358][ T9742] CPU: 1 UID: 0 PID: 9742 Comm: syz.0.1515 Not tainted 6.10.0-syzkaller-12613-g84383b5ef4cd #0
[  188.771231][ T9729] team0: entered promiscuous mode
[  188.771714][ T9742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  188.787077][ T9742] Call Trace:
[  188.790378][ T9742]  <TASK>
[  188.793309][ T9742]  dump_stack_lvl+0x241/0x360
[  188.798018][ T9742]  ? __pfx_dump_stack_lvl+0x10/0x10
[  188.803238][ T9742]  ? __pfx__printk+0x10/0x10
[  188.807853][ T9742]  ? __pfx_lock_release+0x10/0x10
[  188.812905][ T9742]  ? rcu_is_watching+0x15/0xb0
[  188.817702][ T9742]  should_fail_ex+0x3b0/0x4e0
[  188.822406][ T9742]  _copy_from_iter+0x1f6/0x1960
[  188.827254][ T9742]  ? alloc_pages_mpol_noprof+0x417/0x680
[  188.832954][ T9742]  ? __pfx__copy_from_iter+0x10/0x10
[  188.838245][ T9742]  ? __pfx_alloc_pages_mpol_noprof+0x10/0x10
[  188.844254][ T9742]  ? alloc_pages_noprof+0xef/0x170
[  188.849358][ T9742]  ? page_copy_sane+0x46/0x260
[  188.854116][ T9742]  copy_page_from_iter+0x7a/0x100
[  188.859140][ T9742]  tun_get_user+0x1f7d/0x4720
[  188.863826][ T9742]  ? tun_get_user+0x871/0x4720
[  188.868602][ T9742]  ? __lock_acquire+0x137a/0x2040
[  188.873655][ T9742]  ? __pfx_tun_get_user+0x10/0x10
[  188.878719][ T9742]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  188.884207][ T9742]  ? tun_get+0x1e/0x2f0
[  188.888391][ T9742]  ? __pfx_lock_release+0x10/0x10
[  188.893454][ T9742]  ? tun_get+0x1e/0x2f0
[  188.897645][ T9742]  ? tun_get+0x27d/0x2f0
[  188.901916][ T9742]  tun_chr_write_iter+0x113/0x1f0
[  188.906969][ T9742]  vfs_write+0xa72/0xc90
[  188.911240][ T9742]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  188.916816][ T9742]  ? __pfx_vfs_write+0x10/0x10
[  188.921626][ T9742]  ksys_write+0x1a0/0x2c0
[  188.926001][ T9742]  ? __pfx_ksys_write+0x10/0x10
[  188.930879][ T9742]  ? do_syscall_64+0x100/0x230
[  188.935666][ T9742]  ? do_syscall_64+0xb6/0x230
[  188.940373][ T9742]  do_syscall_64+0xf3/0x230
[  188.944963][ T9742]  ? clear_bhb_loop+0x35/0x90
[  188.949731][ T9742]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.955621][ T9742] RIP: 0033:0x7fa9c6f75e9f
[  188.960035][ T9742] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8d 02 00 48
[  188.979646][ T9742] RSP: 002b:00007fa9c7cf9010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  188.988056][ T9742] RAX: ffffffffffffffda RBX: 00007fa9c7106130 RCX: 00007fa9c6f75e9f
[  188.996020][ T9742] RDX: 000000000000006e RSI: 0000000020000c40 RDI: 00000000000000c8
[  189.003991][ T9742] RBP: 00007fa9c7cf90a0 R08: 0000000000000000 R09: 0000000000000000
[  189.011961][ T9742] R10: 000000000000006e R11: 0000000000000293 R12: 0000000000000001
[  189.019925][ T9742] R13: 000000000000006e R14: 00007fa9c7106130 R15: 00007fffce51c1d8
[  189.027900][ T9742]  </TASK>
[  189.034186][ T9729] bond0: left promiscuous mode
[  189.040557][ T9729] team0: left promiscuous mode
[  189.052064][ T9729] bond_slave_0: left promiscuous mode
[  189.057652][ T9729] bond_slave_1: left promiscuous mode
[  189.063141][ T9729] team_slave_0: left promiscuous mode
[  189.068631][ T9729] team_slave_1: left promiscuous mode
[  189.074096][ T9729] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  189.135506][ T9747] SET target dimension over the limit!
[  189.524056][ T9776] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.1527'.
[  189.844114][ T9788] macvlan0: entered promiscuous mode
[  189.886822][ T9790] bond_slave_0: entered promiscuous mode
[  189.892590][ T9790] bond_slave_1: entered promiscuous mode
[  189.897673][ T9794] netlink: 'syz.0.1533': attribute type 1 has an invalid length.
[  189.902460][ T9790] vlan2: entered promiscuous mode
[  189.911514][ T9790] bond0: entered promiscuous mode
[  189.917476][ T9790] macvlan0: entered promiscuous mode
[  189.929923][ T9790] bond0: left promiscuous mode
[  189.934946][ T9790] macvlan0: left promiscuous mode
[  189.940689][ T9790] bond_slave_0: left promiscuous mode
[  189.946151][ T9790] bond_slave_1: left promiscuous mode
[  189.991366][ T9788] macvlan0: left promiscuous mode
[  190.294523][ T9810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1540'.
[  190.395153][ T9814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1538'.
[  190.425901][ T9813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1541'.
[  190.429181][ T9814] netlink: 'syz.0.1538': attribute type 1 has an invalid length.
[  190.457314][ T9814] netlink: 9208 bytes leftover after parsing attributes in process `syz.0.1538'.
[  190.466482][ T9814] netlink: 'syz.0.1538': attribute type 1 has an invalid length.
[  190.477849][ T9818] bridge0: port 3(bond0) entered blocking state
[  190.484591][ T9818] bridge0: port 3(bond0) entered disabled state
[  190.497150][ T9818] bond0: entered allmulticast mode
[  190.502302][ T9818] bond_slave_0: entered allmulticast mode
[  190.516996][ T9818] bond_slave_1: entered allmulticast mode
[  190.523190][ T9818] macvlan0: entered allmulticast mode
[  190.532109][ T9818] veth1_vlan: entered allmulticast mode
[  190.546280][ T9818] bond0: entered promiscuous mode
[  190.555617][ T9818] bond_slave_0: entered promiscuous mode
[  190.561602][ T9818] bond_slave_1: entered promiscuous mode
[  190.570940][ T9818] macvlan0: entered promiscuous mode
[  190.578675][ T9818] bridge0: port 3(bond0) entered blocking state
[  190.585346][ T9818] bridge0: port 3(bond0) entered forwarding state
[  190.644775][ T9822] ip6t_REJECT: ECHOREPLY is not supported
[  190.672542][ T9822] netlink: 'syz.3.1544': attribute type 1 has an invalid length.
[  190.692412][ T9822] netlink: 'syz.3.1544': attribute type 1 has an invalid length.
[  190.729822][ T9822] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  190.743405][ T9822] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  190.747141][ T9828] bond_slave_0: entered promiscuous mode
[  190.757801][ T9828] bond_slave_1: entered promiscuous mode
[  190.775820][ T9828] vlan2: entered promiscuous mode
[  190.784548][ T9828] bond0: entered promiscuous mode
[  190.800402][ T9828] bond0: left promiscuous mode
[  190.805932][ T9828] bond_slave_0: left promiscuous mode
[  190.811459][ T9828] bond_slave_1: left promiscuous mode
[  190.953522][ T9836] netlink: 'syz.1.1549': attribute type 2 has an invalid length.
[  190.957494][ T9838] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  190.989409][ T9836] macvlan2: entered allmulticast mode
[  191.079834][ T9844] bridge0: port 3(bond0) entered disabled state
[  191.211908][ T9852] syz.0.1555[9852] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  191.212139][ T9852] syz.0.1555[9852] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  191.279776][ T9852] netlink: 'syz.0.1555': attribute type 21 has an invalid length.
[  191.597209][ T9869] bond_slave_0: entered promiscuous mode
[  191.602980][ T9869] bond_slave_1: entered promiscuous mode
[  191.608743][ T9869] team_slave_0: entered promiscuous mode
[  191.614432][ T9869] team_slave_1: entered promiscuous mode
[  191.620197][ T9869] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  191.665648][ T9869] vlan2: entered promiscuous mode
[  191.685751][ T9869] bond0: entered promiscuous mode
[  191.706038][ T9869] team0: entered promiscuous mode
[  191.715016][ T9869] bond0: left promiscuous mode
[  191.726977][ T9869] team0: left promiscuous mode
[  191.733054][ T9869] bond_slave_0: left promiscuous mode
[  191.738572][ T9869] bond_slave_1: left promiscuous mode
[  191.744044][ T9869] team_slave_0: left promiscuous mode
[  191.749552][ T9869] team_slave_1: left promiscuous mode
[  191.755011][ T9869] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  191.803608][ T9882] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  192.585739][ T9905] ip6t_REJECT: ECHOREPLY is not supported
[  192.630285][ T9905] netlink: 'syz.4.1571': attribute type 1 has an invalid length.
[  192.671042][ T9905] __nla_validate_parse: 8 callbacks suppressed
[  192.671061][ T9905] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.1571'.
[  192.712066][ T9905] netlink: 'syz.4.1571': attribute type 1 has an invalid length.
[  192.737707][ T9910] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  192.755652][ T9910] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  192.779515][ T9909] SET target dimension over the limit!
[  192.912205][ T9917] bond0: entered allmulticast mode
[  192.920850][ T9917] bond_slave_0: entered allmulticast mode
[  192.927217][ T9917] bond_slave_1: entered allmulticast mode
[  192.933323][ T9917] team0: entered allmulticast mode
[  192.939282][ T9917] team_slave_0: entered allmulticast mode
[  192.945192][ T9917] team_slave_1: entered allmulticast mode
[  192.951607][ T9917] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  192.963498][ T9917] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.068010][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1577'.
[  193.137222][ T9924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1577'.
[  193.179379][ T5232] block nbd29: Receive control failed (result -107)
[  193.249309][ T9924] nbd29: detected capacity change from 0 to 256
[  193.271557][ T5233] block nbd29: Dead connection, failed to find a fallback
[  193.314945][ T5233] block nbd29: shutting down sockets
[  193.321892][ T5233] blk_print_req_error: 101 callbacks suppressed
[  193.321908][ T5233] I/O error, dev nbd29, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  193.356894][ T5233] buffer_io_error: 101 callbacks suppressed
[  193.356911][ T5233] Buffer I/O error on dev nbd29, logical block 0, async page read
[  193.391625][ T5233] I/O error, dev nbd29, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  193.426830][ T5233] Buffer I/O error on dev nbd29, logical block 0, async page read
[  193.455130][ T5233] I/O error, dev nbd29, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  193.493081][ T5233] Buffer I/O error on dev nbd29, logical block 0, async page read
[  193.528185][ T5233] I/O error, dev nbd29, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  193.559188][ T5233] Buffer I/O error on dev nbd29, logical block 0, async page read
[  193.579324][ T5233] I/O error, dev nbd29, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  193.606181][ T5233] Buffer I/O error on dev nbd29, logical block 0, async page read
[  193.638519][ T5233] I/O error, dev nbd29, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  193.712788][ T5233] Buffer I/O error on dev nbd29, logical block 0, async page read
[  193.760423][ T5233] I/O error, dev nbd29, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  193.808982][ T5233] Buffer I/O error on dev nbd29, logical block 0, async page read
[  193.847564][ T5233] I/O error, dev nbd29, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  193.906836][ T5233] Buffer I/O error on dev nbd29, logical block 0, async page read
[  193.936730][ T5233] ldm_validate_partition_table(): Disk read failed.
[  193.959165][ T5226] syz-executor (5226) used greatest stack depth: 18416 bytes left
[  193.959806][ T5233] I/O error, dev nbd29, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  193.996100][ T5233] Buffer I/O error on dev nbd29, logical block 0, async page read
[  194.004873][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  194.015838][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  194.025075][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  194.034765][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  194.041151][ T5233] I/O error, dev nbd29, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  194.073421][ T5237] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  194.080931][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  194.081999][ T5233] Buffer I/O error on dev nbd29, logical block 0, async page read
[  194.128997][ T5233] Dev nbd29: unable to read RDB block 0
[  194.143480][ T5233]  nbd29: unable to read partition table
[  194.153903][ T5233] ldm_validate_partition_table(): Disk read failed.
[  194.162079][ T5233] Dev nbd29: unable to read RDB block 0
[  194.169341][ T5233]  nbd29: unable to read partition table
[  194.237205][ T9949] SET target dimension over the limit!
[  194.243272][ T9953] ipvlan0: entered promiscuous mode
[  194.249830][ T9953] ipvlan0: entered allmulticast mode
[  194.255285][ T9953] veth0_vlan: entered allmulticast mode
[  194.438282][ T9960] netlink: 'syz.0.1588': attribute type 3 has an invalid length.
[  194.457193][ T9960] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1588'.
[  194.485599][ T9942] chnl_net:caif_netlink_parms(): no params data found
[  194.607809][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[  194.614152][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  194.668126][ T9942] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.675460][ T9942] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.690719][ T9942] bridge_slave_0: entered allmulticast mode
[  194.698165][ T9942] bridge_slave_0: entered promiscuous mode
[  194.706224][ T9942] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.714302][ T9942] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.721669][ T9942] bridge_slave_1: entered allmulticast mode
[  194.739264][ T9942] bridge_slave_1: entered promiscuous mode
[  194.773031][ T9971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1591'.
[  194.819827][ T9942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  194.857674][ T9942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  194.942162][ T9974] syzkaller0: entered promiscuous mode
[  194.948150][ T9974] syzkaller0: entered allmulticast mode
[  195.065007][ T9942] team0: Port device team_slave_0 added
[  195.074181][ T9984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1593'.
[  195.722423][ T9993] SET target dimension over the limit!
[  196.200385][ T5237] Bluetooth: hci2: command tx timeout
[  196.514549][ T9942] team0: Port device team_slave_1 added
[  196.545608][ T9942] batman_adv: batadv0: Adding interface: batadv_slave_0
[  196.553810][ T9942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.636842][ T9942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  196.697859][ T9942] batman_adv: batadv0: Adding interface: batadv_slave_1
[  196.704840][ T9942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.748492][ T9942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  196.815698][T10011] bond_slave_0: entered promiscuous mode
[  196.821469][T10011] bond_slave_1: entered promiscuous mode
[  196.836861][T10011] vlan2: entered promiscuous mode
[  196.847305][T10011] bond0: entered promiscuous mode
[  196.872960][T10011] bond0: left promiscuous mode
[  196.882965][T10011] bond_slave_0: left promiscuous mode
[  196.888517][T10011] bond_slave_1: left promiscuous mode
[  196.925043][T10023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1604'.
[  197.137508][T10023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1604'.
[  197.199904][ T9942] hsr_slave_0: entered promiscuous mode
[  197.212339][ T5237] block nbd30: Receive control failed (result -107)
[  197.221864][ T9942] hsr_slave_1: entered promiscuous mode
[  197.235819][ T9942] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  197.237155][T10023] nbd30: detected capacity change from 0 to 256
[  197.248389][ T9942] Cannot create hsr debugfs directory
[  197.272357][ T5233] block nbd30: Dead connection, failed to find a fallback
[  197.305526][ T5233] block nbd30: shutting down sockets
[  197.328181][ T5233] ldm_validate_partition_table(): Disk read failed.
[  197.358416][T10029] netlink: 'syz.3.1605': attribute type 1 has an invalid length.
[  197.373946][ T5233] Dev nbd30: unable to read RDB block 0
[  197.381037][ T5233]  nbd30: unable to read partition table
[  197.392960][T10029] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1605'.
[  197.403080][ T5233] ldm_validate_partition_table(): Disk read failed.
[  197.403325][ T5233] Dev nbd30: unable to read RDB block 0
[  197.403702][ T5233]  nbd30: unable to read partition table
[  197.941733][ T9942] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.985349][T10065] bond_slave_0: entered promiscuous mode
[  197.991147][T10065] bond_slave_1: entered promiscuous mode
[  198.002262][T10077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1619'.
[  198.004457][T10065] vlan3: entered promiscuous mode
[  198.019423][T10075] netlink: 'syz.1.1617': attribute type 2 has an invalid length.
[  198.029662][T10065] bond0: entered promiscuous mode
[  198.055356][T10065] bond0: left promiscuous mode
[  198.061346][T10065] bond_slave_0: left promiscuous mode
[  198.066914][T10065] bond_slave_1: left promiscuous mode
[  198.104492][T10072] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.112229][T10072] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.132656][T10077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1619'.
[  198.144177][T10072] bridge0: entered allmulticast mode
[  198.199898][ T5237] block nbd31: Receive control failed (result -107)
[  198.257398][T10077] nbd31: detected capacity change from 0 to 256
[  198.270056][ T9942] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.287055][ T5237] Bluetooth: hci2: command tx timeout
[  198.297183][ T5233] block nbd31: Dead connection, failed to find a fallback
[  198.325233][ T5233] block nbd31: shutting down sockets
[  198.331061][ T5233] blk_print_req_error: 64 callbacks suppressed
[  198.331075][ T5233] I/O error, dev nbd31, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  198.348671][ T5233] I/O error, dev nbd31, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  198.358283][ T5233] I/O error, dev nbd31, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  198.370982][ T5233] buffer_io_error: 66 callbacks suppressed
[  198.370999][ T5233] Buffer I/O error on dev nbd31, logical block 0, async page read
[  198.412503][ T5233] I/O error, dev nbd31, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  198.430606][ T5233] Buffer I/O error on dev nbd31, logical block 0, async page read
[  198.450864][ T5233] I/O error, dev nbd31, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  198.494690][ T5233] Buffer I/O error on dev nbd31, logical block 0, async page read
[  198.517519][ T5233] I/O error, dev nbd31, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  198.540055][ T9942] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.558868][ T5233] Buffer I/O error on dev nbd31, logical block 0, async page read
[  198.567397][ T5233] I/O error, dev nbd31, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  198.568770][T10092] netlink: 'syz.1.1622': attribute type 1 has an invalid length.
[  198.576999][ T5233] Buffer I/O error on dev nbd31, logical block 0, async page read
[  198.592839][ T5233] I/O error, dev nbd31, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  198.603570][ T5233] Buffer I/O error on dev nbd31, logical block 0, async page read
[  198.611859][ T5233] ldm_validate_partition_table(): Disk read failed.
[  198.618931][ T5233] I/O error, dev nbd31, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  198.648393][T10092] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1622'.
[  198.659051][ T5233] Buffer I/O error on dev nbd31, logical block 0, async page read
[  198.669449][ T5233] I/O error, dev nbd31, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  198.679041][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1622'.
[  198.688434][ T5233] Buffer I/O error on dev nbd31, logical block 0, async page read
[  198.696436][ T5233] Buffer I/O error on dev nbd31, logical block 0, async page read
[  198.706257][ T5233] Buffer I/O error on dev nbd31, logical block 0, async page read
[  198.714608][ T5233] Dev nbd31: unable to read RDB block 0
[  198.723871][ T5233]  nbd31: unable to read partition table
[  198.735537][ T5233] ldm_validate_partition_table(): Disk read failed.
[  198.742801][ T5233] Dev nbd31: unable to read RDB block 0
[  198.749445][ T5233]  nbd31: unable to read partition table
[  198.982742][T10107] netlink: 'syz.0.1627': attribute type 1 has an invalid length.
[  199.042111][ T9942] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  199.065414][ T9942] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  199.106436][ T9942] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  199.158994][ T9942] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  199.513900][ T9942] 8021q: adding VLAN 0 to HW filter on device bond0
[  199.554328][T10131] netlink: 'syz.3.1630': attribute type 20 has an invalid length.
[  199.639425][ T9942] 8021q: adding VLAN 0 to HW filter on device team0
[  199.669861][ T5283] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.677055][ T5283] bridge0: port 1(bridge_slave_0) entered forwarding state
[  199.691120][ T5283] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.698315][ T5283] bridge0: port 2(bridge_slave_1) entered forwarding state
[  199.778171][T10142] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1635'.
[  199.999248][T10151] xt_TCPMSS: Only works on TCP SYN packets
[  200.147989][T10150] SET target dimension over the limit!
[  200.362053][ T5237] Bluetooth: hci2: command tx timeout
[  200.484295][T10167] netlink: 'syz.0.1642': attribute type 11 has an invalid length.
[  200.543516][ T9942] 8021q: adding VLAN 0 to HW filter on device batadv0
[  200.693866][ T9942] veth0_vlan: entered promiscuous mode
[  200.781087][ T9942] veth1_vlan: entered promiscuous mode
[  200.835782][T10188] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1647'.
[  200.866423][T10190] IPv6: NLM_F_CREATE should be specified when creating new route
[  200.937251][ T9942] veth0_macvtap: entered promiscuous mode
[  201.000035][ T9942] veth1_macvtap: entered promiscuous mode
[  201.065676][ T9942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  201.129344][ T9942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.169308][ T9942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  201.207861][ T9942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.251956][ T9942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  201.286582][ T9942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.302055][T10208] xt_hashlimit: invalid rate
[  201.312492][ T9942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  201.333931][ T9942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.344390][ T9942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  201.369730][ T9942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.391762][ T9942] batman_adv: batadv0: Interface activated: batadv_slave_0
[  201.497212][ T9942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  201.545875][ T9942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.573503][ T9942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  201.594364][ T9942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.604997][ T9942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  201.615761][ T9942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.625922][ T9942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  201.636879][ T9942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.651116][ T9942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  201.661887][ T9942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.674518][ T9942] batman_adv: batadv0: Interface activated: batadv_slave_1
[  201.685380][T10226] netlink: 'syz.4.1656': attribute type 10 has an invalid length.
[  201.698415][T10226] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1656'.
[  201.722544][T10226] bridge0: port 2(dummy0) entered blocking state
[  201.748062][T10226] bridge0: port 2(dummy0) entered disabled state
[  201.765848][T10226] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  201.803622][ T9942] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  201.821979][ T9942] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  201.847866][ T9942] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  201.865353][ T9942] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  201.894413][T10234] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1659'.
[  201.991766][T10235] can: request_module (can-proto-5) failed.
[  202.075823][T10248] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1663'.
[  202.439992][ T5237] Bluetooth: hci2: command tx timeout
[  202.456937][T10268] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1670'.
[  202.539770][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.577826][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.597433][T10264] netlink: 'syz.0.1668': attribute type 1 has an invalid length.
[  202.675953][T10264] bond1: entered promiscuous mode
[  202.691546][T10269] bond1: entered allmulticast mode
[  202.700800][T10269] 8021q: adding VLAN 0 to HW filter on device bond1
[  202.715496][T10268] vlan2: entered promiscuous mode
[  202.777623][ T2928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.814473][ T2928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.839032][    C0] eth0: bad gso: type: 1, size: 1408
[  202.930476][T10281] netlink: 'syz.0.1674': attribute type 1 has an invalid length.
[  202.947643][T10281] netlink: 'syz.0.1674': attribute type 2 has an invalid length.
[  203.425512][T10317] __nla_validate_parse: 9 callbacks suppressed
[  203.425531][T10317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1685'.
[  203.474126][T10317] team0: entered promiscuous mode
[  203.484119][T10317] team_slave_0: entered promiscuous mode
[  203.497822][T10317] team_slave_1: entered promiscuous mode
[  203.503665][T10317] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  203.523916][T10317] team_slave_0: entered allmulticast mode
[  203.585064][T10317] team0: Port device team_slave_0 removed
[  203.606130][T10316] team0: left promiscuous mode
[  203.626737][T10316] team_slave_1: left promiscuous mode
[  203.634878][T10316] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  203.657942][    C0] eth0: bad gso: type: 1, size: 1408
[  204.242432][T10360] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1697'.
[  204.274485][T10361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1696'.
[  204.294964][T10363] can: request_module (can-proto-5) failed.
[  204.478910][T10361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1696'.
[  204.529697][ T5237] block nbd32: Receive control failed (result -107)
[  204.557348][T10361] nbd32: detected capacity change from 0 to 256
[  204.569576][ T5233] block nbd32: Dead connection, failed to find a fallback
[  204.608409][ T5233] block nbd32: shutting down sockets
[  204.629295][ T5233] blk_print_req_error: 27 callbacks suppressed
[  204.629314][ T5233] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  204.656065][ T5233] buffer_io_error: 25 callbacks suppressed
[  204.656082][ T5233] Buffer I/O error on dev nbd32, logical block 0, async page read
[  204.681943][ T5233] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  204.696453][ T5233] Buffer I/O error on dev nbd32, logical block 0, async page read
[  204.747020][ T5233] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  204.754180][T10385] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1704'.
[  204.774540][ T5233] Buffer I/O error on dev nbd32, logical block 0, async page read
[  204.801639][ T5233] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  204.836484][ T5233] Buffer I/O error on dev nbd32, logical block 0, async page read
[  204.869417][ T5233] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  204.884867][ T5233] Buffer I/O error on dev nbd32, logical block 0, async page read
[  204.901921][ T5233] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  204.913536][ T5233] Buffer I/O error on dev nbd32, logical block 0, async page read
[  204.937301][ T5233] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  204.947071][ T5233] Buffer I/O error on dev nbd32, logical block 0, async page read
[  204.955119][ T5233] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  204.967266][ T5233] Buffer I/O error on dev nbd32, logical block 0, async page read
[  204.977697][ T5233] ldm_validate_partition_table(): Disk read failed.
[  204.984738][ T5233] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  204.994735][    C0] eth0: bad gso: type: 1, size: 1408
[  205.010357][ T5233] Buffer I/O error on dev nbd32, logical block 0, async page read
[  205.040453][ T5233] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  205.057834][ T5233] Buffer I/O error on dev nbd32, logical block 0, async page read
[  205.081667][ T5233] Dev nbd32: unable to read RDB block 0
[  205.093516][ T5233]  nbd32: unable to read partition table
[  205.135127][ T5233] ldm_validate_partition_table(): Disk read failed.
[  205.155906][ T5233] Dev nbd32: unable to read RDB block 0
[  205.172183][ T5233]  nbd32: unable to read partition table
[  205.211348][T10401] bond_slave_0: entered promiscuous mode
[  205.217113][T10401] bond_slave_1: entered promiscuous mode
[  205.222856][T10401] team_slave_0: entered promiscuous mode
[  205.228637][T10401] team_slave_1: entered promiscuous mode
[  205.234426][T10401] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  205.244818][T10401] vlan2: entered promiscuous mode
[  205.250965][T10401] bond0: entered promiscuous mode
[  205.256478][T10401] team0: entered promiscuous mode
[  205.269031][T10401] bond0: left promiscuous mode
[  205.274253][T10401] team0: left promiscuous mode
[  205.280625][T10401] bond_slave_0: left promiscuous mode
[  205.286103][T10401] bond_slave_1: left promiscuous mode
[  205.291579][T10401] team_slave_0: left promiscuous mode
[  205.297066][T10401] team_slave_1: left promiscuous mode
[  205.302520][T10401] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  205.382618][    C0] eth0: bad gso: type: 1, size: 1408
[  205.562070][T10418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  205.605612][T10423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1716'.
[  205.767653][T10423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1716'.
[  205.858696][ T5237] block nbd33: Receive control failed (result -107)
[  205.886974][T10423] nbd33: detected capacity change from 0 to 256
[  205.903066][ T5233] block nbd33: Dead connection, failed to find a fallback
[  205.958125][ T5233] block nbd33: shutting down sockets
[  205.968958][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1718'.
[  205.984001][ T5233] ldm_validate_partition_table(): Disk read failed.
[  206.012574][ T5233] Dev nbd33: unable to read RDB block 0
[  206.032630][ T5233]  nbd33: unable to read partition table
[  206.053384][    C0] eth0: bad gso: type: 1, size: 1408
[  206.065193][ T5233] ldm_validate_partition_table(): Disk read failed.
[  206.107271][ T5233] Dev nbd33: unable to read RDB block 0
[  206.135893][ T5233]  nbd33: unable to read partition table
[  206.170687][T10441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1720'.
[  206.253233][T10443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1723'.
[  206.335050][T10441] team1: Mode changed to "broadcast"
[  206.374461][    C0] eth0: bad gso: type: 1, size: 1408
[  206.541316][T10454] bond_slave_0: entered promiscuous mode
[  206.547083][T10454] bond_slave_1: entered promiscuous mode
[  206.579751][T10454] vlan2: entered promiscuous mode
[  206.585642][T10454] bond0: entered promiscuous mode
[  206.618406][T10454] bond0: left promiscuous mode
[  206.624251][T10454] bond_slave_0: left promiscuous mode
[  206.629824][T10454] bond_slave_1: left promiscuous mode
[  206.799375][ T5237] block nbd34: Receive control failed (result -107)
[  206.866983][T10460] nbd34: detected capacity change from 0 to 256
[  206.877604][ T5233] block nbd34: Dead connection, failed to find a fallback
[  206.903474][ T5233] block nbd34: shutting down sockets
[  206.918114][ T5233] ldm_validate_partition_table(): Disk read failed.
[  206.936798][ T5233] Dev nbd34: unable to read RDB block 0
[  206.943198][ T5233]  nbd34: unable to read partition table
[  206.953748][ T5233] ldm_validate_partition_table(): Disk read failed.
[  206.961000][ T5233] Dev nbd34: unable to read RDB block 0
[  206.968567][ T5233]  nbd34: unable to read partition table
[  206.991127][    C0] eth0: bad gso: type: 1, size: 1408
[  207.088811][ T5237] block nbd35: Receive control failed (result -107)
[  207.116981][T10467] nbd35: detected capacity change from 0 to 256
[  207.137496][ T5233] block nbd35: Dead connection, failed to find a fallback
[  207.150327][ T5233] block nbd35: shutting down sockets
[  207.156151][ T5233] ldm_validate_partition_table(): Disk read failed.
[  207.163302][ T5233] Dev nbd35: unable to read RDB block 0
[  207.169915][ T5233]  nbd35: unable to read partition table
[  207.179814][ T5233] ldm_validate_partition_table(): Disk read failed.
[  207.187238][ T5233] Dev nbd35: unable to read RDB block 0
[  207.193242][ T5233]  nbd35: unable to read partition table
[  207.265632][T10477] SET target dimension over the limit!
[  207.342071][    C0] eth0: bad gso: type: 1, size: 1408
[  207.504981][T10499] bond_slave_0: entered promiscuous mode
[  207.510742][T10499] bond_slave_1: entered promiscuous mode
[  207.516751][T10499] team_slave_0: entered promiscuous mode
[  207.522434][T10499] team_slave_1: entered promiscuous mode
[  207.528249][T10499] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  207.669300][T10499] vlan2: entered promiscuous mode
[  207.682275][T10499] bond0: entered promiscuous mode
[  207.688262][T10499] team0: entered promiscuous mode
[  207.719833][T10499] bond0: left promiscuous mode
[  207.724984][T10499] team0: left promiscuous mode
[  207.755435][T10499] bond_slave_0: left promiscuous mode
[  207.761064][T10499] bond_slave_1: left promiscuous mode
[  207.766574][T10499] team_slave_0: left promiscuous mode
[  207.772028][T10499] team_slave_1: left promiscuous mode
[  207.777525][T10499] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  207.996742][    C0] eth0: bad gso: type: 1, size: 1408
[  208.146033][T10514] bond0: (slave bond_slave_1): Releasing backup interface
[  208.175314][T10514] bond_slave_1 (unregistering): left promiscuous mode
[  208.188384][T10514] bond_slave_1 (unregistering): left allmulticast mode
[  208.312467][T10525] netlink: 'syz.3.1750': attribute type 1 has an invalid length.
[  208.332674][T10525] netlink: 'syz.3.1750': attribute type 4 has an invalid length.
[  208.343334][ T5237] block nbd36: Receive control failed (result -107)
[  208.386800][T10521] nbd36: detected capacity change from 0 to 256
[  208.437550][ T8380] block nbd36: Dead connection, failed to find a fallback
[  208.444763][ T8380] block nbd36: shutting down sockets
[  208.463305][T10525] IPVS: length: 215 != 24
[  208.487152][ T8380] ldm_validate_partition_table(): Disk read failed.
[  208.534347][ T8380] Dev nbd36: unable to read RDB block 0
[  208.557294][ T5232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  208.574373][ T5232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  208.592708][ T5232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  208.604609][ T8380]  nbd36: unable to read partition table
[  208.624983][ T5232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  208.636776][ T5232] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  208.644982][ T5232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  208.697828][ T8380] ldm_validate_partition_table(): Disk read failed.
[  208.704761][ T8380] Dev nbd36: unable to read RDB block 0
[  208.739746][ T8380]  nbd36: unable to read partition table
[  208.783199][T10539] __nla_validate_parse: 11 callbacks suppressed
[  208.783219][T10539] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1751'.
[  208.956270][    C0] eth0: bad gso: type: 1, size: 1408
[  209.158751][T10560] bond_slave_0: entered promiscuous mode
[  209.164613][T10560] bond_slave_1: entered promiscuous mode
[  209.170472][T10560] team_slave_0: entered promiscuous mode
[  209.176199][T10560] team_slave_1: entered promiscuous mode
[  209.182015][T10560] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  209.192475][T10560] vlan2: entered promiscuous mode
[  209.198687][T10560] bond0: entered promiscuous mode
[  209.204611][T10560] team0: entered promiscuous mode
[  209.213198][T10560] bond0: left promiscuous mode
[  209.218406][T10560] team0: left promiscuous mode
[  209.224143][T10560] bond_slave_0: left promiscuous mode
[  209.229651][T10560] bond_slave_1: left promiscuous mode
[  209.235086][T10560] team_slave_0: left promiscuous mode
[  209.240587][T10560] team_slave_1: left promiscuous mode
[  209.247380][T10560] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  209.482048][T10572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1762'.
[  209.523022][T10534] chnl_net:caif_netlink_parms(): no params data found
[  209.606096][T10549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1755'.
[  209.623226][T10549] geneve0: entered promiscuous mode
[  209.631283][T10549] geneve0: entered allmulticast mode
[  209.648934][T10572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1762'.
[  209.718219][ T5237] block nbd37: Receive control failed (result -107)
[  209.757922][T10572] nbd37: detected capacity change from 0 to 256
[  209.772727][ T5233] block nbd37: Dead connection, failed to find a fallback
[  209.795609][ T5233] block nbd37: shutting down sockets
[  209.829125][ T5233] blk_print_req_error: 175 callbacks suppressed
[  209.829143][ T5233] I/O error, dev nbd37, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  209.850756][ T5233] buffer_io_error: 175 callbacks suppressed
[  209.850773][ T5233] Buffer I/O error on dev nbd37, logical block 0, async page read
[  209.866874][T10534] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.874026][T10534] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.901605][    C0] eth0: bad gso: type: 1, size: 1408
[  209.907687][ T5233] I/O error, dev nbd37, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  209.923108][T10534] bridge_slave_0: entered allmulticast mode
[  209.935671][ T5233] Buffer I/O error on dev nbd37, logical block 0, async page read
[  209.942826][T10534] bridge_slave_0: entered promiscuous mode
[  210.003422][ T5233] I/O error, dev nbd37, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  210.044215][ T5233] Buffer I/O error on dev nbd37, logical block 0, async page read
[  210.071507][ T5233] I/O error, dev nbd37, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  210.104666][ T5233] Buffer I/O error on dev nbd37, logical block 0, async page read
[  210.126729][ T5233] I/O error, dev nbd37, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  210.156263][ T5233] Buffer I/O error on dev nbd37, logical block 0, async page read
[  210.177177][ T5233] I/O error, dev nbd37, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  210.191428][T10534] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.205944][ T5233] Buffer I/O error on dev nbd37, logical block 0, async page read
[  210.215130][T10534] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.232768][T10534] bridge_slave_1: entered allmulticast mode
[  210.244484][ T5233] I/O error, dev nbd37, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  210.250625][T10534] bridge_slave_1: entered promiscuous mode
[  210.280035][ T5233] Buffer I/O error on dev nbd37, logical block 0, async page read
[  210.296212][T10598] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1767'.
[  210.299319][ T5233] I/O error, dev nbd37, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  210.326471][ T5233] Buffer I/O error on dev nbd37, logical block 0, async page read
[  210.334848][ T5233] ldm_validate_partition_table(): Disk read failed.
[  210.351131][ T5233] I/O error, dev nbd37, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  210.369486][ T5233] Buffer I/O error on dev nbd37, logical block 0, async page read
[  210.377625][ T5233] I/O error, dev nbd37, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  210.386950][ T5233] Buffer I/O error on dev nbd37, logical block 0, async page read
[  210.395197][ T5233] Dev nbd37: unable to read RDB block 0
[  210.418023][    C0] eth0: bad gso: type: 1, size: 1408
[  210.433740][ T5233]  nbd37: unable to read partition table
[  210.635266][T10617] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1773'.
[  210.652322][T10534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  210.661703][T10617] nbd: illegal input index 61504
[  210.677839][ T5237] Bluetooth: hci1: command tx timeout
[  210.696351][T10534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  210.789869][T10624] bond0: left allmulticast mode
[  210.812797][T10624] bond_slave_0: left allmulticast mode
[  210.819887][T10624] macvlan0: left allmulticast mode
[  210.825082][T10624] veth1_vlan: left allmulticast mode
[  210.853204][T10624] bond0: left promiscuous mode
[  210.865571][T10624] bond_slave_0: left promiscuous mode
[  210.882246][T10624] macvlan0: left promiscuous mode
[  210.902415][T10624] bridge0: port 3(bond0) entered disabled state
[  210.936179][T10624] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.960051][T10624] team0: Port device bond0 added
[  211.038277][    C0] eth0: bad gso: type: 1, size: 1408
[  211.052567][T10534] team0: Port device team_slave_0 added
[  211.055779][T10630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1779'.
[  211.125406][T10534] team0: Port device team_slave_1 added
[  211.177121][T10630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1779'.
[  211.210262][T10534] batman_adv: batadv0: Adding interface: batadv_slave_0
[  211.241490][ T5237] block nbd38: Receive control failed (result -107)
[  211.260091][T10534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.287240][T10630] nbd38: detected capacity change from 0 to 256
[  211.309959][T10534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  211.324119][T10534] batman_adv: batadv0: Adding interface: batadv_slave_1
[  211.333961][T10534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.360457][T10534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  211.413038][T10638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1781'.
[  211.435882][T10638] tipc: Cannot configure node identity twice
[  211.487128][T10651] sctp: [Deprecated]: syz.0.1782 (pid 10651) Use of int in max_burst socket option deprecated.
[  211.487128][T10651] Use struct sctp_assoc_value instead
[  211.536151][    C0] eth0: bad gso: type: 1, size: 1408
[  211.660660][T10534] hsr_slave_0: entered promiscuous mode
[  211.690319][T10534] hsr_slave_1: entered promiscuous mode
[  211.709477][T10534] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  211.726717][T10534] Cannot create hsr debugfs directory
[  212.041598][    C0] eth0: bad gso: type: 1, size: 1408
[  212.086364][T10534] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  212.110175][T10534] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.249425][T10534] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  212.268360][T10534] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.329491][T10691] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1793'.
[  212.408907][T10534] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  212.426361][T10534] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.451020][T10695] xt_CT: You must specify a L4 protocol and not use inversions on it
[  212.466119][T10693] tipc: Cannot configure node identity twice
[  212.543378][T10534] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  212.567489][T10534] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.756815][ T5237] Bluetooth: hci1: command tx timeout
[  212.784992][T10534] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  212.810671][T10534] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  212.831166][T10534] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  212.875817][T10534] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  213.132295][T10534] 8021q: adding VLAN 0 to HW filter on device bond0
[  213.199591][T10534] 8021q: adding VLAN 0 to HW filter on device team0
[  213.235053][ T5284] bridge0: port 1(bridge_slave_0) entered blocking state
[  213.242289][ T5284] bridge0: port 1(bridge_slave_0) entered forwarding state
[  213.276776][ T5284] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.284002][ T5284] bridge0: port 2(bridge_slave_1) entered forwarding state
[  213.294064][T10723] tipc: Cannot configure node identity twice
[  213.391443][T10534] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  213.761372][T10534] 8021q: adding VLAN 0 to HW filter on device batadv0
[  214.060690][T10762] bond_slave_0: entered promiscuous mode
[  214.066605][T10762] bond_slave_1: entered promiscuous mode
[  214.093854][T10762] vlan3: entered promiscuous mode
[  214.104447][T10762] bond0: entered promiscuous mode
[  214.135403][T10762] bond0: left promiscuous mode
[  214.142385][T10762] bond_slave_0: left promiscuous mode
[  214.147955][T10762] bond_slave_1: left promiscuous mode
[  214.160920][T10764] __nla_validate_parse: 3 callbacks suppressed
[  214.160938][T10764] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1815'.
[  214.218051][T10766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1816'.
[  214.242937][T10766] tipc: Started in network mode
[  214.256143][T10766] tipc: Node identity cgroup.pn, cluster identity 8
[  214.436327][T10534] veth0_vlan: entered promiscuous mode
[  214.491755][T10534] veth1_vlan: entered promiscuous mode
[  214.517740][    C0] eth0: bad gso: type: 1, size: 1408
[  214.620563][T10786] netlink: 'syz.1.1822': attribute type 3 has an invalid length.
[  214.653234][T10787] bridge0: port 3(geneve1) entered blocking state
[  214.686720][T10787] bridge0: port 3(geneve1) entered disabled state
[  214.698814][T10787] geneve1: entered allmulticast mode
[  214.716481][T10787] geneve1: entered promiscuous mode
[  214.722868][T10787] bridge0: port 3(geneve1) entered blocking state
[  214.729467][T10787] bridge0: port 3(geneve1) entered forwarding state
[  214.745406][T10534] veth0_macvtap: entered promiscuous mode
[  214.762591][T10792] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1822'.
[  214.821978][T10534] veth1_macvtap: entered promiscuous mode
[  214.837550][ T5237] Bluetooth: hci1: command tx timeout
[  214.919800][T10534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.934612][T10534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.937254][T10794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  214.955388][T10534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.976869][T10534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.997271][T10534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.028818][T10534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.086747][T10534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.108209][T10534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.129817][T10534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.158614][T10534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.178795][T10534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.199637][T10534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.220775][T10807] netlink: 'syz.1.1826': attribute type 3 has an invalid length.
[  215.246480][T10534] batman_adv: batadv0: Interface activated: batadv_slave_0
[  215.257577][T10807] netlink: 'syz.1.1826': attribute type 1 has an invalid length.
[  215.270629][T10807] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1826'.
[  215.292550][T10534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.313286][T10534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.329272][T10534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.352090][T10534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.380305][T10534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.401400][T10534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.420910][T10534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.441156][T10534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.451491][T10534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.462293][T10534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.473544][T10534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.485448][T10534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.499446][T10534] batman_adv: batadv0: Interface activated: batadv_slave_1
[  215.510075][T10804] bridge_slave_1: left allmulticast mode
[  215.515917][T10804] bridge_slave_1: left promiscuous mode
[  215.522473][T10804] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.535555][T10804] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  215.585811][T10534] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  215.615734][T10534] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  215.636419][T10534] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  215.661032][T10534] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  215.705719][T10811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1827'.
[  215.715321][T10811] tipc: Cannot configure node identity twice
[  215.724540][T10809] tap0: tun_chr_ioctl cmd 1074025677
[  215.740158][T10809] tap0: linktype set to 825
[  215.848198][ T2928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  215.865860][ T2928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.959009][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  215.980235][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  216.227043][T10839] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  216.256019][T10839] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1745'.
[  216.297144][T10841] ebtables: ebtables: counters copy to user failed while replacing table
[  216.306966][T10841] unknown channel width for channel at 909000KHz?
[  216.323198][T10841] unknown channel width for channel at 909000KHz?
[  216.539086][T10855] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1840'.
[  216.567736][T10853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1838'.
[  216.584236][T10853] tipc: Cannot configure node identity twice
[  216.651010][T10855] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1840'.
[  216.919219][ T5237] Bluetooth: hci1: command tx timeout
[  216.948881][T10876] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1846'.
[  216.982874][T10877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  217.041732][T10877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  217.072136][T10885] bond_slave_0: entered promiscuous mode
[  217.079055][T10885] vlan2: entered promiscuous mode
[  217.084154][T10885] bond0: entered promiscuous mode
[  217.101578][T10885] macvlan0: entered promiscuous mode
[  217.119484][T10885] bond0: left promiscuous mode
[  217.124751][T10885] macvlan0: left promiscuous mode
[  217.138504][T10885] bond_slave_0: left promiscuous mode
[  217.292752][    C0] eth0: bad gso: type: 1, size: 1408
[  217.755740][T10899] tipc: Cannot configure node identity twice
[  217.902695][T10871] netlink: 'syz.2.1844': attribute type 30 has an invalid length.
[  218.021375][T10903] tap1: tun_chr_ioctl cmd 1074025677
[  218.042563][T10903] tap1: linktype set to 825
[  219.156921][ T5237] Bluetooth: hci1: command tx timeout
[  219.993303][T10934] __nla_validate_parse: 10 callbacks suppressed
[  219.993318][T10934] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1861'.
[  220.141758][T10945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1863'.
[  220.151303][T10945] tipc: Cannot configure node identity twice
[  220.195615][T10946] lo speed is unknown, defaulting to 1000
[  220.215306][T10946] lo speed is unknown, defaulting to 1000
[  220.265593][T10946] lo speed is unknown, defaulting to 1000
[  220.303316][T10954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1868'.
[  220.490295][T10965] syzkaller0: mtu less than device minimum
[  220.537274][T10965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1871'.
[  220.563931][T10965] syzkaller0: entered allmulticast mode
[  220.802341][T10978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1874'.
[  220.817162][T10946] infiniband syz0: set down
[  220.825446][T10946] infiniband syz0: added lo
[  220.836032][T10978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1874'.
[  220.857908][ T5284] lo speed is unknown, defaulting to 1000
[  220.999239][T10990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1878'.
[  221.009536][T10990] tipc: Started in network mode
[  221.015365][T10990] tipc: Node identity cgroup.pn, cluster identity 8
[  221.049520][T10946] RDS/IB: syz0: added
[  221.058689][T10946] smc: adding ib device syz0 with port count 1
[  221.075674][T10946] smc:    ib device syz0 port 1 has pnetid 
[  221.094255][ T5283] lo speed is unknown, defaulting to 1000
[  221.115890][T10946] lo speed is unknown, defaulting to 1000
[  221.353132][T11002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1883'.
[  221.361628][T10999] netdevsim netdevsim4 netdevsim1: Unsupported IPsec algorithm
[  221.467260][T11002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1883'.
[  221.510291][ T5232] block nbd39: Receive control failed (result -107)
[  221.542196][T10946] lo speed is unknown, defaulting to 1000
[  221.550858][T11002] nbd39: detected capacity change from 0 to 256
[  221.898174][T11032] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1889'.
[  221.940551][T10946] lo speed is unknown, defaulting to 1000
[  222.039350][T11036] tipc: Cannot configure node identity twice
[  222.240230][T10946] lo speed is unknown, defaulting to 1000
[  222.547863][T10946] lo speed is unknown, defaulting to 1000
[  222.916215][T10946] lo speed is unknown, defaulting to 1000
[  223.132187][T11047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  223.211598][T10946] lo speed is unknown, defaulting to 1000
[  223.245882][T11038] netlink: 'syz.2.1893': attribute type 30 has an invalid length.
[  223.384947][T11062] openvswitch: netlink: Flow actions attr not present in new flow.
[  223.396886][ T5232] Bluetooth: hci3: command 0x1407 tx timeout
[  223.396930][ T5237] Bluetooth: hci3: Opcode 0x1407 failed: -110
[  223.528987][T11069] tipc: Cannot configure node identity twice
[  224.217104][T11084] hsr0: entered promiscuous mode
[  224.376923][T11090] xt_l2tp: v2 doesn't support IP mode
[  224.597661][ T5232] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  224.610412][ T5232] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  224.618569][ T5232] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  224.627118][ T5232] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  224.636422][ T5232] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  224.644629][ T5232] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  224.761760][T11097] lo speed is unknown, defaulting to 1000
[  224.829084][T11108] tipc: Cannot configure node identity twice
[  225.054285][T11117] __nla_validate_parse: 13 callbacks suppressed
[  225.054336][T11117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1920'.
[  225.076502][T11117] mac80211_hwsim hwsim19 wlan0: entered promiscuous mode
[  225.085675][T11117] macvlan2: entered promiscuous mode
[  225.144180][  T943] IPVS: starting estimator thread 0...
[  225.246494][T11121] IPVS: using max 17 ests per chain, 40800 per kthread
[  225.304091][T11129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1923'.
[  225.330915][T11129] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1923'.
[  225.344398][T11129] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  225.452192][T11135] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1924'.
[  225.504343][T11097] chnl_net:caif_netlink_parms(): no params data found
[  225.540210][T11138] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1925'.
[  225.565124][T11138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1925'.
[  225.641935][T11097] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.663714][T11097] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.672665][T11097] bridge_slave_0: entered allmulticast mode
[  225.686593][T11097] bridge_slave_0: entered promiscuous mode
[  225.702384][T11146] batadv0: entered promiscuous mode
[  225.721600][T11097] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.729182][T11097] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.736908][T11097] bridge_slave_1: entered allmulticast mode
[  225.743955][T11097] bridge_slave_1: entered promiscuous mode
[  225.881948][T11097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  225.904951][T11097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  225.924667][T11148] 8021q: adding VLAN 0 to HW filter on device batadv0
[  226.041601][T11097] team0: Port device team_slave_0 added
[  226.058166][T11097] team0: Port device team_slave_1 added
[  226.158016][T11097] batman_adv: batadv0: Adding interface: batadv_slave_0
[  226.166341][T11097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.193952][T11097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  226.213655][T11097] batman_adv: batadv0: Adding interface: batadv_slave_1
[  226.223889][T11097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.267931][T11097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  226.303663][T11164] bond_slave_0: entered promiscuous mode
[  226.309434][T11164] bond_slave_1: entered promiscuous mode
[  226.330735][T11164] vlan2: entered promiscuous mode
[  226.335825][T11164] bond0: entered promiscuous mode
[  226.344486][T11164] bond0: left promiscuous mode
[  226.349882][T11164] bond_slave_0: left promiscuous mode
[  226.355346][T11164] bond_slave_1: left promiscuous mode
[  226.462114][T11097] hsr_slave_0: entered promiscuous mode
[  226.472549][T11097] hsr_slave_1: entered promiscuous mode
[  226.486369][T11097] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  226.504835][T11097] Cannot create hsr debugfs directory
[  226.655415][T11186] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  226.686707][ T5232] Bluetooth: hci4: command tx timeout
[  226.765795][T11097] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.822480][T11192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1942'.
[  226.917081][T11097] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.997244][ T5284] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  227.051371][T11097] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.092580][T11200] netlink: 'syz.4.1945': attribute type 30 has an invalid length.
[  227.158078][ T8348] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  227.199302][T11097] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.220963][T11207] bond_slave_0: entered promiscuous mode
[  227.226692][T11207] bond_slave_1: entered promiscuous mode
[  227.233322][T11207] vlan2: entered promiscuous mode
[  227.243325][ T5284] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  227.254427][T11207] bond0: entered promiscuous mode
[  227.277264][T11207] bond0: left promiscuous mode
[  227.282560][T11207] bond_slave_0: left promiscuous mode
[  227.288185][T11207] bond_slave_1: left promiscuous mode
[  227.325845][T11202] batadv_slave_1: entered promiscuous mode
[  227.334276][T11201] batadv_slave_1: left promiscuous mode
[  227.345755][T11210] team0: Device vlan2 failed to change mtu
[  227.425507][ T5229] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  227.519506][T11097] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  227.537393][ T5229] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  227.538237][T11097] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  227.599725][T11097] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  227.631579][T11097] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  227.678870][ T5229] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  227.757090][  T943] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  227.826949][ T8348] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  227.869410][T11228] bridge_slave_0: left allmulticast mode
[  227.886981][T11228] bridge_slave_0: left promiscuous mode
[  227.900974][T11228] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.946500][T11228] bridge_slave_1: left allmulticast mode
[  227.952800][T11228] bridge_slave_1: left promiscuous mode
[  227.970903][T11228] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.995266][T11228] bond0: (slave bond_slave_0): Releasing backup interface
[  228.046319][T11228] bond0: (slave bond_slave_1): Releasing backup interface
[  228.175394][T11228] team0: Port device team_slave_1 removed
[  228.198285][T11228] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  228.210507][T11228] batman_adv: batadv0: Removing interface: batadv_slave_0
[  228.233661][T11228] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  228.257872][T11228] batman_adv: batadv0: Removing interface: batadv_slave_1
[  228.312039][T11228] team0: Port device netdevsim0 removed
[  228.352538][T11228] team0: Port device vlan2 removed
[  228.392505][T11097] 8021q: adding VLAN 0 to HW filter on device bond0
[  228.417980][ T5283] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  228.507260][   T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  228.545324][T11097] 8021q: adding VLAN 0 to HW filter on device team0
[  228.583121][ T5237] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  228.587528][ T8348] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.597497][ T8348] bridge0: port 1(bridge_slave_0) entered forwarding state
[  228.623972][ T5237] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  228.633772][ T5237] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  228.658536][ T5237] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  228.661712][ T8348] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.672714][ T8348] bridge0: port 2(bridge_slave_1) entered forwarding state
[  228.694127][ T5237] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  228.701900][ T5237] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  228.758869][ T5232] Bluetooth: hci4: command tx timeout
[  228.877021][T11249] lo speed is unknown, defaulting to 1000
[  229.010769][T11263] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1967'.
[  229.080304][T11270] netlink: 'syz.0.1968': attribute type 1 has an invalid length.
[  229.100836][T11270] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1968'.
[  229.180338][T11097] 8021q: adding VLAN 0 to HW filter on device batadv0
[  229.297580][T11273] sctp: [Deprecated]: syz.0.1969 (pid 11273) Use of int in maxseg socket option.
[  229.297580][T11273] Use struct sctp_assoc_value instead
[  229.309702][T11097] veth0_vlan: entered promiscuous mode
[  229.373590][T11277] IPVS: stopping backup sync thread 8305 ...
[  229.390116][T11097] veth1_vlan: entered promiscuous mode
[  229.576911][T11284] lo speed is unknown, defaulting to 1000
[  229.679361][T11097] veth0_macvtap: entered promiscuous mode
[  229.702593][T11097] veth1_macvtap: entered promiscuous mode
[  229.758061][T11249] chnl_net:caif_netlink_parms(): no params data found
[  229.842847][T11097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  229.863080][T11097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.879604][T11097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  229.890346][T11097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.900322][T11097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  229.927007][T11097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.948418][T11097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  229.970428][T11097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.981705][T11097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  230.006882][T11097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.016987][T11097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  230.034820][T11097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.049321][T11301] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1978'.
[  230.063673][T11097] batman_adv: batadv0: Interface activated: batadv_slave_0
[  230.145982][T11097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  230.175268][T11097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.185292][T11097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  230.197437][T11097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.207311][T11097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  230.217908][T11097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.228079][T11097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  230.239294][T11097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.249211][T11097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  230.259681][T11097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.270449][T11097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  230.283492][T11097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.295252][T11097] batman_adv: batadv0: Interface activated: batadv_slave_1
[  230.313470][T11296] vcan0 speed is unknown, defaulting to 1000
[  230.393916][T11296] vcan0 speed is unknown, defaulting to 1000
[  230.396261][T11097] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  230.415277][T11097] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  230.424208][T11097] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  230.433805][T11097] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  230.449023][T11249] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.456312][T11249] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.464511][T11249] bridge_slave_0: entered allmulticast mode
[  230.474393][T11249] bridge_slave_0: entered promiscuous mode
[  230.491606][T11296] vcan0 speed is unknown, defaulting to 1000
[  230.497345][T11249] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.517192][T11249] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.528145][T11249] bridge_slave_1: entered allmulticast mode
[  230.547591][T11249] bridge_slave_1: entered promiscuous mode
[  230.658401][T11249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  230.741529][T11249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  230.764910][ T5232] Bluetooth: hci5: command tx timeout
[  230.767583][T11296] infiniband syz1: set active
[  230.792598][T11296] infiniband syz1: added vcan0
[  230.802601][T11296] syz1: rxe_create_cq: returned err = -12
[  230.822970][T11296] infiniband syz1: Couldn't create ib_mad CQ
[  230.829719][T11296] infiniband syz1: Couldn't open port 1
[  230.838587][ T5232] Bluetooth: hci4: command tx timeout
[  230.873920][ T5283] vcan0 speed is unknown, defaulting to 1000
[  230.902474][T11249] team0: Port device team_slave_0 added
[  230.910284][T11296] RDS/IB: syz1: added
[  230.914691][T11296] smc: adding ib device syz1 with port count 1
[  230.942643][T11249] team0: Port device team_slave_1 added
[  230.948810][T11296] smc:    ib device syz1 port 1 has pnetid 
[  230.996775][T11307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1979'.
[  231.056855][ T5283] vcan0 speed is unknown, defaulting to 1000
[  231.107527][T11296] vcan0 speed is unknown, defaulting to 1000
[  231.158133][T11249] batman_adv: batadv0: Adding interface: batadv_slave_0
[  231.165112][T11249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.195363][T11249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  231.225289][T11309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1979'.
[  231.246840][T11249] batman_adv: batadv0: Adding interface: batadv_slave_1
[  231.259935][T11249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.301355][T11249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  231.324285][T11309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1979'.
[  231.435326][T11296] vcan0 speed is unknown, defaulting to 1000
[  231.442062][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  231.469706][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  231.583420][T11249] hsr_slave_0: entered promiscuous mode
[  231.600215][T11249] hsr_slave_1: entered promiscuous mode
[  231.614928][T11249] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  231.628359][T11249] Cannot create hsr debugfs directory
[  231.707288][T11296] vcan0 speed is unknown, defaulting to 1000
[  231.708246][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  231.738436][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.001047][T11313] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1981'.
[  232.039334][T11315] tap0: tun_chr_ioctl cmd 1074025677
[  232.048132][T11315] tap0: linktype set to 825
[  232.107621][T11313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1981'.
[  232.192372][T11249] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.231444][T11296] vcan0 speed is unknown, defaulting to 1000
[  232.350173][T11249] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.494517][T11249] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.524764][T11296] vcan0 speed is unknown, defaulting to 1000
[  232.567811][T11327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1985'.
[  232.625811][T11249] bond0: (slave netdevsim0): Releasing backup interface
[  232.635478][T11249] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode
[  232.650501][T11249] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.667565][T11327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1985'.
[  232.718524][ T5232] block nbd40: Receive control failed (result -107)
[  232.737630][T11327] nbd40: detected capacity change from 0 to 256
[  232.848423][ T5232] Bluetooth: hci5: command tx timeout
[  232.877240][T11296] vcan0 speed is unknown, defaulting to 1000
[  232.927884][ T5232] Bluetooth: hci4: command tx timeout
[  233.034809][T11334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1988'.
[  233.077163][T11249] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  233.105845][T11249] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  233.158023][T11249] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  233.182737][T11249] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  233.274109][T11342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1988'.
[  233.313358][T11342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1988'.
[  233.328408][T11345] SET target dimension over the limit!
[  233.373722][T11296] vcan0 speed is unknown, defaulting to 1000
[  233.542389][T11347] lo speed is unknown, defaulting to 1000
[  233.664346][T11249] 8021q: adding VLAN 0 to HW filter on device bond0
[  233.745445][T11249] 8021q: adding VLAN 0 to HW filter on device team0
[  233.816371][ T5283] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.823619][ T5283] bridge0: port 1(bridge_slave_0) entered forwarding state
[  233.854841][ T5283] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.862097][ T5283] bridge0: port 2(bridge_slave_1) entered forwarding state
[  233.885727][T11296] vcan0 speed is unknown, defaulting to 1000
[  233.940076][T11249] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  233.997491][T11249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  234.394253][T11296] vcan0 speed is unknown, defaulting to 1000
[  234.411115][    C0] eth0: bad gso: type: 1, size: 1408
[  234.488044][T11249] 8021q: adding VLAN 0 to HW filter on device batadv0
[  234.622369][T11249] veth0_vlan: entered promiscuous mode
[  234.659671][T11249] veth1_vlan: entered promiscuous mode
[  234.699151][T11347] vcan0 speed is unknown, defaulting to 1000
[  234.740585][T11249] veth0_macvtap: entered promiscuous mode
[  234.762750][T11249] veth1_macvtap: entered promiscuous mode
[  234.808250][T11249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.829772][T11249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.847523][T11249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.858513][T11249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.868534][T11249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.881578][T11249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.892436][T11249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.903362][T11249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.918505][ T5232] Bluetooth: hci5: command tx timeout
[  234.926611][T11249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.948974][T11249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.959401][T11249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.970146][T11249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.983712][T11249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.000134][T11249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.012300][T11249] batman_adv: batadv0: Interface activated: batadv_slave_0
[  235.023824][T11249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.036921][T11249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.059044][T11249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.080100][T11249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.102949][T11249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.116801][T11249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.128104][T11249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.138946][T11249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.161770][T11249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.178569][T11249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.190438][T11249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.204331][T11249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.215644][T11249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.226317][T11249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.243512][T11249] batman_adv: batadv0: Interface activated: batadv_slave_1
[  235.256913][T11376] netlink: 'syz.1.1999': attribute type 3 has an invalid length.
[  235.272402][T11386] SET target dimension over the limit!
[  235.352500][T11249] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  235.376918][T11249] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  235.391731][T11249] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  235.436888][T11249] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  235.826386][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  235.889360][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  236.043274][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  236.065847][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  236.198919][   T30] INFO: task udevd:5242 blocked for more than 143 seconds.
[  236.206173][   T30]       Not tainted 6.10.0-syzkaller-12613-g84383b5ef4cd #0
[  236.249509][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  236.290124][   T30] task:udevd           state:D stack:20888 pid:5242  tgid:5242  ppid:1      flags:0x00004002
[  236.330062][   T30] Call Trace:
[  236.337280][   T30]  <TASK>
[  236.340252][   T30]  __schedule+0x1800/0x4a60
[  236.349021][   T30]  ? __pfx___schedule+0x10/0x10
[  236.355547][   T30]  ? __blk_flush_plug+0x449/0x500
[  236.367600][   T30]  ? __pfx_lock_release+0x10/0x10
[  236.376554][   T30]  ? __asan_memset+0x23/0x50
[  236.381199][   T30]  ? __pfx_lockdep_init_map_type+0x10/0x10
[  236.396799][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  236.403170][   T30]  ? schedule+0x90/0x320
[  236.407523][   T30]  schedule+0x14b/0x320
[  236.413298][   T30]  schedule_timeout+0x1be/0x310
[  236.426559][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[  236.432186][   T30]  ? __pfx_process_timeout+0x10/0x10
[  236.456569][   T30]  ? prepare_to_wait_event+0x3ba/0x400
[  236.462350][   T30]  nbd_queue_rq+0x7cd/0x2f70
[  236.476685][   T30]  ? __pfx_validate_chain+0x10/0x10
[  236.481954][   T30]  ? validate_chain+0x11e/0x5900
[  236.486949][   T30]  ? __pfx_nbd_queue_rq+0x10/0x10
[  236.491994][   T30]  ? __lock_acquire+0x137a/0x2040
[  236.506590][   T30]  ? __pfx_autoremove_wake_function+0x10/0x10
[  236.512722][   T30]  blk_mq_dispatch_rq_list+0xb89/0x1b30
[  236.520133][   T30]  ? sbitmap_find_bit+0x435/0x4c0
[  236.525210][   T30]  ? sbitmap_get+0x289/0x3f0
[  236.530468][   T30]  ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10
[  236.536479][   T30]  ? __blk_mq_alloc_driver_tag+0x32d/0x730
[  236.542434][   T30]  __blk_mq_sched_dispatch_requests+0xb8a/0x1840
[  236.549035][   T30]  ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10
[  236.555824][   T30]  ? blk_mq_run_hw_queue+0x1d3/0xae0
[  236.561156][   T30]  ? __pfx___might_resched+0x10/0x10
[  236.566483][   T30]  blk_mq_sched_dispatch_requests+0xcb/0x140
[  236.584444][   T30]  ? blk_mq_run_hw_queue+0x54d/0xae0
[  236.589963][   T30]  blk_mq_run_hw_queue+0x576/0xae0
[  236.595111][   T30]  ? blk_mq_run_hw_queue+0x1d3/0xae0
[  236.611013][   T30]  blk_mq_flush_plug_list+0x1115/0x1880
[  236.618124][   T30]  ? __pfx_blk_mq_flush_plug_list+0x10/0x10
[  236.628227][   T30]  ? blk_mq_submit_bio+0x1288/0x22d0
[  236.633567][   T30]  __blk_flush_plug+0x420/0x500
[  236.646611][   T30]  ? __pfx___blk_flush_plug+0x10/0x10
[  236.652158][   T30]  ? timekeeping_get_ns+0x5c/0x420
[  236.657427][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  236.662773][   T30]  __submit_bio+0x422/0x560
[  236.667510][   T30]  ? __pfx___submit_bio+0x10/0x10
[  236.672653][   T30]  ? seqcount_lockdep_reader_access+0x1d7/0x220
[  236.679740][   T30]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  236.686388][   T30]  submit_bio_noacct_nocheck+0x4d3/0xe30
[  236.705667][   T30]  ? bio_associate_blkg_from_css+0x182/0xc70
[  236.715575][   T30]  ? __pfx___might_resched+0x10/0x10
[  236.729608][   T30]  ? __pfx_submit_bio_noacct_nocheck+0x10/0x10
[  236.742361][   T30]  block_read_full_folio+0x93b/0xcd0
[  236.754625][   T30]  ? __pfx_blkdev_get_block+0x10/0x10
[  236.761115][   T30]  ? __pfx_block_read_full_folio+0x10/0x10
[  236.767408][   T30]  ? __pfx_lru_add_fn+0x10/0x10
[  236.772375][   T30]  ? folio_add_lru+0x357/0xd70
[  236.777258][   T30]  ? folio_add_lru+0x58f/0xd70
[  236.782142][   T30]  filemap_read_folio+0x1a0/0x790
[  236.787390][   T30]  ? __pfx_blkdev_read_folio+0x10/0x10
[  236.792891][   T30]  ? __pfx_filemap_read_folio+0x10/0x10
[  236.801022][   T30]  ? __filemap_get_folio+0x984/0xc10
[  236.806343][   T30]  do_read_cache_folio+0x134/0x820
[  236.811633][   T30]  ? __pfx_blkdev_read_folio+0x10/0x10
[  236.817207][   T30]  read_part_sector+0xb3/0x330
[  236.823332][   T30]  adfspart_check_ICS+0xd9/0x9a0
[  236.828542][   T30]  ? __pfx_vsnprintf+0x10/0x10
[  236.833331][   T30]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  236.839465][   T30]  ? snprintf+0xda/0x120
[  236.843751][   T30]  ? alloc_pages_mpol_noprof+0x417/0x680
[  236.849465][   T30]  ? vsnprintf+0x1cc3/0x1da0
[  236.854166][   T30]  ? vsnprintf+0x184/0x1da0
[  236.858896][   T30]  ? __pfx_snprintf+0x10/0x10
[  236.863592][   T30]  ? __kasan_kmalloc+0x98/0xb0
[  236.868555][   T30]  bdev_disk_changed+0x72c/0x13d0
[  236.873625][   T30]  ? __pfx_bdev_disk_changed+0x10/0x10
[  236.879222][   T30]  blkdev_get_whole+0x2d2/0x450
[  236.884095][   T30]  bdev_open+0x2d4/0xc60
[  236.888497][   T30]  blkdev_open+0x3e8/0x570
[  236.893017][   T30]  ? __pfx_blkdev_open+0x10/0x10
[  236.898092][   T30]  do_dentry_open+0x970/0x1440
[  236.902881][   T30]  vfs_open+0x3e/0x330
[  236.908827][   T30]  path_openat+0x2b3e/0x3470
[  236.913464][   T30]  ? __pfx_stack_trace_save+0x10/0x10
[  236.919098][   T30]  ? __lock_acquire+0x137a/0x2040
[  236.925557][   T30]  ? __pfx_path_openat+0x10/0x10
[  236.930670][   T30]  do_filp_open+0x235/0x490
[  236.935188][   T30]  ? __pfx_do_filp_open+0x10/0x10
[  236.940378][   T30]  ? _raw_spin_unlock+0x28/0x50
[  236.945272][   T30]  ? alloc_fd+0x5a1/0x640
[  236.949861][   T30]  do_sys_openat2+0x13e/0x1d0
[  236.954574][   T30]  ? __pfx_do_sys_openat2+0x10/0x10
[  236.959840][   T30]  __x64_sys_openat+0x247/0x2a0
[  236.964701][   T30]  ? __pfx___x64_sys_openat+0x10/0x10
[  236.970158][   T30]  ? do_syscall_64+0x100/0x230
[  236.974931][   T30]  ? do_syscall_64+0xb6/0x230
[  236.979755][   T30]  do_syscall_64+0xf3/0x230
[  236.984278][   T30]  ? clear_bhb_loop+0x35/0x90
[  236.989207][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.995127][   T30] RIP: 0033:0x7efcc27959a4
[  236.999991][ T5232] Bluetooth: hci5: command tx timeout
[  237.005402][   T30] RSP: 002b:00007ffdf5b0b420 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  237.013999][   T30] RAX: ffffffffffffffda RBX: 000055715de32230 RCX: 00007efcc27959a4
[  237.023746][   T30] RDX: 00000000000a0800 RSI: 000055715de38a10 RDI: 00000000ffffff9c
[  237.033332][   T30] RBP: 000055715de38a10 R08: 0000000000000001 R09: 7fffffffffffffff
[  237.042144][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
[  237.050244][   T30] R13: 000055715de33540 R14: 0000000000000001 R15: 000055715de1e910
[  237.058432][   T30]  </TASK>
[  237.063752][   T30] 
[  237.063752][   T30] Showing all locks held in the system:
[  237.071963][   T30] 1 lock held by khungtaskd/30:
[  237.079431][   T30]  #0: ffffffff8e937660 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[  237.089384][   T30] 3 locks held by kworker/0:2/943:
[  237.094566][   T30]  #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  237.105785][   T30]  #1: ffffc90003fdfd00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  237.118641][   T30]  #2: ffff88806d2c1240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2d1/0x4130
[  237.145322][   T30] 3 locks held by kworker/u8:6/1825:
[  237.161566][   T30]  #0: ffff88802a50b148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  237.173415][   T30]  #1: ffffc90004dd7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  237.186305][   T30]  #2: ffffffff8fc7fa48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0
[  237.195925][   T30] 2 locks held by getty/4982:
[  237.200656][   T30]  #0: ffff88802f6d20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  237.210482][   T30]  #1: ffffc9000311b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10
[  237.220816][   T30] 3 locks held by udevd/5242:
[  237.225602][   T30]  #0: ffff888020b774c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60
[  237.235942][   T30]  #1: ffff88801faae190 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0
[  237.247768][   T30]  #2: ffff8880210b8180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70
[  237.257028][   T30] 3 locks held by udevd/5243:
[  237.261798][   T30]  #0: ffff88802102b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60
[  237.271208][   T30]  #1: ffff88801faae810 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0
[  237.280871][   T30]  #2: ffff888021158180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70
[  237.290754][   T30] 3 locks held by udevd/5247:
[  237.295469][   T30]  #0: ffff88802107d4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60
[  237.304755][   T30]  #1: ffff888020a29210 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0
[  237.314339][   T30]  #2: ffff8880211b8180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70
[  237.323887][   T30] 3 locks held by udevd/5248:
[  237.328634][   T30]  #0: ffff88802111b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60
[  237.339438][   T30]  #1: ffff88801f910590 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0
[  237.349136][   T30]  #2: ffff888021288180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70
[  237.359760][   T30] 3 locks held by udevd/7011:
[  237.364457][   T30]  #0: ffff8880211994c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60
[  237.373732][   T30]  #1: ffff888020a29c10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0
[  237.383327][   T30]  #2: ffff8880212f0180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70
[  237.392397][   T30] 3 locks held by udevd/7303:
[  237.397844][   T30]  #0: ffff88802102f4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60
[  237.407280][   T30]  #1: ffff88801f910090 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0
[  237.416880][   T30]  #2: ffff888021258180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70
[  237.425883][   T30] 3 locks held by udevd/7673:
[  237.430623][   T30]  #0: ffff8880213294c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60
[  237.441378][   T30]  #1: ffff8880211e7b10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0
[  237.450967][   T30]  #2: ffff888021438180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70
[  237.460160][   T30] 3 locks held by udevd/7682:
[  237.464864][   T30]  #0: ffff88802119d4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60
[  237.474968][   T30]  #1: ffff8880211e7110 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0
[  237.484999][   T30]  #2: ffff888021368180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70
[  237.494585][   T30] 3 locks held by udevd/7731:
[  237.501556][   T30]  #0: ffff88802111f4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60
[  237.511034][   T30]  #1: ffff88801f910f90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0
[  237.520730][   T30]  #2: ffff888021390180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70
[  237.529885][   T30] 3 locks held by syz.0.1991/11347:
[  237.535093][   T30]  #0: ffffffff8fc72ed0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0
[  237.545938][   T30]  #1: ffffffff8fc7fa48 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90
[  237.556164][   T30]  #2: ffffffff8e93ca38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830
[  237.568194][   T30] 1 lock held by syz.2.2012/11417:
[  237.573402][   T30]  #0: ffffffff8fc7fa48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  237.583170][   T30] 
[  237.585513][   T30] =============================================
[  237.585513][   T30] 
[  237.595058][   T30] NMI backtrace for cpu 1
[  237.599407][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-12613-g84383b5ef4cd #0
[  237.609576][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  237.619735][   T30] Call Trace:
[  237.621996][T11417] bond0: entered promiscuous mode
[  237.623005][   T30]  <TASK>
[  237.623017][   T30]  dump_stack_lvl+0x241/0x360
[  237.628226][T11417] bond_slave_0: entered promiscuous mode
[  237.630957][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  237.630985][   T30]  ? __pfx__printk+0x10/0x10
[  237.636251][T11417] bond_slave_1: entered promiscuous mode
[  237.641597][   T30]  ? vprintk_emit+0x631/0x770
[  237.641623][   T30]  ? __pfx_vprintk_emit+0x10/0x10
[  237.641648][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  237.641676][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  237.641697][   T30]  ? _printk+0xd5/0x120
[  237.641715][   T30]  ? __pfx__printk+0x10/0x10
[  237.641732][   T30]  ? __wake_up_klogd+0xcc/0x110
[  237.641753][   T30]  ? __pfx__printk+0x10/0x10
[  237.641774][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  237.641796][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  237.641820][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  237.641848][   T30]  watchdog+0xfee/0x1030
[  237.641873][   T30]  ? watchdog+0x1ea/0x1030
[  237.641901][   T30]  ? __pfx_watchdog+0x10/0x10
[  237.641925][   T30]  kthread+0x2f0/0x390
[  237.641943][   T30]  ? __pfx_watchdog+0x10/0x10
[  237.641966][   T30]  ? __pfx_kthread+0x10/0x10
[  237.641986][   T30]  ret_from_fork+0x4b/0x80
[  237.642008][   T30]  ? __pfx_kthread+0x10/0x10
[  237.642027][   T30]  ret_from_fork_asm+0x1a/0x30
[  237.642067][   T30]  </TASK>
[  237.643577][   T30] Sending NMI from CPU 1 to CPUs 0:
[  237.767022][    C0] NMI backtrace for cpu 0
[  237.767037][    C0] CPU: 0 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.10.0-syzkaller-12613-g84383b5ef4cd #0
[  237.767057][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  237.767068][    C0] Workqueue: bat_events batadv_nc_worker
[  237.767097][    C0] RIP: 0010:rcu_is_watching+0x6/0xb0
[  237.767123][    C0] Code: 80 e8 ae 82 3b 0a 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 <41> 56 53 65 ff 05 58 35 8a 7e e8 db a0 3b 0a 89 c3 83 f8 08 73 7a
[  237.767138][    C0] RSP: 0018:ffffc90000ab7a10 EFLAGS: 00000257
[  237.767152][    C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff816fd330
[  237.767165][    C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90179d28
[  237.767177][    C0] RBP: ffffc90000ab7b48 R08: ffffffff90179d2f R09: 1ffffffff202f3a5
[  237.767190][    C0] R10: dffffc0000000000 R11: fffffbfff202f3a6 R12: 1ffff92000156f50
[  237.767203][    C0] R13: ffffffff8b7f8a8b R14: ffff88801d3c1b00 R15: dffffc0000000000
[  237.767217][    C0] FS:  0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000
[  237.767232][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  237.767244][    C0] CR2: 00007f64296d1000 CR3: 000000001fd04000 CR4: 00000000003506f0
[  237.767260][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  237.767270][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  237.767281][    C0] Call Trace:
[  237.767288][    C0]  <NMI>
[  237.767295][    C0]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  237.767318][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  237.767342][    C0]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  237.767364][    C0]  ? nmi_handle+0x2a/0x5a0
[  237.767389][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  237.767409][    C0]  ? nmi_handle+0x14f/0x5a0
[  237.767425][    C0]  ? nmi_handle+0x2a/0x5a0
[  237.767442][    C0]  ? rcu_is_watching+0x6/0xb0
[  237.767463][    C0]  ? default_do_nmi+0x63/0x160
[  237.767486][    C0]  ? exc_nmi+0x123/0x1f0
[  237.767507][    C0]  ? end_repeat_nmi+0xf/0x53
[  237.767529][    C0]  ? batadv_nc_worker+0xcb/0x610
[  237.767555][    C0]  ? lock_release+0xb0/0xa30
[  237.767577][    C0]  ? rcu_is_watching+0x6/0xb0
[  237.767600][    C0]  ? rcu_is_watching+0x6/0xb0
[  237.767623][    C0]  ? rcu_is_watching+0x6/0xb0
[  237.767645][    C0]  </NMI>
[  237.767651][    C0]  <TASK>
[  237.767657][    C0]  lock_release+0xbf/0xa30
[  237.767678][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  237.767701][    C0]  ? batadv_nc_worker+0xcb/0x610
[  237.767731][    C0]  ? __pfx_lock_release+0x10/0x10
[  237.767753][    C0]  ? preempt_schedule+0xe1/0xf0
[  237.767770][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  237.767795][    C0]  ? batadv_nc_worker+0xcb/0x610
[  237.767819][    C0]  batadv_nc_worker+0x28b/0x610
[  237.767843][    C0]  ? batadv_nc_worker+0xcb/0x610
[  237.767869][    C0]  ? process_scheduled_works+0x945/0x1830
[  237.767892][    C0]  process_scheduled_works+0xa2c/0x1830
[  237.767928][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  237.767954][    C0]  ? assign_work+0x364/0x3d0
[  237.767977][    C0]  worker_thread+0x86d/0xd40
[  237.768004][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  237.768023][    C0]  ? __kthread_parkme+0x169/0x1d0
[  237.768047][    C0]  ? __pfx_worker_thread+0x10/0x10
[  237.768068][    C0]  kthread+0x2f0/0x390
[  237.768083][    C0]  ? __pfx_worker_thread+0x10/0x10
[  237.768104][    C0]  ? __pfx_kthread+0x10/0x10
[  237.768119][    C0]  ret_from_fork+0x4b/0x80
[  237.768141][    C0]  ? __pfx_kthread+0x10/0x10
[  237.768156][    C0]  ret_from_fork_asm+0x1a/0x30
[  237.768187][    C0]  </TASK>
[  237.771990][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  238.124932][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-12613-g84383b5ef4cd #0
[  238.135080][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  238.145154][   T30] Call Trace:
[  238.148445][   T30]  <TASK>
[  238.151475][   T30]  dump_stack_lvl+0x241/0x360
[  238.156173][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  238.161375][   T30]  ? __pfx__printk+0x10/0x10
[  238.165971][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  238.171958][   T30]  ? vscnprintf+0x5d/0x90
[  238.176287][   T30]  panic+0x349/0x860
[  238.180221][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  238.186374][   T30]  ? __pfx_panic+0x10/0x10
[  238.190788][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  238.196151][   T30]  ? __irq_work_queue_local+0x137/0x410
[  238.201693][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  238.207054][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  238.213199][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  238.219350][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  238.225532][   T30]  watchdog+0x102d/0x1030
[  238.229858][   T30]  ? watchdog+0x1ea/0x1030
[  238.234276][   T30]  ? __pfx_watchdog+0x10/0x10
[  238.239034][   T30]  kthread+0x2f0/0x390
[  238.243099][   T30]  ? __pfx_watchdog+0x10/0x10
[  238.247771][   T30]  ? __pfx_kthread+0x10/0x10
[  238.252367][   T30]  ret_from_fork+0x4b/0x80
[  238.256789][   T30]  ? __pfx_kthread+0x10/0x10
[  238.261387][   T30]  ret_from_fork_asm+0x1a/0x30
[  238.266167][   T30]  </TASK>
[  238.269504][   T30] Kernel Offset: disabled
[  238.273819][   T30] Rebooting in 86400 seconds..