last executing test programs:

1m23.478351627s ago: executing program 1 (id=82):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a09e1ffffff000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0)

1m9.799035327s ago: executing program 1 (id=82):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a09e1ffffff000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0)

56.37071158s ago: executing program 1 (id=82):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a09e1ffffff000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0)

44.824987733s ago: executing program 1 (id=82):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a09e1ffffff000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0)

33.674733932s ago: executing program 1 (id=82):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a09e1ffffff000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0)

20.710547004s ago: executing program 1 (id=82):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a09e1ffffff000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0)

18.666641955s ago: executing program 3 (id=773):
r0 = socket$inet6(0xa, 0x1, 0x84)
getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2)
ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000140)=@null)

18.453722025s ago: executing program 3 (id=775):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000140))
getsockopt$rose(r1, 0x104, 0x6, 0x0, &(0x7f0000000340))
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000240)=[{{0x4, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x0, 0x1}}], 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r3=>0x0})
bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r3}, 0x10)
close(r0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0xa1, "356dc7a4b421431f45d418517099aa4fbcbd9054537186a0943b28c7abc581be3f01f72331c7a3f4d055d826c2e4dbf57ea67a7c6ca0f8a5adb14ba105ca254b7ad52ef06a93a6ced04552c95386aace6968cc08de5e43f583c80ddc622a43c394f3eb8730093d7ae7fcdde8a5418402ae79e3a966e7aec9fd837bb2a465ad59022169c7edb2a80de9c4c699b9a3cf14470cd43cc5a0be66997fa533f8a557c3ff"}, &(0x7f0000000000)=0xa9)
recvmmsg(r0, &(0x7f0000002c40)=[{{&(0x7f0000000280)=@nfc, 0x80, &(0x7f0000001640)=[{&(0x7f0000000380)=""/212, 0xd4}, {&(0x7f0000000480)=""/133, 0x85}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/107, 0x6b}, {&(0x7f00000015c0)=""/120, 0x78}], 0x6, &(0x7f00000016c0)=""/233, 0xe9}, 0xfffffff9}, {{&(0x7f00000017c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000001840)=""/130, 0x82}, {&(0x7f0000000300)=""/38, 0x26}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/88, 0x58}, {&(0x7f0000002980)=""/238, 0xee}, {&(0x7f0000002a80)=""/36, 0x24}], 0x6, &(0x7f0000002b40)=""/226, 0xe2}, 0x28}], 0x2, 0x100, &(0x7f0000002cc0))
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000), &(0x7f0000000100))

17.294480378s ago: executing program 2 (id=781):
socket$kcm(0x10, 0x2, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r0)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={0x0, 0x21a8}, 0x1, 0x0, 0x0, 0x4}, 0x22044000)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x2e}], 0x1}, 0x0)

17.23999796s ago: executing program 3 (id=783):
r0 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0xffffffffffffffff, &(0x7f0000000000)=0xfffffc3c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x20050800)

17.105137292s ago: executing program 2 (id=784):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f00000027c0)=""/4102, 0x1006}, {&(0x7f0000000140)=""/4092, 0xffc}, {&(0x7f00000020c0)=""/194, 0xc2}], 0x3, 0x0, 0x40}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="842a0a65bd8c2b", 0x7)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x1c, r8, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000012c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001280)={&(0x7f0000001180)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r6, @ANYBLOB="10002abd7000fedbdf250600000008000300", @ANYRES32=r9, @ANYBLOB="08001780040001000a00e80008021100000100000a00e80008021100000100001c00e700ac393cfbb72a6e4237b994ce99026c9e25c3f054156681f61c00e70078ce2746ae87269fe7f5b3bd03fa97106728f2e700f544f8e9904d98176d5213f684e59dca09b36ba0dce4695b1c00e700b7af6a82d89229558202ea5fa9ae0b0059c174233f78e9bb"], 0xb4}, 0x1, 0x0, 0x0, 0x4040}, 0x4000090)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r10 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$alg(r10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0)
sendmsg$nl_route_sched_retired(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@delqdisc={0xd0, 0x25, 0x800, 0x70bd2d, 0x25dfdaff, {0x0, 0x0, 0x0, 0x0, {0xd}, {0xc, 0x9}, {0xfff1, 0xffe0}}, [@q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x15}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4008044}, 0x0)
recvmmsg(r10, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/223, 0xdf}, {&(0x7f0000000840)=""/127, 0x7f}], 0x2}, 0x101}], 0x1, 0x60, 0x0)

17.094848104s ago: executing program 3 (id=785):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x12c8, 0xffffffff, 0x0, 0x11d8, 0x10f8, 0xffffffff, 0xffffffff, 0x1300, 0x1300, 0x1300, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x10a0, 0x10c8, 0x0, {0x100000000000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.net/syz1\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ip={@private, @loopback, 0x0, 0x0, 'erspan0\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1328)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x3}}]}}}]}, 0x40}}, 0x0)

16.937181537s ago: executing program 4 (id=786):
r0 = socket$unix(0x1, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000040)=0x40000, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', <r2=>0x0})
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={<r3=>r1})
sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="f606464be3f6d5ef1f07991d3d76651c771863f7884b8d8b003681ebde0eb67752a94358a77f59b91ea1769274613aa1fa016c4b3efd735274647eedeceb3034522c167d0d8abbe23c1028055d4724f19c9575a3c53a8cc5698e5c463dd1fd4b93d4216b9afb0834be057ddb6b86ff150b5f6ca165d7f3cca8fbed89ff30d933573138b50f", 0x85}], 0x1, &(0x7f00000005c0)=[{0x20, 0x1, 0x4, "eaa63c15bdb99a0551a6aec1f2bc32"}, {0x10, 0x10c, 0x7}, {0x1010, 0x117, 0xaa3, "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"}], 0x1040}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711233000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x7d}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0)

16.935291124s ago: executing program 0 (id=787):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000800000000100000080"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00'}, 0x90)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newsa={0x108, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@private=0xa010101, 0x0, 0x1ff, 0x4e21}, {@in=@broadcast, 0x0, 0x33}, @in=@multicast1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, {0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x40000, 0x10000}, 0x70bd28, 0x3506, 0xa}, [@extra_flags={0x8, 0x18, 0x101}, @XFRMA_SET_MARK={0x8}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3}]}, 0x108}}, 0x40000)

16.860073882s ago: executing program 0 (id=788):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYBLOB="0180000002002abae1ea66055c89e7017c31b40c9acc820f2c1834166e66d1640b8d6bb1d13c60f20adcdd2500a13117a418155631ad4060200b450aeb8096e5317135b5fe799da87caac9344ecc96d49b1b94a63bf1bdd1639387bb81ae13e2ca1074c3ecc84a04012d00"/117])
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80}, [@FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x30}}, 0x0)
sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x2}, 0x8)

16.806469561s ago: executing program 4 (id=789):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x28507b90debe2cfb}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x5c, r0, 0x300, 0x70bd2b, 0x9, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x943, 0x2e}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x800}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x5c}}, 0x40050)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fddbdf2555000000080001005100000008000300", @ANYRES32=r2, @ANYBLOB="a9a97ecd397339bbb8e950c4bdf8466977564c0e7d2153fae59a437f082f9743d1f69d5b06b1ee9801908964058592601b4c904714229713b84a6020af877a60bc6fac41640ad91b6600c58890d76dc58e1cd325a32030efa9abd37b306028186338fc23ceffd75a5eab6cb6cb9b79fa5ab9c69d208bbfb0d03238e7d929811c8e400b23b65584"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x240040c0)
close(0x4)

16.720744554s ago: executing program 3 (id=790):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000068000100030010000000008000000000000000000c00020001000000150000000c000c80f2ffffffffffffff0600030001"], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) (async)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000068000100030010000000008000000000000000000c00020001000000150000000c000c80f2ffffffffffffff0600030001"], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000)
close(0xffffffffffffffff)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
socket(0x400000000010, 0x3, 0x0) (async)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x40}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x40}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002e40)=@delchain={0x24, 0x64, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x2, 0xfff3}, {}, {0xb, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r6, 0x1, 0x27, &(0x7f0000000140)=0x32, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010027bd7000000000000c00"], 0x50}}, 0x0) (async)
sendmsg$TIPC_NL_MEDIA_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010027bd7000000000000c00"], 0x50}}, 0x0)
sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f0000000540)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)={0x268, r10, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x55e0}]}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7ff, @mcast2, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8b46}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa67d}]}, @TIPC_NLA_BEARER={0x100, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @mcast2, 0xfffffff8}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7ff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7610, @mcast2, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7fff, @empty, 0x93}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x9000}, 0x0) (async)
sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f0000000540)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)={0x268, r10, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x55e0}]}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7ff, @mcast2, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8b46}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa67d}]}, @TIPC_NLA_BEARER={0x100, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @mcast2, 0xfffffff8}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7ff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7610, @mcast2, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7fff, @empty, 0x93}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x9000}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_VENDOR(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="bd838681401cc190000067f0ff0008000300", @ANYRES32=r12, @ANYRES64=r6], 0x30}}, 0x0)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x70, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x10001, 0x55}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}]}, 0x70}}, 0x35)
syz_emit_ethernet(0x82, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde0800450000740000000000019078ac1e0001ac1414aa05009078e00000e04600000000000000001100000200000000000000830300070300443c0003e000008900000000a7eb9817f770296fac1414aa00000000ac0000e7ff00000000000000ac141400"/130], 0x0)
r13 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000009c0)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008002c0007000200060019c00364bc24eab556a705251e618218db677642109146a2378c877bddbcc1863b747ee3d5addad5eb3f3c90b561", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'lo\x00', 0x200}) (async)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'lo\x00', 0x200})

16.672728119s ago: executing program 0 (id=791):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r1=>0x0})
r2 = socket$xdp(0x2c, 0x3, 0x0)
socket(0x840000000002, 0x3, 0xff)
close(0x3)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
write(r0, &(0x7f0000000140)="f28b0f0111687cb54706a189bf19f5464d15c8b301cb811073048799925545ddbb1ff7213bb0c8aee486d58ec1661eb791777fc60e84cb162b4452a0d5b5b19cbe6dd5335fc98573b6ddccdb", 0x4c)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r4=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000340)=0x4000, 0x4)
bind$xdp(0xffffffffffffffff, &(0x7f0000000240)={0x2c, 0x1, r1, 0x0, r2}, 0x60)

16.664944746s ago: executing program 2 (id=792):
r0 = epoll_create1(0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@lli, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0xfff8}, {}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) (async)
listen(r1, 0x0) (async)
r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x8, 0x8}, 0xc) (async)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@func={0x5, 0x0, 0x0, 0xc, 0x1}, @enum64={0xf, 0x1, 0x0, 0x13, 0x1, 0x2, [{0xe, 0xc0c9, 0x4}]}, @enum64={0xa, 0x4, 0x0, 0x13, 0x1, 0x0, [{0xb, 0xbac}, {0xe, 0xaa70, 0xffffffff}, {0xe, 0x85, 0x2}, {0xa, 0xfff, 0x81}]}, @volatile={0xa, 0x0, 0x0, 0x9, 0x5}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xe}, {0xf}, {0x6, 0x3}, {0xf}]}]}, {0x0, [0x4f]}}, &(0x7f0000000380)=""/100, 0xb3, 0x64, 0x1, 0xee4, 0x10000}, 0x28) (async)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xdc2f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x9, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x82ce58b1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x4, 0x1, 0x0, r2}, @ldst={0x2, 0x1, 0x4, 0x6, 0x3, 0x1, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x5}]}, &(0x7f0000000280)='GPL\x00', 0xac, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000440)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000500)=[r4], &(0x7f0000000540)=[{0x5, 0x2, 0xf, 0x2}, {0x1, 0x2}, {0x0, 0x3, 0x9, 0x7}, {0x2, 0x2, 0x5, 0x2}, {0x2, 0x1, 0xd, 0xc}, {0x5, 0x3, 0xf, 0x2}], 0x10, 0x2}, 0x94)
ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) (async)
ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x100)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f0000000040)={0x1})
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f00000000c0)={r0, 0x2, 0x0, 0xb5a5}) (async)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB='%\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x56}, 0x94)
ioctl(r6, 0x4, &(0x7f0000000680)="a5b2bff71ee2291cd662a0ef8d36e4dafe2f5738bfa2291ad2") (async)
socket(0x26, 0x5, 0x6)

16.540940498s ago: executing program 4 (id=793):
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000100)=<r0=>0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"1d36ebda0310d3ec67c3916ae0723869", 0x0, <r1=>0x0, {0x5, 0xe}, {0xc05b, 0x3}, 0x6, [0x8001, 0x3ff, 0x6, 0x9, 0xfffffffffffffff9, 0x6, 0xf9f, 0xffffffffffffffff, 0x3, 0xfffffffffffff7cd, 0x8, 0x8, 0x0, 0x9, 0x5, 0x8]})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"5bd23b04f7b831f21f060d4a169cf19c", r0, r1, {0x9, 0x3}, {0xb3b6, 0x1}, 0xf02, [0x25b5, 0xffe, 0x8000000000000001, 0xf, 0x7, 0xffffffffffffffff, 0x8, 0x5, 0x9, 0xcd7, 0x6, 0xa9fb, 0x1, 0x5, 0xffffffffffffffff, 0x9]}) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0x1, 0x4d, 0x0, &(0x7f0000cab000)=0x2) (async, rerun: 64)
r3 = socket$alg(0x26, 0x5, 0x0) (rerun: 64)
bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20)
r4 = accept(r3, 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r4) (async)
sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)={0x12c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x53}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}]}, @TIPC_NLA_MEDIA={0xe0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8de}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffba5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9a}]}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4004004}, 0x40) (async, rerun: 64)
r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000400)=0xc) (async)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010000304000000000000000000000300", @ANYRES32=0x0, @ANYBLOB="000000000439df482000128000104b000700000a000000080004000e00"], 0x40}}, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x0) (async)
r7 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) (async)
setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) (async)
r8 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r8, 0x200000000114, 0x2713, 0x0, &(0x7f0000000040))
r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSSCAUSE(r9, 0x891d, 0x0) (async)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000003b23022d92bc847500000000000000006c0fc7e84ec18b1ec7381947610a88b34e05dfd3cb525fb9d0998a", @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c0002800500080005000000"], 0x3c}}, 0x0)

16.490646354s ago: executing program 2 (id=794):
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x43}, 0x4008085) (async, rerun: 32)
r0 = socket(0x1f, 0x5, 0x2000000) (rerun: 32)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r2 = socket$kcm(0x2, 0x3, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000004000000b704000000000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
socket(0x8, 0x3, 0x4)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4a24, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x4e21, @empty}, 0x4, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200001, 0x1ff, 0x9})
write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="080000fa", @ANYBLOB="aca93add3f9ae9f5be40cc386176698882636dbf0952e04a748a7a2aab82f0e4f375ef24c550c03679111326b8f96db8c93e2ddd2c9db1d501cb2e3ae308207db94613fc202ad1ce9c376d04bb537a88357f998abc3f1b74ebf30b20c23555d4c2932244b0c209a0b29d6b03c0769b6b842937289627cccc9c43ec992d38bb60a9b7141bf7500ac4db901c6e907c3e751e9b194ea4ad223bd7d527fb3294ffa301604c9d66e1402ab07aea0a6f9fe1ccda15ea3e5de7b2e7d7a33e3a30c0767672b2bd73f21d8f1141007683823cb847044f803e670ee6e2b46fa548db34f288c1ce", @ANYRESDEC=r0, @ANYRES32=r1, @ANYRESHEX], 0xdc)

16.338456833s ago: executing program 4 (id=795):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
listen(r1, 0x20401)
readv(r0, &(0x7f0000000780)=[{&(0x7f00000004c0)=""/170, 0xaa}], 0x1)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockname(r2, &(0x7f00000014c0)=@ll={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000024c0)=0x80)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=@newtfilter={0x34, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0xffffff37, @loopback}, 0x1c)

16.180708023s ago: executing program 0 (id=796):
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4e2d8157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x4, &(0x7f0000000080)=@raw=[@initr0, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}], 0x0}, 0x90)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) (async)
recvmmsg$unix(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f00000007c0)=""/97, 0x61}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/133, 0x85}], 0x8}}], 0x1, 0x2080, 0x0) (async)
write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="9d6b00000000000000004e000000"], 0x14}}, 0x0)
r3 = socket(0x10, 0x3, 0x0) (async)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) (async)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) (async)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x1d, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x0) (async)
r6 = socket(0x10, 0x3, 0x0) (async)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x33c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x288, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0x11, 0x8, 0x4}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x4000000, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x26, 0xffff, 0x8, 0x2, 0x2, 0x8, 0x2}}, {0x57, 0x2, [0x6, 0x6]}}, {{0x1c, 0x1, {0x4, 0xc, 0x7f, 0x8, 0x0, 0x10, 0x3, 0x1}}, {0x6, 0x2, [0x5fd]}}, {{0x1c, 0x1, {0x7, 0x80, 0x0, 0x1000, 0x2, 0x7fffffff, 0x10088, 0x4}}, {0xc, 0x2, [0x4, 0xffff, 0xff52, 0x9]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0x10, 0x2}}]}, 0x33c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async)
sendto$packet(r3, &(0x7f00000005c0)="382533153ecaa86cf1a64c565219fcc17fd6cff1686c79c7a96d5fa6851a08376d365706453af19f07748a56565f429142cc9a7517f34c947ec439311a830886eb68f27485", 0x45, 0x1074237ef9baa385, 0x0, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@ipmr_newroute={0x4c, 0x18, 0x200, 0x70bd27, 0x25dfdbfd, {0x80, 0x20, 0x80, 0x6, 0xfc, 0x1, 0x0, 0x3}, [@RTA_IP_PROTO={0x5, 0x1b, 0x3a}, @RTA_GATEWAY={0x8, 0x5, @multicast1}, @RTA_TABLE={0x8, 0xf, 0x5}, @RTA_SRC={0x8, 0x2, @loopback}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_TABLE={0x8, 0xf, 0xfffffff8}]}, 0x4c}}, 0x4004000)

16.091955104s ago: executing program 4 (id=797):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1)
sendmsg$alg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x840}, 0x4040880)
sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002740)=@newchain={0x12a0, 0x64, 0xf09d2fbf8b68c555, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0xfff1, 0xe}, {0x9, 0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x40c, 0x2, [@TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x6, 0xffffffc0, 0x0, 0x5, 0x48d5, 0x6, 0x8, 0x8, 0x7, 0xd, 0x8, 0x933, 0x6, 0x1, 0x7, 0x1, 0x872, 0xbf, 0x0, 0x145, 0xfffffffa, 0x2, 0x8, 0x6000000, 0x9, 0xd, 0xc64, 0x3, 0x1c000, 0x2, 0x3, 0x9, 0x8, 0x5, 0x0, 0x8ec, 0x6, 0x6, 0x2, 0x2, 0x4, 0x8, 0x2, 0xbda, 0x7fff, 0x8db, 0xcb56, 0x0, 0x4, 0xb1a, 0x1, 0x8, 0xfd77, 0x1, 0x4, 0xd8fd, 0x80000001, 0x5, 0x8, 0x2, 0x7ff, 0x3, 0x32a, 0x1, 0x8, 0xc, 0x1, 0x5, 0x0, 0x2, 0x2, 0x5, 0x0, 0x1, 0x4, 0xc0, 0xd, 0x2c, 0xe, 0x2, 0x2, 0xe109, 0x80000001, 0x5e, 0xfffffffb, 0x297, 0x3, 0x81, 0x6ee, 0xce8, 0x7fffffff, 0x7, 0xd, 0x42e, 0x9, 0x8, 0x3, 0x8, 0xfffffffc, 0x5, 0x6, 0x3, 0x5, 0x6, 0xd7d8, 0x35, 0x1, 0x8, 0x6, 0x81, 0xb4, 0x80000001, 0x1, 0x3ff, 0xffff33f7, 0x4, 0x6, 0x1, 0x5, 0x9, 0x5, 0x7, 0x7, 0x0, 0x52e, 0x5, 0x8, 0x0, 0x0, 0x1, 0x4, 0x4, 0x1, 0x9, 0x1, 0x5, 0x6, 0x8000, 0x10000, 0x4, 0xffff2237, 0x3, 0x400010, 0xe, 0x5, 0x2, 0x8, 0x7, 0x67e, 0x7, 0x200, 0x6, 0x4, 0x5, 0x9, 0x5, 0x39, 0xe71, 0x6, 0x100003, 0x9, 0x2, 0x7, 0xf34, 0xb, 0x0, 0x400, 0x7ef4, 0xa, 0x265, 0x80000001, 0x8, 0x48, 0x7, 0x5, 0x46d, 0x8f, 0x8, 0x7, 0x7, 0x8, 0x8, 0x1, 0x6, 0xdb25, 0xb41c, 0x0, 0x5, 0x4, 0x1, 0x9, 0xe, 0x9, 0x1, 0xd5, 0x4, 0x3, 0x9, 0x4, 0x5, 0x4, 0xf1a, 0x7, 0x2, 0x95, 0x5, 0x993, 0x9, 0xe, 0x7, 0x91, 0x4, 0x400, 0x1, 0x1, 0x3, 0x4, 0x1, 0x2, 0x8001, 0x819, 0xb, 0x8, 0x800, 0x7f, 0x9, 0x2, 0x1, 0x0, 0xffffffff, 0x1, 0x2, 0x1, 0x0, 0x0, 0x9, 0x6, 0x2, 0x2, 0x2, 0x1b328f44, 0x4, 0x6, 0x9, 0xffffffff, 0x0, 0x8, 0x1, 0x3, 0xfffffde0, 0x7, 0x4, 0x6, 0x80000001, 0x7]}]}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0xe58, 0x2, [@TCA_CGROUP_ACT={0xe54, 0x1, [@m_pedit={0xe50, 0x1b, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x4, 0x7, 0x6, 0x4, 0x8000000}, 0x9}, [{0x40, 0x9, 0x5, 0x1, 0x0, 0x2}, {0xffffff5c, 0x7, 0x0, 0x8, 0x9, 0x8}, {0x100, 0x100, 0x80, 0xbbd3, 0x0, 0x6}, {0x3, 0x7, 0x252, 0x5, 0x1ff}, {0x9, 0x7, 0xfff, 0x2, 0xd, 0xfffffffe}, {0x9, 0x9, 0x9, 0x9, 0x1, 0x3}, {0xd2, 0x0, 0x5, 0x10000, 0x7, 0x6}, {0xfffffff8, 0x2, 0x100, 0x3, 0x8, 0x1}, {0xffffff98, 0x40, 0x8, 0x5, 0x40, 0x4}, {0x9, 0xe, 0x9, 0x2, 0x7b, 0x4}, {0xeb9d, 0x31d, 0x2, 0x31, 0x85a5, 0x9}, {0x0, 0x5, 0x31547498, 0x6, 0x2, 0x9}, {0x400, 0xfffff4ad, 0x9, 0x52, 0x419d, 0x3}, {0x5, 0xac8, 0x9, 0x116, 0x80000000, 0x2}, {0x4, 0x2, 0x4, 0x400, 0x101, 0x68571a57}, {0xffffffbb, 0x4, 0x401, 0x642d495a, 0x5, 0x4}, {0x0, 0x6, 0x5, 0x40, 0x7, 0x6}, {0x1, 0xfff, 0x2, 0x6, 0x2, 0xffffffff}, {0x0, 0x3, 0x10000, 0x6d}, {0xf, 0xd, 0x6, 0x7, 0x40, 0x381}, {0x80000001, 0x800, 0x6, 0x40d, 0x8, 0x2}, {0x944, 0x7, 0xfffffffc, 0x401, 0x6, 0x3}, {0x1, 0x0, 0x918, 0xfffffffd, 0x80, 0x200}, {0x9, 0x40, 0xb40, 0x800, 0x4, 0xf}, {0x784, 0x0, 0x42, 0x14d, 0x8c}, {0x8001, 0x6, 0xfffffff3, 0xfffffe00, 0x3, 0x1}, {0x1000, 0x4, 0xffff, 0xffffffff, 0x5, 0x4}, {0x1, 0x9, 0x5d5b, 0x40, 0x4, 0xb765}, {0x7, 0x3, 0x4, 0x4, 0x100, 0x1}, {0x1, 0x5dc, 0x800, 0x1b0, 0xfffffff8, 0x3d2d}, {0x2, 0x8, 0x5, 0x2, 0xb, 0xa8}, {0xc0, 0x22f63e74, 0x9, 0x4, 0xf, 0x6e}, {0x2c89, 0x2, 0x101, 0x5, 0x30, 0x7}, {0x0, 0x0, 0x80, 0x80002, 0x61e9, 0x2}, {0x8, 0xffff, 0xc, 0x5, 0x7, 0x4}, {0x7, 0x9, 0x71, 0x3, 0x2, 0x7}, {0x800, 0x8, 0x6, 0x3, 0x1, 0x4}, {0xcf9, 0x4, 0xaad, 0xb0, 0x1, 0xedfb}, {0x7, 0x8, 0x5, 0x7f, 0x6, 0x4}, {0xe, 0x3, 0xf, 0x6061faa0, 0x8, 0x3fe0000}, {0x80000000, 0xdbf3, 0x80000001, 0x1000, 0x2, 0x9}, {0x2, 0x2, 0x7, 0x7, 0xfffffffa, 0x8}, {0x4, 0x7fff, 0x8, 0x101, 0x3, 0x6}, {0x0, 0x7f800000, 0x75, 0x2, 0x3e9, 0x3}, {0x9, 0x1, 0x7, 0x6, 0x5, 0x190b}, {0xe, 0x1000, 0xec92, 0x6, 0x3, 0xd5}, {0x8, 0x75, 0x7ff, 0x7398, 0x6, 0x10001}, {0xfffffff7, 0x4, 0xfffffff9, 0x4997, 0x7fffffff, 0x200}, {0x4, 0x101, 0x7f, 0x401, 0x9, 0x7f}, {0x1, 0xf, 0xe, 0x2, 0x8, 0xe410}, {0x7, 0xe, 0x101, 0x400, 0x8907, 0xa04}, {0x2, 0x1, 0xc, 0xc, 0x3, 0x9}, {0x25, 0x0, 0x4, 0x1, 0x80000001, 0x3}, {0xa98f, 0x4, 0x9, 0x800, 0xd3, 0x3}, {0x9, 0x0, 0x6, 0x9, 0xd9, 0x7af7}, {0x5, 0x6, 0x2d8, 0x2, 0xefc, 0x80000001}, {0x10c, 0x3, 0x2978, 0x8, 0x8, 0x4}, {0x8, 0x8, 0x3, 0x3, 0xffff7fff, 0x1}, {0x0, 0x80, 0x5, 0x0, 0x4, 0x8}, {0xfffffffc, 0xfff, 0x6, 0xe, 0x7fff, 0xb11}, {0x7d7, 0x5, 0x7, 0x6, 0xb, 0xfffffffb}, {0x9, 0x800000, 0xfffffffd, 0x6, 0x5, 0x6}, {0x9, 0x0, 0x7, 0x7fff, 0x40, 0x5eb}, {0x10001, 0x1ff, 0x4c, 0x4, 0x6, 0xafe5}, {0x7ff, 0xffffffff, 0x7fffffff, 0x3, 0xfffffffc, 0x4}, {0xfff, 0x100, 0x81, 0x8001, 0xa066, 0x1ff}, {0x3ff, 0x236, 0x5, 0x7fffffff, 0x4, 0x7ff}, {0x3, 0xc57d, 0x33400000, 0x1, 0x2, 0xfffffffa}, {0x8, 0xffff, 0x10, 0x101, 0x844, 0x28}, {0x0, 0x8, 0x1, 0x6, 0x7, 0x1}, {0x200000, 0x1, 0x6, 0xbc, 0xa4e, 0x7}, {0x1, 0x10, 0xa, 0x6, 0x3, 0x3}, {0x5, 0x3, 0x7ff, 0x5, 0x82bf, 0x1}, {0xe75, 0xfffffff8, 0x5, 0x0, 0x8, 0x9}, {0x0, 0x2, 0x5, 0xf522, 0x1a23, 0x29}, {0x6, 0xd9b4, 0x1, 0x3, 0x5, 0x10001}, {0x80, 0xc1b0, 0x80000001, 0x2, 0xffffffff, 0x80000000}, {0x10001, 0x5, 0x5fc, 0x2, 0x6, 0x2fd9}, {0xbd, 0xff, 0x101, 0x0, 0x6, 0x37f}, {0x4, 0x3fb, 0x60d31cf6, 0x7, 0x7ff, 0x38000000}, {0x6, 0x7, 0x1, 0x7, 0x4}, {0x8, 0x5f2d, 0x4000000, 0x6, 0xd, 0x1}, {0xf6, 0x1, 0x5, 0x200, 0x4, 0x4}, {0x0, 0x3fffc0, 0x6, 0xc, 0x5fcd, 0xef3}, {0x0, 0x9, 0x0, 0x54, 0x12, 0x94}, {0x0, 0x0, 0x5, 0x80000000, 0x9, 0xf545}, {0x0, 0x80000000, 0x1000, 0x0, 0x6}, {0x7f, 0x0, 0x9, 0x0, 0x5}, {0x200, 0x3, 0x5, 0x4, 0x0, 0xd}, {0x685, 0x787, 0xd, 0x4, 0x4, 0x3}, {0xd33b, 0x0, 0x7, 0x1, 0x4, 0xc0}, {0x1, 0x8000, 0xfffffff1, 0x7ff, 0xbab, 0xb9}, {0xb, 0x4, 0x7e2d03df, 0x9, 0x5, 0x5}, {0x0, 0x1, 0x5, 0x176, 0x6, 0x7}, {0x4, 0x2879f55c, 0x7, 0x3, 0x3, 0x739}, {0x800, 0x79a, 0x3, 0xffff7fff, 0x8, 0x5}, {0x5, 0x6, 0x1, 0x80000001, 0xfff}, {0xb000, 0x0, 0x1ff, 0x4, 0x3, 0x9}, {0x4, 0x1aca, 0x2, 0xb1, 0x5, 0x5}, {0x1bb, 0x40, 0x8, 0x9, 0x80000001, 0x800}, {0x5, 0x81, 0x3a5, 0xe6, 0x2, 0xbd9}, {0x27d, 0x87, 0x6, 0x3, 0x1, 0x42}, {0x7f, 0x4, 0xffff, 0x8000, 0x0, 0x1}, {0x0, 0xc, 0x8, 0x4, 0x7, 0x466}, {0x7, 0x176, 0x40, 0x2, 0x76, 0x9}, {0x9, 0xb204099, 0x800, 0x8000, 0x9, 0x6}, {0xb, 0x40, 0x101, 0x1, 0x4, 0x3}, {0xa, 0x1, 0x7, 0x0, 0x8, 0x1}, {0x5, 0x5, 0x6, 0xffffffff, 0xd5b, 0x3}, {0x0, 0x80, 0x7ff, 0xd, 0x5, 0x2}, {0xfffffff0, 0x2, 0x7, 0x3, 0x2, 0x7fffffff}, {0x2003, 0x400, 0x3, 0x8, 0xfffffffb, 0x6}, {0x58c2, 0x4, 0x26, 0xffffffff, 0x9, 0x7}, {0x2, 0x7, 0x436, 0x8, 0x7, 0x6}, {0x800, 0xff07, 0xffffffb4, 0x5, 0x963, 0x2}, {0x2, 0x6, 0x8, 0xc, 0x80000001, 0x4}, {0x3, 0x2, 0xfffffffb, 0x8, 0x6, 0x140}, {0x2, 0x5, 0x10001, 0x8, 0x2, 0x2}, {0x6, 0x5239, 0x6, 0x974f, 0x4, 0x2}, {0xff, 0x9, 0x10, 0x800, 0x2, 0x8000}, {0x7, 0x8, 0x0, 0x7fff, 0x7f5f, 0x4}, {0x1000, 0x6, 0xfffffffc, 0x5, 0x3, 0x81}, {0x0, 0xe196, 0x4, 0x800, 0x1, 0x94}, {0x80000001, 0x217021e6, 0x2702ff34, 0x9b40, 0x3}, {0x57cf8ce0, 0x2, 0x76, 0x80000000, 0xe, 0x7}, {0x4, 0xfffffff6, 0x2, 0x1000, 0x1ff, 0x2}, {0x8, 0x9, 0x6, 0x4316, 0x6, 0x7}, {0x6, 0x7, 0x7, 0x2, 0x1, 0x8}], [{0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x2}, {0x3}, {0xf9923793e02d7db6}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x3}, {0x3}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x3}, {}, {0x5, 0xe1835468be4c3e98}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x9a9242c1bef3e2b4}, {0x2, 0x1}, {0x2}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x12a0}, 0x1, 0x0, 0x0, 0x4004880}, 0x44000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_crypto(0x10, 0x3, 0x15)
r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000f00), 0x4)
r8 = socket(0x2b, 0x80801, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)
r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000f40)={<r10=>0x0}, &(0x7f0000000f80)=0xc)
r11 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000000)={0x0, <r12=>0x0}, &(0x7f0000000040)=0xc)
sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r12}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0)
r13 = gettid()
r14 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x19c04, 0x55007}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x3}, @IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}]}, 0xff4d}, 0x1, 0x0, 0x0, 0x4802}, 0x2400c000)
r15 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000000)={0x0, <r16=>0x0}, &(0x7f0000000040)=0xc)
sendmsg$nl_route(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="4400db5f00001800210000000000000000001d0100000800", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRES32=0x0, @ANYBLOB="08000e00", @ANYRES32=r16, @ANYBLOB="15000400030000e00a0100000325175362eb4cf204000000"], 0x44}}, 0x0)
r17 = getgid()
sendmsg$netlink(r2, &(0x7f00000010c0)={&(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbfb, 0x80000000}, 0xc, &(0x7f0000000440)=[{&(0x7f0000000280)={0x24, 0x35, 0x100, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x14, 0x97, 0x0, 0x1, [@nested={0x4, 0x98}, @generic="2723c6efea2c44137731944f"]}]}, 0x24}, {&(0x7f0000001400)={0x1214, 0x14, 0x10, 0x70bd2d, 0x25dfdbfe, "", [@nested={0x8, 0x129, 0x0, 0x1, [@nested={0x4, 0x147}]}, @nested={0x1105, 0x14a, 0x0, 0x1, [@generic="9d9bffd8140f38a22e4e33a5c3cc16132b370d0cf629cf724b786142ccd0e20e41a9b4aa7eaa0d7e51217561a7ec642849da444e626bf508ed2266c3a8a56f408b466e0fe189966a809e7fb6a0c3e9026f36d33f117674efd855cd20a3467e2492be4e8ddb320b8b7f148224c80aca44f1ab4bb38fa14d0c66efe74316812dbdd0c28258aa8f82503ebcb8b1", @generic="d1adf2d0ecc5b24576c8ed15862c36e272ea636842e6a4f5911509f02129259cf7c872b061de1e47d183223bb4e40cf2f03ad11736e2897983a66c471730f5fbc27f40df099774b2186d4405a8adce72a314b153e9ca32ed469c2a3a9f339c1d5a1032343b718a6e17acb8a68b5e807fc3ad5bd7cd34a26e4c24fad97f6f3a9d26e20f00fbbf4f6c5b200ccadfb853ee82c6add609d87f523c8a3985c85f80aedaa34fcac3c0cb0dc74ee5f085e934a193ab77b40350ed9ce9177e0a5f6703f4e40342a087dac3921110aa6cb28a1575f15eba8ded661e8f3dd69ab308282a82551c5466b07c6308255e630d917421504154d3d06dc8fc432f1b873c68562d4cd1e3f29bbfe658a466144908a79f034eddc00af2f896e35fd9d7e41663757d8b39aa7168220177926c5378e1f1fd955114ca1ed478778fc32b526fa549cacd26ee5ec9d7cea5de25ffa50a525c4997c423fde3b96d8e1220351e9cd18da0849d191a1b14c82d7fba4ad0c8d61be62f8a02fbfd0df1d911c122ea546c87ffb9f14a8bba83fa93238d9b9138720b13bf06dc44e21f7b19293391f2327069aa407ed08216edbf30c693fcdcf7f96ed786f9424bf8fe8ef59036148a27a67896f0a41116c0a9e299c63422ce0800a6190c8f9180021ab4971266c160434f307ea129a0296cc683173690dbb538dc80d80a38c3fed1fee55b8ae15a47d3c4b47dd949991b992233d9bd053052824ae40dc66dd81751017c487dc2250493ffa86b8805bd149449036e0bd3372fa405b9a9f3a11df8f9ff43550c031181d59daafbc8d943c016d16319c49b2a1a3ab3bbcaf88af7b1e122825d282f63bb5dbc1fe159687116cecf7e20d488e9233422fdc382f7887c825efa6d2311cf53c1e9ff4082275374ab5feb1021e2454526095094f2aa2c1ca3f065840da73308d850a2000f82851c24ebb7efcb42a1d6f8da1e381de39382d5ffb8f21e0d302617972d0af5e00a7580336f1964a8e2cd30b205f815b3526ced8dde840813591da8876fe0b63272a180fdd904046e86ce2a2307836d23ef4eff759f0369731b143a013b0086e4db13c994bfb168522f3f3859aee81f6cf511d09c722076a71caf5de2b2e801aa701ab7d9db40db8ed2cf71458abee0796477a181b022fe48a9d2e2ad2de42c49bd715fa97ca75e3261758e6611cb4c092e1791849a605df4b7b157a30ae816c96de94ca009da028e43adc3055b222f37297c08c665617fad5fcd3997977a4ebca2f9e5a45f72ff8f644835b2e7959297f1714924d67ad34c35b4ea6fd31ebae009f5f4719643aa0c4c3d5a35993ac4327f68d5927ac91001603da7857ba3d636fdaf969d2d38ad68ddf8fd327e5c95f8dc0882710c80da87933739b8b2bee9603f0cf0e8210212a3a49290b39a2ee6927754c0fc1702389660b93e94cd47023da5063cbfa666976550130ea9d8c2fac930d411578a4fe87cdc57e6b0f09e8d3182b5bab2363855997525af03fbbe78932a72356c70eea69cee161ea1c42be780a2d03e2598e6b3dafee2af6385371df0478e7044050688b879353a42e4ea15e525c739c45e57658e4639fb3cb0d056eee0beebc9e8869d2793d6ac6c70e328ec4bbdc50b357135b7dd04d2f3418b1c6cb59bf829fa6c7511103ae5dfaeb06ed6580843ad3e9a16fe677067a63acca8b292ea1876cfbf720ec8aaf97a16f3a336494d3753b24e51fa24955fa548fe9a5fb3800d910a50497dbc9ee2fc730183e86c88676e812e6320ccb9408a4ca469157de2fc556d2fa945ac7ce233b3a9b06cae9b4078ebe244d96c59935ccdeb2b95bf7a06f4b1c574c78c67ab3bb4cea3043fb0078170eef8cb490c0aeba80651df9e704398373e4bafb61eac1fe4b2f0eb34ab700f71745c2d6a193a2625314ed7cea246de29025aceef39e3eb640c1cf80310232ff66d58b8f7b28fe82b04570af6f564ace5d4ff813da31bad24b27ac6099898c60ac41570f7051c362a505d8d64ec3f762d34badf8ac0b100d76dd4d9dd144574d0589fd7869ea0f7aafab99dede98cde0d9c8fcdafbe14718f5095159bdf8a2250d24eb5bb8caf559d452accb251149db532fcb1c85d2cf71f97ba3d5898256d030ae0aec6f151ca910699755ab6ac3de8557b99d4b72914a80785720b71549398173cf58206b27c6d78dc30d4842dbb41fce3a51714de0fffa42129445618332c5f2d51bf8999299849c67f0dc22214024b758b0282c5bcaa926691eb8e58649b49e2f04146d1474ecb446740f5a78712a90abce6a9ad086e276ff4dd0a61ec45c068aae1fde3bcad5ed64ccc1568ad7fdeea340fdd627f87b935d9c0b1a89ae53a6d74a7eda7176c9d45a5393e0408b4b061038616a7e06211d0ff5da212d85ce00fb9c139233737f45e1c684e594a7b5810190cc0e185e2c0e0df6427adeb35722ad607abfac442e53f76d486a873a9eefae28c67f81f38c532758a785d4a0eeaead9b69b506e833b036fd851c11fda791bf0e8acd0007a00dcf17d9e64ebd8ff53e20a3c5d63e050b9175d24e723530b26049f7c80c87010ae257e0cd7e00993f6073a77b9270d9a03d4a951e7238476dde9f0a2850d2a1c3233077430a442666b4244420d116013a8e473e8e3c593448f8e6c247a85f1ff37f303806d936a5783771579067bf399bc2f6ee3fe13b1b987f4118c39978a506315fdd497d99c77a9334119c90b85d998d449034ae0d931ea2493530d8cc95c887a50a94d757d11ddcc1dc13ccc12b0e89fa1a3813bdab7affef2a425884453ed622d8c7d4fb8d31008cb9ba90c893acbd6d4c9d393bf35f4677a22591f77bcab490e6d4db337be5ef1e7a89e227095529662c9ee8a7fc9c9759a689b28db5815e1841ec692787950a18f89a37bfa339dcada0a7c728768cc03a11eaeedb4766655f6e84638f6a1c1e1914fd11e0e9bdd617793a98c130645be65676fd9bec8d75b6ccebfeb2d6424a3db416c1713c3918ceab3b219f9bd0040fa6e57b519e686b355c77c7cddcf3a11951ea0e7fecd2f0c77313baf904dfc9a8bf489051f14c3018586172b72df0a477dabb6d1e150cf71d71fe89a241103acb606d5739eec6a8462a268e52abc212b6b649b5b570ec4c86ff8315f1f87cec475cacaaaf382a4c5a90390c6fc436191fcd560d3e71ba0ba77953afd2ea20820e62e1a30c5bf138b887d63b8ce2daa9b55213ac5bcbc62e5871375026498c2e5078e8900344095b03875a24b6b8e828bafbda0d21c3a747e2fdd6941ea88925c62710e863cdb1202f188f5b2e5b13ed3ae9be3f0d2f4ec3bdb9f5cf026f0834d49896f0ae3401067d9d4ddb877fde0fb5ab6d5f215c237b0ad2eee996448550c4fac42e618f0b40f2a4e9f8b184da00a7d57d13705d3fee4d83debcf8803d4da8e16e711f7adf3ae184f11454387553712451b96a022e96c536da99ba14fc9fbe903b9e0ed1384d7e608c42b01905448eec317368746d0dd6d4667fc2ab94b8d4fe5ea8c5a8e02c749dd8c9bb6a2ffe33d7b46bd44b0b113a9a816417f8337731e356deb234b309e8e0f6fd675d8d6493aaf3aa00a5e935d8fd25e3de9b8523def62ad03214537b28fd589f3134264dfa6435a9cb11cdf3753bab07c021a8c7430d445e4260a9ca20aad2d2115fb915ef80b7d97c007b2e7cbc51cb5e7d919b8f607ba5aad7d3dfba8285293ae84e16bf6e7acdfa036d67331c85f5d8141727a64f5deb14b2ba3bccf74c06612b5eae596f3283d1ab5ba8f1aa6c126f3e45041292b4585ad6c28f4cc1f76e17149e465296034f5acd40e6a41c2db254b8846bb9e811fda5e777e563b1258d700c6f3a43d561bcca47fa06e8b9921bde901d14eb64679311d0efa26a5e9c345cc64cbe1acf0cde85a8a9a79f8858c1ce9b33d8bd8c68165d207b1379ac0d388218acbb51fd4074e3cf3bc08be77aa93e878848d4f0f22d88d74e3f600f7b788fa0ae3bea18abe0511e60ea7abc034a87be106daa970ee4e1e56e2893ae380adbf63ab894a90a72cffc7c4143744aa5bc41d1b778d133c4356d4933a652f7deae391756eda30cd77170f62c40f1e2bb62c706ae8fa7fe8e02035e70fe8d313caeb04cc213704c7fbebbfa9d29938b6abefa5114c56a47a64182cb8ac181058a6d831b7fedd0c1c17799aa80494280f9dd1f5962def986a1835bd3ce83f1f7b53232b84a0727474349c96282c8429abbd1f56d342507f3c33bc598fcabc2a24390b890c4ea6877d7f041bf2d36391b94b48a03e59f79401c5954d39b3c80acacfa33feb4fd0f45d2188bc7304a4445c75d8ea85b5b9d8b5f462c0caa21082a2ab243cc073506746aa1f5e52503c68f3e142459833a48b16199313ad5884375ceb4b7ac54455f02e32fecf698c315025ff31f7d7c9beb87ccb7830655324a71a1f339a665527c7b346a2e932220cc36d67a235ce65d18833efbd4ec2f19998113ef9914f102c541b99fd006c3ac9995015e57879fcf67de9ee058861b380c65acba680030a58d43b3b6bca14837134c63f80f1eaae069766c995b696502de7bcbd22b3608c159b780a4f0c306db09e7cfd9496a6e8955125bf604052f7a0458fbe72093b693678bc56e977e9aa717d51181e5bcb3579eb0d2aeb2d0fbff2da722a942c0668ba2c89ad9aa3b87a75a42f1658e9fb89d1efcebc990612af16fd1b5d3bcb8ec20bd4a55974022e553b32408bacf58a76b9ca9863b81a84f73900adbf460d264523717471a42e8da6dd1153469f88059d0ad7550139b007044d05d9468afcacf69ec507b8be343924cace3a0397b727b56549a041bb85e03219c44c677286f470ef8f8d45d5ccf56eb2ce418c1fff6cf9811aa33aefdf89a71e494610799101c48d9daae8b6ca9c99f82a221ee8c2f8911d9418920ffe057ab3ef1ea9d1f560c4ded30f7ed9f87ba56f589ee92e8c9b5a0cfd7b983f361b1941c369680160b8dded5d4c117f0913ec2f56f07f638456920db0dcd483a12301bbca24294ad65aa842960286c59331a4e80277441f2b5af5012445bf6ad68cf89af1f75342dd896dfd46246b52c13296d8c2ba3ab40e0ede41480862b204cceb80606b4b15b84330fd36499d7fabede888f34bf55f85671ed9253609bfdde256b0a8e1f7858ad8d69168f9ddbdadb4ab48aa7ab1300fb266ce53ba697889d74aa66d795f3f572b781dacf4c09f0dd51d9a0ca68fad0ab998fc06a82159822479a50fba8c07e443c2e9b04ca20a596cbaf744497707505bc07c096822191c1dc040134956b84f181f58d1dbba7c4221113e2056c1df9f5b324c12c2cdcc9cea153e8096977b7d9cc8af28977898ac71e5b391d94fe17a5cae5bd64c5299e1bd93b28a2197ff678eae6649eb489f98249436810aa41b34846140a960973d5be45e8ba4bf99f77fb87091792f94cc9b443c9617ee8ce9e8c51ebe230685aba5b9d2db68802c44f0774457fe9ff1d99baf3e69d1798aa7e0eebd1c0a6134cb8e6adfc2fb1de02266ed214b62d3d0ad785857fbe0be39e08114aac5602493e4cf5ccba86307b57dbfd2bd3a74ad2f6ba6df137ce6f82555cacee442b610acda23050f1d48cbec9dd450dd0970774c50e728028af9555a150c824e993fb18652115db9c0d08ad374b447f98683c127575240e78e7b16e10de0057e69f91296405c753ad68a88c947d30f4ac1da589899c20a9ce47f0db696e7771ee2536287582253902efaa152e0e33eea4c06be021c357bb6bdd5a80a59f7f8ac437edbfb47a412d7", @typed={0x8, 0xe7, 0x0, 0x0, @fd=r2}, @generic="0c126ecbe7b585000080efeca1c6b27c0b34858fbe91e829cbe7e4b19b8284f534d22392fc9d6a088dfbc460028830541e9126c8fc3352e1393f3c0c7d5cef4690223ea73970f348f33300166aee12f0eacb77541666358e629ebcc38b9e140642d6603438916074e8320ede98"]}, @nested={0x18, 0xec, 0x0, 0x1, [@typed={0x14, 0x91, 0x0, 0x0, @ipv6=@mcast2}]}, @generic="e4ede214b6921c6f3407bca6633a82bbe3261a164d41ec3ab12e9de75407db56393858222a5db9b2a3167910467c1a35d4006b0c516afbb11abe3bb0ab9f0b159bd9a960ce2ff56de0c4dd4bd47872a9a33ca3baf3b529d81e39f6bbc9072b615a7217517d1e39573e68b650f8db160a7bf5ae4675f81cf3d679ce3ed44dc0096bc25b89ed0585ab1b3dcd6816d94f616a494f2188c85dcd674c5144724b62e74c3f49e9cee17d71bbb791d4eb123117f9e463c8dab4b6ce81ad5bbef7a1d237bcc5eded697525eed9eb76070a377f1de8dc89ad35f770771d0de9"]}, 0x1214}, {&(0x7f0000000380)={0xb0, 0x1c, 0x8, 0x70bd2c, 0x25dfdbfd, "", [@generic="204a60925e263e8cd51027af828a39ba68a5d15cf897a874db25003e91d365096befff7ab5e4558afa7058e0904119cd4d2d3020071d9ad83b0994d5a92596581268b70a24de757cc9b74b9943c0c6a900f920211d27429f80b6487e3e7e9d1b5e4ce65dea362a3eb5dc802b5f208537e0e9394160f0804b90b579b3b3a38cdb80a45dde8b407020cd", @typed={0x8, 0x31, 0x0, 0x0, @u32=0x1}, @typed={0xc, 0x5a, 0x0, 0x0, @u64=0x4}]}, 0xb0}, {&(0x7f0000003a00)={0x1218, 0x35, 0x800, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x8, 0xb2, 0x0, 0x0, @pid}, @generic="62af191ee87f564c299565f0825f8b210badbc19e9634d748ad0bc3be58bd14b89bb008c6089adad2745bc63c2f16eb77f1e244e0754e44c339bcf54060cee4d58dd355d33bfa580276cafbacf2b1b9d2287d456500d13dd3b380f90a146ef4c76800cd24e7fdfe9218ecd7b5aa2d4ddad3bf70e932b885c838defb5c2a0bb5245cb10d21e973258e113a2f41b94956bf76df1b5e9e645d9d4ba641e5ac30fcdbe755c360e6a42395362ac0a03757a2ca0d30b", @typed={0x8, 0x3e, 0x0, 0x0, @uid=0xee01}, @generic="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", @generic="5458b1be383d3363a9338a604d9b6f646485c876c85d3ff86d1705768be3c0bb026ae7e1658d181f3bade880f6d993e1dd509e1b67", @nested={0xc, 0x8e, 0x0, 0x1, [@nested={0x4, 0x8a}, @nested={0x4, 0xe8}]}, @typed={0x8, 0x107, 0x0, 0x0, @u32=0x8}, @generic="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"]}, 0x1218}, {&(0x7f00000006c0)={0x414, 0x11, 0x10, 0x70bd29, 0x25dfdbfe, "", [@typed={0x77, 0xb3, 0x0, 0x0, @binary="d7a37d83aa3a93241236fd93b8bb4005c39ff6d5934f4e0961e670630605965bfaa5d9577cd42359acc0ecb36f168bbe29ed262fa839a83ea2200e82f21d6b75fb16285c89f8b3161ceb61f99f37b9fdb44047bc116d161f1ef0a82c9172392e55b01c9dfd98f92f4a25756e1cf76c4a9f51e5"}, @generic="adf2d3da4ec7aa011e04af5f676892fd78d423820906254d6e353e6482fc1adc2d7997e0c0de3a0ab6e207427ffbf08bd9b0a6428a68fd10329f87976f0768f0ae57138b1f17fc7e7876125bbadf5aa4e2f936acaff007f396cbba080379a2bdea381fdc24fc5445cbe2302a38f62c1ec1925b200e52aa46823d2e3eacb504e728a087ce5f53e8f16c416dc4e3a958b3401747a181cd82067d0fcf2d90abc26f00244c1f36b0598c28f39f7cf535d93709dff5033d4d470e0f5faf238ad09ceff69434c4ee85f53e4bae063f20689613a681ebc2d0", @nested={0x257, 0x14a, 0x0, 0x1, [@generic="fc44e53fdfeb4130dac7c4184a724a331d50a778db871259791946f552f53deb3bda89b7936bbf40154d8ff4accc003937a486766a173fab5e1e1ac825b8ae55d49ef66c273ab3858382f864f225be1efc520d0b3fe23edadc1619f63ad02ec4f7707fa5ba97cc6e036deb4d654dd243ae95bd852951889e1d9c13c605c2feca59", @generic="64ea82e5c4cc09a4c4e69c61999723b513d722fede93b0b142157c8146c1cf783b8b5b6421beaee19296746cf224d760ed770fd87bd85698e93333a02bb48a0444ca30c3603876d96be910321814eb097b0f643646", @typed={0x8, 0x2a, 0x0, 0x0, @u32=0x8}, @generic="93a89f5b5dd66a925718108d08b3541c9fe04365a7e0933f4378ad77b19c4d41e248b47f90fca080e4aee127af5b136753d431a38157ac0f3782b733d1961a18aba1fed7ef49", @nested={0x4, 0x125}, @generic="48ba97a3e1df1356d4baa7137b3bd59ab7cd3d2e2625eef3cc4094667a1143ae", @nested={0x4, 0x14d}, @typed={0x8, 0x13d, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0x13c}, @generic="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"]}, @nested={0x5a, 0x14f, 0x0, 0x1, [@nested={0x4, 0x83}, @typed={0x8, 0x24, 0x0, 0x0, @uid}, @typed={0x4, 0x111}, @generic="d902c5caf2eb9ce0cf05ce02e5c9e4481e2d1c9549151d19d2ac3c16a14db14ce227c369924ca44fe318401692ff3a71495091", @generic="08713b7a89689433d5665f23ab5a4c36f7cafa"]}]}, 0x414}, {&(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000080085007f00000100"], 0x18c}], 0x6, &(0x7f0000000fc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r0, r1, r1, r6, r7, r8, r9]}}, @cred={{0x1c, 0x1, 0x2, {r10, r12, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r13, r16, r17}}}, @rights={{0x1c, 0x1, 0x1, [r2, r1, r2]}}], 0xe8, 0x88d0}, 0x41)
sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="94000000", @ANYRES16=r3, @ANYBLOB="02002abd7000fddbdf251500000008000300", @ANYRES32=r5, @ANYBLOB="0c009900090000001c0000100a00060008021100000100000a0006000802110000000000080084330af6f3ede5ff00000a001a0008021100000100000a000600ffffffffffff00000a001a0008021100000100000a00060008021100000000000a001a000802113d16ad7ab1e7bb0e000802110000000000"], 0x94}}, 0x4)

15.982962344s ago: executing program 0 (id=798):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x18)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000002c0)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1}}], 0x48}, 0x0)

15.982626754s ago: executing program 2 (id=799):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001540), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x24, r2, 0x407, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x44}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0x1400, 0x7, 0x3}]}}]}, 0x48}}, 0x0)

15.810429158s ago: executing program 0 (id=800):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r2, 0xffffffffffffffff, 0x500}, 0x57)
sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0)

15.725164687s ago: executing program 3 (id=801):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r3}, 0x18)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000002c0)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1}}], 0x48}, 0x0)

15.72018648s ago: executing program 2 (id=802):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r0, &(0x7f00000003c0)='V', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
shutdown(r0, 0x1)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async, rerun: 32)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000300)={0x9, [0x0, 0x0, 0x0, 0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000340)=0x28) (rerun: 32)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff8073f00001d00000000000000", 0x1c) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e20, 0x48a0, @mcast2, 0x59}}, 0x40, 0x5}, 0x90) (async)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r4, 0x10c, 0x8, &(0x7f0000000780), 0x4) (async)
r5 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 64)
r6 = socket(0x2, 0x80805, 0x0) (rerun: 64)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
socket$nl_sock_diag(0x10, 0x3, 0x4)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r7=>0x0]}, &(0x7f0000000040)=0x8) (async)
pipe(&(0x7f0000000280)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$IMGETCOUNT(r9, 0x80044943, &(0x7f00000002c0)) (async)
getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f00000001c0)={r7, 0x7}, &(0x7f00000003c0)=0x32)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000000180)=0x6, 0x4) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYRES8=0x0, @ANYRES16=r11, @ANYBLOB="010020bd7000fbdbdf2526000000180001801400020064756d6d7930"], 0x2c}}, 0x20000000) (async)
getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000200)={r7, 0x8, 0x9, 0x9}, &(0x7f0000000240)=0x10) (async)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0xf6, 0x8201, 0x7, 0x6, r7}, &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, 0x0, &(0x7f0000000140)=0x38)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x4e20, 0x800, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10001}], 0x1c)

15.58174584s ago: executing program 4 (id=803):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007b0130000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x8000, @empty, 0x7ff}}, 0xf66, 0xd4, 0xffffffff, 0x8, 0x10, 0xb49, 0x8}, 0x9c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

0s ago: executing program 32 (id=800):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r2, 0xffffffffffffffff, 0x500}, 0x57)
sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.103' (ED25519) to the list of known hosts.
[   79.894786][ T5837] cgroup: Unknown subsys name 'net'
[   80.067767][ T5837] cgroup: Unknown subsys name 'cpuset'
[   80.077128][ T5837] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   81.812976][ T5837] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   84.108367][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   84.125222][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   84.132928][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   84.142193][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   84.149949][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   84.215006][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   84.223164][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   84.230841][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   84.259459][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   84.270580][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   84.296517][   T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   84.343939][   T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   84.357479][   T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   84.369423][ T5170] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   84.377194][ T5170] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   84.384295][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   84.392497][ T5859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   84.400179][ T5170] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   84.408895][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   84.423614][ T5170] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   84.532037][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   84.540465][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   84.549387][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   84.557469][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   84.572697][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   84.821503][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   85.042483][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   85.159809][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.169002][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.178365][ T5849] bridge_slave_0: entered allmulticast mode
[   85.188990][ T5849] bridge_slave_0: entered promiscuous mode
[   85.229565][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.236832][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.244096][ T5849] bridge_slave_1: entered allmulticast mode
[   85.251133][ T5849] bridge_slave_1: entered promiscuous mode
[   85.280467][ T5858] chnl_net:caif_netlink_parms(): no params data found
[   85.326150][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.356806][ T5862] chnl_net:caif_netlink_parms(): no params data found
[   85.383074][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.464374][ T5849] team0: Port device team_slave_0 added
[   85.521684][ T5869] chnl_net:caif_netlink_parms(): no params data found
[   85.535836][ T5849] team0: Port device team_slave_1 added
[   85.541991][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.549206][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.556545][ T5855] bridge_slave_0: entered allmulticast mode
[   85.563730][ T5855] bridge_slave_0: entered promiscuous mode
[   85.604537][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.612023][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.619945][ T5855] bridge_slave_1: entered allmulticast mode
[   85.627125][ T5855] bridge_slave_1: entered promiscuous mode
[   85.714944][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.722044][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.748036][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.777222][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.784822][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.791952][ T5858] bridge_slave_0: entered allmulticast mode
[   85.799824][ T5858] bridge_slave_0: entered promiscuous mode
[   85.816288][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.823250][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.849323][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.864951][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.877412][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.927133][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.934857][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.941994][ T5858] bridge_slave_1: entered allmulticast mode
[   85.950175][ T5858] bridge_slave_1: entered promiscuous mode
[   85.983959][ T5855] team0: Port device team_slave_0 added
[   85.990095][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.997319][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.005491][ T5862] bridge_slave_0: entered allmulticast mode
[   86.012577][ T5862] bridge_slave_0: entered promiscuous mode
[   86.041355][ T5855] team0: Port device team_slave_1 added
[   86.061504][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.069036][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.076515][ T5862] bridge_slave_1: entered allmulticast mode
[   86.083992][ T5862] bridge_slave_1: entered promiscuous mode
[   86.174402][ T5850] Bluetooth: hci0: command tx timeout
[   86.177999][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.189156][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.199028][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.206594][ T5869] bridge_slave_0: entered allmulticast mode
[   86.213851][ T5869] bridge_slave_0: entered promiscuous mode
[   86.227042][ T5849] hsr_slave_0: entered promiscuous mode
[   86.233464][ T5849] hsr_slave_1: entered promiscuous mode
[   86.241031][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.248683][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.274716][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.287366][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.294409][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.320375][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.344307][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.353978][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.361202][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.368547][ T5869] bridge_slave_1: entered allmulticast mode
[   86.376946][ T5869] bridge_slave_1: entered promiscuous mode
[   86.425480][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.438621][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.493752][ T5850] Bluetooth: hci3: command tx timeout
[   86.499474][ T5850] Bluetooth: hci2: command tx timeout
[   86.505320][ T5170] Bluetooth: hci1: command tx timeout
[   86.552362][ T5858] team0: Port device team_slave_0 added
[   86.560985][ T5858] team0: Port device team_slave_1 added
[   86.570170][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.583092][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.597883][ T5855] hsr_slave_0: entered promiscuous mode
[   86.604482][ T5855] hsr_slave_1: entered promiscuous mode
[   86.610535][ T5855] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.618546][ T5855] Cannot create hsr debugfs directory
[   86.639566][ T5862] team0: Port device team_slave_0 added
[   86.654099][ T5170] Bluetooth: hci4: command tx timeout
[   86.705555][ T5862] team0: Port device team_slave_1 added
[   86.714848][ T5869] team0: Port device team_slave_0 added
[   86.740397][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.747546][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.774075][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.787372][ T5869] team0: Port device team_slave_1 added
[   86.833443][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.840490][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.866662][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.923886][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.930961][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.957118][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.996753][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.003794][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.030825][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.048165][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.055972][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.082132][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.111839][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.119046][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.145102][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.246102][ T5862] hsr_slave_0: entered promiscuous mode
[   87.252378][ T5862] hsr_slave_1: entered promiscuous mode
[   87.259031][ T5862] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   87.266684][ T5862] Cannot create hsr debugfs directory
[   87.346686][ T5858] hsr_slave_0: entered promiscuous mode
[   87.353075][ T5858] hsr_slave_1: entered promiscuous mode
[   87.359817][ T5858] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   87.367655][ T5858] Cannot create hsr debugfs directory
[   87.391655][ T5869] hsr_slave_0: entered promiscuous mode
[   87.398651][ T5869] hsr_slave_1: entered promiscuous mode
[   87.404880][ T5869] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   87.412446][ T5869] Cannot create hsr debugfs directory
[   87.688792][ T5849] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   87.732340][ T5849] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   87.749437][ T5849] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   87.794543][ T5849] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   87.889827][ T5855] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   87.902117][ T5855] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   87.920161][ T5855] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   87.932871][ T5855] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   87.998587][ T5862] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   88.011100][ T5862] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   88.037446][ T5862] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   88.049960][ T5862] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   88.180318][ T5858] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   88.192103][ T5858] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   88.216192][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.231118][ T5858] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   88.253973][ T5170] Bluetooth: hci0: command tx timeout
[   88.264762][ T5858] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   88.326773][ T5869] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   88.358300][ T5869] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   88.372229][ T5869] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   88.383292][ T5869] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   88.411108][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   88.440205][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.447460][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.469267][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.502637][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.509793][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.526457][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.574246][ T5170] Bluetooth: hci2: command tx timeout
[   88.577781][   T50] Bluetooth: hci3: command tx timeout
[   88.586751][ T5850] Bluetooth: hci1: command tx timeout
[   88.588664][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   88.622435][ T5862] 8021q: adding VLAN 0 to HW filter on device team0
[   88.655252][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.662679][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.671933][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.679055][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.712459][ T3579] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.719744][ T3579] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.734945][ T5850] Bluetooth: hci4: command tx timeout
[   88.745659][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.752792][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.801900][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.933425][ T5858] 8021q: adding VLAN 0 to HW filter on device team0
[   88.996361][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.003672][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.057355][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.076329][ T3579] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.083639][ T3579] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.203418][ T5869] 8021q: adding VLAN 0 to HW filter on device team0
[   89.257851][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.296602][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.303833][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.357399][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.364645][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.550523][ T5849] veth0_vlan: entered promiscuous mode
[   89.609872][ T5849] veth1_vlan: entered promiscuous mode
[   89.636964][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.736613][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.772503][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.831402][ T5849] veth0_macvtap: entered promiscuous mode
[   89.876989][ T5849] veth1_macvtap: entered promiscuous mode
[   89.987313][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.003350][ T5855] veth0_vlan: entered promiscuous mode
[   90.012143][ T5858] veth0_vlan: entered promiscuous mode
[   90.035957][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.055679][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.071070][ T5858] veth1_vlan: entered promiscuous mode
[   90.087917][ T5849] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.097984][ T5849] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.108675][ T5849] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.117816][ T5849] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.150404][ T5855] veth1_vlan: entered promiscuous mode
[   90.205323][ T5858] veth0_macvtap: entered promiscuous mode
[   90.234878][ T5858] veth1_macvtap: entered promiscuous mode
[   90.321161][ T5862] veth0_vlan: entered promiscuous mode
[   90.328871][ T5869] veth0_vlan: entered promiscuous mode
[   90.344236][ T5850] Bluetooth: hci0: command tx timeout
[   90.368057][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.380850][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.402266][ T5869] veth1_vlan: entered promiscuous mode
[   90.415937][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.426170][ T5855] veth0_macvtap: entered promiscuous mode
[   90.444973][ T5862] veth1_vlan: entered promiscuous mode
[   90.467705][ T5855] veth1_macvtap: entered promiscuous mode
[   90.488627][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.501356][ T5858] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.510934][ T5858] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.521583][ T5858] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.530630][ T5858] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.567965][ T3579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.570773][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.589786][ T3579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.626908][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.646996][ T5855] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.654259][   T50] Bluetooth: hci3: command tx timeout
[   90.658406][ T5170] Bluetooth: hci2: command tx timeout
[   90.661301][ T5850] Bluetooth: hci1: command tx timeout
[   90.667595][ T5855] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.681077][ T5855] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.690121][ T5855] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.717215][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   90.724652][ T5869] veth0_macvtap: entered promiscuous mode
[   90.750882][ T5862] veth0_macvtap: entered promiscuous mode
[   90.776760][ T5869] veth1_macvtap: entered promiscuous mode
[   90.797620][ T5862] veth1_macvtap: entered promiscuous mode
[   90.815399][ T5850] Bluetooth: hci4: command tx timeout
[   90.878259][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.900342][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.927358][ T5968] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   90.938076][ T5869] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.950221][ T5869] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.963248][ T5869] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.972124][ T5869] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.995204][ T5968] team_slave_0: entered promiscuous mode
[   91.000976][ T5968] team_slave_1: entered promiscuous mode
[   91.009133][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.017902][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.044725][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.150821][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.173939][ T5971] netlink: 'syz.3.6': attribute type 1 has an invalid length.
[   91.189282][ T5862] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.200420][ T5862] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.209927][ T5862] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.223815][ T5862] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.244010][ T3579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.251889][ T3579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.347088][ T5973] xt_TCPMSS: Only works on TCP SYN packets
[   91.351775][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.374397][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.413605][ T3579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.421460][ T3579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.499543][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.546187][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.617317][   T56] cfg80211: failed to load regulatory.db
[   91.670266][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.691488][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.742147][ T5986] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   91.819119][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.842813][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.965640][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.977643][ T5991] netlink: 'syz.3.9': attribute type 32 has an invalid length.
[   91.988526][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'.
[   92.006921][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.014656][ T5991] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[   92.102974][ T5991] Bluetooth: MGMT ver 1.23
[   92.420128][ T5850] Bluetooth: hci0: command tx timeout
[   92.590502][ T6015] netlink: 232 bytes leftover after parsing attributes in process `syz.4.5'.
[   92.663156][ T6018] syz.0.15 uses obsolete (PF_INET,SOCK_PACKET)
[   92.685319][ T6015] netlink: 'syz.4.5': attribute type 1 has an invalid length.
[   92.710582][ T6015] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5'.
[   92.717873][ T6013] nbd0: detected capacity change from 0 to 127
[   92.735857][ T5170] Bluetooth: hci1: command tx timeout
[   92.738206][   T50] Bluetooth: hci3: command tx timeout
[   92.744313][ T5170] Bluetooth: hci2: command tx timeout
[   92.755538][ T5850] block nbd0: Receive control failed (result -104)
[   92.886915][ T6024] netlink: 64 bytes leftover after parsing attributes in process `syz.1.18'.
[   92.896574][ T5850] Bluetooth: hci4: command tx timeout
[   92.903207][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17'.
[   92.927389][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'.
[   93.196616][ T6035] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   93.272137][ T6035] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   93.456315][ T6051] Bluetooth: MGMT ver 1.23
[   93.462568][ T6051] SET target dimension over the limit!
[   93.895687][ T6066] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.925279][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.31'.
[   93.955283][ T6070] netlink: 'syz.2.33': attribute type 62 has an invalid length.
[   93.966246][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.31'.
[   94.136724][ T6065] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   94.463920][ T6092] netlink: 'syz.0.41': attribute type 13 has an invalid length.
[   94.497456][ T6092] lo: entered promiscuous mode
[   94.502611][ T6091] netlink: 64 bytes leftover after parsing attributes in process `syz.2.40'.
[   94.526677][ T6092] lo: entered allmulticast mode
[   94.564915][ T6092] tunl0: entered promiscuous mode
[   94.570013][ T6092] tunl0: entered allmulticast mode
[   94.622313][ T6092] gre0: entered promiscuous mode
[   94.638341][ T6092] gre0: entered allmulticast mode
[   94.659829][ T6092] gretap0: entered promiscuous mode
[   94.665296][ T6092] gretap0: entered allmulticast mode
[   94.674742][ T6092] gretap0: refused to change device tx_queue_len
[   94.681323][ T6092] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   94.879502][ T6109] Zero length message leads to an empty skb
[   94.892130][ T6107] netlink: 3672 bytes leftover after parsing attributes in process `syz.0.46'.
[   95.054460][ T5170] Bluetooth: hci4: command 0x0405 tx timeout
[   95.478692][ T6137] netlink: 'syz.0.56': attribute type 4 has an invalid length.
[   95.544614][ T6142] netlink: 'syz.0.56': attribute type 4 has an invalid length.
[  117.314424][ T6161] netlink: 'syz.0.62': attribute type 64 has an invalid length.
[  117.322164][ T6161] __nla_validate_parse: 65 callbacks suppressed
[  117.322178][ T6161] netlink: 5 bytes leftover after parsing attributes in process `syz.0.62'.
[  117.928898][ T6198] netlink: 40 bytes leftover after parsing attributes in process `syz.0.76'.
[  118.295924][ T6213] netlink: 20 bytes leftover after parsing attributes in process `syz.0.80'.
[  118.325297][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.80'.
[  118.349217][ T6218] netlink: 28 bytes leftover after parsing attributes in process `syz.2.81'.
[  118.385810][ T6213] veth3: entered allmulticast mode
[  118.395017][ T6218] netlink: 'syz.2.81': attribute type 7 has an invalid length.
[  118.431706][ T6218] netlink: 'syz.2.81': attribute type 8 has an invalid length.
[  118.484113][ T6218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.81'.
[  118.551256][ T6218] gretap0: entered promiscuous mode
[  118.588335][ T6218] batadv_slave_1: entered promiscuous mode
[  118.929259][ T6233] netlink: 36 bytes leftover after parsing attributes in process `syz.4.86'.
[  118.971742][ T6234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.83'.
[  118.998833][ T6234] netlink: 12 bytes leftover after parsing attributes in process `syz.0.83'.
[  119.597637][ T6263] gre1: entered promiscuous mode
[  119.621471][ T6263] gre1: entered allmulticast mode
[  119.680316][ T5170] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  119.688823][ T5170] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  119.698733][ T5170] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  119.709064][ T5170] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  119.717681][ T5170] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  119.808816][ T6265] netlink: 'syz.3.96': attribute type 1 has an invalid length.
[  120.032730][ T6280] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  120.329558][ T6287] bridge_slave_0: left allmulticast mode
[  120.356651][ T6287] bridge_slave_0: left promiscuous mode
[  120.364014][ T6287] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.413457][ T6287] bridge_slave_1: left allmulticast mode
[  120.432768][ T6287] bridge_slave_1: left promiscuous mode
[  120.452157][ T6287] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.491785][ T6287] bond0: (slave bond_slave_0): Releasing backup interface
[  120.524191][ T6287] bond0: (slave bond_slave_1): Releasing backup interface
[  120.552367][ T6287] team0: Port device team_slave_0 removed
[  120.577674][ T6287] team0: Port device team_slave_1 removed
[  120.595994][ T6287] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.611465][ T6287] batman_adv: batadv0: Removing interface: batadv_slave_0
[  120.621954][ T6287] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.635312][ T6287] batman_adv: batadv0: Removing interface: batadv_slave_1
[  120.702288][ T6295] netlink: 'syz.2.103': attribute type 5 has an invalid length.
[  120.724461][ T6309] netlink: 216 bytes leftover after parsing attributes in process `syz.3.107'.
[  121.057671][ T6323] TCP: TCP_TX_DELAY enabled
[  121.093171][ T6291] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  121.164658][ T6273] chnl_net:caif_netlink_parms(): no params data found
[  121.436809][ T6337] sctp: failed to load transform for md5: -2
[  121.659656][ T6273] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.668198][ T6273] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.688668][ T6273] bridge_slave_0: entered allmulticast mode
[  121.718111][ T6273] bridge_slave_0: entered promiscuous mode
[  121.728941][ T6273] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.741062][ T6273] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.770664][ T6273] bridge_slave_1: entered allmulticast mode
[  121.777022][ T5170] Bluetooth: hci1: command tx timeout
[  121.785893][ T6273] bridge_slave_1: entered promiscuous mode
[  121.810015][ T6361] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  121.832660][ T6361] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.944079][ T6361] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  121.967183][ T6361] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  121.975814][ T6361] gretap1: entered promiscuous mode
[  121.981924][ T6361] gretap1: entered allmulticast mode
[  121.990058][ T6369] netlink: 'syz.0.123': attribute type 3 has an invalid length.
[  121.998101][ T6273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  122.011298][ T6273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  122.219962][ T6273] team0: Port device team_slave_0 added
[  122.275059][ T6273] team0: Port device team_slave_1 added
[  122.339684][ T5170] Bluetooth: hci0: command 0x0401 tx timeout
[  122.373238][ T6386] __nla_validate_parse: 8 callbacks suppressed
[  122.373255][ T6386] netlink: 20 bytes leftover after parsing attributes in process `syz.4.128'.
[  122.477752][ T6273] batman_adv: batadv0: Adding interface: batadv_slave_0
[  122.503815][ T6389] netlink: 'syz.3.129': attribute type 29 has an invalid length.
[  122.507457][ T6273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.601760][ T6273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  122.615304][ T6273] batman_adv: batadv0: Adding interface: batadv_slave_1
[  122.622389][ T6273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.708720][ T6273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  122.750909][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'.
[  122.762673][ T6404] warning: `syz.2.133' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  122.926928][ T6410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.137'.
[  122.964496][ T6273] hsr_slave_0: entered promiscuous mode
[  122.971898][ T6410] netlink: 14 bytes leftover after parsing attributes in process `syz.0.137'.
[  122.993647][ T1075] block nbd0: Possible stuck request ffff88802536e000: control (read@0,1024B). Runtime 30 seconds
[  123.005670][ T1075] block nbd0: Possible stuck request ffff88802536e1c0: control (read@1024,1024B). Runtime 30 seconds
[  123.017269][ T1075] block nbd0: Possible stuck request ffff88802536e380: control (read@2048,1024B). Runtime 30 seconds
[  123.028450][ T1075] block nbd0: Possible stuck request ffff88802536e540: control (read@3072,1024B). Runtime 30 seconds
[  123.045256][ T6273] hsr_slave_1: entered promiscuous mode
[  123.051720][ T6273] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  123.060116][ T6273] Cannot create hsr debugfs directory
[  123.277406][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.141'.
[  123.307486][ T6427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.141'.
[  123.390518][ T6432] netlink: 'syz.4.141': attribute type 6 has an invalid length.
[  123.438109][ T6410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  123.461170][ T6410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  123.475831][ T6410] bond0 (unregistering): Released all slaves
[  123.859258][ T5850] Bluetooth: hci1: command tx timeout
[  124.456979][ T6462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.147'.
[  124.473598][ T6462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.147'.
[  124.492247][ T6462] netlink: 'syz.2.147': attribute type 3 has an invalid length.
[  124.527053][ T6463] bridge_slave_0: left allmulticast mode
[  124.541640][ T6469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.148'.
[  124.543013][ T6463] bridge_slave_0: left promiscuous mode
[  124.583023][ T6463] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.669609][ T6463] bridge_slave_1: left allmulticast mode
[  124.683112][ T6463] bridge_slave_1: left promiscuous mode
[  124.689945][ T6463] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.746643][ T6463] team0: Port device team_slave_0 removed
[  124.779677][ T6463] team0: Port device team_slave_1 removed
[  124.787029][ T6463] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.794999][ T6463] batman_adv: batadv0: Removing interface: batadv_slave_0
[  124.808498][ T6463] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.816684][ T6463] batman_adv: batadv0: Removing interface: batadv_slave_1
[  124.886119][ T6466] team0: Mode changed to "activebackup"
[  124.995622][ T6273] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.040260][ T6487] ksmbd: Unknown IPC event: 3, ignore.
[  125.186081][ T6273] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.203331][ T6495] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.154'.
[  125.329840][ T6273] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.577040][ T6273] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.934368][ T5170] Bluetooth: hci1: command tx timeout
[  126.077143][ T6273] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  126.107837][ T6273] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  126.126146][ T6273] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  126.185260][ T6273] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  126.290094][ T6534] netlink: 'syz.2.166': attribute type 12 has an invalid length.
[  126.301321][ T6534] netlink: 'syz.2.166': attribute type 29 has an invalid length.
[  126.616330][ T6273] 8021q: adding VLAN 0 to HW filter on device bond0
[  126.665999][ T6273] 8021q: adding VLAN 0 to HW filter on device team0
[  126.687036][  T153] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.694287][  T153] bridge0: port 1(bridge_slave_0) entered forwarding state
[  126.724384][  T153] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.731625][  T153] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.466281][ T6273] 8021q: adding VLAN 0 to HW filter on device batadv0
[  127.555875][ T6588] __nla_validate_parse: 4 callbacks suppressed
[  127.555893][ T6588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.181'.
[  127.607354][ T6590] netlink: 32 bytes leftover after parsing attributes in process `syz.3.183'.
[  127.657370][ T6273] veth0_vlan: entered promiscuous mode
[  127.716318][ T6273] veth1_vlan: entered promiscuous mode
[  127.882679][ T6273] veth0_macvtap: entered promiscuous mode
[  127.922082][ T6273] veth1_macvtap: entered promiscuous mode
[  128.011106][ T6273] batman_adv: batadv0: Interface activated: batadv_slave_0
[  128.024343][ T5170] Bluetooth: hci1: command 0x0419 tx timeout
[  128.083066][ T6273] batman_adv: batadv0: Interface activated: batadv_slave_1
[  128.143848][ T6615] netlink: 'syz.2.193': attribute type 1 has an invalid length.
[  128.159361][ T6615] netlink: 224 bytes leftover after parsing attributes in process `syz.2.193'.
[  128.174326][ T6273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  128.183067][ T6273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.212103][ T6615] nbd: illegal input index 1048576
[  128.232256][ T6273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.271088][ T6273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.346821][ T6620] netlink: 788 bytes leftover after parsing attributes in process `syz.4.191'.
[  128.532517][ T6629] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  128.642939][ T1347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.668048][ T1347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.703037][ T6633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.197'.
[  128.729607][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.756063][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.845086][ T6636] IPVS: length: 146 != 24
[  129.277516][ T6651] netlink: 2 bytes leftover after parsing attributes in process `syz.4.202'.
[  129.371591][ T6661] netlink: 108 bytes leftover after parsing attributes in process `syz.2.203'.
[  129.390841][ T6661] netlink: 108 bytes leftover after parsing attributes in process `syz.2.203'.
[  129.413661][ T6661] netlink: 108 bytes leftover after parsing attributes in process `syz.2.203'.
[  129.489469][   T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.589999][   T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.730434][ T6671] lo: entered promiscuous mode
[  129.746601][ T6672] sock: sock_timestamping_bind_phc: sock not bind to device
[  129.756387][ T6671] tunl0: entered promiscuous mode
[  129.774749][ T6671] gre0: entered promiscuous mode
[  129.798001][ T6671] gretap0: entered promiscuous mode
[  129.812295][ T6671] erspan0: entered promiscuous mode
[  129.825163][ T6671] ip_vti0: entered promiscuous mode
[  129.999567][   T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.079425][ T6680] netlink: 'syz.3.211': attribute type 1 has an invalid length.
[  130.113043][ T6680] netlink: 'syz.3.211': attribute type 1 has an invalid length.
[  130.150330][   T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.202750][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  130.212352][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  130.220850][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  130.234916][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  130.243798][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  130.551458][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.216'.
[  130.642430][ T6694] team0: Cannot enslave team device to itself
[  130.742064][   T61] bridge_slave_1: left allmulticast mode
[  130.769638][   T61] bridge_slave_1: left promiscuous mode
[  130.799954][   T61] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.804573][ T6707] netlink: 'syz.3.218': attribute type 58 has an invalid length.
[  130.858215][ T6713] netlink: 'syz.3.218': attribute type 58 has an invalid length.
[  130.870074][   T61] bridge_slave_0: left allmulticast mode
[  130.902397][   T61] bridge_slave_0: left promiscuous mode
[  130.908689][   T61] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.457518][   T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  131.469226][   T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  131.481299][   T61] bond0 (unregistering): Released all slaves
[  132.141640][ T6756] netlink: 'syz.2.229': attribute type 6 has an invalid length.
[  132.288340][ T6762] tipc: Started in network mode
[  132.312089][ T6762] tipc: Node identity e2e9f395b87d, cluster identity 4711
[  132.336498][ T5850] Bluetooth: hci1: command tx timeout
[  132.353185][ T6762] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.579445][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  132.593623][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  132.738099][   T61] hsr_slave_0: left promiscuous mode
[  132.783780][   T61] hsr_slave_1: left promiscuous mode
[  132.800368][   T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.837022][   T61] batman_adv: batadv0: Removing interface: batadv_slave_0
[  132.885724][   T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.927435][   T61] batman_adv: batadv0: Removing interface: batadv_slave_1
[  133.007004][   T61] veth1_macvtap: left promiscuous mode
[  133.015072][   T61] veth0_macvtap: left promiscuous mode
[  133.021465][   T61] veth1_vlan: left promiscuous mode
[  133.027340][   T61] veth0_vlan: left promiscuous mode
[  133.041873][ T6791] __nla_validate_parse: 2 callbacks suppressed
[  133.041889][ T6791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.237'.
[  133.344436][   T56] tipc: Node number set to 1519711125
[  133.416831][   T61] team0 (unregistering): Port device team_slave_1 removed
[  133.449854][   T61] team0 (unregistering): Port device team_slave_0 removed
[  133.773910][ T6753] tipc: Disabling bearer <eth:syzkaller0>
[  133.945238][ T6682] chnl_net:caif_netlink_parms(): no params data found
[  134.030664][ T6799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.239'.
[  134.096029][ T6801] trusted_key: syz.3.239 sent an empty control message without MSG_MORE.
[  134.136028][ T6799] netlink: 'syz.3.239': attribute type 10 has an invalid length.
[  134.253334][ T6799] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  134.417378][ T5850] Bluetooth: hci1: command tx timeout
[  134.442943][ T6814] gre1: entered promiscuous mode
[  134.508925][ T6814] gre1: entered allmulticast mode
[  134.597742][ T6832] netlink: 'syz.0.246': attribute type 6 has an invalid length.
[  134.610094][ T6815] gre1: entered promiscuous mode
[  134.615944][ T6832] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.246'.
[  134.633718][ T6815] gre1: entered allmulticast mode
[  134.844134][ T6682] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.881772][ T6682] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.910906][ T6682] bridge_slave_0: entered allmulticast mode
[  134.919859][ T6682] bridge_slave_0: entered promiscuous mode
[  134.996451][ T6682] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.996793][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.249'.
[  135.013975][ T6682] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.021251][ T6682] bridge_slave_1: entered allmulticast mode
[  135.097746][ T6682] bridge_slave_1: entered promiscuous mode
[  135.124865][ T6854] veth0: entered promiscuous mode
[  135.240977][ T6849] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.250887][ T6852] veth0: left promiscuous mode
[  135.272869][ T6682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  135.336642][ T6682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  135.367766][ T6866] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  135.547638][ T6873] netlink: 'syz.3.255': attribute type 4 has an invalid length.
[  135.581543][ T6872] lo: left promiscuous mode
[  135.586673][ T6872] lo: left allmulticast mode
[  135.597383][ T6872] tunl0: left promiscuous mode
[  135.607781][ T6872] tunl0: left allmulticast mode
[  135.618138][ T6872] gre0: left promiscuous mode
[  135.630777][ T6872] gre0: left allmulticast mode
[  135.660610][ T6872] gretap0: left promiscuous mode
[  135.680121][ T6872] gretap0: left allmulticast mode
[  135.959218][ T6872] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.968798][ T6872] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.977803][ T6872] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.987461][ T6872] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.038974][ T6872] veth3: left allmulticast mode
[  136.049584][ T6682] team0: Port device team_slave_0 added
[  136.075304][ T6682] team0: Port device team_slave_1 added
[  136.403634][ T6889] IPVS: persistence engine module ip_vs_pe_À
 not found
[  136.505574][ T5850] Bluetooth: hci1: command tx timeout
[  136.687859][ T6682] batman_adv: batadv0: Adding interface: batadv_slave_0
[  136.704113][ T6682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.747474][ T6682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  136.773761][ T6903] dvmrp0: renamed from vxcan1 (while UP)
[  136.810582][ T6682] batman_adv: batadv0: Adding interface: batadv_slave_1
[  136.835434][ T6682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.939634][ T6682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  137.295713][ T6682] hsr_slave_0: entered promiscuous mode
[  137.316855][ T6682] hsr_slave_1: entered promiscuous mode
[  137.323321][ T6682] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  137.331482][ T6682] Cannot create hsr debugfs directory
[  137.609310][  T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.660989][  T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.666285][ T6941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.753738][ T6939] netlink: 48 bytes leftover after parsing attributes in process `syz.0.271'.
[  137.784069][ T6945] IPVS: set_ctl: invalid protocol: 125 127.0.0.1:20000
[  138.130971][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.279'.
[  138.182112][ T6962] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.279'.
[  138.443893][ T6974] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  138.467622][ T6976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.281'.
[  138.513439][ T6982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.281'.
[  138.585092][ T5850] Bluetooth: hci1: command tx timeout
[  138.599629][ T6987] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[  138.615884][ T6977] netlink: 20 bytes leftover after parsing attributes in process `syz.2.282'.
[  138.625047][ T6977] netlink: 120 bytes leftover after parsing attributes in process `syz.2.282'.
[  138.634469][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.282'.
[  138.770417][ T6990] netlink: 'syz.3.284': attribute type 8 has an invalid length.
[  139.130562][ T7003] netlink: 'syz.2.289': attribute type 2 has an invalid length.
[  139.169180][ T7001] netlink: 24 bytes leftover after parsing attributes in process `syz.2.289'.
[  139.234087][ T6682] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  139.265334][ T6682] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  139.319294][ T6682] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  139.411194][ T7011] team0: Device vti0 is of different type
[  139.439933][ T7013] ieee802154 phy0 wpan0: encryption failed: -22
[  139.470534][ T6682] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  139.589790][ T7028] IPv6: NLM_F_REPLACE set, but no existing node found!
[  139.639653][ T7028] IPv6: NLM_F_REPLACE set, but no existing node found!
[  139.686952][ T7028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.294'.
[  139.801285][ T7036] netlink: 16 bytes leftover after parsing attributes in process `syz.0.297'.
[  139.819438][ T6682] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.917235][ T7042] Cannot find add_set index 4 as target
[  139.955152][ T6682] 8021q: adding VLAN 0 to HW filter on device team0
[  139.978835][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.986092][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.062549][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.069805][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.128516][ T7046] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2
[  140.170975][ T7046] netdevsim netdevsim4: Falling back to sysfs fallback for: ..€
[  140.225834][ T6682] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  140.281745][ T7056] netlink: 'syz.2.301': attribute type 12 has an invalid length.
[  140.932859][ T7083] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  141.007899][ T6682] 8021q: adding VLAN 0 to HW filter on device batadv0
[  141.250463][ T6682] veth0_vlan: entered promiscuous mode
[  141.339496][ T6682] veth1_vlan: entered promiscuous mode
[  141.509047][ T6682] veth0_macvtap: entered promiscuous mode
[  141.553089][ T6682] veth1_macvtap: entered promiscuous mode
[  141.627285][ T6682] batman_adv: batadv0: Interface activated: batadv_slave_0
[  141.729125][ T6682] batman_adv: batadv0: Interface activated: batadv_slave_1
[  141.764251][ T6682] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.798256][ T6682] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.833535][ T6682] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  141.865058][ T6682] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.948233][ T7129] netlink: 'syz.4.318': attribute type 7 has an invalid length.
[  141.959004][ T7136] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  142.372858][ T1347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.403914][ T1347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.485941][ T7150] netlink: 'syz.2.320': attribute type 1 has an invalid length.
[  142.510207][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.538631][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.710530][ T7150] veth1_macvtap: left promiscuous mode
[  143.314876][ T1340] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.535432][ T1340] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.780730][ T7195] __nla_validate_parse: 7 callbacks suppressed
[  143.780748][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.332'.
[  143.847345][ T7197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.332'.
[  144.216312][ T1340] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.257807][ T7214] netlink: 'syz.3.337': attribute type 1 has an invalid length.
[  144.303024][ T7214] netlink: 224 bytes leftover after parsing attributes in process `syz.3.337'.
[  144.313576][ T7214] nbd: couldn't find device at index 1048576
[  144.353887][ T7218] netlink: 'syz.2.338': attribute type 23 has an invalid length.
[  144.487423][ T1340] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.713793][ T5170] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  144.722639][ T5170] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  144.731600][ T5170] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  144.751167][ T5170] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  144.760656][ T5170] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  145.013802][ T7236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.343'.
[  145.073182][ T7236] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  145.162855][ T7236] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.223098][ T1340] bridge_slave_1: left allmulticast mode
[  145.241899][ T1340] bridge_slave_1: left promiscuous mode
[  145.261623][ T1340] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.279597][ T1340] bridge_slave_0: left allmulticast mode
[  145.303448][ T1340] bridge_slave_0: left promiscuous mode
[  145.319522][ T7252] netlink: 36 bytes leftover after parsing attributes in process `syz.2.345'.
[  145.343162][ T1340] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.903059][ T1340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  145.924055][ T1340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  145.949398][ T1340] bond0 (unregistering): Released all slaves
[  145.996762][ T7257] vlan0: entered allmulticast mode
[  146.002154][ T7257] veth0_vlan: entered allmulticast mode
[  146.113315][ T7273] netlink: 28 bytes leftover after parsing attributes in process `syz.3.348'.
[  146.153255][ T7273] netlink: 24 bytes leftover after parsing attributes in process `syz.3.348'.
[  146.220254][ T7274] netlink: 28 bytes leftover after parsing attributes in process `syz.3.348'.
[  146.254958][ T7274] netlink: 24 bytes leftover after parsing attributes in process `syz.3.348'.
[  146.587023][ T7292] netlink: 'syz.3.353': attribute type 1 has an invalid length.
[  146.594982][ T7292] netlink: 224 bytes leftover after parsing attributes in process `syz.3.353'.
[  146.823894][ T5170] Bluetooth: hci1: command tx timeout
[  147.047966][ T1340] hsr_slave_0: left promiscuous mode
[  147.099090][ T1340] hsr_slave_1: left promiscuous mode
[  147.118455][ T1340] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.148624][ T1340] batman_adv: batadv0: Removing interface: batadv_slave_0
[  147.188132][ T1340] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.197071][ T1340] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.220275][ T1340] veth1_macvtap: left promiscuous mode
[  147.225888][ T1340] veth0_macvtap: left promiscuous mode
[  147.231512][ T1340] veth1_vlan: left promiscuous mode
[  147.237642][ T1340] veth0_vlan: left promiscuous mode
[  147.623261][ T1340] team0 (unregistering): Port device team_slave_1 removed
[  147.661163][ T1340] team0 (unregistering): Port device team_slave_0 removed
[  148.216886][ T7226] chnl_net:caif_netlink_parms(): no params data found
[  148.737679][ T7226] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.747151][ T7226] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.757617][ T7226] bridge_slave_0: entered allmulticast mode
[  148.766516][ T7226] bridge_slave_0: entered promiscuous mode
[  148.774798][ T7226] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.781978][ T7226] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.791542][ T7226] bridge_slave_1: entered allmulticast mode
[  148.800337][ T7226] bridge_slave_1: entered promiscuous mode
[  148.802282][ T7366] __nla_validate_parse: 3 callbacks suppressed
[  148.802299][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.369'.
[  148.807714][ T7370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.369'.
[  148.868966][ T7226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  148.889937][ T7226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  148.899187][ T5170] Bluetooth: hci1: command tx timeout
[  149.121039][ T7377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.374'.
[  149.134765][ T7379] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2
[  149.163107][ T7379] netdevsim netdevsim3: Falling back to sysfs fallback for: ..€
[  149.182784][ T7226] team0: Port device team_slave_0 added
[  149.206482][ T7226] team0: Port device team_slave_1 added
[  149.220790][ T7381] netlink: 24 bytes leftover after parsing attributes in process `syz.0.373'.
[  149.240449][ T7385] netlink: 72 bytes leftover after parsing attributes in process `syz.4.375'.
[  149.253906][ T7384] netlink: 88 bytes leftover after parsing attributes in process `syz.0.373'.
[  149.256963][ T7381] netlink: 'syz.0.373': attribute type 1 has an invalid length.
[  149.350283][ T7381] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  149.379200][ T7226] batman_adv: batadv0: Adding interface: batadv_slave_0
[  149.401945][ T7226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.436457][ T7226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  149.458412][ T7226] batman_adv: batadv0: Adding interface: batadv_slave_1
[  149.467041][ T7226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.516168][ T7394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.376'.
[  149.530326][ T7226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  149.803407][ T7226] hsr_slave_0: entered promiscuous mode
[  149.821439][ T7226] hsr_slave_1: entered promiscuous mode
[  149.833417][ T7226] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  149.850812][ T7226] Cannot create hsr debugfs directory
[  149.872535][ T7406] syzkaller1: entered promiscuous mode
[  149.878602][ T7406] syzkaller1: entered allmulticast mode
[  150.202766][ T7426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.378'.
[  150.781485][ T7459] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.386'.
[  150.928940][ T7466] netlink: 28 bytes leftover after parsing attributes in process `syz.3.388'.
[  150.975698][ T5170] Bluetooth: hci1: command tx timeout
[  151.115705][ T7470] netlink: 'syz.4.389': attribute type 12 has an invalid length.
[  151.560253][ T7495] netlink: 'syz.4.393': attribute type 7 has an invalid length.
[  151.580736][ T7495] netlink: 'syz.4.393': attribute type 8 has an invalid length.
[  152.028234][ T7226] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  152.046961][ T7226] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  152.071074][ T7226] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  152.096919][ T7226] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  152.546874][ T7536] netlink: 'syz.2.400': attribute type 2 has an invalid length.
[  152.556230][ T7536] netlink: 'syz.2.400': attribute type 2 has an invalid length.
[  152.820139][ T7226] 8021q: adding VLAN 0 to HW filter on device bond0
[  152.952553][ T7544] xt_hashlimit: size too large, truncated to 1048576
[  152.978366][ T7226] 8021q: adding VLAN 0 to HW filter on device team0
[  153.040391][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.047612][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.082008][ T1075] block nbd0: Possible stuck request ffff88802536e000: control (read@0,1024B). Runtime 60 seconds
[  153.094200][ T5170] Bluetooth: hci1: command tx timeout
[  153.094609][ T1075] block nbd0: Possible stuck request ffff88802536e1c0: control (read@1024,1024B). Runtime 60 seconds
[  153.116470][ T1075] block nbd0: Possible stuck request ffff88802536e380: control (read@2048,1024B). Runtime 60 seconds
[  153.126982][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.127490][ T1075] block nbd0: Possible stuck request ffff88802536e540: control (read@3072,1024B). Runtime 60 seconds
[  153.134527][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.611579][ T7577] netlink: 'syz.3.413': attribute type 29 has an invalid length.
[  153.753988][ T7580] netlink: 'syz.4.414': attribute type 1 has an invalid length.
[  153.974709][ T7590] __nla_validate_parse: 14 callbacks suppressed
[  153.974727][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.417'.
[  154.027181][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.417'.
[  154.082607][ T7226] 8021q: adding VLAN 0 to HW filter on device batadv0
[  154.104778][ T7598] netlink: 'syz.0.418': attribute type 201 has an invalid length.
[  154.357030][ T7605] netlink: 'syz.4.421': attribute type 1 has an invalid length.
[  154.372396][ T7226] veth0_vlan: entered promiscuous mode
[  154.399364][ T7606] netlink: 240 bytes leftover after parsing attributes in process `syz.3.420'.
[  154.418745][ T7605] 8021q: adding VLAN 0 to HW filter on device bond1
[  154.478515][ T7226] veth1_vlan: entered promiscuous mode
[  154.480709][ T7605] netlink: 'syz.4.421': attribute type 64 has an invalid length.
[  154.492564][ T7605] netlink: 5 bytes leftover after parsing attributes in process `syz.4.421'.
[  154.765243][ T7226] veth0_macvtap: entered promiscuous mode
[  154.799406][ T7226] veth1_macvtap: entered promiscuous mode
[  154.855431][ T7226] batman_adv: batadv0: Interface activated: batadv_slave_0
[  154.918453][ T7633] netlink: 20 bytes leftover after parsing attributes in process `syz.4.426'.
[  154.921564][ T7226] batman_adv: batadv0: Interface activated: batadv_slave_1
[  154.943169][ T7628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.425'.
[  154.980090][ T7633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.426'.
[  155.031287][ T7635] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  155.066612][ T7226] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.111103][ T7226] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.188641][ T7226] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.207817][ T7226] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.509222][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.529572][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.767180][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.815110][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.197937][ T7683] netlink: 52 bytes leftover after parsing attributes in process `syz.0.441'.
[  156.235662][ T7683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.441'.
[  156.287893][ T7687] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  156.599720][ T7688] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  156.610793][ T7688] batman_adv: batadv0: Removing interface: batadv_slave_0
[  156.634692][ T7688] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  156.663314][ T7688] batman_adv: batadv0: Removing interface: batadv_slave_1
[  156.810230][ T1340] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.972350][ T1340] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.191102][ T1340] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.277666][ T1340] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.404085][ T1340] bridge_slave_1: left allmulticast mode
[  157.409805][ T1340] bridge_slave_1: left promiscuous mode
[  157.415889][ T1340] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.465597][ T1340] bridge_slave_0: left allmulticast mode
[  157.471314][ T1340] bridge_slave_0: left promiscuous mode
[  157.504338][ T1340] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.561446][ T7707] netlink: 14 bytes leftover after parsing attributes in process `syz.3.448'.
[  157.586885][ T7699] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  157.638492][ T7708] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  157.892875][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  157.905976][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  157.917136][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  157.928064][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  157.936697][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  158.032354][ T1340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  158.043425][ T1340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  158.056655][ T1340] bond0 (unregistering): Released all slaves
[  158.071278][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.078932][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.750010][ T7731] netlink: 'syz.3.457': attribute type 1 has an invalid length.
[  158.796382][ T7731] C: renamed from team_slave_0 (while UP)
[  158.823246][ T7731] netlink: 'syz.3.457': attribute type 1 has an invalid length.
[  158.839878][ T7731] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  159.325321][ T1340] hsr_slave_0: left promiscuous mode
[  159.363994][ T7770] __nla_validate_parse: 3 callbacks suppressed
[  159.364012][ T7770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.467'.
[  159.379321][ T1340] hsr_slave_1: left promiscuous mode
[  159.394612][ T1340] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.409430][ T1340] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.420186][ T1340] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.428062][ T1340] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.457515][ T7767] netlink: 40 bytes leftover after parsing attributes in process `syz.0.465'.
[  159.468355][ T1340] veth1_macvtap: left promiscuous mode
[  159.471661][ T7776] No such timeout policy "syz0"
[  159.474060][ T1340] veth0_macvtap: left promiscuous mode
[  159.485497][ T1340] veth1_vlan: left promiscuous mode
[  159.490890][ T1340] veth0_vlan: left promiscuous mode
[  159.501857][ T7767] netlink: 24 bytes leftover after parsing attributes in process `syz.0.465'.
[  159.553407][ T7781] netlink: 'syz.0.465': attribute type 1 has an invalid length.
[  159.906011][ T1340] team0 (unregistering): Port device team_slave_1 removed
[  159.940448][ T1340] team0 (unregistering): Port device team_slave_0 removed
[  160.027579][ T5170] Bluetooth: hci1: command tx timeout
[  160.310953][ T7769] pim6reg: entered allmulticast mode
[  160.355668][ T7775] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585)
[  160.389693][ T7775] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  160.416065][ T7767] erspan0: entered promiscuous mode
[  160.421331][ T7767] erspan0: entered allmulticast mode
[  160.514969][ T7712] chnl_net:caif_netlink_parms(): no params data found
[  161.127206][ T7712] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.141352][ T7712] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.149041][ T7712] bridge_slave_0: entered allmulticast mode
[  161.157005][ T7712] bridge_slave_0: entered promiscuous mode
[  161.198020][ T7712] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.207248][ T7712] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.216133][ T7712] bridge_slave_1: entered allmulticast mode
[  161.224555][ T7712] bridge_slave_1: entered promiscuous mode
[  161.287931][ T7820] netlink: 20 bytes leftover after parsing attributes in process `syz.3.479'.
[  161.345905][ T7712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  161.381762][ T7712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  161.706770][ T7712] team0: Port device team_slave_0 added
[  161.732022][ T7712] team0: Port device team_slave_1 added
[  162.005518][ T7849] netlink: 20 bytes leftover after parsing attributes in process `syz.3.489'.
[  162.034774][ T7848] netlink: 36 bytes leftover after parsing attributes in process `syz.0.488'.
[  162.043725][ T7712] batman_adv: batadv0: Adding interface: batadv_slave_0
[  162.046404][ T7851] netlink: 20 bytes leftover after parsing attributes in process `syz.2.487'.
[  162.050693][ T7712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.095714][ T7851] ieee802154 phy1 wpan1: encryption failed: -22
[  162.113578][ T5170] Bluetooth: hci1: command tx timeout
[  162.142244][ T7712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  162.157522][ T7851] netlink: 104 bytes leftover after parsing attributes in process `syz.2.487'.
[  162.157869][ T7712] batman_adv: batadv0: Adding interface: batadv_slave_1
[  162.176167][ T7712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.206715][ T7712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  162.236523][ T7854] netlink: 48 bytes leftover after parsing attributes in process `syz.4.490'.
[  162.332292][ T7712] hsr_slave_0: entered promiscuous mode
[  162.360919][ T7712] hsr_slave_1: entered promiscuous mode
[  162.384050][ T7712] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  162.406690][ T7712] Cannot create hsr debugfs directory
[  162.569170][ T7875] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  163.142863][ T7892] delete_channel: no stack
[  163.297306][ T7898] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  163.332518][ T7899] netlink: 32 bytes leftover after parsing attributes in process `syz.3.502'.
[  163.345057][ T7898] batman_adv: batadv0: Adding interface: netdevsim0
[  163.355419][ T7898] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.386219][ T7898] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  163.698177][ T7918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  163.958884][ T7712] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  163.981246][ T7937] xt_TPROXY: Can be used only with -p tcp or -p udp
[  163.991289][ T7712] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  164.031277][ T7712] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  164.066376][ T7712] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  164.173918][ T5170] Bluetooth: hci1: command tx timeout
[  164.431100][ T7712] 8021q: adding VLAN 0 to HW filter on device bond0
[  164.523910][ T7962] tipc: Started in network mode
[  164.528840][ T7962] tipc: Node identity ac1414aa, cluster identity 4711
[  164.569951][ T7962] tipc: Enabled bearer <udp:s>, priority 10
[  164.610718][ T7712] 8021q: adding VLAN 0 to HW filter on device team0
[  164.661025][ T7968] No such timeout policy "syz0"
[  164.661790][ T3579] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.673276][ T3579] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.676362][ T7970] netlink: 'syz.2.520': attribute type 11 has an invalid length.
[  164.745579][ T3579] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.752758][ T3579] bridge0: port 2(bridge_slave_1) entered forwarding state
[  165.429869][ T7997] __nla_validate_parse: 2 callbacks suppressed
[  165.429887][ T7997] netlink: 80 bytes leftover after parsing attributes in process `syz.4.524'.
[  165.466846][ T7997] netlink: 80 bytes leftover after parsing attributes in process `syz.4.524'.
[  165.683666][ T5917] tipc: Node number set to 2886997162
[  165.908001][ T7712] 8021q: adding VLAN 0 to HW filter on device batadv0
[  165.959115][ T8015] netlink: 164 bytes leftover after parsing attributes in process `syz.4.529'.
[  166.016551][ T7712] veth0_vlan: entered promiscuous mode
[  166.075899][ T7712] veth1_vlan: entered promiscuous mode
[  166.215327][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.532'.
[  166.239083][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.532'.
[  166.253180][ T7712] veth0_macvtap: entered promiscuous mode
[  166.273792][ T5170] Bluetooth: hci1: command tx timeout
[  166.321832][ T7712] veth1_macvtap: entered promiscuous mode
[  166.341694][ T8042] netlink: 48 bytes leftover after parsing attributes in process `syz.3.534'.
[  166.479518][ T7712] batman_adv: batadv0: Interface activated: batadv_slave_0
[  166.523295][ T7712] batman_adv: batadv0: Interface activated: batadv_slave_1
[  166.539612][ T8048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.536'.
[  166.556263][ T8048] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  166.568540][ T7712] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  166.578645][ T7712] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  166.588044][ T8048] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.597106][ T7712] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  166.615328][ T7712] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.653970][ T8056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.538'.
[  166.699429][ T8057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.538'.
[  166.738905][ T8055] netlink: 'syz.3.538': attribute type 8 has an invalid length.
[  166.919147][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.956486][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.046789][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.083617][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.443350][ T8083] netlink: 'syz.2.547': attribute type 4 has an invalid length.
[  168.043706][ T8110] : renamed from hsr0
[  168.161160][ T8110] xt_CT: No such helper "syz0"
[  168.237415][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.486864][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.637694][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.734657][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.967312][   T13] bridge_slave_1: left allmulticast mode
[  168.973030][   T13] bridge_slave_1: left promiscuous mode
[  169.003787][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.025204][   T13] bridge_slave_0: left allmulticast mode
[  169.030916][   T13] bridge_slave_0: left promiscuous mode
[  169.063875][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.379809][ T8161] netlink: 348 bytes leftover after parsing attributes in process `syz.2.560'.
[  169.566635][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  169.577572][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  169.591894][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  169.600805][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  169.610986][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  169.873216][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  169.899783][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  169.911714][   T13] bond0 (unregistering): Released all slaves
[  169.969310][ T8162] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  170.363430][ T8196] netlink: 'syz.2.564': attribute type 1 has an invalid length.
[  170.677908][ T8201] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  170.745273][ T8210] IPVS: set_ctl: invalid protocol: 47 100.1.1.2:20002
[  170.934889][   T13] hsr_slave_0: left promiscuous mode
[  170.943050][   T13] hsr_slave_1: left promiscuous mode
[  170.954329][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  170.961862][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  170.978755][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  170.986527][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  171.018751][   T13] veth1_macvtap: left promiscuous mode
[  171.024961][   T13] veth0_macvtap: left promiscuous mode
[  171.030830][   T13] veth1_vlan: left promiscuous mode
[  171.036631][   T13] veth0_vlan: left promiscuous mode
[  171.626614][   T13] team0 (unregistering): Port device team_slave_1 removed
[  171.683224][   T13] team0 (unregistering): Port device team_slave_0 removed
[  171.694712][ T5170] Bluetooth: hci1: command tx timeout
[  172.783304][ T8165] chnl_net:caif_netlink_parms(): no params data found
[  173.189610][ T8299] __nla_validate_parse: 2 callbacks suppressed
[  173.189626][ T8299] netlink: 32 bytes leftover after parsing attributes in process `syz.0.581'.
[  173.246971][ T8165] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.284299][ T8165] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.291633][ T8165] bridge_slave_0: entered allmulticast mode
[  173.326887][ T8165] bridge_slave_0: entered promiscuous mode
[  173.360508][ T8165] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.378133][ T8165] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.387710][ T8165] bridge_slave_1: entered allmulticast mode
[  173.401643][ T8165] bridge_slave_1: entered promiscuous mode
[  173.651218][ T8165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  173.687198][ T8165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  173.774683][ T5850] Bluetooth: hci1: command tx timeout
[  173.840579][ T8165] team0: Port device team_slave_0 added
[  173.856943][ T8165] team0: Port device team_slave_1 added
[  173.918050][ T8165] batman_adv: batadv0: Adding interface: batadv_slave_0
[  173.945778][ T8165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.023789][ T8165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  174.066111][ T8165] batman_adv: batadv0: Adding interface: batadv_slave_1
[  174.073428][ T8165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.108288][ T8165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  174.317378][ T8165] hsr_slave_0: entered promiscuous mode
[  174.355674][ T8165] hsr_slave_1: entered promiscuous mode
[  174.783207][ T8368] veth0: entered promiscuous mode
[  174.850413][ T8367] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  174.857272][ T8367] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  174.876161][ T8368] veth0: left promiscuous mode
[  174.923050][ T8367] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  174.929577][ T8367] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  174.937788][ T8375] Cannot find add_set index 0 as target
[  174.948405][ T8367] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  174.954895][ T8367] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  174.986121][ T8376] Cannot find add_set index 0 as target
[  175.002308][ T8367] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  175.008786][ T8367] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  175.059584][ T8367] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  175.066087][ T8367] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  175.435862][ T8385] xt_CT: You must specify a L4 protocol and not use inversions on it
[  175.853805][ T5850] Bluetooth: hci1: command 0x040f tx timeout
[  175.874024][ T8165] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  176.016505][ T8165] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  176.040300][ T8165] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  176.060340][ T8414] netlink: 'syz.2.605': attribute type 7 has an invalid length.
[  176.068541][ T8414] netlink: 140 bytes leftover after parsing attributes in process `syz.2.605'.
[  176.115033][ T8165] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  176.469344][ T8165] 8021q: adding VLAN 0 to HW filter on device bond0
[  176.547221][ T8165] 8021q: adding VLAN 0 to HW filter on device team0
[  176.583051][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.590262][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[  176.678986][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.686227][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[  177.331550][ T8479] netlink: 24 bytes leftover after parsing attributes in process `syz.2.619'.
[  177.381234][ T8165] 8021q: adding VLAN 0 to HW filter on device batadv0
[  177.537487][ T8487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.621'.
[  177.545576][ T8165] veth0_vlan: entered promiscuous mode
[  177.588411][ T8165] veth1_vlan: entered promiscuous mode
[  177.728172][ T8165] veth0_macvtap: entered promiscuous mode
[  177.752998][ T8165] veth1_macvtap: entered promiscuous mode
[  177.838197][ T8165] batman_adv: batadv0: Interface activated: batadv_slave_0
[  177.850313][ T8499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.625'.
[  177.880965][ T8165] batman_adv: batadv0: Interface activated: batadv_slave_1
[  177.896136][ T8165] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  177.905654][ T8165] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  177.914792][ T8165] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  177.927256][ T8165] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  177.936740][ T5170] Bluetooth: hci1: command 0x040f tx timeout
[  178.136107][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  178.158299][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  178.266281][  T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  178.289826][  T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  178.655445][ T8524] netlink: 20 bytes leftover after parsing attributes in process `syz.0.630'.
[  178.788153][    T9] IPVS: starting estimator thread 0...
[  178.841722][ T8533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.633'.
[  178.886521][ T8530] IPVS: using max 27 ests per chain, 64800 per kthread
[  178.891746][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.635'.
[  179.078027][ T8546] netlink: 'syz.4.638': attribute type 4 has an invalid length.
[  179.198593][ T8554] netlink: 'syz.2.640': attribute type 1 has an invalid length.
[  179.209232][ T8554] netlink: 'syz.2.640': attribute type 4 has an invalid length.
[  179.238292][ T8554] netlink: 188 bytes leftover after parsing attributes in process `syz.2.640'.
[  179.278540][ T8554] NCSI netlink: No device for ifindex 458760
[  179.319018][  T153] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.859474][  T153] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.242257][  T153] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.298251][ T8573] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  180.315020][ T8575] netlink: 'syz.4.646': attribute type 2 has an invalid length.
[  180.360529][ T8575] netlink: 'syz.4.646': attribute type 8 has an invalid length.
[  180.369998][ T8575] netlink: 1148 bytes leftover after parsing attributes in process `syz.4.646'.
[  180.386645][  T153] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.415295][ T8578] batman_adv: batadv0: Removing interface: netdevsim0
[  180.622205][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  180.634022][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  180.643708][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  180.658676][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  180.699682][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  180.741810][ T8593] net_ratelimit: 1890 callbacks suppressed
[  180.741828][ T8593] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  180.897250][  T153] bridge_slave_1: left allmulticast mode
[  180.903046][  T153] bridge_slave_1: left promiscuous mode
[  180.925896][  T153] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.942952][ T8599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  180.966491][  T153] bridge_slave_0: left allmulticast mode
[  180.981710][  T153] bridge_slave_0: left promiscuous mode
[  181.002445][  T153] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.106180][ T8608] netlink: 'syz.4.654': attribute type 10 has an invalid length.
[  181.478071][  T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  181.506505][  T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  181.538552][  T153] bond0 (unregistering): Released all slaves
[  181.627272][ T8608] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  181.942975][ T8637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.659'.
[  182.311852][  T153] hsr_slave_0: left promiscuous mode
[  182.341347][  T153] hsr_slave_1: left promiscuous mode
[  182.367498][  T153] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  182.395901][  T153] batman_adv: batadv0: Removing interface: batadv_slave_0
[  182.498186][  T153] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  182.507580][  T153] batman_adv: batadv0: Removing interface: batadv_slave_1
[  182.550839][  T153] veth1_macvtap: left promiscuous mode
[  182.556791][  T153] veth0_macvtap: left promiscuous mode
[  182.562765][  T153] veth1_vlan: left promiscuous mode
[  182.569106][  T153] veth0_vlan: left promiscuous mode
[  182.743733][ T5170] Bluetooth: hci1: command tx timeout
[  183.135140][ T1075] block nbd0: Possible stuck request ffff88802536e000: control (read@0,1024B). Runtime 90 seconds
[  183.146502][ T1075] block nbd0: Possible stuck request ffff88802536e1c0: control (read@1024,1024B). Runtime 90 seconds
[  183.157528][ T1075] block nbd0: Possible stuck request ffff88802536e380: control (read@2048,1024B). Runtime 90 seconds
[  183.177116][ T1075] block nbd0: Possible stuck request ffff88802536e540: control (read@3072,1024B). Runtime 90 seconds
[  183.253233][  T153] team0 (unregistering): Port device team_slave_1 removed
[  183.292681][  T153] team0 (unregistering): Port device team_slave_0 removed
[  184.216872][ T8586] chnl_net:caif_netlink_parms(): no params data found
[  184.285331][ T8703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.680'.
[  184.322758][ T8703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.680'.
[  184.395144][ T8710] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.681'.
[  184.435309][ T8710] netlink: 'syz.3.681': attribute type 49 has an invalid length.
[  184.562482][ T8724] netlink: 16 bytes leftover after parsing attributes in process `syz.0.683'.
[  184.712455][ T8732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.686'.
[  184.787462][ T8586] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.807702][ T8586] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.815665][ T8586] bridge_slave_0: entered allmulticast mode
[  184.824837][ T5170] Bluetooth: hci1: command tx timeout
[  184.825644][ T8586] bridge_slave_0: entered promiscuous mode
[  184.838791][ T8732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.686'.
[  184.842805][ T8586] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.856765][ T8586] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.857312][ T8733] openvswitch: netlink: Message has 199 unknown bytes.
[  184.866443][ T8586] bridge_slave_1: entered allmulticast mode
[  184.881356][ T8586] bridge_slave_1: entered promiscuous mode
[  184.888576][ T8733] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  185.059724][ T8586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  185.120477][ T8586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  185.278137][ T8754] netlink: 'syz.0.693': attribute type 1 has an invalid length.
[  185.306769][ T8754] netlink: 224 bytes leftover after parsing attributes in process `syz.0.693'.
[  185.314807][ T8586] team0: Port device team_slave_0 added
[  185.337160][ T8754] nbd: couldn't find device at index 1048576
[  185.345903][ T8586] team0: Port device team_slave_1 added
[  185.427623][ T8586] batman_adv: batadv0: Adding interface: batadv_slave_0
[  185.447255][ T8586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.473976][ T8586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  185.492369][ T8586] batman_adv: batadv0: Adding interface: batadv_slave_1
[  185.499498][ T8586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.529428][ T8586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  185.656188][ T8764] FAULT_INJECTION: forcing a failure.
[  185.656188][ T8764] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  185.683697][ T8764] CPU: 1 UID: 0 PID: 8764 Comm: syz.4.695 Not tainted 6.16.0-rc5-syzkaller-00187-gb640daa2822a #0 PREEMPT(full) 
[  185.683727][ T8764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  185.683746][ T8764] Call Trace:
[  185.683755][ T8764]  <TASK>
[  185.683764][ T8764]  dump_stack_lvl+0x189/0x250
[  185.683794][ T8764]  ? __pfx____ratelimit+0x10/0x10
[  185.683828][ T8764]  ? __pfx_dump_stack_lvl+0x10/0x10
[  185.683853][ T8764]  ? __pfx__printk+0x10/0x10
[  185.683882][ T8764]  ? __might_fault+0xb0/0x130
[  185.683920][ T8764]  should_fail_ex+0x414/0x560
[  185.683963][ T8764]  _copy_from_iter+0x1db/0x16f0
[  185.683995][ T8764]  ? validate_chain+0x897/0x2140
[  185.684021][ T8764]  ? __pfx__copy_from_iter+0x10/0x10
[  185.684042][ T8764]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  185.684089][ T8764]  tun_get_user+0x20f/0x3ce0
[  185.684133][ T8764]  ? aa_file_perm+0x11f/0xed0
[  185.684164][ T8764]  ? __pfx_tun_get_user+0x10/0x10
[  185.684183][ T8764]  ? aa_file_perm+0x11f/0xed0
[  185.684200][ T8764]  ? aa_file_perm+0x3e7/0xed0
[  185.684232][ T8764]  ? ref_tracker_alloc+0x318/0x460
[  185.684260][ T8764]  ? __lock_acquire+0xab9/0xd20
[  185.684282][ T8764]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  185.684318][ T8764]  ? tun_get+0x1c/0x2f0
[  185.684344][ T8764]  ? tun_get+0x1c/0x2f0
[  185.684363][ T8764]  ? tun_get+0x1c/0x2f0
[  185.684388][ T8764]  tun_chr_write_iter+0x113/0x200
[  185.684411][ T8764]  vfs_write+0x54b/0xa90
[  185.684438][ T8764]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  185.684459][ T8764]  ? __pfx_vfs_write+0x10/0x10
[  185.684491][ T8764]  ? __fget_files+0x2a/0x420
[  185.684527][ T8764]  ksys_write+0x145/0x250
[  185.684551][ T8764]  ? __pfx_ksys_write+0x10/0x10
[  185.684571][ T8764]  ? rcu_is_watching+0x15/0xb0
[  185.684599][ T8764]  ? do_syscall_64+0xbe/0x3b0
[  185.684622][ T8764]  do_syscall_64+0xfa/0x3b0
[  185.684640][ T8764]  ? lockdep_hardirqs_on+0x9c/0x150
[  185.684670][ T8764]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.684689][ T8764]  ? clear_bhb_loop+0x60/0xb0
[  185.684713][ T8764]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.684731][ T8764] RIP: 0033:0x7ffad418e929
[  185.684755][ T8764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  185.684771][ T8764] RSP: 002b:00007ffad507a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  185.684794][ T8764] RAX: ffffffffffffffda RBX: 00007ffad43b5fa0 RCX: 00007ffad418e929
[  185.684808][ T8764] RDX: 000000000000007a RSI: 00002000000006c0 RDI: 0000000000000003
[  185.684820][ T8764] RBP: 00007ffad507a090 R08: 0000000000000000 R09: 0000000000000000
[  185.684831][ T8764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  185.684842][ T8764] R13: 0000000000000000 R14: 00007ffad43b5fa0 R15: 00007ffdab11b928
[  185.684872][ T8764]  </TASK>
[  186.048863][ T8586] hsr_slave_0: entered promiscuous mode
[  186.057116][ T8586] hsr_slave_1: entered promiscuous mode
[  186.475782][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.700'.
[  186.491879][ T8789] netlink: 24 bytes leftover after parsing attributes in process `syz.3.700'.
[  186.550415][ T8789] netlink: 24 bytes leftover after parsing attributes in process `syz.3.700'.
[  186.570756][ T8797] netlink: 'syz.4.702': attribute type 13 has an invalid length.
[  186.609021][ T8773] Bluetooth: hci4: Opcode 0x0401 failed: -4
[  186.647481][ T8797] veth0_macvtap: left promiscuous mode
[  186.669773][ T8797] macvtap0: entered allmulticast mode
[  186.694672][ T8797] macvtap0: refused to change device tx_queue_len
[  186.895288][ T5170] Bluetooth: hci1: command tx timeout
[  187.224181][ T8830] FAULT_INJECTION: forcing a failure.
[  187.224181][ T8830] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  187.249804][ T8830] CPU: 1 UID: 0 PID: 8830 Comm: syz.2.709 Not tainted 6.16.0-rc5-syzkaller-00187-gb640daa2822a #0 PREEMPT(full) 
[  187.249835][ T8830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  187.249846][ T8830] Call Trace:
[  187.249854][ T8830]  <TASK>
[  187.249862][ T8830]  dump_stack_lvl+0x189/0x250
[  187.249891][ T8830]  ? __pfx____ratelimit+0x10/0x10
[  187.249922][ T8830]  ? __pfx_dump_stack_lvl+0x10/0x10
[  187.249945][ T8830]  ? __pfx__printk+0x10/0x10
[  187.249972][ T8830]  ? __might_fault+0xb0/0x130
[  187.250005][ T8830]  should_fail_ex+0x414/0x560
[  187.250038][ T8830]  _copy_from_iter+0x1db/0x16f0
[  187.250067][ T8830]  ? __lock_acquire+0xab9/0xd20
[  187.250096][ T8830]  ? __pfx__copy_from_iter+0x10/0x10
[  187.250131][ T8830]  tun_get_user+0x4ce/0x3ce0
[  187.250173][ T8830]  ? aa_file_perm+0x11f/0xed0
[  187.250191][ T8830]  ? __pfx_tun_get_user+0x10/0x10
[  187.250210][ T8830]  ? aa_file_perm+0x11f/0xed0
[  187.250227][ T8830]  ? aa_file_perm+0x3e7/0xed0
[  187.250258][ T8830]  ? ref_tracker_alloc+0x318/0x460
[  187.250285][ T8830]  ? __lock_acquire+0xab9/0xd20
[  187.250307][ T8830]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  187.250342][ T8830]  ? tun_get+0x1c/0x2f0
[  187.250369][ T8830]  ? tun_get+0x1c/0x2f0
[  187.250388][ T8830]  ? tun_get+0x1c/0x2f0
[  187.250423][ T8830]  tun_chr_write_iter+0x113/0x200
[  187.250444][ T8830]  vfs_write+0x54b/0xa90
[  187.250470][ T8830]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  187.250490][ T8830]  ? __pfx_vfs_write+0x10/0x10
[  187.250521][ T8830]  ? __fget_files+0x2a/0x420
[  187.250555][ T8830]  ksys_write+0x145/0x250
[  187.250579][ T8830]  ? __pfx_ksys_write+0x10/0x10
[  187.250605][ T8830]  ? do_syscall_64+0xbe/0x3b0
[  187.250627][ T8830]  do_syscall_64+0xfa/0x3b0
[  187.250644][ T8830]  ? lockdep_hardirqs_on+0x9c/0x150
[  187.250672][ T8830]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.250689][ T8830]  ? clear_bhb_loop+0x60/0xb0
[  187.250711][ T8830]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.250728][ T8830] RIP: 0033:0x7f9134d8e929
[  187.250745][ T8830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  187.250760][ T8830] RSP: 002b:00007f9135b39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  187.250779][ T8830] RAX: ffffffffffffffda RBX: 00007f9134fb6160 RCX: 00007f9134d8e929
[  187.250793][ T8830] RDX: 000000000000007a RSI: 00002000000006c0 RDI: 0000000000000003
[  187.250804][ T8830] RBP: 00007f9135b39090 R08: 0000000000000000 R09: 0000000000000000
[  187.250815][ T8830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  187.250825][ T8830] R13: 0000000000000001 R14: 00007f9134fb6160 R15: 00007ffce850d658
[  187.250852][ T8830]  </TASK>
[  187.534063][ T8835] netlink: 'syz.0.713': attribute type 21 has an invalid length.
[  187.701162][ T8842] netlink: 'syz.4.717': attribute type 16 has an invalid length.
[  187.712010][ T8842] netlink: 'syz.4.717': attribute type 3 has an invalid length.
[  187.786821][ T5170] Bluetooth: hci4: command 0x0405 tx timeout
[  188.076670][ T8586] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  188.150211][ T8586] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  188.208469][ T8586] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  188.239283][ T8586] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  188.540472][ T8586] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.654287][ T8586] 8021q: adding VLAN 0 to HW filter on device team0
[  188.703497][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.710709][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[  188.759711][ T8901] netlink: 'syz.4.731': attribute type 1 has an invalid length.
[  188.841552][  T153] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.848896][  T153] bridge0: port 2(bridge_slave_1) entered forwarding state
[  188.866231][ T8910] FAULT_INJECTION: forcing a failure.
[  188.866231][ T8910] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  188.927919][ T8910] CPU: 1 UID: 0 PID: 8910 Comm: syz.0.732 Not tainted 6.16.0-rc5-syzkaller-00187-gb640daa2822a #0 PREEMPT(full) 
[  188.927947][ T8910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  188.927958][ T8910] Call Trace:
[  188.927966][ T8910]  <TASK>
[  188.927974][ T8910]  dump_stack_lvl+0x189/0x250
[  188.928003][ T8910]  ? __pfx____ratelimit+0x10/0x10
[  188.928034][ T8910]  ? __pfx_dump_stack_lvl+0x10/0x10
[  188.928058][ T8910]  ? __pfx__printk+0x10/0x10
[  188.928098][ T8910]  should_fail_ex+0x414/0x560
[  188.928132][ T8910]  _copy_to_user+0x31/0xb0
[  188.928158][ T8910]  simple_read_from_buffer+0xe1/0x170
[  188.928188][ T8910]  proc_fail_nth_read+0x1df/0x250
[  188.928220][ T8910]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  188.928251][ T8910]  ? rw_verify_area+0x258/0x650
[  188.928272][ T8910]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  188.928302][ T8910]  vfs_read+0x200/0x980
[  188.928330][ T8910]  ? __pfx___mutex_lock+0x10/0x10
[  188.928350][ T8910]  ? __pfx_vfs_read+0x10/0x10
[  188.928374][ T8910]  ? __fget_files+0x2a/0x420
[  188.928405][ T8910]  ? __fget_files+0x3a0/0x420
[  188.928429][ T8910]  ? __fget_files+0x2a/0x420
[  188.928465][ T8910]  ksys_read+0x145/0x250
[  188.928490][ T8910]  ? __pfx_ksys_read+0x10/0x10
[  188.928518][ T8910]  ? do_syscall_64+0xbe/0x3b0
[  188.928542][ T8910]  do_syscall_64+0xfa/0x3b0
[  188.928559][ T8910]  ? lockdep_hardirqs_on+0x9c/0x150
[  188.928589][ T8910]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.928608][ T8910]  ? clear_bhb_loop+0x60/0xb0
[  188.928632][ T8910]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.928650][ T8910] RIP: 0033:0x7fc77cd8d33c
[  188.928667][ T8910] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  188.928682][ T8910] RSP: 002b:00007fc77db4a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  188.928702][ T8910] RAX: ffffffffffffffda RBX: 00007fc77cfb6160 RCX: 00007fc77cd8d33c
[  188.928716][ T8910] RDX: 000000000000000f RSI: 00007fc77db4a0a0 RDI: 0000000000000004
[  188.928728][ T8910] RBP: 00007fc77db4a090 R08: 0000000000000000 R09: 0000000000000000
[  188.928740][ T8910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  188.928750][ T8910] R13: 0000000000000001 R14: 00007fc77cfb6160 R15: 00007fff30f9c2b8
[  188.928782][ T8910]  </TASK>
[  189.206679][ T5170] Bluetooth: hci1: command tx timeout
[  189.268545][ T8586] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  189.530394][ T8933] x_tables: duplicate underflow at hook 2
[  189.541131][ T8933] x_tables: duplicate underflow at hook 2
[  189.746678][ T8940] openvswitch: netlink: Multiple metadata blocks provided
[  189.770213][ T8942] __nla_validate_parse: 4 callbacks suppressed
[  189.770230][ T8942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.739'.
[  189.809082][ T8942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.739'.
[  189.868648][ T8946] netlink: 72 bytes leftover after parsing attributes in process `syz.0.739'.
[  189.974130][ T8586] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.088994][ T8586] veth0_vlan: entered promiscuous mode
[  190.128519][ T8586] veth1_vlan: entered promiscuous mode
[  190.208556][ T8586] veth0_macvtap: entered promiscuous mode
[  190.230257][ T8586] veth1_macvtap: entered promiscuous mode
[  190.320312][ T8967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  190.331103][ T8586] batman_adv: batadv0: Interface activated: batadv_slave_0
[  190.383107][ T8967] netlink: 'syz.4.744': attribute type 10 has an invalid length.
[  190.409069][ T8586] batman_adv: batadv0: Interface activated: batadv_slave_1
[  190.497059][ T8969] pim6reg1: entered promiscuous mode
[  190.503272][ T8969] pim6reg1: entered allmulticast mode
[  190.517633][ T8976] netlink: 52 bytes leftover after parsing attributes in process `syz.2.745'.
[  190.540012][ T8586] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.550077][ T8586] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.562991][ T8586] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.572199][ T8586] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.752928][ T8982] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.748'.
[  190.923763][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.962433][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.062286][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.084957][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.218946][ T5170] Bluetooth: hci1: command tx timeout
[  191.346858][ T9003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.752'.
[  191.508267][   T30] audit: type=1800 audit(1752473709.688:2): pid=8988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.748" name="cgroup.controllers" dev="tmpfs" ino=931 res=0 errno=0
[  191.699960][ T9015] openvswitch: netlink: Missing key (keys=40, expected=100)
[  192.056708][ T9025] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  192.092399][ T9022] Illegal XDP return value 4294967274 on prog  (id 178) dev N/A, expect packet loss!
[  192.289847][ T3579] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.554913][ T3579] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.670814][ T3579] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.758734][ T3579] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.907289][ T3579] bridge_slave_1: left allmulticast mode
[  192.922840][ T3579] bridge_slave_1: left promiscuous mode
[  192.929125][ T3579] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.946537][ T3579] bridge_slave_0: left allmulticast mode
[  192.952364][ T3579] bridge_slave_0: left promiscuous mode
[  192.962212][ T3579] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.322871][ T3579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  193.384459][ T3579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  193.409496][ T3579] bond0 (unregistering): Released all slaves
[  193.731633][ T9071] netlink: 'syz.0.768': attribute type 11 has an invalid length.
[  193.746013][ T9071] netlink: 'syz.0.768': attribute type 11 has an invalid length.
[  193.759111][ T9071] netlink: 224 bytes leftover after parsing attributes in process `syz.0.768'.
[  193.935699][ T9067] pimreg: entered allmulticast mode
[  193.944357][ T9073] pimreg: left allmulticast mode
[  193.970298][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.769'.
[  194.019014][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  194.110371][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  194.123900][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  194.131913][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  194.143754][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  194.167638][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  194.346513][ T3579] hsr_slave_0: left promiscuous mode
[  194.354259][ T3579] hsr_slave_1: left promiscuous mode
[  194.360305][ T3579] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  194.403506][ T3579] batman_adv: batadv0: Removing interface: batadv_slave_0
[  194.448296][ T3579] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  194.479661][ T3579] batman_adv: batadv0: Removing interface: batadv_slave_1
[  194.490232][ T9102] netlink: 'syz.0.776': attribute type 10 has an invalid length.
[  194.573222][ T3579] veth1_macvtap: left promiscuous mode
[  194.590960][ T3579] veth0_macvtap: left promiscuous mode
[  194.604148][ T3579] veth1_vlan: left promiscuous mode
[  194.612879][ T3579] veth0_vlan: left promiscuous mode
[  195.109354][ T3579] team0 (unregistering): Port device team_slave_1 removed
[  195.144917][ T3579] team0 (unregistering): Port device team_slave_0 removed
[  195.705430][ T9131] tipc: Enabled bearer <udp:syz2>, priority 10
[  195.926052][ T9137] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.784'.
[  195.984206][ T9137] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  196.123359][ T9086] chnl_net:caif_netlink_parms(): no params data found
[  196.172394][ T9154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.790'.
[  196.227855][ T9155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.790'.
[  196.258603][ T5850] Bluetooth: hci1: command tx timeout
[  196.463747][ T9155] netlink: 60 bytes leftover after parsing attributes in process `syz.3.790'.
[  196.524382][ T9086] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.531633][ T9086] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.574487][ T9086] bridge_slave_0: entered allmulticast mode
[  196.590698][ T9086] bridge_slave_0: entered promiscuous mode
[  196.626172][ T9177] syzkaller1: entered promiscuous mode
[  196.631718][ T9177] syzkaller1: entered allmulticast mode
[  196.642874][ T9154] netlink: 60 bytes leftover after parsing attributes in process `syz.3.790'.
[  196.664333][ T9086] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.671575][ T9086] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.699651][ T9086] bridge_slave_1: entered allmulticast mode
[  196.717770][ T9086] bridge_slave_1: entered promiscuous mode
[  197.019921][ T9086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  197.057433][ T9086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  197.071603][ T9194] xt_CT: No such helper "snmp"
[  197.255734][ T9086] team0: Port device team_slave_0 added
[  197.264554][ T9086] team0: Port device team_slave_1 added
[  197.295825][ T9086] batman_adv: batadv0: Adding interface: batadv_slave_0
[  197.302816][ T9086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.330644][ T9086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  197.344629][ T9086] batman_adv: batadv0: Adding interface: batadv_slave_1
[  197.351599][ T9086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.378122][ T9086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  197.427565][ T9086] hsr_slave_0: entered promiscuous mode
[  197.434734][ T9086] hsr_slave_1: entered promiscuous mode
[  197.857605][ T9086] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  197.873343][ T9086] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  197.884252][ T9086] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  197.894655][ T9086] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  197.980440][ T9086] 8021q: adding VLAN 0 to HW filter on device bond0
[  198.001811][ T9086] 8021q: adding VLAN 0 to HW filter on device team0
[  198.016364][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.023582][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[  198.038718][ T3579] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.046059][ T3579] bridge0: port 2(bridge_slave_1) entered forwarding state
[  198.333840][ T5850] Bluetooth: hci1: command tx timeout
[  200.413712][ T5850] Bluetooth: hci1: command tx timeout
[  200.860649][ T5220] udevd[5220]: worker [5854] /devices/virtual/block/nbd0 is taking a long time
[  202.493619][ T5850] Bluetooth: hci1: command tx timeout
[  206.333628][ T5170] Bluetooth: hci0: command 0x0401 tx timeout
[  211.457266][ T5859] Bluetooth: hci3: command 0x0406 tx timeout
[  211.463861][ T5861] Bluetooth: hci2: command 0x0406 tx timeout
[  211.467436][ T5859] Bluetooth: hci4: command 0x0405 tx timeout
[  213.219108][ T1075] block nbd0: Possible stuck request ffff88802536e000: control (read@0,1024B). Runtime 120 seconds
[  213.230313][ T1075] block nbd0: Possible stuck request ffff88802536e1c0: control (read@1024,1024B). Runtime 120 seconds
[  213.241380][ T1075] block nbd0: Possible stuck request ffff88802536e380: control (read@2048,1024B). Runtime 120 seconds
[  213.252404][ T1075] block nbd0: Possible stuck request ffff88802536e540: control (read@3072,1024B). Runtime 120 seconds
[  243.296248][ T1075] block nbd0: Possible stuck request ffff88802536e000: control (read@0,1024B). Runtime 150 seconds
[  243.307648][ T1075] block nbd0: Possible stuck request ffff88802536e1c0: control (read@1024,1024B). Runtime 150 seconds
[  243.318988][ T1075] block nbd0: Possible stuck request ffff88802536e380: control (read@2048,1024B). Runtime 150 seconds
[  243.330021][ T1075] block nbd0: Possible stuck request ffff88802536e540: control (read@3072,1024B). Runtime 150 seconds
[  255.456191][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  273.373845][ T1075] block nbd0: Possible stuck request ffff88802536e000: control (read@0,1024B). Runtime 180 seconds
[  273.384670][ T1075] block nbd0: Possible stuck request ffff88802536e1c0: control (read@1024,1024B). Runtime 180 seconds
[  273.395976][ T1075] block nbd0: Possible stuck request ffff88802536e380: control (read@2048,1024B). Runtime 180 seconds
[  273.409287][ T1075] block nbd0: Possible stuck request ffff88802536e540: control (read@3072,1024B). Runtime 180 seconds
[  274.725178][ T5220] udevd[5220]: worker [5854] /devices/virtual/block/nbd0 timeout; kill it
[  274.737572][ T5220] udevd[5220]: seq 11195 '/devices/virtual/block/nbd0' killed
[  303.453829][   T54] block nbd0: Possible stuck request ffff88802536e000: control (read@0,1024B). Runtime 210 seconds
[  303.465016][   T54] block nbd0: Possible stuck request ffff88802536e1c0: control (read@1024,1024B). Runtime 210 seconds
[  303.476146][   T54] block nbd0: Possible stuck request ffff88802536e380: control (read@2048,1024B). Runtime 210 seconds
[  303.487547][   T54] block nbd0: Possible stuck request ffff88802536e540: control (read@3072,1024B). Runtime 210 seconds
[  316.897785][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  318.973556][ T5864] Bluetooth: hci1: command 0x0406 tx timeout
[  333.533749][   T54] block nbd0: Possible stuck request ffff88802536e000: control (read@0,1024B). Runtime 240 seconds
[  333.544761][   T54] block nbd0: Possible stuck request ffff88802536e1c0: control (read@1024,1024B). Runtime 240 seconds
[  333.555831][   T54] block nbd0: Possible stuck request ffff88802536e380: control (read@2048,1024B). Runtime 240 seconds
[  333.566886][   T54] block nbd0: Possible stuck request ffff88802536e540: control (read@3072,1024B). Runtime 240 seconds
[  345.693963][   T31] INFO: task syz.0.800:9207 blocked for more than 143 seconds.
[  345.702910][   T31]       Not tainted 6.16.0-rc5-syzkaller-00187-gb640daa2822a #0
[  345.711027][   T31]       Blocked by coredump.
[  345.715762][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  345.724584][   T31] task:syz.0.800       state:D stack:25352 pid:9207  tgid:9206  ppid:5858   task_flags:0x40054c flags:0x00004000
[  345.736621][   T31] Call Trace:
[  345.739910][   T31]  <TASK>
[  345.742858][   T31]  __schedule+0x16f5/0x4d00
[  345.747490][   T31]  ? __lock_acquire+0xab9/0xd20
[  345.752393][   T31]  ? schedule+0x165/0x360
[  345.756884][   T31]  ? __pfx___schedule+0x10/0x10
[  345.761806][   T31]  ? schedule+0x91/0x360
[  345.766254][   T31]  schedule+0x165/0x360
[  345.770463][   T31]  schedule_preempt_disabled+0x13/0x30
[  345.776478][   T31]  rwsem_down_write_slowpath+0xbec/0x1030
[  345.782267][   T31]  ? rwsem_down_write_slowpath+0x7ec/0x1030
[  345.788286][   T31]  ? __pfx_rwsem_down_write_slowpath+0x10/0x10
[  345.794767][   T31]  ? __lock_acquire+0xab9/0xd20
[  345.799681][   T31]  ? exit_mmap+0x28e/0xb50
[  345.805251][   T31]  down_write+0x1ab/0x1f0
[  345.809643][   T31]  ? __pfx_down_write+0x10/0x10
[  345.814786][   T31]  exit_mmap+0x28e/0xb50
[  345.819120][   T31]  ? uprobe_clear_state+0x20f/0x290
[  345.824482][   T31]  ? __pfx_exit_mmap+0x10/0x10
[  345.829286][   T31]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  345.835105][   T31]  ? __pfx_exit_aio+0x10/0x10
[  345.839864][   T31]  ? uprobe_clear_state+0x274/0x290
[  345.845185][   T31]  __mmput+0x118/0x420
[  345.849293][   T31]  exit_mm+0x1da/0x2c0
[  345.853379][   T31]  ? __pfx_exit_mm+0x10/0x10
[  345.858174][   T31]  ? rcu_is_watching+0x15/0xb0
[  345.862956][   T31]  do_exit+0x648/0x22e0
[  345.867209][   T31]  ? do_raw_spin_lock+0x121/0x290
[  345.872276][   T31]  ? __pfx_do_exit+0x10/0x10
[  345.877043][   T31]  do_group_exit+0x21c/0x2d0
[  345.881680][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  345.886963][   T31]  get_signal+0x1286/0x1340
[  345.891520][   T31]  arch_do_signal_or_restart+0x9a/0x750
[  345.897174][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  345.904289][   T31]  ? exit_to_user_mode_loop+0x40/0x110
[  345.909798][   T31]  exit_to_user_mode_loop+0x75/0x110
[  345.915271][   T31]  do_syscall_64+0x2bd/0x3b0
[  345.919910][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  345.925191][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.931299][   T31]  ? clear_bhb_loop+0x60/0xb0
[  345.936191][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.942134][   T31] RIP: 0033:0x7fc77cd8e929
[  345.946894][   T31] RSP: 002b:00007fc77db8c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  345.955424][   T31] RAX: fffffffffffffe00 RBX: 00007fc77cfb5fa8 RCX: 00007fc77cd8e929
[  345.963503][   T31] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc77cfb5fa8
[  345.971855][   T31] RBP: 00007fc77cfb5fa0 R08: 0000000000000000 R09: 0000000000000000
[  345.979953][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc77cfb5fac
[  345.988009][   T31] R13: 0000000000000000 R14: 00007fff30f9c1d0 R15: 00007fff30f9c2b8
[  345.996129][   T31]  </TASK>
[  345.999186][   T31] INFO: task syz.3.801:9208 blocked for more than 143 seconds.
[  346.007449][   T31]       Not tainted 6.16.0-rc5-syzkaller-00187-gb640daa2822a #0
[  346.015244][   T31]       Blocked by coredump.
[  346.019854][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  346.028608][   T31] task:syz.3.801       state:D stack:26888 pid:9208  tgid:9208  ppid:5849   task_flags:0x40044c flags:0x00004004
[  346.040643][   T31] Call Trace:
[  346.044019][   T31]  <TASK>
[  346.046996][   T31]  __schedule+0x16f5/0x4d00
[  346.051563][   T31]  ? __lock_acquire+0xab9/0xd20
[  346.056519][   T31]  ? schedule+0x165/0x360
[  346.060893][   T31]  ? __pfx___schedule+0x10/0x10
[  346.065912][   T31]  ? schedule+0x91/0x360
[  346.070221][   T31]  schedule+0x165/0x360
[  346.074510][   T31]  schedule_preempt_disabled+0x13/0x30
[  346.080031][   T31]  rwsem_down_write_slowpath+0xbec/0x1030
[  346.085854][   T31]  ? rwsem_down_write_slowpath+0x7ec/0x1030
[  346.091795][   T31]  ? __pfx_rwsem_down_write_slowpath+0x10/0x10
[  346.098085][   T31]  ? __lock_acquire+0xab9/0xd20
[  346.102984][   T31]  ? exit_mmap+0x28e/0xb50
[  346.108376][   T31]  down_write+0x1ab/0x1f0
[  346.112759][   T31]  ? __pfx_down_write+0x10/0x10
[  346.117850][   T31]  exit_mmap+0x28e/0xb50
[  346.122145][   T31]  ? uprobe_clear_state+0x20f/0x290
[  346.127432][   T31]  ? __pfx_exit_mmap+0x10/0x10
[  346.132231][   T31]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  346.137996][   T31]  ? __pfx_exit_aio+0x10/0x10
[  346.142722][   T31]  ? uprobe_clear_state+0x274/0x290
[  346.147993][   T31]  ? _raw_read_unlock+0x28/0x50
[  346.152884][   T31]  __mmput+0x118/0x420
[  346.157061][   T31]  exit_mm+0x1da/0x2c0
[  346.161175][   T31]  ? __pfx_exit_mm+0x10/0x10
[  346.165903][   T31]  ? rcu_is_watching+0x15/0xb0
[  346.170797][   T31]  do_exit+0x648/0x22e0
[  346.175187][   T31]  ? do_raw_spin_lock+0x21f/0x290
[  346.180258][   T31]  ? __pfx_do_exit+0x10/0x10
[  346.184943][   T31]  ? irqentry_exit+0x74/0x90
[  346.189573][   T31]  do_group_exit+0x21c/0x2d0
[  346.194304][   T31]  get_signal+0x1286/0x1340
[  346.198872][   T31]  arch_do_signal_or_restart+0x9a/0x750
[  346.204531][   T31]  ? __mmap_lock_do_trace_acquire_returned+0x85/0x1e0
[  346.212260][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  346.218567][   T31]  ? exit_to_user_mode_loop+0x40/0x110
[  346.225932][   T31]  exit_to_user_mode_loop+0x75/0x110
[  346.231230][   T31]  do_syscall_64+0x2bd/0x3b0
[  346.235917][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  346.241159][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.247319][   T31]  ? clear_bhb_loop+0x60/0xb0
[  346.252032][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.258022][   T31] RIP: 0033:0x7f274278e963
[  346.262475][   T31] RSP: 002b:00007fffc6269818 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  346.270969][   T31] RAX: fffffffffffffffc RBX: 00007f2740df76c0 RCX: 00007f274278e963
[  346.279061][   T31] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000
[  346.287121][   T31] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
[  346.295234][   T31] R10: 0000000000020022 R11: 0000000000000246 R12: 00007fffc6269970
[  346.303239][   T31] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
[  346.311320][   T31]  </TASK>
[  346.315143][   T31] INFO: task syz.2.802:9209 blocked for more than 143 seconds.
[  346.322715][   T31]       Not tainted 6.16.0-rc5-syzkaller-00187-gb640daa2822a #0
[  346.330444][   T31]       Blocked by coredump.
[  346.335310][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  346.344075][   T31] task:syz.2.802       state:D stack:26888 pid:9209  tgid:9209  ppid:5869   task_flags:0x40044c flags:0x00004004
[  346.356937][   T31] Call Trace:
[  346.360258][   T31]  <TASK>
[  346.363211][   T31]  __schedule+0x16f5/0x4d00
[  346.367801][   T31]  ? __lock_acquire+0xab9/0xd20
[  346.372690][   T31]  ? schedule+0x165/0x360
[  346.377131][   T31]  ? __pfx___schedule+0x10/0x10
[  346.382037][   T31]  ? schedule+0x91/0x360
[  346.386408][   T31]  schedule+0x165/0x360
[  346.390609][   T31]  schedule_preempt_disabled+0x13/0x30
[  346.396155][   T31]  rwsem_down_write_slowpath+0xbec/0x1030
[  346.401913][   T31]  ? rwsem_down_write_slowpath+0x7ec/0x1030
[  346.407894][   T31]  ? __pfx_rwsem_down_write_slowpath+0x10/0x10
[  346.415349][   T31]  ? __lock_acquire+0xab9/0xd20
[  346.420254][   T31]  ? exit_mmap+0x28e/0xb50
[  346.424781][   T31]  down_write+0x1ab/0x1f0
[  346.429146][   T31]  ? __pfx_down_write+0x10/0x10
[  346.434101][   T31]  exit_mmap+0x28e/0xb50
[  346.438378][   T31]  ? uprobe_clear_state+0x20f/0x290
[  346.443669][   T31]  ? __pfx_exit_mmap+0x10/0x10
[  346.448466][   T31]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  346.454201][   T31]  ? __pfx_exit_aio+0x10/0x10
[  346.458956][   T31]  ? uprobe_clear_state+0x274/0x290
[  346.464302][   T31]  __mmput+0x118/0x420
[  346.468412][   T31]  exit_mm+0x1da/0x2c0
[  346.472496][   T31]  ? __pfx_exit_mm+0x10/0x10
[  346.477194][   T31]  ? hrtimer_try_to_cancel+0x3d9/0x420
[  346.482701][   T31]  ? rcu_is_watching+0x15/0xb0
[  346.487571][   T31]  do_exit+0x648/0x22e0
[  346.491779][   T31]  ? do_raw_spin_lock+0x121/0x290
[  346.496929][   T31]  ? __pfx_do_exit+0x10/0x10
[  346.501591][   T31]  do_group_exit+0x21c/0x2d0
[  346.506383][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  346.511634][   T31]  get_signal+0x1286/0x1340
[  346.516246][   T31]  arch_do_signal_or_restart+0x9a/0x750
[  346.522537][   T31]  ? __mmap_lock_do_trace_acquire_returned+0x85/0x1e0
[  346.529427][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  346.535720][   T31]  ? exit_to_user_mode_loop+0x40/0x110
[  346.541210][   T31]  exit_to_user_mode_loop+0x75/0x110
[  346.546558][   T31]  do_syscall_64+0x2bd/0x3b0
[  346.551174][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  346.556467][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.562567][   T31]  ? clear_bhb_loop+0x60/0xb0
[  346.567308][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.573228][   T31] RIP: 0033:0x7f9134d8e963
[  346.577808][   T31] RSP: 002b:00007ffce850d5f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  346.586339][   T31] RAX: fffffffffffffffc RBX: 00007f91333f76c0 RCX: 00007f9134d8e963
[  346.594421][   T31] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000
[  346.602421][   T31] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
[  346.610456][   T31] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffce850d750
[  346.618530][   T31] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
[  346.628128][   T31]  </TASK>
[  346.631195][   T31] INFO: task dhcpcd-run-hook:9211 blocked for more than 144 seconds.
[  346.639535][   T31]       Not tainted 6.16.0-rc5-syzkaller-00187-gb640daa2822a #0
[  346.647526][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  346.656412][   T31] task:dhcpcd-run-hook state:D stack:25528 pid:9211  tgid:9211  ppid:9152   task_flags:0x400040 flags:0x00004002
[  346.668456][   T31] Call Trace:
[  346.671742][   T31]  <TASK>
[  346.674730][   T31]  __schedule+0x16f5/0x4d00
[  346.679293][   T31]  ? __lock_acquire+0xab9/0xd20
[  346.684403][   T31]  ? schedule+0x165/0x360
[  346.688783][   T31]  ? __pfx___schedule+0x10/0x10
[  346.693797][   T31]  ? schedule+0x91/0x360
[  346.698088][   T31]  schedule+0x165/0x360
[  346.702262][   T31]  schedule_preempt_disabled+0x13/0x30
[  346.707982][   T31]  rwsem_down_write_slowpath+0xbec/0x1030
[  346.713865][   T31]  ? rwsem_down_write_slowpath+0x7ec/0x1030
[  346.719781][   T31]  ? __pfx_rwsem_down_write_slowpath+0x10/0x10
[  346.726627][   T31]  ? __lock_acquire+0xab9/0xd20
[  346.731531][   T31]  ? exit_mmap+0x28e/0xb50
[  346.736356][   T31]  down_write+0x1ab/0x1f0
[  346.740779][   T31]  ? __pfx_down_write+0x10/0x10
[  346.745788][   T31]  exit_mmap+0x28e/0xb50
[  346.750077][   T31]  ? uprobe_clear_state+0x20f/0x290
[  346.755371][   T31]  ? __pfx_exit_mmap+0x10/0x10
[  346.760181][   T31]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  346.765924][   T31]  ? __pfx_exit_aio+0x10/0x10
[  346.770664][   T31]  ? uprobe_clear_state+0x274/0x290
[  346.776081][   T31]  __mmput+0x118/0x420
[  346.780192][   T31]  exec_mmap+0x6ac/0x7d0
[  346.784578][   T31]  ? generic_permission+0x2e5/0x690
[  346.789831][   T31]  ? __pfx_exec_mmap+0x10/0x10
[  346.794801][   T31]  begin_new_exec+0x129c/0x2120
[  346.799693][   T31]  ? __pfx_load_elf_phdrs+0x10/0x10
[  346.805039][   T31]  load_elf_binary+0x96a/0x2790
[  346.809938][   T31]  ? load_elf_binary+0x881/0x2790
[  346.815046][   T31]  ? load_misc_binary+0x110/0xc40
[  346.820101][   T31]  ? __lock_acquire+0xab9/0xd20
[  346.825868][   T31]  ? __pfx_load_elf_binary+0x10/0x10
[  346.831213][   T31]  bprm_execve+0x99c/0x1450
[  346.835876][   T31]  ? __pfx_bprm_execve+0x10/0x10
[  346.840859][   T31]  do_execveat_common+0x510/0x6a0
[  346.846012][   T31]  __x64_sys_execve+0x94/0xb0
[  346.850730][   T31]  do_syscall_64+0xfa/0x3b0
[  346.855331][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  346.860574][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.866769][   T31]  ? clear_bhb_loop+0x60/0xb0
[  346.871481][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.877564][   T31] RIP: 0033:0x7f5fa1aea107
[  346.882019][   T31] RSP: 002b:00007ffff3e26918 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[  346.890520][   T31] RAX: ffffffffffffffda RBX: 000055e2ddb480c8 RCX: 00007f5fa1aea107
[  346.898646][   T31] RDX: 000055e2ddb480e8 RSI: 000055e2ddb480c8 RDI: 000055e2ddb48170
[  346.906721][   T31] RBP: 000055e2ddb48170 R08: 00007ffff3e2ae9d R09: 0000000000000000
[  346.914822][   T31] R10: 0000000000000008 R11: 0000000000000246 R12: 000055e2ddb480e8
[  346.922826][   T31] R13: 00007f5fa1cafe8b R14: 000055e2ddb480e8 R15: 0000000000000000
[  346.931771][   T31]  </TASK>
[  346.934909][   T31] 
[  346.934909][   T31] Showing all locks held in the system:
[  346.942645][   T31] 1 lock held by khungtaskd/31:
[  346.947609][   T31]  #0: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  346.957597][   T31] 2 locks held by kworker/u8:9/1347:
[  346.962902][   T31]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  346.974731][   T31]  #1: ffffc900045efbc0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  346.986969][   T31] 2 locks held by getty/5611:
[  346.991666][   T31]  #0: ffff88803078d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  347.001508][   T31]  #1: ffffc900036cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  347.011747][   T31] 1 lock held by syz-executor/5837:
[  347.017045][   T31]  #0: ffff8880788229e0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1bd/0x4c0
[  347.026557][   T31] 1 lock held by udevd/5854:
[  347.031877][   T31]  #0: ffff8880252cc358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  347.041315][   T31] 1 lock held by syz-executor/5858:
[  347.046611][   T31]  #0: ffff88801c3b1fe0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x28e/0xb50
[  347.055853][   T31] 2 locks held by syz-executor/5862:
[  347.061170][   T31]  #0: ffffffff8e1f8230 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x131/0x4b0
[  347.070016][   T31]  #1: ffff88807b1081e0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x12e/0x1ac0
[  347.079185][   T31] 1 lock held by syz.0.800/9207:
[  347.084183][   T31]  #0: ffff88803457efe0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x28e/0xb50
[  347.093299][   T31] 1 lock held by syz.3.801/9208:
[  347.098320][   T31]  #0: ffff88803457d1e0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x28e/0xb50
[  347.107510][   T31] 1 lock held by syz.2.802/9209:
[  347.112449][   T31]  #0: ffff88807f4895e0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x28e/0xb50
[  347.121592][   T31] 3 locks held by dhcpcd-run-hook/9211:
[  347.127194][   T31]  #0: ffff88805aba92c8 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: bprm_execve+0xb9/0x1450
[  347.138100][   T31]  #1: ffff88805aba9360 (&sig->exec_update_lock){+.+.}-{4:4}, at: exec_mmap+0xe5/0x7d0
[  347.147870][   T31]  #2: ffff88803457dbe0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x28e/0xb50
[  347.157013][   T31] 1 lock held by modprobe/9218:
[  347.161880][   T31]  #0: ffff88807f48b3e0 (&mm->mmap_lock){++++}-{4:4}, at: setup_arg_pages+0x2b3/0xaa0
[  347.171540][   T31] 
[  347.173954][   T31] =============================================
[  347.173954][   T31] 
[  347.182411][   T31] NMI backtrace for cpu 1
[  347.182427][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00187-gb640daa2822a #0 PREEMPT(full) 
[  347.182470][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  347.182482][   T31] Call Trace:
[  347.182489][   T31]  <TASK>
[  347.182497][   T31]  dump_stack_lvl+0x189/0x250
[  347.182522][   T31]  ? __wake_up_klogd+0xd9/0x110
[  347.182550][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  347.182572][   T31]  ? __pfx__printk+0x10/0x10
[  347.182607][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  347.182635][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  347.182656][   T31]  ? _printk+0xcf/0x120
[  347.182685][   T31]  ? __pfx__printk+0x10/0x10
[  347.182710][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  347.182735][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  347.182762][   T31]  watchdog+0xfee/0x1030
[  347.182780][   T31]  ? watchdog+0x1de/0x1030
[  347.182804][   T31]  kthread+0x70e/0x8a0
[  347.182832][   T31]  ? __pfx_watchdog+0x10/0x10
[  347.182847][   T31]  ? __pfx_kthread+0x10/0x10
[  347.182874][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  347.182903][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  347.182930][   T31]  ? __pfx_kthread+0x10/0x10
[  347.182956][   T31]  ret_from_fork+0x3fc/0x770
[  347.182978][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  347.183002][   T31]  ? __switch_to_asm+0x39/0x70
[  347.183024][   T31]  ? __switch_to_asm+0x33/0x70
[  347.183046][   T31]  ? __pfx_kthread+0x10/0x10
[  347.183072][   T31]  ret_from_fork_asm+0x1a/0x30
[  347.183110][   T31]  </TASK>
[  347.183119][   T31] Sending NMI from CPU 1 to CPUs 0:
[  347.342406][    C0] NMI backtrace for cpu 0
[  347.342422][    C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-rc5-syzkaller-00187-gb640daa2822a #0 PREEMPT(full) 
[  347.342525][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  347.342538][    C0] Workqueue: events_unbound cfg80211_wiphy_work
[  347.342565][    C0] RIP: 0010:deref_stack_reg+0x1b3/0x230
[  347.342589][    C0] Code: 39 f0 0f 96 c0 20 c8 3c 01 75 30 4c 89 c7 49 89 f7 e8 11 08 00 00 49 89 c6 48 8b 5c 24 18 48 89 d8 48 c1 e8 03 42 80 3c 38 00 <74> 08 48 89 df e8 03 e8 b0 00 4c 89 33 b0 01 eb 02 31 c0 48 83 c4
[  347.342605][    C0] RSP: 0018:ffffc900001173e0 EFLAGS: 00000246
[  347.342620][    C0] RAX: 1ffff92000022ea9 RBX: ffffc90000117548 RCX: 0000000000000001
[  347.342633][    C0] RDX: ffffc90000117548 RSI: dffffc0000000000 RDI: ffffc900001178f0
[  347.342647][    C0] RBP: 1ffff92000022ea1 R08: ffffc900001178f0 R09: 0000000000000000
[  347.342665][    C0] R10: ffffc90000117558 R11: fffff52000022ead R12: 1ffff92000022ea2
[  347.342679][    C0] R13: 1ffff92000022ea3 R14: ffff88802a91cb48 R15: dffffc0000000000
[  347.342693][    C0] FS:  0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000
[  347.342708][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  347.342720][    C0] CR2: 0000555582ab45c8 CR3: 000000000df38000 CR4: 00000000003526f0
[  347.342736][    C0] Call Trace:
[  347.342743][    C0]  <TASK>
[  347.342756][    C0]  unwind_next_frame+0x17c4/0x2390
[  347.342789][    C0]  ? unwind_next_frame+0xa5/0x2390
[  347.342810][    C0]  ? kmem_cache_free+0x18f/0x400
[  347.342835][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  347.342862][    C0]  arch_stack_walk+0x11c/0x150
[  347.342887][    C0]  ? skb_release_data+0x62d/0x7c0
[  347.342915][    C0]  stack_trace_save+0x9c/0xe0
[  347.342939][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  347.342969][    C0]  ? __lock_acquire+0xab9/0xd20
[  347.342987][    C0]  kasan_save_track+0x3e/0x80
[  347.343006][    C0]  ? kasan_save_track+0x3e/0x80
[  347.343023][    C0]  ? kasan_save_free_info+0x46/0x50
[  347.343049][    C0]  ? __kasan_slab_free+0x62/0x70
[  347.343069][    C0]  ? kmem_cache_free+0x18f/0x400
[  347.343121][    C0]  ? skb_release_data+0x62d/0x7c0
[  347.343144][    C0]  kasan_save_free_info+0x46/0x50
[  347.343171][    C0]  __kasan_slab_free+0x62/0x70
[  347.343191][    C0]  kmem_cache_free+0x18f/0x400
[  347.343216][    C0]  skb_release_data+0x62d/0x7c0
[  347.343245][    C0]  sk_skb_reason_drop+0x127/0x170
[  347.343269][    C0]  ieee80211_iface_work+0x997/0xfe0
[  347.343293][    C0]  cfg80211_wiphy_work+0x2dc/0x460
[  347.343314][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  347.343337][    C0]  process_scheduled_works+0xae1/0x17b0
[  347.343376][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  347.343414][    C0]  worker_thread+0x8a0/0xda0
[  347.343462][    C0]  kthread+0x70e/0x8a0
[  347.343492][    C0]  ? __pfx_worker_thread+0x10/0x10
[  347.343513][    C0]  ? __pfx_kthread+0x10/0x10
[  347.343539][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  347.343566][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  347.343592][    C0]  ? __pfx_kthread+0x10/0x10
[  347.343617][    C0]  ret_from_fork+0x3fc/0x770
[  347.343638][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  347.343660][    C0]  ? __switch_to_asm+0x39/0x70
[  347.343684][    C0]  ? __switch_to_asm+0x33/0x70
[  347.343709][    C0]  ? __pfx_kthread+0x10/0x10
[  347.343734][    C0]  ret_from_fork_asm+0x1a/0x30
[  347.343769][    C0]  </TASK>
[  347.344579][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  347.344600][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00187-gb640daa2822a #0 PREEMPT(full) 
[  347.344629][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  347.344644][   T31] Call Trace:
[  347.344654][   T31]  <TASK>
[  347.344665][   T31]  dump_stack_lvl+0x99/0x250
[  347.344704][   T31]  ? __asan_memcpy+0x40/0x70
[  347.344728][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  347.344759][   T31]  ? __pfx__printk+0x10/0x10
[  347.344810][   T31]  panic+0x2db/0x790
[  347.344843][   T31]  ? __pfx_panic+0x10/0x10
[  347.344871][   T31]  ? __pfx_delay_tsc+0x10/0x10
[  347.344901][   T31]  ? nmi_backtrace_stall_check+0x433/0x440
[  347.344936][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  347.344961][   T31]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  347.345004][   T31]  watchdog+0x102d/0x1030
[  347.345030][   T31]  ? watchdog+0x1de/0x1030
[  347.345065][   T31]  kthread+0x70e/0x8a0
[  347.345103][   T31]  ? __pfx_watchdog+0x10/0x10
[  347.345125][   T31]  ? __pfx_kthread+0x10/0x10
[  347.345162][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  347.345215][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  347.345252][   T31]  ? __pfx_kthread+0x10/0x10
[  347.345292][   T31]  ret_from_fork+0x3fc/0x770
[  347.345334][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  347.345370][   T31]  ? __switch_to_asm+0x39/0x70
[  347.345402][   T31]  ? __switch_to_asm+0x33/0x70
[  347.345432][   T31]  ? __pfx_kthread+0x10/0x10
[  347.345487][   T31]  ret_from_fork_asm+0x1a/0x30
[  347.345541][   T31]  </TASK>
[  347.821642][   T31] Kernel Offset: disabled
[  347.825989][   T31] Rebooting in 86400 seconds..