last executing test programs:

18.486162494s ago: executing program 2 (id=1121):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000180)={<r2=>r1, &(0x7f0000000080)='bridge0\x00', 0x501a00, &(0x7f00000000c0)={@_ha_fsid={[0x14b4, 0x400]}, {0x2, 0x9, 0x7fff, 0x5}}, 0xf6, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x1})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f"], 0x48)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000e40)={&(0x7f0000000d80), 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x34, 0x0, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x484}]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2d7}]}]}, 0x34}}, 0x20000001)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x2}, 0x94)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000)
connect$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa)
shutdown(r5, 0x1)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r3, <r8=>0xffffffffffffffff}, 0x4)
r9 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r10 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x2000000, 0x5, 0x6}, 0x10)
connect$inet6(r10, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @local, 0x4}, 0x1c)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000120001fbff"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x3a, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @alu={0x7, 0x0, 0xa, 0x7, 0x8, 0x18, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b80)='GPL\x00', 0x2, 0xd, &(0x7f0000000bc0)=""/13, 0x41000, 0x58, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000c00)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000c40)={0x2, 0x6, 0x0, 0x400}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[r3, r9, r2], 0x0, 0x10, 0xffff0001}, 0x94)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x48, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x12, 0x2, 0xf3d8, 0x0, 0x10, {[@mptcp=@ack={0x1e, 0x16, 0x8, 0x4, "a8c62540169d563df1167b340b68027cd8ac"}, @mptcp=@mp_join={0x1e, 0x3, 0x2}, @sack_perm={0x4, 0x2}, @sack={0x5, 0x16, [0x40, 0x200, 0x1ff, 0x1, 0x800]}]}}}}}}}}, 0x0)

18.237925998s ago: executing program 2 (id=1122):
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0xa}, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000600))
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100))
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket(0x840000000002, 0x3, 0xff)
setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000000)=0xd, 0x4)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x20001, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xf, 0x8, 0x2, 0x80000000, 0x6, 0xc, 0x33c, 0x6c7, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r13, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x70bd26, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1605, 0x2f10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x100}]}}}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x54}}, 0x4000)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000500)=ANY=[@ANYRESOCT=r1, @ANYBLOB="3414203efd260fc33ee4d9942c1eedf110f13471ce9b5b5f02d167fe21a836bcee5a155d63858bb1325a1f4940f3545684c649ecf8eb5f6ab97f60c7ea0e4ac257d989c514050e3057be1e60e9", @ANYBLOB="deadc087db7bebf9340a8fe9f53811a2f41f8f549096a52d3264fc4d968ac10b64df6f1c8d7a5ffea12d99592e4e551eb4cb08e668f082d924af0aadd64f4ae42537cbc11ea2c5af70f37c9bfd653a40c635fef82af346f5", @ANYRES32=r2, @ANYRES16=r1, @ANYRES64=r0, @ANYRES16=r1, @ANYRESDEC=r0, @ANYRES64=r2, @ANYRESHEX=r3], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xfffffcb6)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r14, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000140)=[0x1, 0x0], &(0x7f0000000700), 0x0, 0x100000}}, 0x40)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000100)=""/28, 0x1c, 0x0, &(0x7f0000000180)}}, 0x10)

18.127265044s ago: executing program 2 (id=1123):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
shutdown(r5, 0x0)
ioctl$int_in(r5, 0x5421, 0x0)
connect$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xf}, 0x6}, 0xa)
close(r5)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x20004185}, 0x4040800)
r7 = socket(0x10, 0x3, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000003400), r8)
sendmsg$NFC_CMD_START_POLL(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010025bd7000ffdbdf250600000008000d006000000008000100", @ANYRES32=0x0, @ANYBLOB="0500006200e70000806995e6877f0c3461bd8c74a95fc7ccdf9d46db722b0fe891f5eb5f64def4cf7bb66bf76425731559091f40cbb977fee51f0c992a83dec3ed23bc990d6e7e0f470a7f64aa8fa426726e9ffd540ce65f8d67552b9293224b95a762fb6493a30bf2fb432eaebf518ed83b96e3bd08096f0b106112838cd112d0fa17a3321f9785d4c51286e20ea4e94acce9fc835a9736ad31fd200e3bb6bab9acef029a155acfdf9f6866aec3b2110e59579dd9"], 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x802)
getsockname$packet(r0, 0x0, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x2}}}}]}, 0x44}}, 0x800)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040800}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtfilter={0x40, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x9}, {0x0, 0x9}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x200408c4)
socket(0x10, 0x3, 0x0)

18.126945359s ago: executing program 2 (id=1124):
r0 = socket$pppoe(0x18, 0x1, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3000008, 0x13, r0, 0x20000)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r2 = socket$rds(0x15, 0x5, 0x0)
unshare(0x8040480)
bind$rds(r2, &(0x7f0000000140)={0xa, 0x4e20, @loopback}, 0x10)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000005f00)={'wlan0\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES64=r7, @ANYRES64], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x28000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8)
sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd7000ffff00000200000008000300", @ANYRES32=r9, @ANYBLOB="0c0099000200000023000000080026003c14000008009f00"], 0x40}, 0x1, 0x0, 0x0, 0x9d26f8fcf5795660}, 0x4040000)
sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20180122}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="529f00012dbd7000ffdbdf250800004008000300", @ANYRES32=r9, @ANYBLOB="0c0099000100000024000000"], 0x28}, 0x1, 0x0, 0x0, 0x44010}, 0x40810)
r11 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
getsockopt$bt_rfcomm_RFCOMM_LM(r11, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
writev(r1, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2)

17.276950921s ago: executing program 1 (id=1131):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000006311220000000000851000000200000085000000b400000095000000000000000000000068284cba"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x70)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4)
r1 = socket$inet6(0xa, 0x6, 0x3)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000240)={0x1, {{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1}}}, 0x88)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="0232", 0x2}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x14}, 0x800, 0x0, 0x103, 0x1}, 0x20)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x8, <r6=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r5, &(0x7f00000000c0)="70f821a8703f1bceb07ebeb55eaf8ee78f97ccf86bb21a1cee4101f1ec5f5dc7468dfdb248a9bc4412b9c60363b6be256b149affeca17dadc85a1e1f10e2531896b46e83d5e7610c3cebf782cbbd814bcb49", &(0x7f0000000140)=""/137}, 0x20)
bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa)
connect$bt_rfcomm(r2, &(0x7f0000000080)={0x1f, @none, 0x4}, 0xa)

17.27154969s ago: executing program 2 (id=1132):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000400)={0xfffc, 0x0, 0x3, 0xffff}, 0x8)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet6(r1, &(0x7f0000000080)='w', 0x1, 0x94, &(0x7f0000000000)={0xa, 0x4, 0x3, @private1, 0x8}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x3c, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100))
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000), 0x9)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x101}], 0x1c)

17.197727509s ago: executing program 1 (id=1133):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
shutdown(r5, 0x0)
ioctl$int_in(r5, 0x5421, 0x0)
connect$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xf}, 0x6}, 0xa)
close(r5)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x20004185}, 0x4040800)
r7 = socket(0x10, 0x3, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000003400), r8)
sendmsg$NFC_CMD_START_POLL(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000003500)=ANY=[@ANYBLOB="26f00000", @ANYRES16=r9, @ANYBLOB="010025bd7000ffdbdf250600000008000d0060000000000003001a00000008000e00e8000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x8010)
getsockname$packet(r0, 0x0, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x2}}}}]}, 0x44}}, 0x800)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040800}, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r11=>0x0})
ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x2540229, r11})
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003600)=@delchain={0x3678, 0x65, 0x9, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x6, 0xf}, {0xb, 0xfffa}, {0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x57, 0x5, {0x2, 0x1}}, @filter_kind_options=@f_basic={{0xa}, {0x2c08, 0x2, [@TCA_BASIC_ACT={0x276c, 0x3, [@m_ife={0x134, 0x20, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}]}, {0xd1, 0x6, "86a135e041e1a5d5a997eca8c89e08131f843e2f575f575e0e7bef603634f02378179c2358353e37c0a4f98c5a64cfa3c4eb7b031d0bb6e5512ed2c764c440880445c56023b26e4f39f411506cf0356e0a9020c3a3bbee512519a92f1974ba35d8bbf89cbe662cf7205a3bbefb6a5f3f0427bac2c1efd037d5f94a32936d350776cb7a7ab581371087679c9a67a4649f377eaa5dda9db0b932750b633a54f3755719c4ce356f79319e6b69c8842f4291ac5372b78acdaf3bfc3badb127244a06ed88e16f3e31d1c919bd5231cb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_connmark={0x10c0, 0x18, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x0, 0x0, 0xa}, 0x100}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5014, 0x2, 0x1, 0x6, 0x2}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x7, 0x8, 0xb507, 0xcea}, 0xcfc5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc1, 0xbe68, 0x70000003, 0x5, 0x7}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x200, 0xb1, 0x8, 0x5, 0x6}, 0x6}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x10bc, 0x1f, 0x0, 0x0, {{0x8}, {0x94, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x80, 0x10000000, 0x7, 0xb}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x7}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_TYPE={0x6, 0x5, 0x100}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xfffeffff, 0x1ff, 0x6, 0x10000, 0xe6}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x1, 0x20000000, 0x5, 0x927c}, 0x1}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mpls={0x60, 0x9, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0xdada}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x6}]}, {0x1c, 0x6, "e626fb4f61b51ef16548cbc219c80e4d227131a9385268c3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ct={0xc0, 0x17, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}]}, {0x85, 0x6, "3e395819edd911a21891faef9348695837e1a369b8c5c8628a0baf3d756c185b88b98758870a7b23f7cd0fb26636fdb0cad70c3927838f4bfdc9981b673bb74143e0df3e136e7ce872f029c0ae91a3ab480af10ef48e75e975fdf8a1401c8952c7e8e7ec9aec8cc5ff4b409aa833a34f50dc83bcd47a99af36d546ce0da731c8c2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0x15c, 0x13, 0x0, 0x0, {{0x9}, {0x60, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x4}, @TCA_MPLS_PROTO={0x6, 0x4, 0x4}, @TCA_MPLS_PROTO={0x6, 0x4, 0x3}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x6, 0x10000000, 0x5fd, 0x3}, 0x3}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0x6482e}, @TCA_MPLS_LABEL={0x8, 0x5, 0x5a41a}]}, {0xd4, 0x6, "49d59f53a3a82eddd899c46813c51265b8f6b5c091380fa728ea74f26cecd577ec87e98e6e646a1048f67296aa94dddd0c7b9100d384aa9b437fbe62b9871b30dfcd6c76caa856186c26360a07f82c02f814a0cefd1436c6eb801aabf51439b4a9d62f8a1e3bd6f71edcbdb98342c0cd9dafabd0f54d4c78f859bfd1bc18a5c824961ced489ea72f1dd5f09f75fc2bbb83d299a8490d228f00181f43e7cfa867dc147850777e8cf8778265e647749b1db986a30d2ab154eb51ab86eb74002fe46d0bdfa6dcb653131b83f08b6b6a70c9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x17c, 0xf, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x80000000, 0x0, 0x0, 0x3, 0x4}, @rand_addr=0x64010100, @multicast1, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x10002, 0x1, 0xffffffff, 0x7fff}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x3, 0x1, 0x5, 0xcc}, @rand_addr=0x64010101, @empty, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10001, 0x5, 0x2, 0xc059, 0x8}, @multicast2, @dev={0xac, 0x14, 0x14, 0x2b}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x8c, 0x10000000, 0x3, 0x7f}, @remote, @multicast2, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x519517f8, 0x1, 0xffffffffffffffff, 0xff, 0x7}, @dev={0xac, 0x14, 0x14, 0x32}, @remote, 0x0, 0x1}}]}, {0x61, 0x6, "bc8bca4a2ec6ff19fee8ad56e158fb4a5668e2b45ae626da8604d229a5d8a64705a3a277c0a45cf2202fe760ab142f1a20b7841dee315e0d60cf5c896f43cbd488f72e7432d1e7c0aeda2fd4d9925fc161600f84fbb20109772cc64f34"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ctinfo={0xc0, 0x1a, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xffff}, @TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0x7f, 0x1, 0x4, 0xfffff232}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x200, 0x0, 0x6, 0x7fffffff}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x115}, @TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0x7, 0x2, 0x3b, 0x5}}]}, {0x3c, 0x6, "bb7e24c87efe13253c931587865f385297d280839970c81dca87a52b9efe37db63294fa46b98da67e3a0a9ef877b6c4b3695f7d8f7755c49"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x2}}, @TCA_BASIC_ACT={0x488, 0x3, [@m_mpls={0xdc, 0x20, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_LABEL={0x8, 0x5, 0x2f5b5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x0, 0x8, 0x8, 0x4}, 0x1}}]}, {0x81, 0x6, "2312539cc651a25cf03d2ca32f8f8265f9abb0ac197b7b12390978f008f9acf6b1738a84668a1387c163c80b22611259f63a98fecad66d95ea0e8ce517ba71569834b77d7aeaf2ab3bb7f8c5155a310ffc1eed7ba10a7b06b22a0220a1da98aa4993987632857503d396360d9b2d209393e310c22abb5fc4c16800069f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0x174, 0x20, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4959765c}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x4, 0x20000000, 0x5, 0x4}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffff, 0x5}}]}, {0xfe, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0x14c, 0x16, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x3}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x4, 0x6, 0xffffff7f, 0x9}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010102}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}]}, {0xd7, 0x6, "be1a836741b45a49f7f55b6f59a14a83075fee16908d759eec2022ce74f43931452fcab447c436ba3c0aab9a3126a87164b7ae0d9140af098ae639bfe4201f07c591dc95eb27cb982d2a3f22864287b75bb2643fe666f9752eafef0fdff5fec7c2025e322c708e11f6f425bbfabf2b5029066b4590ac6a3fe628d6c35068e46c0af21a3b3b2e2429ca05b3c51eac407d96cf025d4152ff190562ebc195e9fd99844bc4db2b5cbf75ddcf8194e0080614c0e6f3bfbcd1e36f5b07d0336a528408fc9a7318c0c217f47dbb01254d4edf049a9796"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_bpf={0xe8, 0x1a, 0x0, 0x0, {{0x8}, {0x68, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x3, 0xffffffffffffffff, 0x6, 0x6}}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0xed9, 0xd, 0x7, 0x1}, {0x800, 0x5, 0x10}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x7fffffff, 0x6, 0x1000, 0x9}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x4, 0x0, 0x704b2eec, 0x2800}}]}, {0x59, 0x6, "ae8431761278abe40da04a4186812e41c2c98d7ddafc442ae61e663e3ecaeb4f3fe3c08469c38ef9b7658577a461898984d7ade8dcdb542587993868cb57fabf86b072ec20872eacaace0a82f1c080ce59c47c6274"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xe, 0xfff3}}]}}, @filter_kind_options=@f_fw={{0x7}, {0xa28, 0x2, [@TCA_FW_ACT={0x208, 0x4, [@m_vlan={0xcc, 0x0, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x2, 0x5, 0xfffffff9, 0x7}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x512}]}, {0x61, 0x6, "1a45a771425d46370759007f9251b3bc0dd64f1b5575d8abb8f9f32485abac70da20c3de4c82f422fa18800978884b0a664477bf0a5f933cc5943b492c77e70134c29df3a29a044ee3b10624161a6a9f99ffbee8d805710266c9c39f9c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_mirred={0x138, 0x1c, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x2ca, 0x4, 0x4, 0x3}, 0x2, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x80, 0x8, 0x5, 0x6}, 0x3, r12}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x1ff, 0x20000000, 0xfffffffa, 0x1d}, 0x2, r1}}]}, {0xab, 0x6, "01b648cd8ca18fe10a73d826dfd8323e713ad3c746b475e7c82a69c085682401cf7d3c0c493cc9f319d4ddf5664e9c20ec629d36b59f0650006ff33921d79875b500a0dab7f0f55ecdf19a840c16007433d1c9506abf3438f60139bd91660cdb6ab44769bc230a06b40e75d937348e010590caade9634c2a13abcb78cc18b22150d38ddf0ab1c74034d224a4d69c7adf721bc1a20c6a2031549a13ee90fa7bb3fe25088e0ca8f4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_FW_POLICE={0x4}, @TCA_FW_POLICE={0x818, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffffffffffff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0xa00, 0x9, 0x10001, 0x5, 0x5, 0x1, 0xc, 0xcf, 0x8, 0x9, 0x0, 0x9, 0x2, 0x10000, 0x7fffffff, 0x2, 0x7ff, 0xc, 0x6, 0x2, 0x8, 0x401, 0x5, 0x80000000, 0xa42, 0x100, 0x1105, 0x6, 0x5, 0x5, 0x3, 0x6, 0x9, 0xff, 0x9a, 0x7, 0xfff, 0x400, 0x6, 0x6, 0x7ff, 0x0, 0x5, 0x3, 0x8, 0x5000, 0x6, 0x3, 0x4, 0xfffffff9, 0x8, 0x3, 0x536, 0x0, 0xfffffff9, 0xa1ba, 0x7, 0x6, 0x1ff, 0x4, 0x3, 0x26, 0x800, 0x4, 0x5, 0x1, 0x3, 0x2, 0x5, 0x1, 0x0, 0xfffff2cb, 0x8, 0x6, 0x2b0, 0x5b, 0xb, 0x1ff, 0x9, 0x5, 0xfff, 0x9, 0x7d, 0x8001, 0x2, 0xe6, 0x2e8, 0x6, 0x3, 0x3, 0x10001, 0x7, 0xfffffff0, 0xe, 0x8000, 0x7fff, 0x5, 0x0, 0xfffffffd, 0x6, 0x0, 0x0, 0x6, 0x90, 0x9, 0xa3c, 0xc, 0xb7a, 0x0, 0x80, 0x3, 0x0, 0x9, 0x81, 0x0, 0x1bf, 0xfc000000, 0xc, 0x9, 0x8, 0x2, 0x5, 0x7fff, 0x7f, 0x1, 0x8, 0xffffffff, 0x4, 0x1ff, 0x8, 0x200, 0x0, 0xfffffffd, 0x9ce, 0x6c58, 0x7, 0x0, 0x9, 0x7fdf, 0x80000001, 0x8, 0x1, 0x26, 0x8, 0xb, 0x86a2, 0x9, 0x5efa, 0x5e, 0x5, 0x8000, 0x1, 0x8, 0x1, 0x78000000, 0x10000, 0x72, 0x2, 0x0, 0x200, 0x6, 0x80000001, 0x0, 0x2, 0xfffffffe, 0x16001, 0x2, 0x5, 0x5, 0x3, 0x200, 0x1, 0x9, 0x5, 0x1, 0x8, 0xffff, 0x7fffffff, 0x0, 0x4, 0x3, 0x44, 0x200, 0x4, 0x0, 0xc0000000, 0x0, 0xd, 0x9, 0x1, 0x100, 0x2, 0x6, 0xfff, 0xa, 0x5, 0x9, 0x6, 0xffff, 0x7, 0xfffffffa, 0xe07, 0x7fff, 0x6, 0x10001, 0x4c4, 0x3, 0x1, 0x2, 0x2, 0x6, 0xfffffff9, 0x8, 0x8000, 0x3, 0x7, 0x3, 0xc, 0x6, 0x4, 0x3, 0x6e1c, 0x2, 0x5, 0x10, 0x3, 0x4, 0x1, 0xf6, 0x2, 0xc292, 0x5408, 0xfffffff7, 0x101, 0xcb0c, 0x5, 0x9, 0xffffffff, 0x7fff, 0x7, 0x6, 0x4, 0x9, 0x401, 0xf, 0x1e8, 0x101, 0x2, 0x81, 0x4, 0x833, 0x84, 0xffffffff, 0x20007fff, 0xfffffff7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x6, 0x7, 0x3, 0x1, 0x4, 0xff70, 0x5, 0x6, 0xd, 0x0, 0x5, 0x7, 0xfffffff8, 0x0, 0x7, 0x4, 0xc5dd, 0x5, 0x0, 0x101, 0x3, 0x7e79, 0x6, 0x7fffffff, 0xfffffffa, 0xffff00b4, 0x68568653, 0xcc9, 0x1, 0x9, 0x5, 0xa85, 0x4, 0x4, 0xf92, 0x7, 0x2, 0x1, 0x2baf, 0x2, 0x5, 0x7c, 0x2831, 0x7e3, 0x7, 0x2, 0x80000003, 0x0, 0xfffff146, 0x3, 0xb2, 0xac, 0x5, 0x0, 0x10000, 0x9a, 0x8, 0x2, 0x2, 0x9, 0x38, 0x2, 0xffffffff, 0x100, 0x6, 0xfffffff6, 0x80000000, 0xfffffff9, 0x8000, 0x4, 0x4, 0x5, 0xfffffff8, 0x8, 0x8, 0xffff, 0x6, 0xa, 0x5, 0x9, 0x2, 0xa91, 0xfffff30c, 0x4, 0x7, 0x5, 0xa0, 0x3ff, 0x401, 0x1, 0x6, 0x2, 0x8, 0x5, 0x10001, 0xd, 0x6, 0xffff1c22, 0x8, 0x5, 0x3, 0xfffffff9, 0x5, 0xe, 0x4, 0x8, 0x3, 0x5, 0xb, 0x6, 0x0, 0x8, 0x4, 0x7, 0x3, 0x1, 0x3, 0x6, 0xe53, 0x2, 0xfffffe01, 0x89e, 0x81, 0x400, 0xaaa18f6, 0x8, 0x1000, 0x7, 0x9, 0x2, 0x6, 0x8, 0x2, 0x0, 0x7, 0xb, 0x669d, 0xffffffff, 0xdb, 0x8, 0x0, 0x1ff, 0xb, 0x4, 0x7ff, 0x8, 0x2, 0x10001, 0x7fff, 0x91, 0x6, 0x3, 0x8, 0xfff, 0x0, 0x81, 0x1, 0xffffffff, 0xffff, 0x2, 0x8, 0xfffffe01, 0x1, 0x10000000, 0x5, 0x80000001, 0x9, 0x9, 0x86c, 0x4, 0xf, 0x91f6, 0x0, 0x1fe0000, 0xfffffc14, 0x0, 0x1, 0x81, 0x7, 0x3, 0x3, 0xfffff50b, 0x4, 0x8, 0x5, 0x4, 0x7fffffff, 0x7f, 0x8, 0xffffff82, 0x80000000, 0x8, 0x7, 0x9, 0x0, 0x2, 0x1ff800, 0x9, 0x3, 0x1, 0x6, 0x1b, 0x9, 0x7, 0x800, 0x401, 0x6, 0x3, 0x401, 0x8, 0x5, 0x8, 0x7, 0x1, 0x4, 0x5, 0x4, 0x7, 0x9, 0x4, 0xa, 0x1, 0xbaa2, 0x0, 0x5, 0x1, 0x4, 0x0, 0x4, 0x0, 0x0, 0x6b, 0x4, 0x200000, 0x10, 0x8, 0x9, 0x3, 0x4, 0x5, 0x4, 0xa, 0xe, 0x306, 0x87c, 0x0, 0x2, 0xffffffc0, 0x9d17, 0x9, 0x3, 0x10001, 0x70ddcc5b, 0x49fe, 0x10]}]}]}}]}, 0x3678}, 0x1, 0x0, 0x0, 0x810}, 0x200408c4)
socket(0x10, 0x3, 0x0)

17.196496999s ago: executing program 1 (id=1134):
unshare(0x400)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg(r1, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x114, 0x2}], 0x10}, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000280)={'filter\x00', 0x5a, "76da75bf1640d0bf3ca14a194af8801994e7b0788beffe2ca3e243a4191f00e731284a26c96f9c96c8a229e31b7c3a64a6e12e62fd9bc87f09c9da3e33f8d6e0488602ae433d007faa011a6b7303a40bbb2d3c03b9072bbed73e"}, &(0x7f00000003c0)=0x7e)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x11, @loopback, 0x15, 0x0, 'wlc\x00', 0x39, 0x6, 0x1f}, 0x2c)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x14, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10)
writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000640)=ANY=[@ANYRESHEX=0x0], 0x0, 0x41, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4624, 0x1, @remote, 0x8001}}, 0x0, 0x7e02}, 0x90)
r7 = socket$kcm(0x2, 0x3, 0x2)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0xb4, 0x12, 0xff05, 0x40000, 0x4, {0x0, 0x0, 0x4a00, 0x0, 0x5, 0x2000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip={{0xffffffffffffff48}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}, @IFLA_IPTUN_TTL={0x5, 0x4, 0xff}]}}}, @IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'wg0\x00'}, {0x14, 0x35, 'ip6gre0\x00'}, {0x14, 0x35, 'vlan1\x00'}, {0x14, 0x35, 'veth0_to_team\x00'}, {0x14, 0x35, 'vlan1\x00'}]}]}, 0xb4}}, 0x0)
sendmsg$inet(r7, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x3, 0x1, 0x7}]}}}], 0x18}, 0x200040c4)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x1, 0x5, 0x1, 0x8000, r3, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x6, @value=r10}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)

16.295124405s ago: executing program 0 (id=1137):
syz_emit_ethernet(0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000200000/0x3000)=nil, 0x3000, 0x4, 0x200000006c832, r0, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', <r5=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005"], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff808500000004"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r7}, 0xc)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001700)={0x5c, r4, 0x405, 0x70bd2f, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000401}, 0x400e8c0)
pselect6(0x81, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
ioctl$FICLONE(r1, 0x40049409, 0xffffffffffffffff)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4030000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48)
sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRES64, @ANYRES32, @ANYRESHEX=0x0, @ANYRES64=r0, @ANYRESOCT=r2], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r8 = socket(0x15, 0x5, 0x0)
getsockopt(r8, 0x200000000114, 0x2711, &(0x7f0000019580)=""/102397, &(0x7f0000000040)=0x18ffd)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
writev(r9, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0x1}, {&(0x7f00000197c0)}], 0x2)
setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000001440)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private0, 0x4e22, 0x0, 0x4e20, 0x0, 0x0, 0x80, 0x0, 0x3a}, {0x3, 0x7, 0x0, 0x5bd2, 0x1, 0x200, 0x8, 0x2}, {0x1, 0x0, 0x3ff, 0x7f}, 0x3, 0x0, 0x0, 0x0, 0x3, 0x1}, {{@in=@broadcast, 0x4d6, 0x32}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x3, 0x0, 0x7, 0x2, 0x401}}, 0xe8)
ppoll(&(0x7f0000000380)=[{r9}], 0x1, &(0x7f0000000400), 0x0, 0x0)
getsockopt$EBT_SO_GET_INFO(r8, 0x0, 0x80, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x0, [0x3, 0x6, 0x2, 0x3, 0x8, 0xba8]}, &(0x7f00000000c0)=0x78)

16.286759789s ago: executing program 1 (id=1138):
socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 32)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32)
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000180)={<r1=>r0, &(0x7f0000000080)='bridge0\x00', 0x501a00, &(0x7f00000000c0)={@_ha_fsid={[0x14b4, 0x400]}, {0x2, 0x9, 0x7fff}}, 0xf6, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x1}) (async, rerun: 32)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f"], 0x48) (async, rerun: 32)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x2, 0x10, 0x0, 0x15}, 0x94) (async)
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async, rerun: 32)
getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, 0x0) (async, rerun: 32)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000)
connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa)
shutdown(r4, 0x1) (async, rerun: 64)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (rerun: 64)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1b, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000010000000000000009e68e93ac0454082405ddef1aff0018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000d3000000bf090000000000005509010000000000950000000000000018440000030000000000000000000000850000002700000495000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff8500000006000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x4d}, 0x94) (async, rerun: 64)
r9 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r9, 0x0, 0x0) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r2, <r10=>0xffffffffffffffff}, 0x4)
r11 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) (async, rerun: 32)
r12 = socket(0x10, 0x3, 0x0) (rerun: 32)
setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x2000000, 0x5, 0x6}, 0x10) (async)
sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000120001fbff"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x3a, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000d000000850000000600000018350000050000000000000000000000a7871800fcffffffb7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="00000000000000000000850000040000000000000000693ed52500000000002020207b1af8ff00000000bfa1000000000000070100000000ffffb702006b8b891122ce3a6058d3889b3a0008000000b703000010000000850100000600000018110000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018630000040000000000000008000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000b80)='GPL\x00', 0x2, 0xd, &(0x7f0000000bc0)=""/13, 0x41000, 0x58, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000c00)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000c40)={0x2, 0x6, 0x0, 0x400}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r2, r11, r1], 0x0, 0x10, 0xffff0001}, 0x94)

16.285607606s ago: executing program 2 (id=1139):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a31000000000500010007000000080009400000000588"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48084)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$XFS_IOC_GETBMAPX(r1, 0xc0205838, &(0x7f0000000200)={0x5, 0x2, 0x0, 0x2, 0x80000000, 0x10})
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="a81400002a00070127bd700000000000037c00000c00028005007c8028000000040007000c"], 0x14a8}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
pipe(&(0x7f00000045c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000880)='m', 0x1}], 0x1}, 0x5)
setsockopt$sock_attach_bpf(r4, 0x1, 0x10, &(0x7f0000000100), 0x4)
setsockopt$sock_attach_bpf(r4, 0x1, 0xa, &(0x7f0000000180), 0x4)
recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
ioctl$XFS_IOC_FSBULKSTAT(0xffffffffffffffff, 0xc0205865, &(0x7f0000000740)={&(0x7f0000000000)=0x4, 0x1, &(0x7f0000000040), &(0x7f0000000700)})
ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(0xffffffffffffffff, 0x40109441, &(0x7f0000000780)={0xfffffffffffffffe, 0x2, 0x8})
r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r6, &(0x7f00000007c0)={0x1f, @none, 0xe}, 0xa)
r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000540)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r7, @ANYBLOB="000427bd7000ffdbdf257f00000008000300", @ANYRES32=0x0, @ANYBLOB="060048001a000000180034007d77b8ab25fad11005421ec74297c2f68a037f35b9ddc661aa14005500750417135da9581399962b17f6cb325f11003400e353be496d74a4cb5c105a5ada0000000a00f500ffffffffffff000014005500532e53f3f6f6707e6e03795a732f52160600486b9a6534c8fc440fbc5aa194aa384267f9c7f6aa79660ec25958d5ba04"], 0x8c}, 0x1, 0x0, 0x0, 0x4000040}, 0x80)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={@multicast1, 0x1, 0x0, 0x30, 0x0, [{@loopback}, {@multicast1}, {@empty}]}})
vmsplice(r3, &(0x7f00000001c0)=[{&(0x7f0000000280)="afc356bf9b09ff372dada82178d12dd14c1ac862", 0x14}], 0x1, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
listen(r8, 0x2)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_int(r9, 0x6, 0x4, 0x0, &(0x7f0000000140))
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r10, &(0x7f0000000800)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
setsockopt$inet6_tcp_int(r11, 0x6, 0x11, &(0x7f0000000140), 0x4)

16.208143737s ago: executing program 1 (id=1140):
socket$igmp6(0xa, 0x3, 0x2)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000180)={r0, &(0x7f0000000080)='bridge0\x00', 0x501a00, &(0x7f00000000c0)={@_ha_fsid={[0x14b2, 0x400]}, {0x2, 0x9, 0x7fff, 0x5}}, 0xffffff7f, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x1})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f"], 0x48)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000080180000001800000004000000020000000000000c02000000459b279493263b368c00000000000000"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000000000000001e700009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
r3 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000000240)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x2d, 0x20040040)
connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000", @ANYRES16=r8], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000)
connect$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa)
shutdown(r6, 0x1)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000002c0)=ANY=[@ANYRES64=r5], 0x48)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.throttle.io_serviced\x00', 0x0, 0x0)
r10 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x2000000, 0x5, 0x6}, 0x10)

16.096898616s ago: executing program 0 (id=1141):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x410, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x340, 0x340, 0x340, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@ipv6header={{0x28}, {0x21, 0xf1}}, @common=@eui64={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x2}, {0x2, 0x5, 0x4}, 0x10001}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xc, 0x10, 0x10}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0xb0a46bc1e190a35d, 0xffffffff, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff000000], 'bond_slave_1\x00', 'syzkaller0\x00', {}, {0xff}, 0x2d995abb75a95a5f, 0xfd, 0x1, 0x11}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@hbh={{0x48}, {0x27, 0x5, 0x1, [0xf, 0x0, 0xb, 0x5, 0x8, 0x7, 0x8, 0x8001, 0x3, 0x198, 0x6800, 0x2, 0x1, 0x2, 0x5, 0x3], 0xd}}, @common=@ah={{0x30}, {[0x4d3, 0x4d5], 0x1, 0x7, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x3}, 0x0, 0x1, 0x0, 0xa}, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100))

15.948203666s ago: executing program 0 (id=1142):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={r2, 0xa1}, 0x8) (async, rerun: 64)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000080)={r2, 0x3}, &(0x7f00000000c0)=0x8) (async, rerun: 64)
r4 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}, 0x1, 0x0, 0x0, 0xc4}, 0x4)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x88c0}, 0x40) (async)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async, rerun: 32)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x1c, &(0x7f0000000280)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x94) (async, rerun: 64)
ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c9, &(0x7f0000000100)) (rerun: 64)

15.777825132s ago: executing program 0 (id=1143):
r0 = socket$igmp6(0xa, 0x3, 0x2) (async)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000180)={<r2=>r1, &(0x7f0000000080)='bridge0\x00', 0x501a00, &(0x7f00000000c0)={@_ha_fsid={[0x14b4, 0x400]}, {0x2, 0x9, 0x7fff, 0x5}}, 0xf6, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x1})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f"], 0x48)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000023000c02000000000000000000000d0000000000005f00a7e068fc651123528f3d193a27c9d7a7aedd7b1b362bc509a264ac097504f713930ef48a9b6ecfb0a9f6bcbbf9a1e6ce58ad611db93b2c5093fad4fd4cfeeac9f362bb7208df2277692bf10500000000000000cae7ecc979205493dab6746cb76027efa54fef8886f483380d33d4bb1e5e0722816d4755e7fe3a14f777b8752ef5068bc0919f5b"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x11, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000000000000000000001000100950000003dc1c1ef9bef66857ecd2fff36d6c80000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) (async)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r6, 0x6, 0xd, &(0x7f0000000000)="164a", 0x2) (async)
setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYRESDEC=r3], 0x10) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async)
getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, 0x0) (async, rerun: 32)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) (async)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async)
sendmsg$NFT_BATCH(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000)
connect$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa)
shutdown(r5, 0x1) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r3, <r9=>0xffffffffffffffff}, 0x4) (async)
r10 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
getpeername(0xffffffffffffffff, &(0x7f0000000d80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000e00)=0x80) (async, rerun: 32)
r11 = socket(0x10, 0x3, 0x0) (rerun: 32)
setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x2000000, 0x5, 0x6}, 0x10)
sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000120001fbff"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500026d9b4802000083000000bf090000000000005509010000000000950000000000bdb3761fe29b2c36cc280000bf91000000000000b7020000010000008500000095000000b70000000000b1a4352117983aa8d7ec5870ca9ad131b646623f7653473af460e329e698b9404187e0445adfddc9ad3b4104b55340fc6c646c01a2888b65221d83356f05c42cf94bfaa47c0cafe4ee"], &(0x7f0000000200)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41100}, 0x94) (async, rerun: 32)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x3a, &(0x7f0000000f00)=ANY=[@ANYBLOB="1800000000a8b70000000000030000001811000057559c67203891435d9eb3d62f82f053383a532ff6afd5197f6fa2c5151a0f33f30074477ba0c21c5d4e36bd115c8faf0e0b2e91e3c9224070adff759fc39af99d44aa7fa98961384aef82c7a8a7b85f324dc4d6e27f75a0a6df3270db1d26ce4a9ceb2513e4b8e7feadab63133f245fbe4a6e923da8d089faa991f9bbed4f6446fce7d398168da4a7a365f99241a358f9ed40c4cef304554dd2a6addab6675a69ce490cd541d0e56ceec8960446617a7965f56d2269ca95f018f56147c99bd00b6a9b2c3ce73bc831316d47d5cd6d7de01186c41cce506929c15a000cfc114ebe22ec00d6d9a78a525bd8e748bca5793e52cc19a07cfe4bc825ff39a1e06228c3", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000d000000850000000600000018350000050000000000000000000000a7871800fcffffffb7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018630000040000000000000008000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000b80)='GPL\x00', 0x2, 0xd, &(0x7f0000000bc0)=""/13, 0x41000, 0x58, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000c00)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000c40)={0x2, 0x6, 0x0, 0x400}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[r3, r10, r2], 0x0, 0x10, 0xffff0001}, 0x94) (rerun: 32)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async, rerun: 32)
syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6026843500480601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="2002f3d8907800101e160840a8c6254002040205160000004000000200000001ff0000000100000800"/60], 0x0) (rerun: 32)

15.777191725s ago: executing program 0 (id=1144):
ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000200)=0x8)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f)
close(0x4)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r3)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0x0, @mcast1}}, 0x0, 0x0, 0x24, 0x0, "2c004a46dc15b929250d4ac91f4f1fb55e5961fe20187d3f548a717f53c4c278903462d20a1536d3e0dbebbed8a4146dfa98c60d4175e09fb5855304905f35f5789457049d1eb4f48635594016249d12"}, 0xd8)
syz_emit_ethernet(0x0, 0x0, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_ro(r5, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000040000000000000000400000018140000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000ffffffc3850000005a000000bca90000000000003509010007000000ce000000000000003e9800000000000026080000000000008500000007000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100))
ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c9, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

15.607805078s ago: executing program 0 (id=1145):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000046000701fefffffffcdbdf25047c0000080001"], 0x1c}}, 0xc000)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000006c0)='\x00', 0x1}], 0x1}, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
sendmsg$rds(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000009c0)=""/4090, 0xffa}], 0x1}, 0x0)
r3 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1e)
connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x4, @multicast1}}, 0x1e)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x24, 0x25, 0x301, 0x670bd24, 0x25dfdbfc, {0x15}, [@typed={0xe, 0x15e, 0x0, 0x0, @binary="e2d76924a0362c4575ca"}]}, 0x24}, 0x1, 0x0, 0x0, 0x40008840}, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f00000000c0)=0x1000)
ioctl$XFS_IOC_SCRUB_METADATA(r3, 0xc040583c, &(0x7f0000000100)={0x19, 0x40, 0x6, 0xb, 0x6})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r6)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$int_in(r7, 0x5421, &(0x7f0000000440)=0x6)
connect$bt_rfcomm(r7, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa)
close(r7)

15.27745057s ago: executing program 1 (id=1146):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0xb0, 0xb6, &(0x7f0000000000)="a1eceb8a9e261c7f9426f6ca02ccdd1056d05cbdc5957bfd1baffd1949a761cf1e2049eaaf2113774659e773d71bf457028789b73026f9a9ee3ee6d14da02f1de6ef47c12d03f44b71003dea70d8fac658d7acaf3af75583228d270c5bb91fa717936c319ecbe8ce4de450680d1e228d5bed11843ce5fad846144d22cc1682af4f487a8cd3a6aa08b04f24313dad0d0beb55588a28254ead1f601e75903f4c497816da2b4c6ea584a1300165ec5bdc19", &(0x7f00000000c0)=""/182, 0x8, 0x0, 0x86, 0xb6, &(0x7f0000000180)="374da159bfc28006cad9bb5ab73d2b00201dabd64ac2beaf3239539abbf7a5bf8828ea03cd5e6c0bbb4ef7a61910d6bfe717740f1bee2d87ec5b3db6e09082b2af57c9592a3171e50aee3222d0c8a548a5a2104ed67c5c8c0bcf34338b729a3dead576940d15fcecc50003596a198cb71a65daf848a18c794670a661db89274f04d50536417b", &(0x7f0000000240)="69ef80f68ae0c9cc9fb01771b496bd0fef13ac91e1da4f95be75f48bf9ec94b3bc81fff51d625419d0b8745dd9c9045986e6ffcbe38e60e6572b6f56fbcefb4073d288aeea4dfa8cbefb7c49815fb82d17d88a84c10e42afbadc29350a2c7942a224d8fb3ea36fff6693b06521a811c6f7ad495af68b375a0e463a59f1f2b9e8f62e36488ce373b3ce79a3fea878cbf1863abcd59bc63d44e96422bb3fb76f277d69f2595e26c18808038f14a369b75d27cf98a797ae", 0x2, 0x0, 0x9bf0}, 0x50)
ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x100}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x40}, 0x1, 0x0, 0x0, 0x100}, 0x40)
r2 = socket$inet_sctp(0x2, 0x0, 0x84)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000500)={<r3=>0x0, 0x3, 0x9, [0x9, 0xfff6, 0x1, 0xff55, 0x3, 0x9, 0x0, 0xffff, 0xf343]}, &(0x7f0000000540)=0x1a)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000580)={r3, @in={{0x2, 0x4e24, @multicast1}}, [0x400000, 0x3, 0x1, 0x3bf, 0x7, 0x9, 0x100000000, 0x9039, 0x4, 0x3, 0x5, 0x6, 0x100, 0x8001, 0x400]}, &(0x7f0000000680)=0x100)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0), r4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x50880}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0x100, 0x0, 0x1, 0x181, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x200}]}, @CTA_ID={0x8}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_TUPLE_REPLY={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x4000}, @CTA_SEQ_ADJ_REPLY={0x4c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x20}]}, 0x100}, 0x1, 0x0, 0x0, 0x8011}, 0x20008094)
syz_genetlink_get_family_id$wireguard(&(0x7f00000008c0), r0)
sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x70, r5, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x801)
syz_genetlink_get_family_id$nbd(&(0x7f0000000a40), r4)
r7 = socket$alg(0x26, 0x5, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r7, 0x80489439, &(0x7f0000000a80))
socket$rds(0x15, 0x5, 0x0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000bc0)={&(0x7f0000000b00), 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, r1, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x94)
ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000c00)={0x0, 0x2930})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)=@newtclass={0x2c, 0x28, 0x2, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x8}, {0xf, 0xfffc}, {0x0, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x60, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc044}, 0x0)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d80), r0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x28, r9, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004800}, 0x8048801)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ec0), r0)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000010c0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f00)={0x180, r10, 0x0, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}}]}, 0x180}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r11 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r4)
sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r11, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000845}, 0x20000001)
ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000001280)={0x0, {0x2, 0x4e20, @empty}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e22, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001240)='wg2\x00', 0x7fff, 0x7, 0xe})

1.027018144s ago: executing program 32 (id=1139):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a31000000000500010007000000080009400000000588"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48084)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$XFS_IOC_GETBMAPX(r1, 0xc0205838, &(0x7f0000000200)={0x5, 0x2, 0x0, 0x2, 0x80000000, 0x10})
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="a81400002a00070127bd700000000000037c00000c00028005007c8028000000040007000c"], 0x14a8}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
pipe(&(0x7f00000045c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000880)='m', 0x1}], 0x1}, 0x5)
setsockopt$sock_attach_bpf(r4, 0x1, 0x10, &(0x7f0000000100), 0x4)
setsockopt$sock_attach_bpf(r4, 0x1, 0xa, &(0x7f0000000180), 0x4)
recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
ioctl$XFS_IOC_FSBULKSTAT(0xffffffffffffffff, 0xc0205865, &(0x7f0000000740)={&(0x7f0000000000)=0x4, 0x1, &(0x7f0000000040), &(0x7f0000000700)})
ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(0xffffffffffffffff, 0x40109441, &(0x7f0000000780)={0xfffffffffffffffe, 0x2, 0x8})
r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r6, &(0x7f00000007c0)={0x1f, @none, 0xe}, 0xa)
r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000540)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r7, @ANYBLOB="000427bd7000ffdbdf257f00000008000300", @ANYRES32=0x0, @ANYBLOB="060048001a000000180034007d77b8ab25fad11005421ec74297c2f68a037f35b9ddc661aa14005500750417135da9581399962b17f6cb325f11003400e353be496d74a4cb5c105a5ada0000000a00f500ffffffffffff000014005500532e53f3f6f6707e6e03795a732f52160600486b9a6534c8fc440fbc5aa194aa384267f9c7f6aa79660ec25958d5ba04"], 0x8c}, 0x1, 0x0, 0x0, 0x4000040}, 0x80)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={@multicast1, 0x1, 0x0, 0x30, 0x0, [{@loopback}, {@multicast1}, {@empty}]}})
vmsplice(r3, &(0x7f00000001c0)=[{&(0x7f0000000280)="afc356bf9b09ff372dada82178d12dd14c1ac862", 0x14}], 0x1, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
listen(r8, 0x2)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_int(r9, 0x6, 0x4, 0x0, &(0x7f0000000140))
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r10, &(0x7f0000000800)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
setsockopt$inet6_tcp_int(r11, 0x6, 0x11, &(0x7f0000000140), 0x4)

14.753037ms ago: executing program 33 (id=1145):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000046000701fefffffffcdbdf25047c0000080001"], 0x1c}}, 0xc000)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000006c0)='\x00', 0x1}], 0x1}, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
sendmsg$rds(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000009c0)=""/4090, 0xffa}], 0x1}, 0x0)
r3 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1e)
connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x4, @multicast1}}, 0x1e)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x24, 0x25, 0x301, 0x670bd24, 0x25dfdbfc, {0x15}, [@typed={0xe, 0x15e, 0x0, 0x0, @binary="e2d76924a0362c4575ca"}]}, 0x24}, 0x1, 0x0, 0x0, 0x40008840}, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f00000000c0)=0x1000)
ioctl$XFS_IOC_SCRUB_METADATA(r3, 0xc040583c, &(0x7f0000000100)={0x19, 0x40, 0x6, 0xb, 0x6})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r6)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$int_in(r7, 0x5421, &(0x7f0000000440)=0x6)
connect$bt_rfcomm(r7, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa)
close(r7)

0s ago: executing program 34 (id=1146):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0xb0, 0xb6, &(0x7f0000000000)="a1eceb8a9e261c7f9426f6ca02ccdd1056d05cbdc5957bfd1baffd1949a761cf1e2049eaaf2113774659e773d71bf457028789b73026f9a9ee3ee6d14da02f1de6ef47c12d03f44b71003dea70d8fac658d7acaf3af75583228d270c5bb91fa717936c319ecbe8ce4de450680d1e228d5bed11843ce5fad846144d22cc1682af4f487a8cd3a6aa08b04f24313dad0d0beb55588a28254ead1f601e75903f4c497816da2b4c6ea584a1300165ec5bdc19", &(0x7f00000000c0)=""/182, 0x8, 0x0, 0x86, 0xb6, &(0x7f0000000180)="374da159bfc28006cad9bb5ab73d2b00201dabd64ac2beaf3239539abbf7a5bf8828ea03cd5e6c0bbb4ef7a61910d6bfe717740f1bee2d87ec5b3db6e09082b2af57c9592a3171e50aee3222d0c8a548a5a2104ed67c5c8c0bcf34338b729a3dead576940d15fcecc50003596a198cb71a65daf848a18c794670a661db89274f04d50536417b", &(0x7f0000000240)="69ef80f68ae0c9cc9fb01771b496bd0fef13ac91e1da4f95be75f48bf9ec94b3bc81fff51d625419d0b8745dd9c9045986e6ffcbe38e60e6572b6f56fbcefb4073d288aeea4dfa8cbefb7c49815fb82d17d88a84c10e42afbadc29350a2c7942a224d8fb3ea36fff6693b06521a811c6f7ad495af68b375a0e463a59f1f2b9e8f62e36488ce373b3ce79a3fea878cbf1863abcd59bc63d44e96422bb3fb76f277d69f2595e26c18808038f14a369b75d27cf98a797ae", 0x2, 0x0, 0x9bf0}, 0x50)
ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x100}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x40}, 0x1, 0x0, 0x0, 0x100}, 0x40)
r2 = socket$inet_sctp(0x2, 0x0, 0x84)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000500)={<r3=>0x0, 0x3, 0x9, [0x9, 0xfff6, 0x1, 0xff55, 0x3, 0x9, 0x0, 0xffff, 0xf343]}, &(0x7f0000000540)=0x1a)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000580)={r3, @in={{0x2, 0x4e24, @multicast1}}, [0x400000, 0x3, 0x1, 0x3bf, 0x7, 0x9, 0x100000000, 0x9039, 0x4, 0x3, 0x5, 0x6, 0x100, 0x8001, 0x400]}, &(0x7f0000000680)=0x100)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0), r4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x50880}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0x100, 0x0, 0x1, 0x181, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x200}]}, @CTA_ID={0x8}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_TUPLE_REPLY={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x4000}, @CTA_SEQ_ADJ_REPLY={0x4c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x20}]}, 0x100}, 0x1, 0x0, 0x0, 0x8011}, 0x20008094)
syz_genetlink_get_family_id$wireguard(&(0x7f00000008c0), r0)
sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x70, r5, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x801)
syz_genetlink_get_family_id$nbd(&(0x7f0000000a40), r4)
r7 = socket$alg(0x26, 0x5, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r7, 0x80489439, &(0x7f0000000a80))
socket$rds(0x15, 0x5, 0x0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000bc0)={&(0x7f0000000b00), 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, r1, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x94)
ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000c00)={0x0, 0x2930})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)=@newtclass={0x2c, 0x28, 0x2, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x8}, {0xf, 0xfffc}, {0x0, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x60, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc044}, 0x0)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d80), r0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x28, r9, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004800}, 0x8048801)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ec0), r0)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000010c0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f00)={0x180, r10, 0x0, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}}]}, 0x180}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r11 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r4)
sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r11, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000845}, 0x20000001)
ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000001280)={0x0, {0x2, 0x4e20, @empty}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e22, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001240)='wg2\x00', 0x7fff, 0x7, 0xe})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:3719' (ED25519) to the list of known hosts.
syzkaller login: [   55.871817][ T5595] cgroup: Unknown subsys name 'net'
[   55.961849][ T5595] cgroup: Unknown subsys name 'cpuset'
[   55.965748][ T5595] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.362630][ T5595] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   61.470317][ T5002] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   61.473818][ T5002] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   61.477752][ T5002] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   61.482541][ T5002] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   61.485272][ T5002] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.532540][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.536173][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   61.538795][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   61.543974][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   61.546993][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   61.577657][ T5002] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   61.583162][ T5002] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   61.587733][ T5002] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   61.592938][ T5002] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   61.595711][ T5002] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.013777][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.016673][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.019130][ T5612] bridge_slave_0: entered allmulticast mode
[   62.021802][ T5612] bridge_slave_0: entered promiscuous mode
[   62.038717][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.041247][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.043470][ T5612] bridge_slave_1: entered allmulticast mode
[   62.046109][ T5612] bridge_slave_1: entered promiscuous mode
[   62.080454][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.083039][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.085590][ T5618] bridge_slave_0: entered allmulticast mode
[   62.088353][ T5618] bridge_slave_0: entered promiscuous mode
[   62.096141][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.107122][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.111057][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.113495][ T5618] bridge_slave_1: entered allmulticast mode
[   62.116621][ T5618] bridge_slave_1: entered promiscuous mode
[   62.121138][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.165430][ T5612] team0: Port device team_slave_0 added
[   62.168689][ T5612] team0: Port device team_slave_1 added
[   62.176610][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.188732][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.214121][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.216492][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.225637][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.231189][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.233420][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.241707][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.251488][ T5618] team0: Port device team_slave_0 added
[   62.260270][ T5618] team0: Port device team_slave_1 added
[   62.296125][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.298495][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.307385][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.315662][ T5612] hsr_slave_0: entered promiscuous mode
[   62.318249][ T5612] hsr_slave_1: entered promiscuous mode
[   62.328375][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.331130][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.339221][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.428261][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.431133][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.433470][ T5623] bridge_slave_0: entered allmulticast mode
[   62.436153][ T5623] bridge_slave_0: entered promiscuous mode
[   62.445221][ T5618] hsr_slave_0: entered promiscuous mode
[   62.448961][ T5618] hsr_slave_1: entered promiscuous mode
[   62.452530][ T5618] debugfs: 'hsr0' already exists in 'hsr'
[   62.455044][ T5618] Cannot create hsr debugfs directory
[   62.463120][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.466392][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.469121][ T5623] bridge_slave_1: entered allmulticast mode
[   62.472305][ T5623] bridge_slave_1: entered promiscuous mode
[   62.516719][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.522426][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.561931][ T5623] team0: Port device team_slave_0 added
[   62.565489][ T5623] team0: Port device team_slave_1 added
[   62.616190][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.619391][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.629183][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.646118][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.649851][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.661300][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.754479][ T5623] hsr_slave_0: entered promiscuous mode
[   62.757582][ T5623] hsr_slave_1: entered promiscuous mode
[   62.760742][ T5623] debugfs: 'hsr0' already exists in 'hsr'
[   62.763086][ T5623] Cannot create hsr debugfs directory
[   62.786157][ T5612] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   62.797633][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   62.800788][ T5612] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   62.807929][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   62.822854][ T5612] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   62.828481][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   62.853374][ T5612] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   62.858501][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   62.967830][ T5618] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   62.977203][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   62.980513][ T5618] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   62.985770][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   62.993411][ T5618] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   62.999619][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   63.002385][ T5618] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.006125][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   63.077952][ T5623] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.083092][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   63.089693][ T5623] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.094434][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   63.097639][ T5623] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.103883][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   63.107578][ T5623] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.113720][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   63.132952][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.165291][ T5612] 8021q: adding VLAN 0 to HW filter on device team0
[   63.179751][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.182642][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.202561][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.205234][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.241243][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.283661][ T5618] 8021q: adding VLAN 0 to HW filter on device team0
[   63.294074][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.296357][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.306855][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.319549][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.322285][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.347250][ T5623] 8021q: adding VLAN 0 to HW filter on device team0
[   63.357907][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.360252][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.372951][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.375220][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.520563][   T54] Bluetooth: hci0: command tx timeout
[   63.565184][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.599186][   T54] Bluetooth: hci1: command tx timeout
[   63.615182][ T5612] veth0_vlan: entered promiscuous mode
[   63.625359][ T5612] veth1_vlan: entered promiscuous mode
[   63.673528][ T5612] veth0_macvtap: entered promiscuous mode
[   63.687394][ T5612] veth1_macvtap: entered promiscuous mode
[   63.691089][   T54] Bluetooth: hci2: command tx timeout
[   63.715641][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.727907][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.745452][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.758044][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.782060][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.792842][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.808686][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.915065][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.930367][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.938653][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.954349][ T5618] veth0_vlan: entered promiscuous mode
[   63.981254][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.984972][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.984981][ T5618] veth1_vlan: entered promiscuous mode
[   64.053419][ T5623] veth0_vlan: entered promiscuous mode
[   64.060048][ T5618] veth0_macvtap: entered promiscuous mode
[   64.063538][ T5612] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   64.078648][ T5618] veth1_macvtap: entered promiscuous mode
[   64.088806][ T5623] veth1_vlan: entered promiscuous mode
[   64.112356][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.142598][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.163036][ T5623] veth0_macvtap: entered promiscuous mode
[   64.172730][ T5675] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.179749][ T5675] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.191527][ T5623] veth1_macvtap: entered promiscuous mode
[   64.196024][ T5675] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.213220][ T5675] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.228051][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.243898][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.267829][ T5675] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.283074][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.296785][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.300744][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.329237][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.333243][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.372727][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.376837][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.423945][ T3059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.441785][ T3059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.497818][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.513739][ T5729] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5'.
[   64.515906][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.688528][ T5741] pim6reg1: entered promiscuous mode
[   64.690824][ T5741] pim6reg1: entered allmulticast mode
[   64.695020][ T5741] netlink: 'syz.2.7': attribute type 1 has an invalid length.
[   64.698544][ T5741] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   64.732592][ T5742] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1'.
[   64.803529][ T5744] netlink: 'syz.0.1': attribute type 1 has an invalid length.
[   64.857067][ T5745] sctp: [Deprecated]: syz.0.1 (pid 5745) Use of struct sctp_assoc_value in delayed_ack socket option.
[   64.857067][ T5745] Use struct sctp_sack_info instead
[   65.163122][ T5739] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.204289][ T5747] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8'.
[   65.272292][ T5739] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.383381][ T5757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11'.
[   65.599978][ T5002] Bluetooth: hci0: command tx timeout
[   65.679366][ T5002] Bluetooth: hci1: command tx timeout
[   65.760063][ T5002] Bluetooth: hci2: command tx timeout
[   65.932655][ T5767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'.
[   66.293253][ T5777] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16'.
[   66.326615][ T5779] --map-set only usable from mangle table
[   66.373673][ T5739] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.521731][ T5739] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.621354][ T5675] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.635237][ T5675] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.667305][ T5675] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.678044][ T5675] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.721095][ T5791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22'.
[   66.834242][ T5803] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[   66.841189][ T5803] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[   66.847379][ T5803] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[   66.854052][ T5803] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   66.861320][ T5803] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   66.943505][ T5806] xt_hashlimit: size too large, truncated to 1048576
[   67.375778][  T157] smbdirect: ib_dev[syz2] removed
[   67.495109][ T5812] netlink: 32 bytes leftover after parsing attributes in process `syz.0.26'.
[   67.682369][ T5002] Bluetooth: hci0: command tx timeout
[   67.711917][ T5816] netlink: 24 bytes leftover after parsing attributes in process `syz.2.28'.
[   67.729459][ T5816] netlink: 'syz.2.28': attribute type 1 has an invalid length.
[   67.736198][ T5816] netlink: 72 bytes leftover after parsing attributes in process `syz.2.28'.
[   67.742837][ T5816] netlink: 'syz.2.28': attribute type 1 has an invalid length.
[   67.789430][ T5002] Bluetooth: hci1: command tx timeout
[   67.839168][ T5002] Bluetooth: hci2: command 0x040f tx timeout
[   67.945166][ T5823] Zero length message leads to an empty skb
[   68.046092][ T5831] syz.1.33 uses obsolete (PF_INET,SOCK_PACKET)
[   68.214651][ T5851] xt_hashlimit: size too large, truncated to 1048576
[   69.196957][ T5869] syzkaller0: entered promiscuous mode
[   69.200351][ T5869] syzkaller0: entered allmulticast mode
[   69.683210][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.686319][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.736703][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.745758][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.759007][ T5002] Bluetooth: hci0: command tx timeout
[   69.840627][ T5002] Bluetooth: hci1: command tx timeout
[   69.857140][ T5675] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.860153][ T5675] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.865794][ T5675] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.869495][ T5675] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.916930][ T5882] __nla_validate_parse: 8 callbacks suppressed
[   69.916963][ T5882] netlink: 64 bytes leftover after parsing attributes in process `syz.1.46'.
[   69.921389][ T5002] Bluetooth: hci2: command 0x040f tx timeout
[   69.976101][ T5885] netlink: 104 bytes leftover after parsing attributes in process `syz.1.47'.
[   70.235989][ T5890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.48'.
[   70.251426][ T5890] xt_hashlimit: size too large, truncated to 1048576
[   70.775468][ T5902] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.51'.
[   70.824367][ T5902] netlink: 116 bytes leftover after parsing attributes in process `syz.2.51'.
[   71.179681][ T5910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.54'.
[   71.192598][ T5910] xt_hashlimit: size too large, truncated to 1048576
[   71.645579][ T5927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.59'.
[   71.675962][ T5927] xt_hashlimit: size too large, truncated to 1048576
[   71.782612][ T5929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.60'.
[   71.787101][ T5929] xt_hashlimit: size too large, truncated to 1048576
[   71.999395][ T5002] Bluetooth: hci2: command 0x040f tx timeout
[   72.023690][ T5935] netlink: 32 bytes leftover after parsing attributes in process `syz.1.61'.
[   72.058796][ T5935] bond1: option ad_select: invalid value (34)
[   72.063764][ T5935] bond1 (unregistering): Released all slaves
[   72.280340][ T5957] netlink: 32 bytes leftover after parsing attributes in process `syz.1.66'.
[   72.563587][ T5962] xt_hashlimit: size too large, truncated to 1048576
[   72.755277][ T5993] ieee802154 phy0 wpan0: encryption failed: -22
[   72.816100][ T6002] netlink: 'syz.1.77': attribute type 1 has an invalid length.
[   72.854044][ T6002] 8021q: adding VLAN 0 to HW filter on device bond1
[   72.858644][ T6002] bond1: option tlb_dynamic_lb: unable to set because the bond device is up
[   73.213507][ T6015] xt_hl: Unknown TTL match mode: 237
[   73.815742][ T6048] xt_hashlimit: size too large, truncated to 1048576
[   74.078980][   T54] Bluetooth: hci2: command 0x040f tx timeout
[   74.362269][ T6058] IPVS: Scheduler module ip_vs_sip not found
[   74.807821][ T6065] openvswitch: netlink: Flow key attr not present in new flow.
[   74.961775][ T6074] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0
[   75.368227][ T6095] netlink: 'syz.0.97': attribute type 1 has an invalid length.
[   75.372524][ T6095] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.408635][ T6093] __nla_validate_parse: 12 callbacks suppressed
[   75.408648][ T6093] netlink: 80 bytes leftover after parsing attributes in process `syz.2.99'.
[   75.496283][ T6098] netlink: 120 bytes leftover after parsing attributes in process `syz.2.100'.
[   75.842128][ T6103] netlink: 'syz.1.101': attribute type 1 has an invalid length.
[   75.846605][ T6103] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.170246][   T54] Bluetooth: hci2: command 0x040f tx timeout
[   76.426388][ T6118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.105'.
[   76.442200][ T6112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.103'.
[   76.452105][ T6112] xt_hashlimit: size too large, truncated to 1048576
[   76.573838][ T6118] netlink: 20 bytes leftover after parsing attributes in process `syz.2.105'.
[   76.582771][ T6118] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[   76.613476][ T6118] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.615984][ T6118] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.694026][ T6130] netlink: 32 bytes leftover after parsing attributes in process `syz.0.108'.
[   76.706319][ T6118] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.712433][ T6118] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.790729][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.796438][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.800224][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.803930][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.882058][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[   76.885342][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[   77.120155][ T6150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.112'.
[   77.268211][ T6161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.115'.
[   77.384941][ T6170] netlink: 32 bytes leftover after parsing attributes in process `syz.0.117'.
[   77.623436][ T6188] tipc: Failed to remove unknown binding: 66,0,0/0:1429467750/1429467752
[   77.627473][ T6188] tipc: Failed to remove unknown binding: 66,0,0/0:1429467750/1429467751
[   77.667659][ T6194] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.124'.
[   77.725432][ T6195] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0
[   77.786559][ T6192] xt_hashlimit: size too large, truncated to 1048576
[   78.239085][ T5002] Bluetooth: hci2: command 0x040f tx timeout
[   78.781760][ T6242] openvswitch: netlink: Tunnel attr 3 has unexpected len 4 expected 1
[   79.365499][ T6289] openvswitch: netlink: Duplicate key (type 21).
[   79.870974][ T6297] xt_ipcomp: unknown flags 1D
[   79.896798][  T799] cfg80211: failed to load regulatory.db
[   80.160822][ T6314] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   80.244534][ T6322] netlink: 'syz.2.154': attribute type 1 has an invalid length.
[   80.248183][ T6322] sctp: [Deprecated]: syz.2.154 (pid 6322) Use of struct sctp_assoc_value in delayed_ack socket option.
[   80.248183][ T6322] Use struct sctp_sack_info instead
[   80.319647][ T5002] Bluetooth: hci2: command 0x040f tx timeout
[   80.521449][ T6330] __nla_validate_parse: 5 callbacks suppressed
[   80.521465][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.157'.
[   80.531072][ T6330] xt_hashlimit: size too large, truncated to 1048576
[   80.692876][ T6334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.158'.
[   80.886933][ T6334] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.889502][ T6334] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.985523][ T6334] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.994600][ T6334] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.074936][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.078706][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.082722][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.086345][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.173941][ T6364] netlink: 32 bytes leftover after parsing attributes in process `syz.0.160'.
[   81.296389][ T6372] netlink: 64 bytes leftover after parsing attributes in process `syz.0.163'.
[   81.319127][ T6376] netlink: 32 bytes leftover after parsing attributes in process `syz.2.165'.
[   81.595647][ T6387] netlink: 64 bytes leftover after parsing attributes in process `syz.2.167'.
[   81.605779][ T6390] netlink: 'syz.1.168': attribute type 1 has an invalid length.
[   81.608718][ T6390] netlink: 228 bytes leftover after parsing attributes in process `syz.1.168'.
[   81.793030][ T6396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.169'.
[   81.807584][ T6396] xt_hashlimit: size too large, truncated to 1048576
[   82.054172][ T6402] netlink: 32 bytes leftover after parsing attributes in process `syz.1.171'.
[   82.087868][ T6404] netlink: 'syz.1.172': attribute type 1 has an invalid length.
[   82.092537][ T6405] netlink: 32 bytes leftover after parsing attributes in process `syz.1.172'.
[   82.223320][ T6420] ipt_REJECT: ECHOREPLY no longer supported.
[   83.829164][ T6470] xt_hashlimit: size too large, truncated to 1048576
[   84.162937][ T6478] netlink: 'syz.1.195': attribute type 1 has an invalid length.
[   84.165827][ T6478] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.923384][ T6490] rdma_op ffff88810632c9f0 conn xmit_rdma 0000000000000000
[   84.926920][ T6490] syzkaller0: entered promiscuous mode
[   84.929000][ T6490] syzkaller0: entered allmulticast mode
[   85.125238][ T6498] netlink: 'syz.0.200': attribute type 1 has an invalid length.
[   85.128530][ T6498] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.138105][ T6499] netlink: 'syz.1.201': attribute type 1 has an invalid length.
[   85.141515][ T6499] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.163415][ T6519] netlink: 'syz.1.206': attribute type 1 has an invalid length.
[   86.175423][ T6519] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.209467][ T6523] __nla_validate_parse: 6 callbacks suppressed
[   86.209479][ T6523] netlink: 32 bytes leftover after parsing attributes in process `syz.0.209'.
[   86.334292][ T6535] netlink: 32 bytes leftover after parsing attributes in process `syz.0.212'.
[   86.336995][ T6537] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   86.425361][ T6542] nft_compat: unsupported protocol 0
[   86.609982][ T6544] netlink: 32 bytes leftover after parsing attributes in process `syz.2.214'.
[   86.845600][ T6549] netlink: zone id is out of range
[   86.847820][ T6549] netlink: zone id is out of range
[   86.850534][ T6549] netlink: zone id is out of range
[   86.852991][ T6549] netlink: zone id is out of range
[   86.855085][ T6549] netlink: zone id is out of range
[   86.857621][ T6549] netlink: zone id is out of range
[   86.861317][ T6549] netlink: zone id is out of range
[   86.863965][ T6549] netlink: zone id is out of range
[   86.866198][ T6549] netlink: zone id is out of range
[   86.894728][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.215'.
[   86.906478][ T6549] xt_hashlimit: size too large, truncated to 1048576
[   87.125439][ T6553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.216'.
[   87.141693][ T6553] xt_hashlimit: size too large, truncated to 1048576
[   87.267881][ T6560] netlink: 32 bytes leftover after parsing attributes in process `syz.0.218'.
[   87.351681][ T6562] netlink: 32 bytes leftover after parsing attributes in process `syz.0.219'.
[   87.391235][ T6566] netlink: 32 bytes leftover after parsing attributes in process `syz.0.221'.
[   87.467577][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.220'.
[   87.470914][   T24] IPVS: starting estimator thread 0...
[   87.476767][ T6564] xt_hashlimit: size too large, truncated to 1048576
[   87.558935][ T6570] IPVS: using max 85 ests per chain, 204000 per kthread
[   87.601840][ T6574] netlink: 32 bytes leftover after parsing attributes in process `syz.1.223'.
[   87.633215][ T6576] warning: `syz.1.224' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   87.729532][ T6582] tunl0: entered promiscuous mode
[   87.732810][ T6582] netlink: 'syz.0.226': attribute type 4 has an invalid length.
[   87.743990][ T6576] xt_hashlimit: size too large, truncated to 1048576
[   88.213558][ T6596] xt_hashlimit: size too large, truncated to 1048576
[   88.619319][ T6621] --map-set only usable from mangle table
[   88.653078][ T6619] xt_hashlimit: size too large, truncated to 1048576
[   88.901784][ T6629] xt_hashlimit: size too large, truncated to 1048576
[   89.441799][ T6657] Bluetooth: MGMT ver 1.23
[   89.784979][ T6678] raw_sendmsg: syz.0.255 forgot to set AF_INET. Fix it!
[   89.868544][ T6676] xt_hashlimit: size too large, truncated to 1048576
[   90.218163][ T6708] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   90.223454][ T6708] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   90.457016][ T6719] xt_hashlimit: size too large, truncated to 1048576
[   90.684114][ T6731] xt_hashlimit: size too large, truncated to 1048576
[   90.749088][ T6733] xt_hashlimit: size too large, truncated to 1048576
[   90.960626][ T6751] trusted_key: syz.0.274 sent an empty control message without MSG_MORE.
[   91.478705][ T6779] __nla_validate_parse: 28 callbacks suppressed
[   91.478724][ T6779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.283'.
[   91.498338][ T6779] xt_hashlimit: size too large, truncated to 1048576
[   91.557186][ T6785] netlink: 'syz.2.284': attribute type 9 has an invalid length.
[   91.584137][ T6785] syzkaller1: entered promiscuous mode
[   91.588974][ T6785] syzkaller1: entered allmulticast mode
[   91.786394][ T6788] netlink: 'syz.0.285': attribute type 1 has an invalid length.
[   91.789324][ T6788] net_ratelimit: 4 callbacks suppressed
[   91.789353][ T6788] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.897137][ T6793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.287'.
[   91.903688][ T6793] xt_hashlimit: size too large, truncated to 1048576
[   92.196259][ T6802] xt_hashlimit: size too large, truncated to 1048576
[   92.213370][ T6803] xt_hashlimit: size too large, truncated to 1048576
[   92.425547][ T6813] netlink: 'syz.1.292': attribute type 1 has an invalid length.
[   92.428415][ T6813] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.644638][ T6819] netlink: 'syz.0.293': attribute type 1 has an invalid length.
[   92.647844][ T6819] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.788559][ T6821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.295'.
[   92.884485][ T6832] netlink: 120 bytes leftover after parsing attributes in process `syz.2.297'.
[   93.389441][ T6841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.299'.
[   93.425328][ T6844] netlink: 32 bytes leftover after parsing attributes in process `syz.0.300'.
[   93.428135][ T6845] netlink: 32 bytes leftover after parsing attributes in process `syz.0.300'.
[   93.583385][ T6854] netlink: 16 bytes leftover after parsing attributes in process `syz.0.304'.
[   93.588088][ T6854] netlink: 'syz.0.304': attribute type 1 has an invalid length.
[   93.594258][ T6854] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.660019][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.305'.
[   93.669612][ T6856] xt_hashlimit: size too large, truncated to 1048576
[   93.852342][ T6860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.306'.
[   93.971081][ T6867] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[   94.843185][ T6912] syzkaller0: entered promiscuous mode
[   94.849130][ T6912] syzkaller0: entered allmulticast mode
[   94.984808][ T6918] hashlimit_mt_check_common: 1 callbacks suppressed
[   94.984842][ T6918] xt_hashlimit: size too large, truncated to 1048576
[   95.731392][ T6999] syzkaller0: entered promiscuous mode
[   95.734406][ T6999] syzkaller0: entered allmulticast mode
[   95.951875][ T7007] netlink: 'syz.2.329': attribute type 1 has an invalid length.
[   95.955102][ T7007] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.966929][ T7007] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   95.972053][ T7007] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   96.571829][ T7034] __nla_validate_parse: 9 callbacks suppressed
[   96.571849][ T7034] netlink: 32 bytes leftover after parsing attributes in process `syz.0.336'.
[   96.844284][ T7041] netlink: 64 bytes leftover after parsing attributes in process `syz.2.339'.
[   97.218171][ T7047] ipt_rpfilter: unknown options
[   97.348042][ T7054] netlink: 32 bytes leftover after parsing attributes in process `syz.1.343'.
[   97.351073][ T7055] netlink: 32 bytes leftover after parsing attributes in process `syz.1.343'.
[   97.514889][ T7063] netlink: 'syz.1.346': attribute type 178 has an invalid length.
[   97.608476][ T7075] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.350'.
[   97.783907][ T7082] netlink: 'syz.2.353': attribute type 10 has an invalid length.
[   97.786404][ T7082] netlink: 40 bytes leftover after parsing attributes in process `syz.2.353'.
[   97.794170][ T7082] dummy0: entered promiscuous mode
[   97.799409][ T7082] dummy0: entered allmulticast mode
[   97.804197][ T7082] bridge0: port 3(dummy0) entered blocking state
[   97.807025][ T7082] bridge0: port 3(dummy0) entered disabled state
[   97.881494][ T7080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.352'.
[   97.950984][ T7082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.353'.
[   97.960338][ T7082] xt_hashlimit: size too large, truncated to 1048576
[   98.397069][ T7095] netlink: 120 bytes leftover after parsing attributes in process `syz.0.357'.
[  102.355452][ T7158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.372'.
[  102.365814][ T7162] xt_hashlimit: size too large, truncated to 1048576
[  102.397967][ T7158] xt_hashlimit: size too large, truncated to 1048576
[  102.642157][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.377'.
[  102.646963][ T7181] xt_hashlimit: size too large, truncated to 1048576
[  102.798537][ T7192] netlink: 32 bytes leftover after parsing attributes in process `syz.1.380'.
[  102.839197][ T7194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.381'.
[  102.871181][ T7196] netlink: 72 bytes leftover after parsing attributes in process `syz.1.382'.
[  102.928678][ T7201] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma?
[  102.960155][ T7200] netlink: 'syz.0.384': attribute type 1 has an invalid length.
[  102.962887][ T7200] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.993530][ T7201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  103.021383][ T7205] netlink: 32 bytes leftover after parsing attributes in process `syz.2.385'.
[  103.448991][ T5002] Bluetooth: hci2: command 0x040f tx timeout
[  103.702216][ T7215] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  103.813872][ T7232] netlink: 'syz.0.393': attribute type 61 has an invalid length.
[  103.954142][ T7241] netlink: 32 bytes leftover after parsing attributes in process `syz.2.396'.
[  103.963028][ T7241] netlink: 44 bytes leftover after parsing attributes in process `syz.2.396'.
[  103.965877][ T7241] netlink: 44 bytes leftover after parsing attributes in process `syz.2.396'.
[  104.014173][ T7248] netlink: 76 bytes leftover after parsing attributes in process `syz.2.399'.
[  104.722147][ T7305] netlink: 'syz.2.415': attribute type 1 has an invalid length.
[  104.724731][ T7305] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.082774][ T7311] xt_hashlimit: size too large, truncated to 1048576
[  105.210872][ T7315] Driver unsupported XDP return value 0 on prog  (id 69) dev N/A, expect packet loss!
[  106.006085][ T7362] xt_hashlimit: size too large, truncated to 1048576
[  106.219254][ T7378] xt_hashlimit: size too large, truncated to 1048576
[  106.235323][ T7379] xt_hashlimit: size too large, truncated to 1048576
[  117.821415][ T7419] __nla_validate_parse: 15 callbacks suppressed
[  117.821435][ T7419] netlink: 120 bytes leftover after parsing attributes in process `syz.2.445'.
[  117.971945][ T7437] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.001771][   T54] Bluetooth: hci2: link tx timeout
[  118.006873][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  118.052043][ T7432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.447'.
[  118.059047][ T7433] xt_hashlimit: size too large, truncated to 1048576
[  118.786739][ T7447] netlink: 72 bytes leftover after parsing attributes in process `syz.2.453'.
[  118.798921][ T7447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.453'.
[  118.807906][ T7449] x_tables: duplicate underflow at hook 2
[  118.829403][ T7449] netlink: 36 bytes leftover after parsing attributes in process `syz.0.452'.
[  118.844669][ T7449] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  118.853885][ T7449] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  118.876772][ T7456] netlink: 'syz.2.455': attribute type 5 has an invalid length.
[  119.033884][ T7465] xt_hashlimit: size too large, truncated to 1048576
[  119.238321][ T7476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.458'.
[  119.244857][ T7476] xt_hashlimit: size too large, truncated to 1048576
[  119.279649][ T7478] netlink: 20 bytes leftover after parsing attributes in process `syz.0.459'.
[  119.406356][ T5675] nci: nci_ntf_packet: unsupported ntf opcode 0xf00
[  119.459988][ T7481] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  119.599433][   T54] Bluetooth: hci2: command 0x040f tx timeout
[  119.916743][ T7506] tipc: MTU too low for tipc bearer
[  119.948410][ T7509] netlink: 32 bytes leftover after parsing attributes in process `syz.2.468'.
[  121.237653][ T7548] netlink: 32 bytes leftover after parsing attributes in process `syz.2.479'.
[  121.247239][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.479'.
[  121.480196][ T7557] netlink: 'syz.1.481': attribute type 1 has an invalid length.
[  121.489228][ T7557] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.588994][ T7567] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  121.692592][   T54] Bluetooth: hci2: command 0x040f tx timeout
[  121.815881][ T7574] 8021q: VLANs not supported on ip_vti0
[  122.074653][ T7600] tipc: Can't bind to reserved service type 2
[  122.197057][ T7602] xt_hashlimit: size too large, truncated to 1048576
[  122.465054][ T7611] xt_hashlimit: size too large, truncated to 1048576
[  122.902187][ T7643] __nla_validate_parse: 9 callbacks suppressed
[  122.902206][ T7643] netlink: 32 bytes leftover after parsing attributes in process `syz.2.505'.
[  123.154037][ T7648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.506'.
[  123.158612][ T7648] xt_hashlimit: size too large, truncated to 1048576
[  123.370055][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.507'.
[  123.375459][ T7652] xt_hashlimit: size too large, truncated to 1048576
[  123.567392][ T7662] netlink: 32 bytes leftover after parsing attributes in process `syz.2.509'.
[  123.664948][ T7670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.513'.
[  123.705735][ T7672] netlink: 'syz.2.512': attribute type 1 has an invalid length.
[  123.709839][ T7672] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.759144][   T54] Bluetooth: hci2: command 0x040f tx timeout
[  124.602667][ T7687] netlink: 68 bytes leftover after parsing attributes in process `syz.1.519'.
[  124.606103][ T7687] netlink: 32 bytes leftover after parsing attributes in process `syz.1.519'.
[  124.945009][ T7700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.523'.
[  124.967782][ T7700] bond2: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  124.972702][ T7700] bond2 (unregistering): Released all slaves
[  124.997384][ T7703] netlink: 'syz.0.523': attribute type 1 has an invalid length.
[  125.000210][ T7703] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.323285][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.526'.
[  125.701710][ T7735] netlink: 36 bytes leftover after parsing attributes in process `syz.1.534'.
[  125.817832][ T7745] netlink: 'syz.1.537': attribute type 1 has an invalid length.
[  125.820890][ T7745] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.027764][ T7749] netlink: 'syz.2.538': attribute type 1 has an invalid length.
[  126.031431][ T7749] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.421098][ T7762] xt_hashlimit: size too large, truncated to 1048576
[  126.769142][ T7777] netlink: 'syz.0.545': attribute type 1 has an invalid length.
[  126.771910][ T7777] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.933239][ T7794] netlink: 'syz.1.550': attribute type 4 has an invalid length.
[  127.102990][ T7800] netlink: 'syz.1.551': attribute type 1 has an invalid length.
[  127.107830][ T7800] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.018752][ T7811] netlink: 'syz.1.556': attribute type 1 has an invalid length.
[  128.023999][ T7811] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.411672][ T7820] __nla_validate_parse: 6 callbacks suppressed
[  128.411687][ T7820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.558'.
[  128.420176][ T7820] xt_hashlimit: size too large, truncated to 1048576
[  128.441448][ T7823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.559'.
[  128.662746][ T7829] netlink: 16 bytes leftover after parsing attributes in process `syz.2.561'.
[  128.666407][ T7829] netlink: 288 bytes leftover after parsing attributes in process `syz.2.561'.
[  128.885996][ T7833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.562'.
[  128.899239][ T7833] xt_hashlimit: size too large, truncated to 1048576
[  129.080448][ T7859] netlink: 32 bytes leftover after parsing attributes in process `syz.0.569'.
[  129.117933][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.570'.
[  129.119730][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.567'.
[  129.130663][ T7851] xt_hashlimit: size too large, truncated to 1048576
[  129.516730][ T7876] netlink: 32 bytes leftover after parsing attributes in process `syz.1.575'.
[  129.521808][ T7876] netlink: 'syz.1.575': attribute type 1 has an invalid length.
[  129.524464][ T7876] netlink: 216 bytes leftover after parsing attributes in process `syz.1.575'.
[  129.772893][ T7893] netlink: 'syz.2.581': attribute type 12 has an invalid length.
[  129.775609][ T7893] netlink: 'syz.2.581': attribute type 13 has an invalid length.
[  129.820954][ T7896] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  129.846599][ T6356] IPVS: starting estimator thread 0...
[  129.938927][ T7898] IPVS: using max 85 ests per chain, 204000 per kthread
[  130.058561][ T7900] xt_hashlimit: size too large, truncated to 1048576
[  133.384386][ T7955] xt_hashlimit: size too large, truncated to 1048576
[  133.568557][ T7964] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  133.723026][ T7942] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  133.732537][ T7967] __nla_validate_parse: 11 callbacks suppressed
[  133.732553][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.601'.
[  133.836066][ T7975] netlink: 'syz.1.603': attribute type 8 has an invalid length.
[  133.839672][ T7975] netlink: 'syz.1.603': attribute type 9 has an invalid length.
[  133.983637][ T7975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.603'.
[  134.061968][ T7982] nbd0: detected capacity change from 0 to 63
[  134.093583][   T56] block nbd0: Receive control failed (result -104)
[  134.131142][ T7991] netlink: 'syz.0.608': attribute type 12 has an invalid length.
[  134.217510][ T7995] netlink: 'syz.0.609': attribute type 1 has an invalid length.
[  134.226351][ T7995] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  134.265876][ T7999] netlink: 32 bytes leftover after parsing attributes in process `syz.0.610'.
[  134.497639][ T8028] block nbd1: Unsupported socket: should be TCP or UNIX.
[  134.527876][ T8026] netlink: 'syz.0.618': attribute type 1 has an invalid length.
[  134.531768][ T8026] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  134.543484][ T8033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.620'.
[  134.644474][ T8037] netlink: 32 bytes leftover after parsing attributes in process `syz.2.621'.
[  135.279155][   T54] Bluetooth: hci2: command 0x040f tx timeout
[  135.461334][ T8053] netlink: 'syz.1.626': attribute type 1 has an invalid length.
[  135.463752][ T8053] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.943459][ T8066] netlink: 'syz.2.629': attribute type 1 has an invalid length.
[  135.950230][ T8066] xt_hashlimit: size too large, truncated to 1048576
[  136.075232][ T8070] netlink: 36 bytes leftover after parsing attributes in process `syz.2.630'.
[  136.081993][ T8070] netlink: 16 bytes leftover after parsing attributes in process `syz.2.630'.
[  136.164431][ T8075] netlink: 32 bytes leftover after parsing attributes in process `syz.2.631'.
[  136.397689][ T8088] xt_connbytes: Forcing CT accounting to be enabled
[  136.401026][ T8088] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  136.470186][ T8100] netlink: 20 bytes leftover after parsing attributes in process `syz.2.638'.
[  136.516724][ T8094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.637'.
[  136.542406][ T8094] xt_hashlimit: size too large, truncated to 1048576
[  136.592222][ T8108] IPVS: Error connecting to the multicast addr
[  136.904752][ T8118] netlink: 'syz.2.643': attribute type 1 has an invalid length.
[  136.910368][ T8118] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.089467][ T8124] xt_hashlimit: size too large, truncated to 1048576
[  138.321217][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  138.323267][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  138.485753][ T8158] nbd: must specify a device to reconfigure
[  139.426159][ T8178] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  139.429742][ T8178] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  139.433696][ T8178] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  139.579092][ T8182] __nla_validate_parse: 2 callbacks suppressed
[  139.579106][ T8182] netlink: 120 bytes leftover after parsing attributes in process `syz.2.661'.
[  139.585020][ T8182] netlink: 120 bytes leftover after parsing attributes in process `syz.2.661'.
[  139.587997][ T8182] netlink: 120 bytes leftover after parsing attributes in process `syz.2.661'.
[  139.848116][ T8192] netlink: 76 bytes leftover after parsing attributes in process `syz.2.663'.
[  140.392569][ T8205] netlink: 'syz.1.668': attribute type 11 has an invalid length.
[  140.437101][ T8205] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.443898][ T8205] 8021q: adding VLAN 0 to HW filter on device team0
[  140.451785][ T8205] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.496700][ T8205] batman_adv: batadv0: Interface activated: batadv_slave_0
[  140.503745][ T8205] batman_adv: batadv0: Interface activated: batadv_slave_1
[  140.514037][ T8205] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  140.518228][ T8205] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  140.526586][ T8205] veth1_vlan: left promiscuous mode
[  140.531173][ T8205] veth0_vlan: left promiscuous mode
[  140.543794][ T8205] veth0_vlan: entered promiscuous mode
[  140.556727][ T8205] veth1_vlan: entered promiscuous mode
[  140.565138][ T8205] veth1_macvtap: left promiscuous mode
[  140.570354][ T8205] veth0_macvtap: left promiscuous mode
[  140.573488][ T8205] veth0_macvtap: entered promiscuous mode
[  140.576715][ T8205] veth1_macvtap: entered promiscuous mode
[  140.589316][ T8205] 8021q: adding VLAN 0 to HW filter on device eth0
[  140.593622][ T8205] 8021q: adding VLAN 0 to HW filter on device eth1
[  140.597943][ T8205] 8021q: adding VLAN 0 to HW filter on device eth2
[  140.602906][ T8205] 8021q: adding VLAN 0 to HW filter on device eth3
[  140.606618][ T8205] 8021q: adding VLAN 0 to HW filter on device bond1
[  140.621760][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.624716][ T1112] bridge0: port 1(bridge_slave_0) entered listening state
[  140.630811][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.633757][ T1112] bridge0: port 2(bridge_slave_1) entered listening state
[  140.676713][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.682895][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.737642][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.740804][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.837189][ T8213] netlink: 32 bytes leftover after parsing attributes in process `syz.2.670'.
[  150.752695][ T8215] netlink: 32 bytes leftover after parsing attributes in process `syz.2.673'.
[  150.772929][ T8218] netlink: 24 bytes leftover after parsing attributes in process `syz.1.672'.
[  151.040083][ T8238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.676'.
[  151.072392][ T8238] xt_hashlimit: size too large, truncated to 1048576
[  151.153947][ T8246] netlink: 120 bytes leftover after parsing attributes in process `syz.2.679'.
[  151.503487][ T8258] netlink: 120 bytes leftover after parsing attributes in process `syz.0.682'.
[  152.582506][ T8274] xt_hashlimit: size too large, truncated to 1048576
[  152.864608][ T8288] netlink: 32 bytes leftover after parsing attributes in process `syz.0.691'.
[  152.870000][ T8289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.690'.
[  152.870036][ T8288] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  153.003861][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.690'.
[  153.003861][ T8289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.690'.
[  153.434393][ T8318] netlink: 120 bytes leftover after parsing attributes in process `syz.1.697'.
[  153.787039][ T8332] hma(kX: entered promiscuous mode
[  153.888291][ T8326] xt_hashlimit: size too large, truncated to 1048576
[  154.068047][ T8335] xt_hashlimit: size too large, truncated to 1048576
[  154.369255][ T8342] xt_hashlimit: size too large, truncated to 1048576
[  154.534825][ T8350] netlink: 'syz.2.705': attribute type 1 has an invalid length.
[  154.904782][ T8366] xt_hashlimit: size too large, truncated to 1048576
[  155.244607][ T8384] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0
[  155.251325][ T8385] syzkaller1: tun_chr_ioctl cmd 2147767506
[  155.434889][ T8390] xt_hashlimit: size too large, truncated to 1048576
[  156.071657][ T8410] __nla_validate_parse: 8 callbacks suppressed
[  156.071677][ T8410] netlink: 64 bytes leftover after parsing attributes in process `syz.2.720'.
[  156.085374][ T8410] netlink: 44 bytes leftover after parsing attributes in process `syz.2.720'.
[  156.215131][ T8423] netlink: 32 bytes leftover after parsing attributes in process `syz.1.725'.
[  156.223963][ T8423] netlink: 24 bytes leftover after parsing attributes in process `syz.1.725'.
[  156.338767][ T8435] netlink: 32 bytes leftover after parsing attributes in process `syz.2.729'.
[  156.441343][ T8431] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  156.451588][ T8431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.727'.
[  156.455957][ T8431] xt_hashlimit: size too large, truncated to 1048576
[  156.735665][ T8452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.733'.
[  156.740639][ T8452] xt_hashlimit: size too large, truncated to 1048576
[  157.012068][ T8459] netlink: 32 bytes leftover after parsing attributes in process `syz.1.735'.
[  157.043785][ T8459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.735'.
[  157.047054][ T8459] netlink: 32 bytes leftover after parsing attributes in process `syz.1.735'.
[  157.756458][ T8481] xt_hashlimit: size too large, truncated to 1048576
[  158.395948][ T8507] xt_hashlimit: size too large, truncated to 1048576
[  158.471415][ T8510] xt_hashlimit: overflow, try lower: 18446744073709551615/32
[  159.917563][ T8564] xt_hashlimit: size too large, truncated to 1048576
[  160.202073][ T8580] xt_hashlimit: size too large, truncated to 1048576
[  161.050162][ T8612] openvswitch: netlink: IP tunnel dst address not specified
[  161.115347][ T8612] __nla_validate_parse: 12 callbacks suppressed
[  161.115360][ T8612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.783'.
[  161.215327][ T8607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.781'.
[  161.221522][ T8607] xt_hashlimit: size too large, truncated to 1048576
[  161.361936][ T8623] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  161.425299][ T8628] netlink: 32 bytes leftover after parsing attributes in process `syz.2.788'.
[  161.430919][ T8628] SET target dimension over the limit!
[  161.562483][ T8639] netlink: 32 bytes leftover after parsing attributes in process `syz.2.791'.
[  161.609900][ T8641] netlink: 32 bytes leftover after parsing attributes in process `syz.2.792'.
[  161.758695][ T8649] netlink: 32 bytes leftover after parsing attributes in process `syz.0.795'.
[  161.788302][ T8655] netlink: 32 bytes leftover after parsing attributes in process `syz.0.796'.
[  161.793641][ T8656] netlink: 32 bytes leftover after parsing attributes in process `syz.0.796'.
[  162.046995][ T8667] syzkaller1: entered promiscuous mode
[  162.050178][ T8667] syzkaller1: entered allmulticast mode
[  162.059301][ T8667] netlink: 'syz.1.800': attribute type 16 has an invalid length.
[  162.062760][ T8667] netlink: 55946 bytes leftover after parsing attributes in process `syz.1.800'.
[  162.240134][   T54] Bluetooth: hci2: command 0x040f tx timeout
[  162.810596][ T8692] netlink: 32 bytes leftover after parsing attributes in process `syz.0.808'.
[  163.447660][ T8713] xt_hashlimit: size too large, truncated to 1048576
[  163.679073][ T8716] xt_hashlimit: size too large, truncated to 1048576
[  164.231842][ T8731] netlink: 'syz.1.819': attribute type 4 has an invalid length.
[  164.276601][ T8735] netlink: 'syz.0.821': attribute type 1 has an invalid length.
[  164.284168][ T8735] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.563633][  T522] block nbd0: Possible stuck request ffff88810a848000: control (read@0,1024B). Runtime 30 seconds
[  164.569684][  T522] block nbd0: Possible stuck request ffff88810a848200: control (read@1024,1024B). Runtime 30 seconds
[  164.573729][  T522] block nbd0: Possible stuck request ffff88810a848400: control (read@2048,1024B). Runtime 30 seconds
[  164.577464][  T522] block nbd0: Possible stuck request ffff88810a848600: control (read@3072,1024B). Runtime 30 seconds
[  164.879271][   T54] Bluetooth: hci2: command 0x040f tx timeout
[  165.110894][ T8748] netlink: 'syz.0.824': attribute type 1 has an invalid length.
[  165.114162][ T8748] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.224610][ T5447] nci: nci_rx_work: unknown MT 0x7
[  166.328596][ T8797] __nla_validate_parse: 6 callbacks suppressed
[  166.328612][ T8797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.837'.
[  166.597493][ T8804] netlink: 32 bytes leftover after parsing attributes in process `syz.0.840'.
[  166.727361][ T8814] netlink: 32 bytes leftover after parsing attributes in process `syz.1.843'.
[  167.226677][ T8841] netlink: 20 bytes leftover after parsing attributes in process `syz.2.851'.
[  167.232317][ T8841] netlink: 20 bytes leftover after parsing attributes in process `syz.2.851'.
[  167.919052][   T54] Bluetooth: hci2: command 0x040f tx timeout
[  168.112318][ T8855] netlink: 16 bytes leftover after parsing attributes in process `syz.2.856'.
[  168.132016][ T8855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.856'.
[  168.269708][ T8855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.856'.
[  168.425928][ T8860] netlink: 32 bytes leftover after parsing attributes in process `syz.2.858'.
[  168.504639][ T8865] netlink: 32 bytes leftover after parsing attributes in process `syz.2.859'.
[  169.636260][ T8889] netlink: 'syz.0.866': attribute type 1 has an invalid length.
[  169.642313][ T8889] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  170.962009][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[  170.965921][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  171.364003][ T8921] __nla_validate_parse: 7 callbacks suppressed
[  171.364024][ T8921] netlink: 32 bytes leftover after parsing attributes in process `syz.2.877'.
[  171.420951][ T8923] netlink: 32 bytes leftover after parsing attributes in process `syz.2.878'.
[  171.544422][ T8934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.881'.
[  171.734249][ T8945] netlink: 32 bytes leftover after parsing attributes in process `syz.1.885'.
[  171.828250][ T8950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.887'.
[  171.882241][ T8957] netlink: 32 bytes leftover after parsing attributes in process `syz.1.889'.
[  171.937556][ T8960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.890'.
[  171.959375][ T8960] team0: Port device team_slave_0 removed
[  171.977426][ T8962] syzkaller0: entered promiscuous mode
[  171.984117][ T8962] syzkaller0: entered allmulticast mode
[  171.993853][ T8962] netlink: 28 bytes leftover after parsing attributes in process `syz.1.891'.
[  171.999319][ T8962] netlink: 28 bytes leftover after parsing attributes in process `syz.1.891'.
[  172.163629][ T8991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.898'.
[  172.204864][ T8996] xt_l2tp: v2 sid > 0xffff: 8388608
[  172.571782][ T9013] xt_hashlimit: size too large, truncated to 1048576
[  173.493684][ T9075] netlink: 'syz.0.919': attribute type 1 has an invalid length.
[  173.496403][ T9075] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.680140][ T9081] xt_hashlimit: size too large, truncated to 1048576
[  174.072130][ T9093] xt_hashlimit: size too large, truncated to 1048576
[  175.841084][ T9154] sctp: [Deprecated]: syz.1.938 (pid 9154) Use of int in max_burst socket option.
[  175.841084][ T9154] Use struct sctp_assoc_value instead
[  176.055353][ T9177] geneve2: entered promiscuous mode
[  176.057641][ T9177] geneve2: entered allmulticast mode
[  176.061894][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  176.066667][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  176.077702][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  176.081921][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  176.418644][ T9188] xt_connbytes: Forcing CT accounting to be enabled
[  176.503412][ T9192] __nla_validate_parse: 18 callbacks suppressed
[  176.503426][ T9192] netlink: 32 bytes leftover after parsing attributes in process `syz.0.947'.
[  176.567862][ T9195] netlink: 120 bytes leftover after parsing attributes in process `syz.0.948'.
[  176.908326][ T9210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.952'.
[  176.924851][ T9210] xt_hashlimit: size too large, truncated to 1048576
[  176.934745][ T9213] netlink: 'syz.2.953': attribute type 41 has an invalid length.
[  177.498329][ T9230] netlink: 'syz.1.958': attribute type 1 has an invalid length.
[  177.536308][ T9230] 8021q: adding VLAN 0 to HW filter on device bond2
[  177.586073][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.957'.
[  177.911756][ T9253] netlink: 36 bytes leftover after parsing attributes in process `syz.0.963'.
[  177.916396][ T9253] netlink: 36 bytes leftover after parsing attributes in process `syz.0.963'.
[  177.931101][ T9253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.963'.
[  178.101509][ T9265] netlink: 32 bytes leftover after parsing attributes in process `syz.1.968'.
[  178.123168][ T9267] netlink: 32 bytes leftover after parsing attributes in process `syz.2.969'.
[  178.283385][ T9270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.970'.
[  178.290084][ T9270] xt_hashlimit: size too large, truncated to 1048576
[  178.799112][   T54] Bluetooth: hci2: command 0x040f tx timeout
[  179.119549][ T9295] xt_hashlimit: size too large, truncated to 1048576
[  179.382285][ T9319] netlink: 'syz.0.985': attribute type 1 has an invalid length.
[  179.385102][ T9319] netlink: 'syz.0.985': attribute type 2 has an invalid length.
[  179.388094][ T9319] netlink: 'syz.0.985': attribute type 1 has an invalid length.
[  179.390907][ T9319] netlink: 'syz.0.985': attribute type 3 has an invalid length.
[  180.879072][   T54] Bluetooth: hci2: command 0x040f tx timeout
[  181.205773][ T9346] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048)
[  181.268064][ T9349] netlink: 'syz.0.994': attribute type 1 has an invalid length.
[  181.272050][ T9349] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  181.615938][ T9353] __nla_validate_parse: 12 callbacks suppressed
[  181.615973][ T9353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.996'.
[  181.627082][ T9353] xt_hashlimit: size too large, truncated to 1048576
[  181.846344][ T9358] netlink: 32 bytes leftover after parsing attributes in process `syz.2.997'.
[  181.903139][ T9359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.997'.
[  182.737339][ T9366] netlink: 'syz.2.999': attribute type 83 has an invalid length.
[  184.658143][ T5675] nci: nci_rsp_packet: unknown rsp opcode 0x606
[  184.705419][ T9399] netlink: 'syz.2.1007': attribute type 32 has an invalid length.
[  185.425036][ T9395] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  185.442018][ T9407] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1009'.
[  185.527203][ T9420] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1012'.
[  185.813430][  T993] IPVS: starting estimator thread 0...
[  185.815068][ T9438] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1016'.
[  185.830984][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1016'.
[  185.909131][ T9439] IPVS: using max 86 ests per chain, 206400 per kthread
[  186.238448][ T9447] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1019'.
[  186.483621][ T9386] Bluetooth: hci0: command 0x0406 tx timeout
[  186.488227][ T9385] Bluetooth: hci1: command 0x0406 tx timeout
[  187.449396][ T9458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1022'.
[  187.457053][ T9458] xt_hashlimit: size too large, truncated to 1048576
[  187.736289][ T9478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1026'.
[  188.128778][ T9481] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.1027'.
[  188.495209][ T9492] netlink: 'syz.2.1030': attribute type 2 has an invalid length.
[  188.991084][ T9512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1036'.
[  189.010234][ T9512] xt_hashlimit: size too large, truncated to 1048576
[  189.106644][ T9517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1037'.
[  189.115699][ T9517] xt_hashlimit: size too large, truncated to 1048576
[  189.303113][ T9527] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1039'.
[  189.306297][ T9528] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1039'.
[  189.662526][ T9543] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1044'.
[  189.673356][ T9543] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1044'.
[  189.683831][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1044'.
[  190.366712][ T9561] 0X: renamed from batadv0
[  190.371413][ T9562] netlink: 'syz.2.1049': attribute type 1 has an invalid length.
[  190.374635][ T9562] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.458148][ T9561] 0X: entered allmulticast mode
[  190.466539][ T9561] 8021q: adding VLAN 0 to HW filter on device 60X
[  190.469966][ T9561] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  190.618073][ T9570] syzkaller0: entered promiscuous mode
[  190.620814][ T9570] syzkaller0: entered allmulticast mode
[  190.862083][ T9582] netlink: 'syz.1.1055': attribute type 1 has an invalid length.
[  190.865459][ T9582] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  192.516759][ T9636] __nla_validate_parse: 7 callbacks suppressed
[  192.516780][ T9636] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1071'.
[  192.632330][ T9647] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1073'.
[  193.022013][ T9656] xt_hashlimit: size too large, truncated to 1048576
[  193.397513][ T9675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1083'.
[  193.419654][ T9675] xt_hashlimit: size too large, truncated to 1048576
[  193.524994][ T9677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1084'.
[  193.531792][ T9677] xt_hashlimit: size too large, truncated to 1048576
[  193.701741][ T9685] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1086'.
[  193.716736][ T9690] xt_nfacct: accounting object `syz0' does not exist
[  193.725993][ T9692] xt_nfacct: accounting object `syz0' does not exist
[  193.793285][ T9697] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1089'.
[  193.852632][ T9683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1085'.
[  193.916723][ T9704] netlink: 'syz.2.1091': attribute type 39 has an invalid length.
[  193.920620][ T9703] netlink: 'syz.2.1091': attribute type 39 has an invalid length.
[  194.129617][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1092'.
[  194.145134][ T9707] xt_hashlimit: size too large, truncated to 1048576
[  194.417250][ T9714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1094'.
[  194.423732][ T9714] xt_hashlimit: size too large, truncated to 1048576
[  194.580061][ T9719] xt_hashlimit: size too large, truncated to 1048576
[  194.637015][ T9726] netlink: 'syz.2.1096': attribute type 1 has an invalid length.
[  194.650419][  T522] block nbd0: Possible stuck request ffff88810a848000: control (read@0,1024B). Runtime 60 seconds
[  194.654402][  T522] block nbd0: Possible stuck request ffff88810a848200: control (read@1024,1024B). Runtime 60 seconds
[  194.658164][  T522] block nbd0: Possible stuck request ffff88810a848400: control (read@2048,1024B). Runtime 60 seconds
[  194.662495][  T522] block nbd0: Possible stuck request ffff88810a848600: control (read@3072,1024B). Runtime 60 seconds
[  194.741420][ T9729] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1098'.
[  195.311426][ T9775] netlink: 'syz.1.1108': attribute type 1 has an invalid length.
[  195.314737][ T9775] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.528300][ T9778] xt_hashlimit: size too large, truncated to 1048576
[  195.534442][ T9779] xt_hashlimit: size too large, truncated to 1048576
[  195.582488][ T9778] bridge_slave_0 (unregistering): left allmulticast mode
[  195.584886][ T9778] bridge_slave_0 (unregistering): left promiscuous mode
[  195.587128][ T9778] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.756981][ T9789] xt_hashlimit: size too large, truncated to 1048576
[  195.974211][ T9798] xt_hashlimit: size too large, truncated to 1048576
[  196.526457][ T9827] netlink: 'syz.2.1122': attribute type 1 has an invalid length.
[  196.548352][ T9827] gretap1: entered allmulticast mode
[  196.553715][ T9827] bond1: (slave gretap1): making interface the new active one
[  196.557097][ T9827] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  197.097348][ T9840] netlink: 'syz.0.1126': attribute type 13 has an invalid length.
[  197.559597][ T9860] __nla_validate_parse: 144 callbacks suppressed
[  197.559616][ T9860] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1133'.
[  197.653766][ T9864] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1134'.
[  198.125990][ T9866] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1135'.
[  198.374531][ T9871] IPVS: set_ctl: invalid protocol: 98 255.255.255.255:20003
[  198.379061][ T9871] IPVS: set_ctl: invalid protocol: 98 255.255.255.255:20003
[  198.382196][ T9871] IPVS: set_ctl: invalid protocol: 98 255.255.255.255:20003
[  198.385182][ T9871] IPVS: set_ctl: invalid protocol: 98 255.255.255.255:20003
[  198.388203][ T9871] IPVS: set_ctl: invalid protocol: 98 255.255.255.255:20003
[  198.391493][ T9871] IPVS: set_ctl: invalid protocol: 98 255.255.255.255:20003
[  198.395856][ T9871] IPVS: set_ctl: invalid protocol: 98 255.255.255.255:20003
[  198.400197][ T9871] IPVS: set_ctl: invalid protocol: 98 255.255.255.255:20003
[  198.404186][ T9871] IPVS: set_ctl: invalid protocol: 98 255.255.255.255:20003
[  198.407200][ T9871] IPVS: set_ctl: invalid protocol: 98 255.255.255.255:20003
[  198.412682][ T9871] IPVS: set_ctl: invalid protocol: 98 255.255.255.255:20003
[  198.515342][ T9883] netlink: 'syz.2.1139': attribute type 1 has an invalid length.
[  198.517730][ T9883] netlink: 2704 bytes leftover after parsing attributes in process `syz.2.1139'.
[  198.739123][ T9891] x_tables: duplicate underflow at hook 2
[  199.761699][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  199.763863][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  201.039107][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[  201.042109][    C0] bridge0: topology change detected, propagating
[  201.045077][    C0] bridge0: port 2(bridge_slave_1) entered forwarding state
[  201.047941][    C0] bridge0: topology change detected, propagating
[  202.079100][ T5061] udevd[5061]: worker [7560] /devices/virtual/block/nbd0 is taking a long time
[  213.821380][ T5002] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  213.825447][ T5002] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  213.829082][ T5002] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  213.832684][ T5002] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  213.835920][ T5002] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  214.125264][ T9926] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.127740][ T9926] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.130271][ T9926] bridge_slave_0: entered allmulticast mode
[  214.133285][ T9926] bridge_slave_0: entered promiscuous mode
[  214.136548][ T9926] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.139035][ T9926] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.141459][ T9926] bridge_slave_1: entered allmulticast mode
[  214.144048][ T9926] bridge_slave_1: entered promiscuous mode
[  214.163730][ T9926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  214.168600][ T9926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  214.186999][ T9926] team0: Port device team_slave_0 added
[  214.191153][ T9926] team0: Port device team_slave_1 added
[  214.208563][ T9926] batman_adv: batadv0: Adding interface: batadv_slave_0
[  214.211017][ T9926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  214.220631][ T9926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  214.225230][ T9926] batman_adv: batadv0: Adding interface: batadv_slave_1
[  214.227398][ T9926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  214.235979][ T9926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  214.263117][ T9926] hsr_slave_0: entered promiscuous mode
[  214.266130][ T9926] hsr_slave_1: entered promiscuous mode
[  214.268365][ T9926] debugfs: 'hsr0' already exists in 'hsr'
[  214.270493][ T9926] Cannot create hsr debugfs directory
[  214.853642][ T5002] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  214.863111][ T5002] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  214.873082][ T5002] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  214.876166][ T9386] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  214.882218][ T9386] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  214.882274][ T5002] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  214.887385][ T5002] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  214.891412][ T9386] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  214.897786][ T9386] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  214.901117][   T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  215.234881][ T9947] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.237180][ T9947] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.239793][ T9947] bridge_slave_0: entered allmulticast mode
[  215.243025][ T9947] bridge_slave_0: entered promiscuous mode
[  215.264781][ T9947] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.267820][ T9947] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.271722][ T9947] bridge_slave_1: entered allmulticast mode
[  215.274849][ T9947] bridge_slave_1: entered promiscuous mode
[  215.310986][ T9947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  215.323060][ T9947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  215.339715][ T9945] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.342528][ T9945] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.345592][ T9945] bridge_slave_0: entered allmulticast mode
[  215.348581][ T9945] bridge_slave_0: entered promiscuous mode
[  215.359306][ T9945] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.361900][ T9945] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.364497][ T9945] bridge_slave_1: entered allmulticast mode
[  215.367484][ T9945] bridge_slave_1: entered promiscuous mode
[  215.372490][ T9947] team0: Port device team_slave_0 added
[  215.383433][ T9947] team0: Port device team_slave_1 added
[  215.405176][ T9945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  215.419942][ T9945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  215.423673][ T9947] batman_adv: batadv0: Adding interface: batadv_slave_0
[  215.426357][ T9947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  215.436394][ T9947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  215.451733][ T9947] batman_adv: batadv0: Adding interface: batadv_slave_1
[  215.454415][ T9947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  215.462926][ T9947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  215.481471][ T9945] team0: Port device team_slave_0 added
[  215.485735][ T9945] team0: Port device team_slave_1 added
[  215.516412][ T9945] batman_adv: batadv0: Adding interface: batadv_slave_0
[  215.519155][ T9945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  215.527215][ T9945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  215.534921][ T9947] hsr_slave_0: entered promiscuous mode
[  215.537257][ T9947] hsr_slave_1: entered promiscuous mode
[  215.539899][ T9947] debugfs: 'hsr0' already exists in 'hsr'
[  215.541793][ T9947] Cannot create hsr debugfs directory
[  215.544139][ T9945] batman_adv: batadv0: Adding interface: batadv_slave_1
[  215.546354][ T9945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  215.556037][ T9945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  215.623773][ T9945] hsr_slave_0: entered promiscuous mode
[  215.626377][ T9945] hsr_slave_1: entered promiscuous mode
[  215.629104][ T9945] debugfs: 'hsr0' already exists in 'hsr'
[  215.631084][ T9945] Cannot create hsr debugfs directory
[  215.919246][   T54] Bluetooth: hci3: command tx timeout
[  216.959222][   T54] Bluetooth: hci5: command tx timeout
[  216.969120][   T54] Bluetooth: hci4: command tx timeout
[  217.999115][   T54] Bluetooth: hci3: command tx timeout
[  219.039195][   T54] Bluetooth: hci4: command tx timeout
[  219.039269][ T9386] Bluetooth: hci5: command tx timeout
[  220.079518][ T9386] Bluetooth: hci3: command tx timeout
[  221.119121][ T9386] Bluetooth: hci5: command tx timeout
[  221.119245][   T54] Bluetooth: hci4: command tx timeout
[  222.159107][   T54] Bluetooth: hci3: command tx timeout
[  223.199198][   T54] Bluetooth: hci5: command tx timeout
[  223.209182][   T54] Bluetooth: hci4: command tx timeout
[  224.721273][  T522] block nbd0: Possible stuck request ffff88810a848000: control (read@0,1024B). Runtime 90 seconds
[  224.725592][  T522] block nbd0: Possible stuck request ffff88810a848200: control (read@1024,1024B). Runtime 90 seconds
[  224.730016][  T522] block nbd0: Possible stuck request ffff88810a848400: control (read@2048,1024B). Runtime 90 seconds
[  224.734289][  T522] block nbd0: Possible stuck request ffff88810a848600: control (read@3072,1024B). Runtime 90 seconds
[  254.799474][  T522] block nbd0: Possible stuck request ffff88810a848000: control (read@0,1024B). Runtime 120 seconds
[  254.803813][  T522] block nbd0: Possible stuck request ffff88810a848200: control (read@1024,1024B). Runtime 120 seconds
[  254.808142][  T522] block nbd0: Possible stuck request ffff88810a848400: control (read@2048,1024B). Runtime 120 seconds
[  254.812732][  T522] block nbd0: Possible stuck request ffff88810a848600: control (read@3072,1024B). Runtime 120 seconds
[  261.200674][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  261.202741][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  273.854370][ T9386] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  273.861690][ T9386] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  273.864817][ T9386] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  273.868002][ T9386] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  273.872585][ T9386] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  274.236787][ T9988] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.240169][ T9988] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.243486][ T9988] bridge_slave_0: entered allmulticast mode
[  274.247520][ T9988] bridge_slave_0: entered promiscuous mode
[  274.255426][ T9988] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.258458][ T9988] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.262649][ T9988] bridge_slave_1: entered allmulticast mode
[  274.266658][ T9988] bridge_slave_1: entered promiscuous mode
[  274.297865][ T9988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  274.304796][ T9988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  274.322841][ T9988] team0: Port device team_slave_0 added
[  274.325986][ T9988] team0: Port device team_slave_1 added
[  274.340071][ T9988] batman_adv: batadv0: Adding interface: batadv_slave_0
[  274.342305][ T9988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  274.350362][ T9988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  274.354815][ T9988] batman_adv: batadv0: Adding interface: batadv_slave_1
[  274.357037][ T9988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  274.366082][ T9988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  274.396758][ T9988] hsr_slave_0: entered promiscuous mode
[  274.400362][ T9988] hsr_slave_1: entered promiscuous mode
[  274.402663][ T9988] debugfs: 'hsr0' already exists in 'hsr'
[  274.404637][ T9988] Cannot create hsr debugfs directory
[  274.855724][   T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  274.860107][   T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  274.863738][   T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  274.867498][   T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  274.872302][   T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  275.238026][T10006] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.240468][T10006] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.243373][T10006] bridge_slave_0: entered allmulticast mode
[  275.246886][T10006] bridge_slave_0: entered promiscuous mode
[  275.252336][T10006] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.255058][T10006] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.257874][T10006] bridge_slave_1: entered allmulticast mode
[  275.261814][T10006] bridge_slave_1: entered promiscuous mode
[  275.286340][T10006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  275.292747][T10006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  275.311557][T10006] team0: Port device team_slave_0 added
[  275.314869][T10006] team0: Port device team_slave_1 added
[  275.329768][T10006] batman_adv: batadv0: Adding interface: batadv_slave_0
[  275.332529][T10006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  275.341249][T10006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  275.346587][T10006] batman_adv: batadv0: Adding interface: batadv_slave_1
[  275.349411][T10006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  275.357506][T10006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  275.381374][T10006] hsr_slave_0: entered promiscuous mode
[  275.383624][T10006] hsr_slave_1: entered promiscuous mode
[  275.385710][T10006] debugfs: 'hsr0' already exists in 'hsr'
[  275.387492][T10006] Cannot create hsr debugfs directory
[  275.853418][   T54] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  275.860326][   T54] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  275.863935][   T54] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  275.867609][   T54] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  275.872837][   T54] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  275.919428][ T9386] Bluetooth: hci6: command tx timeout
[  276.152936][T10024] bridge0: port 1(bridge_slave_0) entered blocking state
[  276.155280][T10024] bridge0: port 1(bridge_slave_0) entered disabled state
[  276.157528][T10024] bridge_slave_0: entered allmulticast mode
[  276.160526][T10024] bridge_slave_0: entered promiscuous mode
[  276.163987][T10024] bridge0: port 2(bridge_slave_1) entered blocking state
[  276.166275][T10024] bridge0: port 2(bridge_slave_1) entered disabled state
[  276.168530][T10024] bridge_slave_1: entered allmulticast mode
[  276.171772][T10024] bridge_slave_1: entered promiscuous mode
[  276.189950][T10024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  276.194892][T10024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  276.212181][T10024] team0: Port device team_slave_0 added
[  276.215814][T10024] team0: Port device team_slave_1 added
[  276.231738][T10024] batman_adv: batadv0: Adding interface: batadv_slave_0
[  276.234276][T10024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  276.245471][T10024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  276.257432][T10024] batman_adv: batadv0: Adding interface: batadv_slave_1
[  276.260649][T10024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  276.270778][T10024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  276.312995][T10024] hsr_slave_0: entered promiscuous mode
[  276.316174][T10024] hsr_slave_1: entered promiscuous mode
[  276.319405][T10024] debugfs: 'hsr0' already exists in 'hsr'
[  276.321846][T10024] Cannot create hsr debugfs directory
[  276.959217][ T9386] Bluetooth: hci7: command tx timeout
[  277.919121][ T9386] Bluetooth: hci8: command tx timeout
[  277.999034][ T9386] Bluetooth: hci6: command tx timeout
[  279.039308][ T9386] Bluetooth: hci7: command tx timeout
[  279.999149][ T9386] Bluetooth: hci8: command tx timeout
[  280.079239][ T9386] Bluetooth: hci6: command tx timeout
[  281.119190][ T9386] Bluetooth: hci7: command tx timeout
[  282.079546][ T9386] Bluetooth: hci8: command tx timeout
[  282.159176][ T9386] Bluetooth: hci6: command tx timeout
[  283.199179][ T9386] Bluetooth: hci7: command tx timeout
[  284.159164][ T9386] Bluetooth: hci8: command tx timeout
[  284.890263][  T522] block nbd0: Possible stuck request ffff88810a848000: control (read@0,1024B). Runtime 150 seconds
[  284.894718][  T522] block nbd0: Possible stuck request ffff88810a848200: control (read@1024,1024B). Runtime 150 seconds
[  284.899241][  T522] block nbd0: Possible stuck request ffff88810a848400: control (read@2048,1024B). Runtime 150 seconds
[  284.903517][  T522] block nbd0: Possible stuck request ffff88810a848600: control (read@3072,1024B). Runtime 150 seconds
[  314.969485][  T522] block nbd0: Possible stuck request ffff88810a848000: control (read@0,1024B). Runtime 180 seconds
[  314.973876][  T522] block nbd0: Possible stuck request ffff88810a848200: control (read@1024,1024B). Runtime 180 seconds
[  314.978249][  T522] block nbd0: Possible stuck request ffff88810a848400: control (read@2048,1024B). Runtime 180 seconds
[  314.982804][  T522] block nbd0: Possible stuck request ffff88810a848600: control (read@3072,1024B). Runtime 180 seconds
[  315.756561][ T5061] udevd[5061]: worker [7560] /devices/virtual/block/nbd0 timeout; kill it
[  315.762019][ T5061] udevd[5061]: seq 10990 '/devices/virtual/block/nbd0' killed
[  322.641303][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  322.643409][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  333.896231][   T54] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  333.902154][   T54] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  333.906310][   T54] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  333.910822][   T54] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  333.914433][   T54] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  334.335880][T10042] bridge0: port 1(bridge_slave_0) entered blocking state
[  334.339354][T10042] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.342505][T10042] bridge_slave_0: entered allmulticast mode
[  334.346353][T10042] bridge_slave_0: entered promiscuous mode
[  334.351036][T10042] bridge0: port 2(bridge_slave_1) entered blocking state
[  334.353870][T10042] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.356778][T10042] bridge_slave_1: entered allmulticast mode
[  334.359883][T10042] bridge_slave_1: entered promiscuous mode
[  334.384447][T10042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  334.391599][T10042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  334.419415][T10042] team0: Port device team_slave_0 added
[  334.424300][T10042] team0: Port device team_slave_1 added
[  334.451613][T10042] batman_adv: batadv0: Adding interface: batadv_slave_0
[  334.454390][T10042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  334.465096][T10042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  334.471260][T10042] batman_adv: batadv0: Adding interface: batadv_slave_1
[  334.474032][T10042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  334.484487][T10042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  334.520965][T10042] hsr_slave_0: entered promiscuous mode
[  334.524054][T10042] hsr_slave_1: entered promiscuous mode
[  334.526843][T10042] debugfs: 'hsr0' already exists in 'hsr'
[  334.529229][T10042] Cannot create hsr debugfs directory
[  334.985603][ T9386] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  334.996314][ T9386] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  335.001056][ T9386] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  335.004814][ T9386] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  335.008228][ T9386] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  335.376633][T10060] bridge0: port 1(bridge_slave_0) entered blocking state
[  335.379135][T10060] bridge0: port 1(bridge_slave_0) entered disabled state
[  335.381558][T10060] bridge_slave_0: entered allmulticast mode
[  335.384536][T10060] bridge_slave_0: entered promiscuous mode
[  335.389873][T10060] bridge0: port 2(bridge_slave_1) entered blocking state
[  335.392968][T10060] bridge0: port 2(bridge_slave_1) entered disabled state
[  335.395980][T10060] bridge_slave_1: entered allmulticast mode
[  335.398768][T10060] bridge_slave_1: entered promiscuous mode
[  335.415921][T10060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  335.420761][T10060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  335.437809][T10060] team0: Port device team_slave_0 added
[  335.441460][T10060] team0: Port device team_slave_1 added
[  335.457996][T10060] batman_adv: batadv0: Adding interface: batadv_slave_0
[  335.460940][T10060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  335.469414][T10060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  335.474104][T10060] batman_adv: batadv0: Adding interface: batadv_slave_1
[  335.476261][T10060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  335.484483][T10060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  335.515513][T10060] hsr_slave_0: entered promiscuous mode
[  335.517916][T10060] hsr_slave_1: entered promiscuous mode
[  335.520444][T10060] debugfs: 'hsr0' already exists in 'hsr'
[  335.522256][T10060] Cannot create hsr debugfs directory
[  335.910781][   T54] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  335.918768][   T54] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  335.923015][   T54] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  335.926858][   T54] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  335.930626][   T54] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  336.000070][ T9386] Bluetooth: hci9: command tx timeout
[  336.249183][T10078] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.251763][T10078] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.254498][T10078] bridge_slave_0: entered allmulticast mode
[  336.257421][T10078] bridge_slave_0: entered promiscuous mode
[  336.261520][T10078] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.263989][T10078] bridge0: port 2(bridge_slave_1) entered disabled state
[  336.266506][T10078] bridge_slave_1: entered allmulticast mode
[  336.269907][T10078] bridge_slave_1: entered promiscuous mode
[  336.291323][T10078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  336.297684][T10078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  336.332680][T10078] team0: Port device team_slave_0 added
[  336.337436][T10078] team0: Port device team_slave_1 added
[  336.363981][T10078] batman_adv: batadv0: Adding interface: batadv_slave_0
[  336.366766][T10078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  336.377264][T10078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  336.383687][T10078] batman_adv: batadv0: Adding interface: batadv_slave_1
[  336.386501][T10078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  336.397160][T10078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  336.426004][T10078] hsr_slave_0: entered promiscuous mode
[  336.428439][T10078] hsr_slave_1: entered promiscuous mode
[  336.430844][T10078] debugfs: 'hsr0' already exists in 'hsr'
[  336.432749][T10078] Cannot create hsr debugfs directory
[  337.049031][ T9386] Bluetooth: hci10: command tx timeout
[  338.011087][   T54] Bluetooth: hci11: command tx timeout
[  338.079256][ T5614] Bluetooth: hci9: command tx timeout
[  339.119338][ T5614] Bluetooth: hci10: command tx timeout
[  340.081788][ T5614] Bluetooth: hci11: command tx timeout
[  340.084787][   T54] Bluetooth: hci4: command 0x0406 tx timeout
[  340.089545][   T54] Bluetooth: hci3: command 0x0406 tx timeout
[  340.090615][ T5614] Bluetooth: hci5: command 0x0406 tx timeout
[  340.159149][ T9385] Bluetooth: hci9: command tx timeout
[  341.199221][ T9385] Bluetooth: hci10: command tx timeout
[  342.169107][ T9385] Bluetooth: hci11: command tx timeout
[  342.239166][ T9385] Bluetooth: hci9: command tx timeout
[  342.479497][   T35] INFO: task syz.2.1139:9883 blocked for more than 143 seconds.
[  342.482672][   T35]       Not tainted syzkaller #0
[  342.485492][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  342.491589][   T35] task:syz.2.1139      state:D stack:26312 pid:9883  tgid:9880  ppid:5618   task_flags:0x480140 flags:0x00080002
[  342.496739][   T35] Call Trace:
[  342.498237][   T35]  <TASK>
[  342.499941][   T35]  __schedule+0x1821/0x5740
[  342.503785][   T35]  ? __pfx___schedule+0x10/0x10
[  342.508946][   T35]  ? schedule+0x90/0x360
[  342.512637][   T35]  schedule+0x164/0x360
[  342.515939][   T35]  blk_mq_freeze_queue_wait+0x101/0x180
[  342.523114][   T35]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[  342.525921][   T35]  ? queue_limits_commit_update_frozen+0x55/0xd0
[  342.528759][   T35]  ? __pfx_autoremove_wake_function+0x10/0x10
[  342.531867][   T35]  queue_limits_commit_update_frozen+0x55/0xd0
[  342.534612][   T35]  nbd_set_size+0x454/0x680
[  342.536931][   T35]  ? __pfx_nbd_set_size+0x10/0x10
[  342.539598][   T35]  ? nla_memcpy+0x5b/0xc0
[  342.541501][   T35]  nbd_genl_reconfigure+0x7f5/0x1ea0
[  342.543667][   T35]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  342.546007][   T35]  ? rcu_is_watching+0x15/0xb0
[  342.548005][   T35]  ? trace_kmalloc+0x2a/0xf0
[  342.550910][   T35]  ? __nla_parse+0x40/0x60
[  342.552784][   T35]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  342.555243][   T35]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  342.557661][   T35]  genl_family_rcv_msg_doit+0x22a/0x330
[  342.559852][   T35]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  342.561841][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  342.563477][   T35]  genl_rcv_msg+0x61c/0x7a0
[  342.565051][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  342.567030][   T35]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  342.569295][   T35]  netlink_rcv_skb+0x232/0x4b0
[  342.570870][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  342.572433][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  342.574100][   T35]  ? down_read+0x270/0x2e0
[  342.575498][   T35]  ? genl_rcv+0xd/0x40
[  342.576801][   T35]  genl_rcv+0x28/0x40
[  342.578064][   T35]  netlink_unicast+0x75c/0x8e0
[  342.579964][   T35]  netlink_sendmsg+0x813/0xb40
[  342.581580][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  342.583449][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  342.585092][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  342.586899][   T35]  ____sys_sendmsg+0x972/0x9f0
[  342.588527][   T35]  ? __might_fault+0xaf/0x130
[  342.590564][   T35]  ? __pfx_____sys_sendmsg+0x10/0x10
[  342.592730][   T35]  ? import_iovec+0x73/0xa0
[  342.594536][   T35]  ___sys_sendmsg+0x2a5/0x360
[  342.596307][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  342.597902][   T35]  ? __pfx____sys_sendmsg+0x10/0x10
[  342.599778][   T35]  ? futex_wait+0x2a2/0x390
[  342.601297][   T35]  ? __fget_files+0x2a/0x420
[  342.602752][   T35]  ? __fget_files+0x3a0/0x420
[  342.604248][   T35]  __x64_sys_sendmsg+0x1bd/0x2a0
[  342.605866][   T35]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  342.607575][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.609702][   T35]  do_syscall_64+0x15f/0xf80
[  342.611217][   T35]  ? trace_irq_disable+0x3b/0x140
[  342.612835][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.614661][   T35] RIP: 0033:0x7f904799ce59
[  342.616096][   T35] RSP: 002b:00007f90487a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  342.618650][   T35] RAX: ffffffffffffffda RBX: 00007f9047c15fa0 RCX: 00007f904799ce59
[  342.621571][   T35] RDX: 0000000000004040 RSI: 0000200000000140 RDI: 0000000000000003
[  342.624134][   T35] RBP: 00007f9047a32d6f R08: 0000000000000000 R09: 0000000000000000
[  342.626889][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  342.629846][   T35] R13: 00007f9047c16038 R14: 00007f9047c15fa0 R15: 00007ffd46587038
[  342.632295][   T35]  </TASK>
[  342.633296][   T35] 
[  342.633296][   T35] Showing all locks held in the system:
[  342.635703][   T35] 1 lock held by khungtaskd/35:
[  342.637217][   T35]  #0: ffffffff8e95cda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  342.641366][   T35] 2 locks held by getty/5439:
[  342.642931][   T35]  #0: ffff88811377b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  342.645928][   T35]  #1: ffffc900034732e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0
[  342.649177][   T35] 1 lock held by udevd/7560:
[  342.650657][   T35]  #0: ffff888107303350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  342.653607][   T35] 6 locks held by syz.2.1139/9883:
[  342.655239][   T35]  #0: ffffffff8fe416c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  342.657695][   T35]  #1: ffffffff8fe41500 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  342.661724][   T35]  #2: ffff88810738b260 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0
[  342.665130][   T35]  #3: ffff8881073947c8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680
[  342.668199][   T35]  #4: ffff888107394190 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  342.672982][   T35]  #5: ffff8881073941c8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  342.677666][   T35] 2 locks held by syz.0.1145/9911:
[  342.679848][   T35]  #0: ffffffff8fe416c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  342.683044][   T35]  #1: ffffffff8fe41500 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  342.686252][   T35] 2 locks held by syz.0.1145/9912:
[  342.687873][   T35]  #0: ffffffff8fe416c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  342.690704][   T35]  #1: ffffffff8fe41500 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  342.693510][   T35] 2 locks held by syz.1.1146/9915:
[  342.695108][   T35]  #0: ffffffff8fe416c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  342.697652][   T35]  #1: ffffffff8fe41500 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  342.701000][   T35] 2 locks held by syz.1.1146/9916:
[  342.703026][   T35]  #0: ffffffff8fe416c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  342.706111][   T35]  #1: ffffffff8fe41500 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  342.709698][   T35] 2 locks held by syz.1.1146/9917:
[  342.711756][   T35]  #0: ffffffff8fe416c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  342.714867][   T35]  #1: ffffffff8fe41500 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  342.718321][   T35] 2 locks held by syz.1.1146/9920:
[  342.720594][   T35]  #0: ffffffff8fe416c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  342.723835][   T35]  #1: ffffffff8fe41500 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  342.727181][   T35] 2 locks held by syz.1.1146/9921:
[  342.729290][   T35]  #0: ffffffff8fe416c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  342.732385][   T35]  #1: ffffffff8fe41500 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  342.735700][   T35] 2 locks held by syz.1.1146/9922:
[  342.737356][   T35]  #0: ffffffff8fe416c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  342.740154][   T35]  #1: ffffffff8fe41500 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  342.742998][   T35] 2 locks held by syz.1.1146/9923:
[  342.744594][   T35]  #0: ffffffff8fe416c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  342.747580][   T35]  #1: ffffffff8fe41500 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  342.750702][   T35] 2 locks held by syz.1.1146/9924:
[  342.752620][   T35]  #0: ffffffff8fe416c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  342.755384][   T35]  #1: ffffffff8fe41500 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  342.758583][   T35] 2 locks held by syz-executor/9926:
[  342.760505][   T35]  #0: ffffffff8fe416c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  342.763630][   T35]  #1: ffffffff8fe41500 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  342.766449][   T35] 2 locks held by syz-executor/9945:
[  342.768190][   T35]  #0: ffffffff8fe416c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  342.772047][   T35]  #1: ffffffff8fe41500 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  342.775074][   T35] 2 locks held by syz-executor/9947:
[  342.776742][   T35]  #0: ffffffff8fe416c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  342.779563][   T35]  #1: ffffffff8fe41500 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  342.782400][   T35] 2 locks held by syz-executor/9988:
[  342.784040][   T35]  #0: ffffffff8fe416c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  342.786557][   T35]  #1: ffffffff8fe41500 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  342.789473][   T35] 2 locks held by syz-executor/10006:
[  342.791201][   T35]  #0: ffffffff8fe416c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  342.793748][   T35]  #1: ffffffff8fe41500 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  342.796509][   T35] 2 locks held by syz-executor/10024:
[  342.798182][   T35]  #0: ffffffff8fe416c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  342.801274][   T35]  #1: ffffffff8fe41500 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  342.804107][   T35] 2 locks held by syz-executor/10042:
[  342.805929][   T35]  #0: ffffffff8fe416c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  342.809263][   T35]  #1: ffffffff8fe41500 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  342.812331][   T35] 2 locks held by syz-executor/10060:
[  342.813987][   T35]  #0: ffffffff8fe416c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  342.816519][   T35]  #1: ffffffff8fe41500 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  342.819480][   T35] 2 locks held by syz-executor/10078:
[  342.821219][   T35]  #0: ffffffff8fe416c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  342.823756][   T35]  #1: ffffffff8fe41500 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  342.826620][   T35] 
[  342.827429][   T35] =============================================
[  342.827429][   T35] 
[  342.830465][   T35] NMI backtrace for cpu 0
[  342.830498][   T35] CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  342.830507][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  342.830511][   T35] Call Trace:
[  342.830515][   T35]  <TASK>
[  342.830520][   T35]  dump_stack_lvl+0xe8/0x150
[  342.830535][   T35]  nmi_cpu_backtrace+0x274/0x2d0
[  342.830547][   T35]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  342.830558][   T35]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  342.830566][   T35]  sys_info+0x135/0x170
[  342.830574][   T35]  watchdog+0xfd3/0x1030
[  342.830587][   T35]  ? watchdog+0x1c9/0x1030
[  342.830598][   T35]  kthread+0x389/0x470
[  342.830609][   T35]  ? __pfx_watchdog+0x10/0x10
[  342.830618][   T35]  ? __pfx_kthread+0x10/0x10
[  342.830627][   T35]  ret_from_fork+0x514/0xb70
[  342.830637][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  342.830644][   T35]  ? __switch_to+0xc79/0x1410
[  342.830702][   T35]  ? __pfx_kthread+0x10/0x10
[  342.830711][   T35]  ret_from_fork_asm+0x1a/0x30
[  342.830724][   T35]  </TASK>
[  342.830727][   T35] Sending NMI from CPU 0 to CPUs 1:
[  342.866885][    C1] NMI backtrace for cpu 1
[  342.866907][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  342.866918][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  342.866926][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  342.866954][    C1] Code: 6b 7c 02 e9 93 f7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 01 1f 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  342.866964][    C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000206
[  342.866976][    C1] RAX: 0000000000193735 RBX: ffffffff819a958a RCX: 0000000080000001
[  342.866983][    C1] RDX: 0000000000000001 RSI: ffffffff8dfb025c RDI: ffffffff8c28afe0
[  342.866991][    C1] RBP: ffffc90000197f10 R08: ffff88823c6339db R09: 1ffff110478c673b
[  342.866997][    C1] R10: dffffc0000000000 R11: ffffed10478c673c R12: 0000000000000001
[  342.867004][    C1] R13: 1ffff1102c09e000 R14: 0000000000000001 R15: 1ffff1102c09e000
[  342.867011][    C1] FS:  0000000000000000(0000) GS:ffff8882a927a000(0000) knlGS:0000000000000000
[  342.867019][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  342.867026][    C1] CR2: 00007ffd2bdcfff8 CR3: 0000000169858000 CR4: 00000000000006f0
[  342.867061][    C1] Call Trace:
[  342.867067][    C1]  <TASK>
[  342.867070][    C1]  default_idle+0x9/0x20
[  342.867081][    C1]  default_idle_call+0x72/0xb0
[  342.867090][    C1]  do_idle+0x36a/0x5f0
[  342.867102][    C1]  ? __pfx_do_idle+0x10/0x10
[  342.867111][    C1]  cpu_startup_entry+0x43/0x60
[  342.867118][    C1]  start_secondary+0x101/0x110
[  342.867155][    C1]  common_startup_64+0x13e/0x147
[  342.867170][    C1]  </TASK>
[  342.920931][   T35] Kernel panic - not syncing: hung_task: blocked tasks
[  342.923091][   T35] CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  342.925875][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  342.929050][   T35] Call Trace:
[  342.930071][   T35]  <TASK>
[  342.930997][   T35]  vpanic+0x56c/0xa60
[  342.932281][   T35]  ? __pfx___schedule+0x10/0x10
[  342.933793][   T35]  ? __pfx_vpanic+0x10/0x10
[  342.935200][   T35]  ? nmi_trigger_cpumask_backtrace+0x1f4/0x300
[  342.937139][   T35]  panic+0xc5/0xd0
[  342.938615][   T35]  ? __pfx_panic+0x10/0x10
[  342.940374][   T35]  ? preempt_schedule_thunk+0x16/0x30
[  342.942450][   T35]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  342.944872][   T35]  watchdog+0x102c/0x1030
[  342.946576][   T35]  ? watchdog+0x1c9/0x1030
[  342.948350][   T35]  kthread+0x389/0x470
[  342.949959][   T35]  ? __pfx_watchdog+0x10/0x10
[  342.951807][   T35]  ? __pfx_kthread+0x10/0x10
[  342.953443][   T35]  ret_from_fork+0x514/0xb70
[  342.954907][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  342.956487][   T35]  ? __switch_to+0xc79/0x1410
[  342.957963][   T35]  ? __pfx_kthread+0x10/0x10
[  342.959525][   T35]  ret_from_fork_asm+0x1a/0x30
[  342.961105][   T35]  </TASK>
[  342.962839][   T35] Kernel Offset: disabled
[  342.964182][   T35] Rebooting in 86400 seconds..
