last executing test programs:

530.733277ms ago: executing program 0 (id=1212):
r0 = socket$inet(0x2, 0x3, 0x8d)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'sh\x00'}, 0x2c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x9, &(0x7f0000000000)=0x1000, 0x4)
getsockopt$inet6_tcp_int(r2, 0x6, 0x9, 0x0, &(0x7f0000000080))
setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={<r3=>0x0, @local, @local}, &(0x7f0000000140)=0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r5, &(0x7f0000000240)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0xa)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0x71, r3})
r7 = socket(0xa, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0)
ioctl(r6, 0x8916, &(0x7f0000000000))
ioctl(r7, 0x8936, &(0x7f0000000000))
r8 = socket(0x10, 0x803, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, 0x3e, 0x107, 0xfffffffc, 0x25dfdbf9, {0x4, 0x7c}, [@nested={0x8, 0xa8, 0x0, 0x1, [@nested={0x4, 0x8}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e000100776972656775617264"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000)

420.181849ms ago: executing program 0 (id=1219):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000000)={@none})
r3 = socket$kcm(0xa, 0x5, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r6=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008c000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84}, 0x94)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fcdbdf252700000008000300", @ANYRES32=r6, @ANYBLOB="06003600ffea2034906db05ae150505050500000"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80)

350.995319ms ago: executing program 0 (id=1223):
r0 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x64)
bind$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @loopback, 0x2}, 0x10)

301.337707ms ago: executing program 0 (id=1224):
r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async, rerun: 32)
setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff02f}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x8010) (async)
sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}], 0x1, 0x24000045)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x4000)

249.050378ms ago: executing program 0 (id=1227):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000005d00)={0x114, 0x2d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x76, &(0x7f00000003c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x13, 0x2, 0x0, 0x0, 0x9, 0x66, 0x0, 0x0, 0x0, 0x0, @local, @rand_addr=0xe0000000, {[@timestamp_prespec={0x44, 0x1c, 0xfc, 0x3, 0xd, [{@loopback, 0x4}, {@empty, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x9}]}, @cipso={0x86, 0x19, 0x1, [{0x7, 0xf, "0a50efa79cd6ba75a156aac033"}, {0x0, 0x4, "da16"}]}]}}}}}}}, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000000314010028bd7000f6dbdf250900020073797a31001800000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x810)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r5, @ANYBLOB="000000000000000018100000", @ANYRES32=r6, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r8 = socket(0x10, 0x3, 0x0)
r9 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x50}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x44}}, 0x400c4)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x8}, 0x48)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r7, r11}, 0xc)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xd}}, &(0x7f00000000c0)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r12}, 0x10)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r7, r11}, 0xc)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r14}]}, 0x3c}, 0x1, 0x300000000000000, 0x0, 0xc004}, 0x0)
sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000021401002abd700001dcdf2508000100000000000500540041"], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810)
syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast2}}}}}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001000)={0x50, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x50}}, 0x40c0800)
r15 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r15, 0x2000012, 0x8ff, 0xb8, &(0x7f00000004c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

245.488632ms ago: executing program 2 (id=1228):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d080207000000810000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e4", 0x55}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000010401010000000000000000000004000500010001"], 0x1c}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000000104"], 0x20}, 0x1, 0x0, 0x0, 0x20048805}, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x450c, 0x4)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="a8050000", @ANYRES16=0x0, @ANYRES8, @ANYRES32=0x0, @ANYBLOB="b400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000400000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000200000008000100", @ANYRESDEC, @ANYBLOB="c0000206000000002400010071756575655f6964000000000000000000000000000000000000e5ffffff00000500030003000000080004e1af00000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="fc00028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYRESOCT, @ANYRES32, @ANYBLOB="08000100", @ANYRESDEC, @ANYBLOB="b40102803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000a00000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001400040003000103010000000b00fb610000001c4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c000400090004002e8b00004000020509000000ff7f017b020000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000500000008000100", @ANYRES32, @ANYBLOB="040102804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e6700000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000500000008000600", @ANYRES32, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400609b00003c000100240001006c625f74785f6d6574686f6400000000000000000000000000000000000000000500030005000000090004006861736800000000"], 0x5a8}, 0x1, 0x0, 0x0, 0x20008081}, 0x0)

188.938948ms ago: executing program 1 (id=1229):
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
unshare(0x40000100)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x268, 0x300, 0x240, 0x268, 0x378, 0x460, 0x460, 0x378, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x220, 0x240, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9, 0x8}, {0xfffffffffffffffe}}}, @common=@unspec=@connlabel={{0x28}, {0x5, 0x3}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x40}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8)

188.774107ms ago: executing program 2 (id=1230):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r1, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c0808004149014006040800", 0x58}], 0x1)

188.598661ms ago: executing program 1 (id=1231):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0xa, 0x3, 0x3a)
sendmmsg$unix(r0, &(0x7f0000000900)=[{{&(0x7f0000000640)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000780)="a92379a2", 0x4}], 0x1, 0x0, 0x0, 0x800}}], 0x1, 0x1080)
recvmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}, 0x20001}], 0x1, 0x400100e0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c000280"], 0x40}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
close(r1)

187.630575ms ago: executing program 2 (id=1232):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0xa, 0x3, 0x3a)
sendmmsg$unix(r0, &(0x7f0000000900)=[{{&(0x7f0000000640)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000780)="a92379a2", 0x4}], 0x1, 0x0, 0x0, 0x800}}], 0x1, 0x1080)
recvmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}, 0x20001}], 0x1, 0x400100e0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c000280"], 0x40}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
close(r1)

108.463491ms ago: executing program 1 (id=1233):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'veth1_virt_wifi\x00', <r2=>0x0})
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000540)=0x6b22, 0xfef9)
bind$packet(r1, &(0x7f00000003c0)={0x11, 0x1b, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$packet(r0, &(0x7f0000000600)="29747add9ad65561e5849b62623039802e2701cdb931663fdfd7ffadff5355e4083fe17353716ac89e2c603829fbd45d31c0e874bad37a8554c18fd1b6d2c4a81c29a791a4fbde3351436144de360109b9f1d91ba3a1eadd3ba350a7b4d0a85beef948b1cede283753714739f356248462aa0eae11eb9ba75595b2130ec83060cfd6236b55b27429ba3e7adb4f443e1476d96ff3ae83ccee34f19e1c3f1cb4d2a1e4b529a7dcdd3b678d20bd3eabb8512e6df85eba7c50656a8165554f0dc8118247cfb5ddc8fd22179a3ce0c7653f98c6", 0xd1, 0x8010, &(0x7f0000000500)={0x11, 0x1a, r2, 0x1, 0x4c, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x4}}, 0x14)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
bind$packet(r0, &(0x7f0000000100)={0x11, 0x3, 0x0, 0x1, 0x3, 0x6, @random="ba5de643b791"}, 0x14)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x5, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="2f0000000400000004000000", @ANYRES16=r0, @ANYBLOB="c4b2489d66bad6dd54330814482c6ccc9b2e4d99852e5e7afa82a2750e17859b571a09a790bf14a6461d4c475900864257a21c5a42e64009326bdcee076aad9bd77cf92c3eba8f49b040937e832c2459b570da5c102757880ec71abe48bc9cdf8b9cf5ce21d15bf24de28ccf1489e4face608e59251a1a5352fbd2af7aa4b16bd5525ed3c2be84f1bc3c028f76a98c960ea0e94253bbac87b502fa79bf716ddf6b4229d109ea159f9d03756f965d0cade04ca747ea284592cc51a26e0c416b6678714e5c06b7126136279c000aa73f3d6f6d6aded7dda819062ffdeb68da7aa51c2625e18f17852cb8430b42ef0de65b2e06565376e833ed4a", @ANYRES64=0x0], 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r4)
syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff)
socket$kcm(0x2, 0x5, 0x2)
r5 = socket(0x10, 0x3, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r6, <r8=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r7}, 0x20)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000380)=@req={0x4, 0xe1d, 0x7, 0x7}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r8, &(0x7f0000000400)="e8", &(0x7f0000000480)=@tcp6=r5, 0x1}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000001880)=ANY=[@ANYBLOB="05000000000000007111b300000000008510000002000000850000002a00000095000000000000009500a50500000000360a9cccfb9478c261b5c3b41073a3c5951cffd486dbfc5863eda0a308002821e87dd5047cfe03dd3e61ab9c8527468de274b6980b56996297e75cd01b5f06d615c5cb38fc4b87b6c92a01959029df3ba719cc4f81bb69ae1d0dbb481b8698d6cb29534c7e9af0b77b74d56834b37ee130ee00"/178], &(0x7f0000000080)='GPL\x00', 0x5, 0xba, &(0x7f000000cf3d)=""/186, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x6}, 0x94)

108.135815ms ago: executing program 2 (id=1234):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0xffef, 0x0, 0x103, 0x28820}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x118}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x44801}, 0x48000)

51.289178ms ago: executing program 2 (id=1235):
r0 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x64)
bind$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @loopback, 0x2}, 0x10)

51.034001ms ago: executing program 1 (id=1236):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="4736a8a53e3aa12e774ed99c6b411db76c37c090f835680a66fd09763f6706b632eff590bc62ae60a529b9c3fdb4b0442ec7606c2bd1f7e9712d198b7f2c66d0868c807df4d7f5a1605aef7b4270b2109c0bed58e9c54eae1f37a38bf888a54e0b3e09fb9c6bcbcea783b94ce1a6cb363619231c5cc798048a6e5adb713ad3a6ae7f4e151a349ae5ec86a0f3fa47f21ce753108014b7dfca347afc18cef39c", 0x9f}, {&(0x7f0000000b80)="65bbafc7f97972c30b2d6d20561e52a78a3217a7a6042134c1ce17ad55ed40045467f600333fdfc51163ce74359a635dbd3b66642c2322239be98225dedd8d7df34391f620fe5fc2a061aa265d55ac5b90a7044e51945b5427f2f33044d03dbd17ac95f4508547e22f42c89790f4cb2f1da683a896c42d98cecab112a35b417417d869ac09bc2c660a5472c23b2ad5ee13e1e75a51be3b0515ee0da32852f00cc215275d403b9fcf3f11aa5c0c22e15c67bd7bac0037960c55c192e55cfb6007f7dadf3f9d0570e61fa4c3bac91cf6a38be448cd7bfa6d9ab1e33521644b49f6bc45fc83dc609a6aa6376a8fd66f981db247ece441a8d52ea634230da81d9fc21c1f45ed9f1a7f3a624abcbb6d3a5ceebff0b3e93863093d64bbd7000571b5c90c20dace3e80ec4b7a3a8209cf9ef9d6b8b864e3a2e53e82cc9e2c477522c340edf7bb0d08bf90a68a764130f2de6344ce9581b2bf81b4a2e231aa63d758e613a3fcd40cd43ff1ecfec738cd6a5c8152fc2d0dc5f678e73f4088bfbc65894e05f7a824772399f2c29c5d398f7e350053403b3e1d8fceb1d3bed06abc2c77d3fb403c8c3cd557c2bd970cdacf39052734f23623b7e3b33d6fe27128edfb54588901a6f81dda778670a8c003af9cc9322097f010474a03027a5c5e0bca71fb0bec334846f72e2124265eaf98e5659213a962e717f46c4e8db3f62664d1605dfb189aa61fe286a102c4aae8a4d61d45298c1b06e5949cbe5222c65ad2620a797865e95b5c7eb8dfe7c38a4561a3373b8ad8e569e873d2c9ef4726ec7555b07e1d48ecd2edfec98e6bdf75c6e51f635c75d3c001af9bd73c3a8cbf5869dd4277aac9ff7e5d7b2c3145c0cf4f5200822a007145baa47b11f574b3bb15758ebaaa60d5baf32d4004d63ef8a20ffcf456c8e70c415e0c519b46bc8eac1e82176d0bb3f396d1325f1cee91513569f6c812d9d263a3448bded131abe9af8b3c1e9f77c23fe1882b743c2b966db2aa09b9e1c7837530854e8ee1080f553a59d3a70add3e49f9019c1904766a0dcfcf2047f446e91fcd1ba297b56a263a156b52c037569ed6bf8a45572f0b1dcdc4a08270f341b963d616531f1a1cad58863dcd01d17e4c2067fa4582990ca471c78a159c7e011c044a3229d779267998a6bf67c5ee8031461ee2ecc5d46c34957e917c4bc4489bd090d9b72ea69ebd111399d48e3c031f92f306ef4eb557769dd67b13d7189e6569bab26795df356fa97ba750587237f30c922088e2fcfe40efee3d1f442cb481188e1ed7d02642580a96cf5772171a09d504fc6b14112bec4704ee4f74f6d15081891884f1e0d1907383e0ccce20f9ec76607851601ec31daab1e758a77b20c9bf6cee4d22ec236ad7f571676e4330cd7b1e54fd7228d4cbacb273e951dc0a317e85371f2be7b64a28dd3a8b4dbfc741295c5a5878ef7727be46ef3b8cc65f8b910de241280b6c7bff3fed8e7ec54ccabb09cf332e97a08c561889ec6aca039fe41177428f869c8701d0d35486978aed504c902957f99d4dd8473fa5cd57012a942e35d6581361202abbe263dca8c0613676afbb3dd0a96368fab76ff1d3668f3a98d89a8b0d08793df7a9de1d5191044fc416312074c6f8f9efdc4a8793fc0fd9757a945baceb4567db6392d0c24afd6eeb7b1da05e9121ced17ceebbcf8ceecad6b39743514bb8ab9f6ecc91eca09a4fffe694b023269160c3d6e14ef8206a323104f363559376d8c026761352dbf584b29a2f52f82b1c0de7f266be372a3c0ed92aa698b8e56377cb358b575d90fec850b7973b1a79078091d4029e26922be56ee83929a99b60d749830eda03889f6c1a38567d53a1da2daa48a66f4549c2fb40585e1537a7f6c7b0ec30f748084d98e5ad904606f0a956d0f11a49cc81aabb6cef28dec11fd762449affdd23f6d7e91e738c0664312fe5cb3d53571e6223384ccacfd5597e01eaa5c7b9416f1f87f635dd5b3498b27941c70d455c1f6d954e82edeeaa46ee5f9fb956a23907c5432ebb623f68c7e080c4f858af56195d1a8d47a2aac33f1ba23467a50a2bbeee1ee2d0c6024d9ac8e88e27b345e43052095402677c73e592cf0d07132e5385ec2dfc53bae7f06196826415e06ba2c7d3f484a28a6b55945135b3dc3e647dd940ff400b453fb7c4a52c68651aaa8128ad1288e1d4a9770dabec8b615ea3229813088c5dc04857ecc64612bfa22a89fbcd470c5b685a43a1be78cf9f12b7e99f12c4e14f3dca86e90253a83a9a3e0d027987d3d004d978fc511987905c3eda100eab0716c4671856e9de1e517f26c53dae88e5cc5f9c9873df306ed259bb18a3e81d2d0880f96676e6d41a73913284450e03986e776de1d11fb34a141b93dde70dbee2dfab45e74894c7a7de5e23fa3b3259716392bb53cae80a3ca75c3457167b94913c03df7b6da3839cecd797de914e29b7bb6b510f551405e03805d1967534a1ce6b3488f13add8bbee9529ac25095c5a377e71593dba7fe5ec8a7b02decc442df00bf2ac9e6b61f062fcbfa330ac70ad6f4a28991027c51cbd631ac9622c3fd126f7584cc9e9e0bb06242ad9b4302463a9151249eea639f063835b57d64f151faa78aba536ebecb5fc206d0ee14dc209d0cf6d6836c4d7a1fdec6f19b9d0141d78b6740f4f104d2ab5b92fa656c3cf41aef4fed11b3b7c027a2605a2a4edc1ba21d23ddef394d0ddbb779c9016166e45e856696310d6cad8507a4897a8c92a7e945ffbe74d17a76833b2f64605f91c82ad1088a070720f60b42de3c47f1121c78e5f0981f84facdd57afab352ba3ab3e05c0cd839f96f8d2864a51806fd18455e95169feac1cf56cded7d62f0040b8323bc59decedf9a7d45158c8ba28793c38105b750dd745c6cf7b677fec98b07528982aa836ae589ea87ac3af6b82229aadb9cf6f0245aeb0b797e1c16dce82c180079ebe96a5f6dab13c39196328870ff9af4784286356dc8b4e6a3d77d505975f48412e04fa4a471a89e2684a92f141c2ce34cad9b2998b5e03a88481a49b08922ab34df4d9fde903309feb5927975c852db38a7dad7fac980c9cce955f796e8770b78677faeb21caded6e6369132648339c50ec7f336115e81f45b28bf4136677ee1f77bbc6eb0207df7a0a756f0a98dfee3921e1f0e53e488b69a379f679f8e8d881880cfeb5699f2f3513573bd767bb6155724e20ce8a01ba97295e1501b0b3d602f8710a74196be8805b49fdc3ed63cf01412662a7415ba33986c6d4e0052714c00a1ac57e981353ebcf15441f988e8c6126f10d6926d65f431887064be06546ee06453860cb437e50b38b108afa833401dc2448ea2c95655d53e6c84d1476810a0c1d2e33cb905c96d1c441923975b3afdbc705c3aba073985a8f713aea11ce6cddb0177a648b12e61f6add46c2f89830007decaa8ef375b69af995c0af59a4ffd6923d760002b57e494e4649908f02c5cbd63d7912deb3be5d774534c4542a72d458cdae80f3ae10e1508d36ebf1df2f1369c098965d9adae076b26325882fdc4ad598b10de0a8e593f155111c150cb671c2590c912018f83775bd1f35ed21f78680bbcd5391a64412b6f1bdebf6b29577caeb81f8559a4de0badac6edbf6c5a08494659b38339df8077d9f059ea17addf8e149354120e063d8950f800f49a659b1f609b928b7c784a16a04baa757ce6d9c8158f2db8c1e140b89794adb7dd12d0bcbec52f4121f100da7a8cce192dd2e780799a2a81075b605dcc941cbb203719c150ef4b57db6a517cb81b158708bf90379b22f4e3a728c20896f5473be4819a5feb97be52840ce9226a955aa4d2e6850cff052be7a68dfb9aa7bb3d15a2e214707aae21b00538688c8c6260a7a0d70dfdf1828ebb7cf72a2a0016589625bf7cb34851cc9f5c506d59ec7ab500c0d6b622cf6131d6ad913b8b883e89278e73351f7475b97e8f7c614a9b0653d13d0e77bae1d0b673d759d006ca5735d9162a513eb5ed88d7d0a5c24fc573a5dcf88d3bf92f85a23eecdd5876f1d1d9316ca0b9de447d328348215d7961b7b4624a0db4bbeeea9d4d22a6d6601750ff81787457e33d2ffa15391c2a3d7b84f77db81e3933630021d37ba8b7d4bb80b3e2da38ecadff12ad7d6cd771a57d6422a91d4628272a76c6aa9af3f158c899815c760e04c998676572335ab4d39291797b3dc1a5e24a172d24b0d8f2b1707e0bdbafdf03b33fca96887e77523d2de131f1c47ea91934254f95495fc7d9c776732f147e882578550da0a19b610871c20ff0c6263c695ed7444156f74902199cd459009769f499cf63e755f7e081d418cd8bed594a739886546c3decf3a77f605a7d441267446862c46583b8a95d3cb5481408299311d74b4b22b1b01c74b3eafbd4b94262d3ab3c654a2480cfae880de7e5e7dd6212ead59e4b7c7f971b9897a5d659d18d6f89417c4391345dc71d0347b116f03e4364358495631ad60503694364d7c168808d16835ab3fb2091c5146bca8fbac701405324bb83aa60c19d7d59bd0eb86689c2bd014322e50992a3720ffd434fd71a59c520275373134b674048568e0e7d64a77a594f15b0b36d3e3f9839ae97607d4d694c9ee3ded41ed14a9c5129de3ffa097f7d2aff9adc80f5dcfe7beea5b523476c39b5c963a4f7feb8fef372608627011c29c94e3f1ab3987341a74085a368fac4b709745192883d122e6f6e02c9c422ba3759a5a5797f09e007fa55520f58c6f71d405caee3aa74954c6ed385dcdc63a3eba8721e0a08ef69ebbcab6f653235dd1313dc5f0b57ec113575591dfcd687a4542dc7deca3221ec68e3e4d18b6f4040b4539c613b271e52dc5ddb682ef331ec0c553a266a9b78a8463cf112bb97052f5570380c7111629e46d76b48990b7f73d76ddde023c27951e0a4cbc27455745f0a24e9f84521e3a2f388719a32144953db59437eb18ed05fbd0175c742e164c84ed4f7cc856feef12272719a446090fbe7b97554835283f4f3b99852056a70cf29171ef1f3a41a7638748af36e4e8baddf6d107d36378977343cb51843d13f2e40d9a141f18b31a34ff0874439e333904c3581c68fc0696f03f3ed171cfdea724f80b96c7f40f67d0f1b79dd7787aed498bedcbdb7556d8386139510ef3ab3a7e541a0bc2124a4c4c3eb531464fe0298c4680bbde1e070ba9d23cfa390945ddc11911abb8549927b6aadf54b16f4d204a5380c46be77dc6766e5876f7a053e7d0fbd05569a1d86747dff7f54e666d36b7a79f007bafa1f49842db4cd5a84e01dbf54ed74fcbc591e273a755832fe96f0a39b5846bf62252a540a78b0de9749cee83e731983b4f813c395c2dd47cff8e72301d0175d4a8459bcb22d389c85b4b5b76b64d61621cfddb20272ffdbc82772134cfc2883961729737bc3610dc713abd433e123c99e77d1cec24a327cea4c997d558a54ae2fcac9ddfe87e8c2874d802f301456e5610a05c02cd12d11267d679d4f1b96ec741df5f9fec12e01bff4e78a612280b5b50d6b77f8731c38f057dc713381bb6fb998e56c0370f77d5ec3b9a238ba9d451ff29e290b269868b34f9436b637943b8f299a76bf0004a3ddecef4401e7eff1320d29d53a6b644bdda92a2682dc105e8a867130296fe4861b43e67e57d8fc5fa70b55bfde4ab0a3e228354b8732b7a71da9c1020c0b01c8723e4b4440fd936ddeb401872f72a7a3108355232364deb5fc5d3e4fb5a77e754dff4d585b0e4229c0e9ca3127fbc6441bf98c22954b88988f73b0817d", 0x10f0}], 0x2}], 0x1, 0x40800)

49.449721ms ago: executing program 0 (id=1237):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x360}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x3, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r5, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x2, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x851}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000000)={r6, @in={{0x2, 0x4e23, @multicast2}}}, &(0x7f00000000c0)=0x84)
socket$inet_sctp(0x2, 0x1, 0x84)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000)
socket$key(0xf, 0x3, 0x2)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={<r8=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000400)={r8}, &(0x7f0000000440)=0x8)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={r6, 0x1, 0x10, 0x10000, 0xf}, &(0x7f00000000c0)=0x18)
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r9, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000001000000000000008d08000071123a000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)

49.291433ms ago: executing program 1 (id=1238):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d080207000000810000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e4", 0x55}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000010401010000000000000000000004000500010001"], 0x1c}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000000104"], 0x20}, 0x1, 0x0, 0x0, 0x20048805}, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x450c, 0x4)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="a8050000", @ANYRES16=0x0, @ANYRES8, @ANYRES32=0x0, @ANYBLOB="b400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000400000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000200000008000100", @ANYRESDEC, @ANYBLOB="c0000206000000002400010071756575655f6964000000000000000000000000000000000000e5ffffff00000500030003000000080004e1af00000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="fc00028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYRESOCT, @ANYRES32, @ANYBLOB="08000100", @ANYRESDEC, @ANYBLOB="b40102803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000a00000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001400040003000103010000000b00fb610000001c4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c000400090004002e8b00004000020509000000ff7f017b020000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000500000008000100", @ANYRES32, @ANYBLOB="040102804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e6700000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000500000008000600", @ANYRES32, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400609b00003c000100240001006c625f74785f6d6574686f6400000000000000000000000000000000000000000500030005000000090004006861736800000000"], 0x5a8}, 0x1, 0x0, 0x0, 0x20008081}, 0x0)

48.881787ms ago: executing program 2 (id=1239):
r0 = socket$kcm(0xa, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r4, 0x6, 0xd, &(0x7f0000000080)='>', 0x1)
setsockopt$inet6_int(r4, 0x29, 0x16, 0x0, 0x2000000)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x44, r9, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x44}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r7, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00"/11], 0x48)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES64=r1, @ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="fcdbdf2527000000080003000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x2080)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r11, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="01010000", @ANYRES16=r12, @ANYBLOB="01042abd7000fddbdf255a0000000c009900080000004c000000"], 0x20}, 0x1, 0x0, 0x0, 0x22040041}, 0x10)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0)

0s ago: executing program 1 (id=1240):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bond0\x00', 0x210}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bond0\x00', 0x210})
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x18) (async)
r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x18)
ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000100)=r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x191242, 0x0) (async)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x191242, 0x0)
ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000180))
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
read(r3, &(0x7f00000001c0)=""/94, 0x5e) (async)
read(r3, &(0x7f00000001c0)=""/94, 0x5e)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000240), &(0x7f0000000280)=0x4)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFULA_CFG_MODE={0xa, 0x2, {0x835d39e, 0x1}}, @NFULA_CFG_MODE={0xa, 0x2, {0x8, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x4025)
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f00000007c0)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x41}}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x8, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'erspan0\x00'})
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000ac0)=0xffffffffffffffff, 0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0xc, 0x101, 0x9, 0x2, 0xc01, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@bloom_filter={0x1e, 0x7ff, 0x8001, 0x0, 0x24000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1, 0xb}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x8000, '\x00', 0x0, r2, 0x2, 0x4, 0x5}, 0x50) (async)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x8000, '\x00', 0x0, r2, 0x2, 0x4, 0x5}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000cc0)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x4)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@base={0x6, 0x7ff, 0x2, 0x58f9, 0x2, 0x1, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x50)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000d80)={0xffffffffffffffff, 0x1}, 0xc) (async)
r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000d80)={0xffffffffffffffff, 0x1}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x19, 0x18, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x98}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfff}, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xf}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xff}, @call={0x85, 0x0, 0x0, 0xa3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @ldst={0x0, 0x0, 0x1, 0x6, 0xb, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000980)='GPL\x00', 0xfff, 0xf9, &(0x7f00000009c0)=""/249, 0x41100, 0x23, '\x00', 0x0, @fallback=0x10, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b00)={0x5, 0x1, 0xac, 0x401}, 0x10, 0x0, r1, 0x4, &(0x7f0000000dc0)=[r7, r8, r9, r2, r10, r11, r12], &(0x7f0000000e00)=[{0x5, 0x1, 0xa, 0x7}, {0x0, 0x2, 0x3, 0x4}, {0x4, 0x2, 0x5, 0x4}, {0x5, 0x2, 0x8, 0x4}], 0x10, 0x9}, 0x94)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000f00)={0x6, 'gretap0\x00', {0x2}, 0x6})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000f40)={'batadv_slave_1\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000fc0)={&(0x7f0000000f80)='kvm_mmio\x00', r1, 0x0, 0x530}, 0x18) (async)
r13 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000fc0)={&(0x7f0000000f80)='kvm_mmio\x00', r1, 0x0, 0x530}, 0x18)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001040)={0xffffffffffffffff, r13, 0x0, 0x4, &(0x7f0000001000)='GPL\x00'}, 0x30)
socket$inet_udplite(0x2, 0x2, 0x88)
r14 = bpf$ITER_CREATE(0x21, &(0x7f0000001080), 0x8)
setsockopt$MRT_INIT(r14, 0x0, 0xc8, &(0x7f00000010c0), 0x4) (async)
setsockopt$MRT_INIT(r14, 0x0, 0xc8, &(0x7f00000010c0), 0x4)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:56252' (ED25519) to the list of known hosts.
syzkaller login: [   41.631164][ T5756] cgroup: Unknown subsys name 'net'
[   41.755526][ T5756] cgroup: Unknown subsys name 'cpuset'
[   41.758945][ T5756] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.997576][ T5756] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.208587][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.211704][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.214475][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.217300][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.220371][ T5813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.247655][ T5816] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.250919][ T5816] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.253741][ T5816] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.256877][ T5816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.259714][ T5816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.326168][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.329046][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.333503][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.336454][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.339319][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.493350][ T5814] chnl_net:caif_netlink_parms(): no params data found
[   46.500507][ T5810] chnl_net:caif_netlink_parms(): no params data found
[   46.527029][ T5819] chnl_net:caif_netlink_parms(): no params data found
[   46.602229][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.604974][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.607354][ T5810] bridge_slave_0: entered allmulticast mode
[   46.609998][ T5810] bridge_slave_0: entered promiscuous mode
[   46.623976][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.626283][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.628555][ T5810] bridge_slave_1: entered allmulticast mode
[   46.631165][ T5810] bridge_slave_1: entered promiscuous mode
[   46.648073][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.650346][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.652583][ T5814] bridge_slave_0: entered allmulticast mode
[   46.655948][ T5814] bridge_slave_0: entered promiscuous mode
[   46.665588][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.667906][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.670205][ T5819] bridge_slave_0: entered allmulticast mode
[   46.673452][ T5819] bridge_slave_0: entered promiscuous mode
[   46.676447][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.678707][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.680993][ T5819] bridge_slave_1: entered allmulticast mode
[   46.685153][ T5819] bridge_slave_1: entered promiscuous mode
[   46.687558][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.689772][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.691991][ T5814] bridge_slave_1: entered allmulticast mode
[   46.695009][ T5814] bridge_slave_1: entered promiscuous mode
[   46.726212][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.737361][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.741758][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.746960][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.757182][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.761093][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.780232][ T5810] team0: Port device team_slave_0 added
[   46.797332][ T5810] team0: Port device team_slave_1 added
[   46.807379][ T5819] team0: Port device team_slave_0 added
[   46.823787][ T5814] team0: Port device team_slave_0 added
[   46.827222][ T5814] team0: Port device team_slave_1 added
[   46.837082][ T5819] team0: Port device team_slave_1 added
[   46.846928][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.849092][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.857452][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.875348][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.877561][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.886905][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.891126][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.893639][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.901736][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.906711][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.909261][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.918332][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.923352][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.925551][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.933902][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.941734][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.945225][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.954105][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.989989][ T5814] hsr_slave_0: entered promiscuous mode
[   46.992216][ T5814] hsr_slave_1: entered promiscuous mode
[   47.004629][ T5810] hsr_slave_0: entered promiscuous mode
[   47.006932][ T5810] hsr_slave_1: entered promiscuous mode
[   47.009045][ T5810] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.011615][ T5810] Cannot create hsr debugfs directory
[   47.064274][ T5819] hsr_slave_0: entered promiscuous mode
[   47.066644][ T5819] hsr_slave_1: entered promiscuous mode
[   47.068794][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.071265][ T5819] Cannot create hsr debugfs directory
[   47.214940][ T5814] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.225614][ T5814] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.237128][ T5814] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.246417][ T5814] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.267960][ T5810] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.282461][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.284924][ T5814] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.287653][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.290002][ T5814] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.299840][ T5810] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.305284][ T5810] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.309522][ T5810] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.335084][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.346861][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.350878][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.355893][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.367863][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.370147][ T5810] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.372561][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.375149][ T5810] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.401451][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.403882][ T5819] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.406355][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.408722][ T5819] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.448679][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.461083][ T3034] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.465022][ T3034] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.468003][ T3034] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.471407][ T3034] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.474718][ T3034] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.477418][ T3034] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.493433][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.498489][ T5814] 8021q: adding VLAN 0 to HW filter on device team0
[   47.505910][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.512441][ T3034] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.514851][ T3034] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.523364][ T3034] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.525715][ T3034] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.530425][ T5810] 8021q: adding VLAN 0 to HW filter on device team0
[   47.549925][ T3034] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.552176][ T3034] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.558863][ T5819] 8021q: adding VLAN 0 to HW filter on device team0
[   47.568391][ T3034] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.570732][ T3034] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.586172][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.588486][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.603641][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.606033][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.621660][ T5810] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   47.625732][ T5810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.682604][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.728061][ T5814] veth0_vlan: entered promiscuous mode
[   47.750273][ T5814] veth1_vlan: entered promiscuous mode
[   47.758309][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.770815][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.784727][ T5814] veth0_macvtap: entered promiscuous mode
[   47.791418][ T5814] veth1_macvtap: entered promiscuous mode
[   47.818271][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.827361][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.836132][ T5814] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.838927][ T5814] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.841658][ T5814] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.844805][ T5814] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.852339][ T5819] veth0_vlan: entered promiscuous mode
[   47.855847][ T5810] veth0_vlan: entered promiscuous mode
[   47.866055][ T5810] veth1_vlan: entered promiscuous mode
[   47.876538][ T5819] veth1_vlan: entered promiscuous mode
[   47.917959][ T5810] veth0_macvtap: entered promiscuous mode
[   47.926298][ T3034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.926330][ T5810] veth1_macvtap: entered promiscuous mode
[   47.928898][ T3034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.932243][ T5819] veth0_macvtap: entered promiscuous mode
[   47.941831][ T5819] veth1_macvtap: entered promiscuous mode
[   47.964558][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.969524][ T3034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.971146][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.975581][ T3034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.979928][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.986418][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.990542][ T5810] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.994275][ T5810] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.997033][ T5810] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.999769][ T5810] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.006413][ T5819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.009208][ T5819] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.011970][ T5819] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.015364][ T5819] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.026834][ T5814] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.089945][ T5875] syzkaller1: entered promiscuous mode
[   48.092584][ T5875] syzkaller1: entered allmulticast mode
[   48.109479][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.111967][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.127660][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.130269][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.160553][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.167395][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.181082][ T5878] ksmbd: Unknown IPC event: 3, ignore.
[   48.185625][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.188484][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.264042][ T5813] Bluetooth: hci0: command tx timeout
[   48.266296][ T5883] syz.2.5 uses obsolete (PF_INET,SOCK_PACKET)
[   48.323379][ T5885] netlink: 'syz.1.2': attribute type 16 has an invalid length.
[   48.325909][ T5885] netlink: 'syz.1.2': attribute type 17 has an invalid length.
[   48.332580][ T5885] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   48.343373][ T5813] Bluetooth: hci1: command tx timeout
[   48.423119][ T5813] Bluetooth: hci2: command tx timeout
[   48.489251][ T5898] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7'.
[   49.167555][ T5902] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.230583][ T5908] Cannot find del_set index 0 as target
[   49.309425][ T5913] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10'.
[   49.322204][ T5913] nbd: must specify an index to disconnect
[   49.326683][ T5913] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.10'.
[   49.373300][ T5917] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.392832][ T5917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11'.
[   50.252498][ T5935] netlink: 'syz.0.14': attribute type 1 has an invalid length.
[   50.343126][ T5813] Bluetooth: hci0: command tx timeout
[   50.389542][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.392498][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.423034][ T5813] Bluetooth: hci1: command tx timeout
[   50.431639][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   50.438564][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   50.471507][ T5943] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   50.474700][ T5943] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   50.477749][ T5943] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   50.481460][ T5943] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   50.503045][ T5813] Bluetooth: hci2: command tx timeout
[   50.630497][ T5949] Cannot find set identified by id 1 to match
[   50.637985][ T5949] netlink: 14 bytes leftover after parsing attributes in process `syz.0.20'.
[   50.679296][ T5949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   50.683399][ T5949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   50.686777][ T5949] bond0 (unregistering): Released all slaves
[   50.906115][ T5951] Zero length message leads to an empty skb
[   50.941542][ T5954] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.22'.
[   51.125950][ T5964] warning: `syz.2.25' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   51.166553][ T5966] netlink: 'syz.1.22': attribute type 2 has an invalid length.
[   51.285977][ T5977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28'.
[   51.290074][ T5977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.28'.
[   51.295538][ T5977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28'.
[   51.323620][ T5979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29'.
[   51.621315][ T6001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   51.627164][ T6001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   51.632394][ T6001] bond0 (unregistering): Released all slaves
[   51.752264][ T6009] IPVS: Error connecting to the multicast addr
[   51.808846][ T6011] netlink: 'syz.2.40': attribute type 2 has an invalid length.
[   52.422962][ T5813] Bluetooth: hci0: command tx timeout
[   52.504416][ T5813] Bluetooth: hci1: command tx timeout
[   52.593503][ T5813] Bluetooth: hci2: command tx timeout
[   52.807360][ T6038] netlink: 'syz.2.50': attribute type 10 has an invalid length.
[   52.810695][ T6034] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   52.819809][ T6038] netlink: 'syz.2.50': attribute type 10 has an invalid length.
[   52.822567][ T6038] batadv0: entered promiscuous mode
[   52.826926][ T6038] batadv0: entered allmulticast mode
[   52.829080][ T6038] bridge0: port 3(batadv0) entered blocking state
[   52.831365][ T6038] bridge0: port 3(batadv0) entered disabled state
[   52.942772][ T6047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   53.089431][ T6077] netlink: 'syz.2.59': attribute type 13 has an invalid length.
[   53.092023][ T6077] netlink: 'syz.2.59': attribute type 17 has an invalid length.
[   53.103092][ T6077] gretap0: refused to change device tx_queue_len
[   53.105455][ T6077] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   53.153650][ T5823] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   53.157457][ T5823] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   53.478140][ T6094] netlink: 'syz.0.66': attribute type 21 has an invalid length.
[   53.504792][ T6096] __nla_validate_parse: 16 callbacks suppressed
[   53.504802][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.67'.
[   53.510424][ T6096] xt_l2tp: wrong L2TP version: 0
[   53.640203][ T6106] tipc: Started in network mode
[   53.642414][ T6106] tipc: Node identity a62672f29dec, cluster identity 4711
[   53.645683][ T6106] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   53.648890][ T6106] syzkaller0: entered promiscuous mode
[   53.651230][ T6106] syzkaller0: entered allmulticast mode
[   53.658271][ T6106] tipc: Resetting bearer <eth:syzkaller0>
[   53.664782][ T6106] tipc: Resetting bearer <eth:syzkaller0>
[   53.670559][ T6106] tipc: Disabling bearer <eth:syzkaller0>
[   53.880144][ T6110] 8021q: adding VLAN 0 to HW filter on device team0
[   53.885378][ T6110] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   54.044718][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.71'.
[   54.062853][ T6113] team0: Port device team_slave_0 removed
[   54.127393][ T6118] netlink: 28 bytes leftover after parsing attributes in process `syz.1.73'.
[   54.502951][ T5813] Bluetooth: hci0: command tx timeout
[   54.583026][ T5813] Bluetooth: hci1: command tx timeout
[   54.631788][ T6138] Illegal XDP return value 16128 on prog  (id 22) dev syz_tun, expect packet loss!
[   54.663775][ T5813] Bluetooth: hci2: command tx timeout
[   55.076498][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.82'.
[   55.080751][ T6143] netlink: 188 bytes leftover after parsing attributes in process `syz.1.82'.
[   55.141148][ T6155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.86'.
[   55.265992][ T6166] netlink: 60 bytes leftover after parsing attributes in process `syz.1.90'.
[   55.269024][ T6164] netlink: 60 bytes leftover after parsing attributes in process `syz.1.90'.
[   55.381046][ T6175] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.388039][ T6175] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.413440][ T6175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.93'.
[   55.600484][ T6191] netlink: 60 bytes leftover after parsing attributes in process `syz.0.97'.
[   56.036521][ T6211] netlink: 'syz.1.106': attribute type 16 has an invalid length.
[   56.039169][ T6211] netlink: 'syz.1.106': attribute type 17 has an invalid length.
[   56.048398][ T6211] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   56.812570][ T6253] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   57.838927][ T6296] batadv_slave_1: entered promiscuous mode
[   57.844215][ T6296] batadv_slave_1: left promiscuous mode
[   58.042480][ T6310] netlink: 'syz.1.135': attribute type 5 has an invalid length.
[   58.046900][ T6310] ip6t_REJECT: ECHOREPLY is not supported
[   58.166538][ T6256] Set syz1 is full, maxelem 65536 reached
[   58.250372][ T6327] netlink: 'syz.2.142': attribute type 12 has an invalid length.
[   58.361785][ T6342] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   58.402634][ T6345] block nbd0: Unsupported socket: shutdown callout must be supported.
[   58.414314][ T6345] netlink: 'syz.1.149': attribute type 1 has an invalid length.
[   58.531893][ T6352] IPVS: set_ctl: invalid protocol: 4 255.255.255.255:20003
[   58.780971][ T6380] netlink: 'syz.0.157': attribute type 21 has an invalid length.
[   58.791410][ T6380] netlink: 'syz.0.157': attribute type 1 has an invalid length.
[   58.884168][ T6393] __nla_validate_parse: 16 callbacks suppressed
[   58.884177][ T6393] netlink: 24 bytes leftover after parsing attributes in process `syz.1.158'.
[   59.106384][ T6407] Cannot find set identified by id 1 to match
[   59.132743][ T6412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.162'.
[   59.134701][ T6414] netlink: 44 bytes leftover after parsing attributes in process `syz.1.163'.
[   59.138967][ T6414] netlink: 43 bytes leftover after parsing attributes in process `syz.1.163'.
[   59.142108][ T6414] netlink: 'syz.1.163': attribute type 6 has an invalid length.
[   59.147462][ T6414] netlink: 'syz.1.163': attribute type 5 has an invalid length.
[   59.150039][ T6414] netlink: 43 bytes leftover after parsing attributes in process `syz.1.163'.
[   59.211506][ T6421] netlink: 60 bytes leftover after parsing attributes in process `syz.2.164'.
[   59.214731][ T6416] netlink: 60 bytes leftover after parsing attributes in process `syz.2.164'.
[   59.255638][ T6420] netlink: 'syz.1.166': attribute type 2 has an invalid length.
[   59.262744][ T6420] `: entered promiscuous mode
[   59.266936][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.166'.
[   59.269852][ T6420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.166'.
[   59.272691][ T6420] netlink: 34 bytes leftover after parsing attributes in process `syz.1.166'.
[   59.347247][ T6431] IPVS: set_ctl: invalid protocol: 22 224.0.0.1:20000
[   60.351370][ T6493] Cannot find set identified by id 1 to match
[   60.627636][ T6514] Cannot find set identified by id 1 to match
[   60.664651][ T6517] netlink: 'syz.1.190': attribute type 3 has an invalid length.
[   60.777272][ T6524] netlink: 'syz.1.192': attribute type 39 has an invalid length.
[   60.788577][ T6524] veth0_macvtap: left promiscuous mode
[   60.980883][ T6551] Cannot find set identified by id 1 to match
[   61.068603][ T6562] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20002
[   61.078714][ T6566] netlink: 'syz.2.206': attribute type 12 has an invalid length.
[   61.129121][ T6570] openvswitch: netlink: nsh attribute has 13 unknown bytes.
[   61.131949][ T6570] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   61.179938][ T6574] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[   61.204760][ T6578] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[   61.227966][ T6581] netlink: 'syz.1.213': attribute type 11 has an invalid length.
[   61.339886][ T6593] vlan2: entered allmulticast mode
[   61.475320][ T6597] team0 (unregistering): Port device team_slave_1 removed
[   61.719302][ T6616] netlink: 'syz.1.224': attribute type 1 has an invalid length.
[   61.752153][ T6618] Cannot find set identified by id 1 to match
[   62.172174][ T6659] batadv_slave_1: entered promiscuous mode
[   62.174997][ T6658] batadv_slave_1: left promiscuous mode
[   62.212140][ T6666] Unknown options in mask 700
[   62.217196][ T6666] xt_SECMARK: invalid mode: 0
[   62.240947][ T6669] Cannot find set identified by id 1 to match
[   62.365623][ T6680] batadv_slave_1: entered promiscuous mode
[   62.369802][ T6679] batadv_slave_1: left promiscuous mode
[   62.488709][ T6698] syz_tun: entered promiscuous mode
[   62.555316][ T6702] batadv_slave_1: entered promiscuous mode
[   62.558576][ T6701] batadv_slave_1: left promiscuous mode
[   63.195422][ T6751] batadv_slave_1: entered promiscuous mode
[   63.199088][ T6750] batadv_slave_1: left promiscuous mode
[   63.277226][ T6761] xfrm1: entered promiscuous mode
[   63.278952][ T6761] xfrm1: entered allmulticast mode
[   63.311820][ T6764] dummy0: entered promiscuous mode
[   63.314565][ T5813] Bluetooth: hci2: command tx timeout
[   63.317636][ T6764] bridge0: port 3(dummy0) entered blocking state
[   63.319958][ T6764] bridge0: port 3(dummy0) entered disabled state
[   63.324687][ T6764] dummy0: entered allmulticast mode
[   63.346368][ T6764] xt_hashlimit: size too large, truncated to 1048576
[   63.412725][ T6777] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[   63.466000][ T6781] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   63.693766][ T6809] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   64.467595][ T6882] __nla_validate_parse: 33 callbacks suppressed
[   64.467607][ T6882] netlink: 24 bytes leftover after parsing attributes in process `syz.1.300'.
[   64.559117][ T6884] syz.0.301 uses old SIOCAX25GETINFO
[   65.293929][ T6929] C: renamed from team_slave_0 (while UP)
[   65.300142][ T6931] validate_nla: 9 callbacks suppressed
[   65.300151][ T6931] netlink: 'syz.0.317': attribute type 83 has an invalid length.
[   65.306837][ T6929] netlink: 'syz.2.316': attribute type 2 has an invalid length.
[   65.309895][ T6929] netlink: 116 bytes leftover after parsing attributes in process `syz.2.316'.
[   65.313281][ T6929] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   65.315909][ T6931] netlink: 32 bytes leftover after parsing attributes in process `syz.0.317'.
[   65.467928][ T6952] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[   65.670673][ T6967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.327'.
[   65.708726][ T6969] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.328'.
[   65.712532][ T6969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'.
[   65.747467][ T6971] batadv_slave_1: entered promiscuous mode
[   65.750207][ T6970] batadv_slave_1: left promiscuous mode
[   65.995570][ T6990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.336'.
[   66.019055][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.337'.
[   66.025387][ T6992] netlink: 140 bytes leftover after parsing attributes in process `syz.0.337'.
[   66.179602][ T7004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.341'.
[   66.182666][ T7004] bridge0: port 3(batadv0) entered disabled state
[   66.188732][ T7004] bridge_slave_1: left allmulticast mode
[   66.190658][ T7004] bridge_slave_1: left promiscuous mode
[   66.192634][ T7004] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.196560][ T7004] bridge_slave_0: left allmulticast mode
[   66.198485][ T7004] bridge_slave_0: left promiscuous mode
[   66.200450][ T7004] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.411126][   T33] audit: type=1800 audit(1751824626.213:2): pid=7027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.347" name=34FFFF dev="tmpfs" ino=516 res=0 errno=0
[   66.471561][ T7035] netlink: 'syz.0.352': attribute type 1 has an invalid length.
[   66.533174][ T7034] netlink: 'syz.2.351': attribute type 1 has an invalid length.
[   66.565238][ T7040] Bluetooth: MGMT ver 1.23
[   66.646137][ T7047] pim6reg1: entered promiscuous mode
[   66.647921][ T7047] pim6reg1: entered allmulticast mode
[   66.822660][ T7074] Unknown options in mask 700
[   66.890791][ T7081] sctp: [Deprecated]: syz.0.366 (pid 7081) Use of int in max_burst socket option.
[   66.890791][ T7081] Use struct sctp_assoc_value instead
[   67.131741][ T7113] netlink: 'syz.1.374': attribute type 2 has an invalid length.
[   67.216506][ T7131] bridge0: entered promiscuous mode
[   67.511480][ T7160] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[   67.611465][ T7166] IPVS: set_ctl: invalid protocol: 146 0.0.0.0:20002
[   68.173785][ T7179] netlink: 'syz.1.400': attribute type 1 has an invalid length.
[   68.190414][ T7181] trusted_key: syz.0.401 sent an empty control message without MSG_MORE.
[   68.576269][   T33] audit: type=1107 audit(1751824628.383:3): pid=7219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   68.583071][ T5816] Bluetooth: hci0: command 0x0c1a tx timeout
[   68.594143][ T5813] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   68.618644][ T7166] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   68.750492][ T7234] xt_time: invalid argument - start or stop time greater than 23:59:59
[   69.022584][ T7271] netlink: 'syz.1.433': attribute type 2 has an invalid length.
[   69.028142][ T7271] netlink: 'syz.1.433': attribute type 1 has an invalid length.
[   69.194166][ T7279] syzkaller1: entered promiscuous mode
[   69.196107][ T7279] syzkaller1: entered allmulticast mode
[   69.299398][ T7287] netlink: 'syz.1.438': attribute type 1 has an invalid length.
[   69.339496][ T7287] bond2: (slave gretap1): making interface the new active one
[   69.342317][ T7287] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   69.532504][ T7310] __nla_validate_parse: 58 callbacks suppressed
[   69.532513][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.446'.
[   69.543154][ T7310] netlink: 20 bytes leftover after parsing attributes in process `syz.0.446'.
[   69.548638][ T7310] netlink: 88 bytes leftover after parsing attributes in process `syz.0.446'.
[   69.631694][ T7319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.449'.
[   69.666596][ T7319] netlink: 'syz.0.449': attribute type 1 has an invalid length.
[   69.689204][ T7319] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.692558][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.449'.
[   69.698816][ T7319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.449'.
[   69.701184][ T7312] netlink: 20 bytes leftover after parsing attributes in process `syz.1.447'.
[   69.702069][ T7319] netlink: 28 bytes leftover after parsing attributes in process `syz.0.449'.
[   69.768106][ T7328] netlink: 16 bytes leftover after parsing attributes in process `syz.0.451'.
[   69.939050][ T7349] team0: Cannot enslave team device to itself
[   69.949483][ T7349] netlink: 32 bytes leftover after parsing attributes in process `syz.2.460'.
[   70.540095][ T7429] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   70.546299][ T7429] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   70.663594][ T5813] Bluetooth: hci0: command 0x0c1a tx timeout
[   71.139563][ T7475] validate_nla: 5 callbacks suppressed
[   71.139572][ T7475] netlink: 'syz.2.503': attribute type 1 has an invalid length.
[   71.522001][ T7517] netlink: 'syz.2.521': attribute type 1 has an invalid length.
[   71.536268][ T7517] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.973058][ T7474] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   72.027402][ T7547] netlink: 'syz.0.532': attribute type 10 has an invalid length.
[   72.029898][ T7547] openvswitch: netlink: Flow key attr not present in new flow.
[   72.034242][ T7547] sctp: [Deprecated]: syz.0.532 (pid 7547) Use of int in max_burst socket option deprecated.
[   72.034242][ T7547] Use struct sctp_assoc_value instead
[   72.320114][ T7560] tipc: Started in network mode
[   72.321818][ T7560] tipc: Node identity ca1e01f50c72, cluster identity 4711
[   72.326686][ T7560] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[   73.143783][ T5813] Bluetooth: hci0: command 0x0c1a tx timeout
[   73.323819][  T791] tipc: Node number set to 3328967157
[   73.757692][ T7560] tipc: Resetting bearer <eth:syzkaller0>
[   74.893434][ T3034] tipc: Resetting bearer <eth:syzkaller0>
[   74.896810][ T7559] tipc: Resetting bearer <eth:syzkaller0>
[   75.509490][ T7559] tipc: Disabling bearer <eth:syzkaller0>
[   75.706234][ T7578] netlink: 'syz.1.541': attribute type 21 has an invalid length.
[   75.708889][ T7578] IPv6: NLM_F_CREATE should be specified when creating new route
[   75.926508][ T7583] __nla_validate_parse: 19 callbacks suppressed
[   75.926523][ T7583] netlink: 4176 bytes leftover after parsing attributes in process `syz.1.544'.
[   76.918719][ T7623] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.932083][ T7628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.558'.
[   76.938151][ T7628] vlan0: entered promiscuous mode
[   76.940041][ T7628] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   77.007186][ T7623] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.051847][ T7643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.563'.
[   77.065619][ T7641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.562'.
[   77.085845][ T7623] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.147318][ T7623] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.162298][ T7651] netlink: 'syz.2.567': attribute type 5 has an invalid length.
[   77.245368][ T7623] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.256101][ T7623] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.263834][ T7623] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.272822][ T7623] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.559083][ T7708] netlink: zone id is out of range
[   77.560508][ T7703] netlink: 132 bytes leftover after parsing attributes in process `syz.0.587'.
[   77.565825][ T7708] netlink: zone id is out of range
[   77.567642][ T7708] netlink: zone id is out of range
[   77.569600][ T7703] netlink: 'syz.0.587': attribute type 11 has an invalid length.
[   77.569691][ T7708] netlink: zone id is out of range
[   77.576812][ T7708] netlink: zone id is out of range
[   77.590295][ T7708] netlink: zone id is out of range
[   77.591921][ T7708] netlink: zone id is out of range
[   77.599994][ T7708] netlink: zone id is out of range
[   77.602458][ T7708] netlink: zone id is out of range
[   77.666984][ T7715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.590'.
[   77.706337][ T7719] netlink: 24 bytes leftover after parsing attributes in process `syz.2.593'.
[   77.789106][ T7723] Can't find ip_set type hash
[   77.831077][ T7732] netlink: 32 bytes leftover after parsing attributes in process `syz.1.597'.
[   77.875731][ T7735] netlink: 24 bytes leftover after parsing attributes in process `syz.1.598'.
[   78.162107][ T7758] bond1: entered promiscuous mode
[   78.165611][ T7758] bond1: entered allmulticast mode
[   78.169399][ T7758] 8021q: adding VLAN 0 to HW filter on device bond1
[   78.238522][ T7776] netlink: 104 bytes leftover after parsing attributes in process `syz.2.612'.
[   78.289645][ T7780] xt_CT: No such helper "snmp_trap"
[   78.400460][ T7798] IPVS: sync thread started: state = MASTER, mcast_ifn = vxcan1, syncid = 0, id = 0
[   78.435919][ T7802] netlink: 'syz.1.622': attribute type 11 has an invalid length.
[   78.491889][ T7804] "syz.2.623" (7804) uses obsolete ecb(arc4) skcipher
[   78.519681][ T7811] bridge0: port 4(macvlan2) entered blocking state
[   78.522293][ T7811] bridge0: port 4(macvlan2) entered disabled state
[   78.526484][ T7811] macvlan2: entered allmulticast mode
[   78.529023][ T7811] bridge0: entered allmulticast mode
[   78.531896][ T7811] macvlan2: left allmulticast mode
[   78.534462][ T7811] bridge0: left allmulticast mode
[   78.563895][ T7815] xt_ecn: cannot match TCP bits for non-tcp packets
[   78.914719][ T7847] netlink: 'syz.1.636': attribute type 11 has an invalid length.
[   79.086624][ T7868] ipt_REJECT: TCP_RESET invalid for non-tcp
[   79.477169][ T7906] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.482775][ T7906] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.525967][ T7906] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.529395][ T7906] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.532327][ T7906] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.540210][ T7906] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.684392][ T7914] block nbd0: server does not support multiple connections per device.
[   79.688237][ T7914] block nbd0: shutting down sockets
[   79.829885][ T7928] netlink: 'syz.0.667': attribute type 1 has an invalid length.
[   80.124439][ T7943] netlink: 'syz.0.673': attribute type 1 has an invalid length.
[   80.126923][ T7943] netlink: 'syz.0.673': attribute type 10 has an invalid length.
[   80.429117][ T7973] can: request_module (can-proto-3) failed.
[   80.433947][ T7973] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[   80.445698][ T7976] lo speed is unknown, defaulting to 1000
[   80.447627][ T7976] lo speed is unknown, defaulting to 1000
[   80.450975][ T7976] lo speed is unknown, defaulting to 1000
[   80.456599][ T7976] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   80.473993][ T7976] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   80.498445][ T7976] lo speed is unknown, defaulting to 1000
[   80.501087][ T7976] lo speed is unknown, defaulting to 1000
[   80.506499][ T7976] lo speed is unknown, defaulting to 1000
[   80.587403][ T7988] lo speed is unknown, defaulting to 1000
[   80.611058][ T7993] lo speed is unknown, defaulting to 1000
[   80.650560][ T7999] bridge1: port 1(ip6gretap1) entered blocking state
[   80.654479][ T7999] bridge1: port 1(ip6gretap1) entered disabled state
[   80.657647][ T7999] ip6gretap1: entered allmulticast mode
[   80.660762][ T7999] ip6gretap1: entered promiscuous mode
[   80.776203][ T3034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.778731][ T3034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.847221][ T8012] pim6reg1: entered promiscuous mode
[   80.849231][ T8012] pim6reg1: entered allmulticast mode
[   80.965266][ T8018] __nla_validate_parse: 18 callbacks suppressed
[   80.965277][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.696'.
[   81.066062][   T62] cfg80211: failed to load regulatory.db
[   81.088378][ T8024] netlink: 'syz.1.697': attribute type 3 has an invalid length.
[   81.109360][ T8024] netlink: 'syz.1.697': attribute type 3 has an invalid length.
[   81.131548][ T8029] netlink: 'syz.2.700': attribute type 5 has an invalid length.
[   81.177046][ T8035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.703'.
[   81.237756][ T8039] xt_CT: No such helper "snmp"
[   81.294694][ T8049] lo speed is unknown, defaulting to 1000
[   81.320116][ T8053] ipvlan2: entered promiscuous mode
[   81.323954][ T8053] bridge0: port 1(ipvlan2) entered blocking state
[   81.326196][ T8053] bridge0: port 1(ipvlan2) entered disabled state
[   81.328349][ T8053] ipvlan2: entered allmulticast mode
[   81.330123][ T8053] bridge0: entered allmulticast mode
[   81.334345][ T8053] ipvlan2: left allmulticast mode
[   81.336791][ T8053] bridge0: left allmulticast mode
[   81.463504][ T8061] xt_ecn: cannot match TCP bits for non-tcp packets
[   82.086456][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.726'.
[   82.089187][ T8104] batman_adv: batadv0: Removing interface: batadv_slave_0
[   82.091992][ T8104] batman_adv: batadv0: Removing interface: batadv_slave_1
[   82.184568][ T8109] netlink: 24 bytes leftover after parsing attributes in process `syz.0.727'.
[   82.224606][ T8112] netlink: 16 bytes leftover after parsing attributes in process `syz.0.728'.
[   82.335587][ T8116] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0
[   82.339773][ T8116] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0
[   82.343900][ T8116] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0
[   82.348553][ T8116] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0
[   82.571207][ T8138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.736'.
[   83.270823][ T8160] xt_CT: You must specify a L4 protocol and not use inversions on it
[   83.360072][ T8167] netlink: 'syz.1.745': attribute type 1 has an invalid length.
[   83.473685][ T8167] netlink: 28 bytes leftover after parsing attributes in process `syz.1.745'.
[   83.542146][ T8180] lo speed is unknown, defaulting to 1000
[   83.581613][ T8183] netlink: 16 bytes leftover after parsing attributes in process `syz.0.749'.
[   83.592099][ T8183] netlink: 20 bytes leftover after parsing attributes in process `syz.0.749'.
[   83.602224][ T8183] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0
[   83.607289][ T8183] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0
[   83.611973][ T8183] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0
[   83.616854][ T8183] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0
[   83.621693][ T8183] geneve3: entered allmulticast mode
[   83.680805][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.755'.
[   83.749416][   T62] IPVS: starting estimator thread 0...
[   83.880558][ T5823] IPVS: stop unused estimator thread 0...
[   83.924850][ T8231] netlink: 'syz.1.763': attribute type 4 has an invalid length.
[   83.928433][ T8231] netlink: 'syz.1.763': attribute type 4 has an invalid length.
[   84.228009][ T8252] dvmrp0: entered allmulticast mode
[   84.241228][ T8253] net_ratelimit: 10 callbacks suppressed
[   84.241239][ T8253] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.688589][ T8285] lo speed is unknown, defaulting to 1000
[   84.777506][ T8298] sctp: [Deprecated]: syz.1.788 (pid 8298) Use of struct sctp_assoc_value in delayed_ack socket option.
[   84.777506][ T8298] Use struct sctp_sack_info instead
[   84.780078][ T8301] ip6erspan0: entered allmulticast mode
[   84.970962][ T8319] lo speed is unknown, defaulting to 1000
[   85.098973][ T8327] netlink: 'syz.0.797': attribute type 2 has an invalid length.
[   85.155736][ T8260] Bluetooth: hci1: Opcode 0x0401 failed: -4
[   85.386988][ T8357] netlink: 'syz.0.811': attribute type 39 has an invalid length.
[   85.415048][ T8364] xt_time: unknown flags 0x4
[   85.416882][ T8364] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20001
[   86.217196][ T8367] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   86.331244][ T8426] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   86.335175][ T8426] Cannot find add_set index 4 as target
[   86.353447][ T5813] Bluetooth: hci1: command 0x0401 tx timeout
[   86.472279][ T8438] __nla_validate_parse: 8 callbacks suppressed
[   86.472290][ T8438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.838'.
[   86.478129][ T8439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.838'.
[   86.720914][ T8460] netlink: 28 bytes leftover after parsing attributes in process `syz.1.847'.
[   86.788375][ T8467] netlink: 56 bytes leftover after parsing attributes in process `syz.1.850'.
[   87.463627][ T5813] Bluetooth: hci0: command 0x0c1a tx timeout
[   87.467199][ T8467] Bluetooth: hci0: Opcode 0x0401 failed: -110
[   87.542780][ T8486] netlink: 20 bytes leftover after parsing attributes in process `syz.2.857'.
[   87.550556][ T8486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.857'.
[   87.622625][ T8488] gtp1: entered allmulticast mode
[   87.698073][ T8495] lo speed is unknown, defaulting to 1000
[   87.715912][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.864'.
[   87.755320][ T8508] geneve2: entered promiscuous mode
[   87.809384][ T8511] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma?
[   87.861465][ T8517] bond0: entered promiscuous mode
[   87.864301][ T8517] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   87.868826][ T8517] bond0: left promiscuous mode
[   88.018640][ T8528] lo speed is unknown, defaulting to 1000
[   88.027618][ T8531] bridge0: left promiscuous mode
[   88.031595][ T8531] bridge0: port 3(dummy0) entered blocking state
[   88.033818][ T8531] bridge0: port 3(dummy0) entered forwarding state
[   88.040335][ T8531] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.042667][ T8531] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.047819][ T8531] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.050148][ T8531] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.065127][ T8531] vlan2: left allmulticast mode
[   88.067792][ T8531] ip6erspan0: left allmulticast mode
[   88.070165][ T8531] gtp1: left allmulticast mode
[   88.072727][ T8531] geneve2: left promiscuous mode
[   88.151958][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.876'.
[   88.161279][ T8540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.876'.
[   88.328012][ T8557] veth1_to_team: entered allmulticast mode
[   88.365060][ T8559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.881'.
[   88.368639][ T8559] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.371460][ T8559] batman_adv: batadv0: Removing interface: batadv_slave_0
[   88.375046][ T8559] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.378148][ T8559] batman_adv: batadv0: Removing interface: batadv_slave_1
[   88.496350][ T8496] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   88.643797][ T8572] netlink: 'syz.0.886': attribute type 11 has an invalid length.
[   88.686265][ T8574] openvswitch: netlink: Message has 8 unknown bytes.
[   89.440123][ T8582] netlink: 'syz.2.890': attribute type 10 has an invalid length.
[   89.451821][ T8584] openvswitch: netlink: Flow key attr not present in new flow.
[   89.512252][ T8587] netlink: 'syz.2.890': attribute type 12 has an invalid length.
[   89.553287][ T5813] Bluetooth: hci0: command 0x0c1a tx timeout
[   89.622308][ T8599] netlink: 'syz.0.894': attribute type 4 has an invalid length.
[   89.723873][ T8612] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   89.727262][ T8612] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   89.730017][ T8612] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   89.732844][ T8612] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   90.391499][ T8633] veth0: entered promiscuous mode
[   90.454001][ T8632] veth0: left promiscuous mode
[   90.501955][ T8636] xt_CT: No such helper "pptp"
[   90.507829][ T8636] --map-set only usable from mangle table
[   90.595994][ T8639] sctp: [Deprecated]: syz.0.906 (pid 8639) Use of struct sctp_assoc_value in delayed_ack socket option.
[   90.595994][ T8639] Use struct sctp_sack_info instead
[   90.626679][ T8646] netlink: 'syz.0.908': attribute type 11 has an invalid length.
[   90.768579][ T8661] xt_bpf: check failed: parse error
[   90.798910][ T8663] netlink: 'syz.2.913': attribute type 2 has an invalid length.
[   90.870173][ T8669] bridge0: the hash_elasticity option has been deprecated and is always 16
[   90.873941][ T8669] bridge0: entered allmulticast mode
[   90.940052][ T8676] netlink: 'syz.2.919': attribute type 11 has an invalid length.
[   91.006480][ T8680] xt_ecn: cannot match TCP bits for non-tcp packets
[   91.058818][ T8684] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   91.101915][ T8686] bond0: entered promiscuous mode
[   91.104955][ T8686] bond_slave_0: entered promiscuous mode
[   91.107301][ T8686] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[   91.110497][ T8686] hsr1: Slave B (bond_slave_0) is not up; please bring it up to get a fully working HSR network
[   91.114431][ T8686] hsr1: entered promiscuous mode
[   91.206400][ T8695] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.488518][ T8709] bridge0: port 4(ipvlan2) entered blocking state
[   91.501429][ T8709] bridge0: port 4(ipvlan2) entered disabled state
[   91.505658][ T8709] ipvlan2: entered allmulticast mode
[   91.508670][ T8709] bridge0: entered allmulticast mode
[   91.511479][ T8709] ipvlan2: left allmulticast mode
[   91.523147][ T8709] bridge0: left allmulticast mode
[   91.623134][ T5813] Bluetooth: hci0: command 0x0c1a tx timeout
[   91.840601][ T8721] __nla_validate_parse: 16 callbacks suppressed
[   91.840612][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.933'.
[   91.848803][ T8721] netlink: 20 bytes leftover after parsing attributes in process `syz.1.933'.
[   91.977473][    C1] vcan0: j1939_tp_rxtimer: 0xffff888120861400: rx timeout, send abort
[   92.155549][ T8730] netlink: 20 bytes leftover after parsing attributes in process `syz.2.936'.
[   92.481216][    C1] vcan0: j1939_tp_rxtimer: 0xffff888120861400: abort rx timeout. Force session deactivation
[   92.875307][ T8776] netlink: 'syz.1.947': attribute type 11 has an invalid length.
[   92.884364][ T8778] netlink: 48 bytes leftover after parsing attributes in process `syz.2.948'.
[   92.958115][ T8786] Bluetooth: MGMT ver 1.23
[   93.348947][ T8798] netlink: 'syz.2.955': attribute type 11 has an invalid length.
[   93.380442][ T8800] lo speed is unknown, defaulting to 1000
[   93.409692][ T8800] netlink: 68 bytes leftover after parsing attributes in process `syz.2.956'.
[   93.458624][ T8803] lo speed is unknown, defaulting to 1000
[   93.731094][ T8821] netlink: 'syz.2.962': attribute type 11 has an invalid length.
[   93.782397][ T8831] x_tables: duplicate underflow at hook 2
[   93.860002][ T8825] bridge_slave_0: left allmulticast mode
[   93.861929][ T8825] bridge_slave_0: left promiscuous mode
[   93.864280][ T8825] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.867741][ T8825] bridge_slave_1: left allmulticast mode
[   93.869597][ T8825] bridge_slave_1: left promiscuous mode
[   93.871522][ T8825] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.878293][ T8825] team0: Failed to send options change via netlink (err -105)
[   93.880881][ T8825] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[   93.890826][ T8825] team0: Port device team_slave_0 removed
[   93.895060][ T8825] team0: Failed to send options change via netlink (err -105)
[   93.897812][ T8825] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[   93.901028][ T8825] team0: Port device team_slave_1 removed
[   94.031501][ T8854] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.036615][ T8855] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.040238][ T8855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.972'.
[   94.249294][ T8869] IPv6: sit1: Disabled Multicast RS
[   94.277794][ T8871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.979'.
[   94.280751][ T8871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.979'.
[   94.346791][ T8875] xt_HMARK: spi-set and port-set can't be combined
[   94.421721][ T8878] netlink: 'syz.1.982': attribute type 4 has an invalid length.
[   94.725516][ T8893] 8021q: VLANs not supported on ipvlan1
[   94.782087][ T8899] netlink: 'syz.2.990': attribute type 1 has an invalid length.
[   94.793949][ T8848] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   94.798343][ T8899] 8021q: adding VLAN 0 to HW filter on device bond2
[   94.927519][ T8919] netlink: 32 bytes leftover after parsing attributes in process `syz.0.994'.
[   94.962832][ T8921] veth4: entered allmulticast mode
[   94.987730][ T8923] netlink: 'syz.1.1001': attribute type 1 has an invalid length.
[   95.021233][ T8925] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1002'.
[   95.094601][ T8934] netlink: 'syz.0.1006': attribute type 11 has an invalid length.
[   95.317619][ T8956] lo speed is unknown, defaulting to 1000
[   95.651387][ T8987] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[   95.673932][ T8989] netlink: 'syz.2.1024': attribute type 2 has an invalid length.
[   95.676539][ T8989] netlink: 'syz.2.1024': attribute type 1 has an invalid length.
[   95.759953][ T8999] bridge0: port 1(gretap0) entered blocking state
[   95.765749][ T8999] bridge0: port 1(gretap0) entered disabled state
[   95.767973][ T8999] gretap0: entered allmulticast mode
[   95.770400][ T8999] gretap0: entered promiscuous mode
[   95.772581][ T8999] bridge0: port 1(gretap0) entered blocking state
[   95.774811][ T8999] bridge0: port 1(gretap0) entered forwarding state
[   95.813351][ T8923] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   95.817286][ T8999] syzkaller0: entered promiscuous mode
[   95.819053][ T8999] syzkaller0: entered allmulticast mode
[   96.034539][ T5813] Bluetooth: hci0: command 0x0c1a tx timeout
[   96.555335][ T9017] veth0: entered promiscuous mode
[   96.560107][ T9021] dummy0: left allmulticast mode
[   96.561767][ T9021] dummy0: left promiscuous mode
[   96.563659][ T9021] bridge0: port 3(dummy0) entered disabled state
[   96.568198][ T9021] bridge_slave_0: left allmulticast mode
[   96.570356][ T9021] bridge_slave_0: left promiscuous mode
[   96.572261][ T9021] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.576468][ T9021] bridge_slave_1: left allmulticast mode
[   96.578340][ T9021] bridge_slave_1: left promiscuous mode
[   96.580276][ T9021] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.585881][ T9021] bond0: (slave bond_slave_0): Releasing backup interface
[   96.592132][ T9021] bond0: (slave bond_slave_1): Releasing backup interface
[   96.617993][ T9021] bond2: (slave gretap1): Releasing active interface
[   96.625338][ T9021] ip6gretap1: left allmulticast mode
[   96.627246][ T9021] ip6gretap1: left promiscuous mode
[   96.629117][ T9021] bridge1: port 1(ip6gretap1) entered disabled state
[   96.646188][ T9025] lo speed is unknown, defaulting to 1000
[   96.690370][ T9032] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[   96.712098][ T9016] veth0: left promiscuous mode
[   96.929859][ T9057] __nla_validate_parse: 9 callbacks suppressed
[   96.929871][ T9057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1047'.
[   96.995061][ T9064] IPVS: set_ctl: invalid protocol: 4 10.1.1.2:20004
[   97.106812][ T9077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1054'.
[   97.315282][ T9093] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   97.365764][ T9097] sctp: [Deprecated]: syz.0.1063 (pid 9097) Use of struct sctp_assoc_value in delayed_ack socket option.
[   97.365764][ T9097] Use struct sctp_sack_info instead
[   97.517025][ T9110] SET target dimension over the limit!
[   97.531179][ T9110] bond2: entered promiscuous mode
[   97.534095][ T9110] 8021q: adding VLAN 0 to HW filter on device bond2
[   97.585312][ T9115] netlink: 'syz.0.1070': attribute type 4 has an invalid length.
[   97.665427][ T9121] xt_bpf: check failed: parse error
[   97.786590][ T5813] Bluetooth: hci2: command 0x0405 tx timeout
[   97.797018][ T9128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1076'.
[   98.113284][ T5813] Bluetooth: hci0: command 0x0c1a tx timeout
[   98.145584][ T9141] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1078'.
[   98.210999][ T9149] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1081'.
[   98.223597][ T9149] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1081'.
[   98.281594][ T9155] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1083'.
[   98.292538][ T9155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1083'.
[   98.301591][ T9163] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[   98.393227][ T9171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1089'.
[   98.433714][ T9177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1091'.
[   98.456598][ T9181] netlink: 'syz.2.1092': attribute type 5 has an invalid length.
[   98.466775][ T9181] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[   98.470219][ T9181] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[   98.474320][ T9181] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[   98.477274][ T9181] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0
[   98.480144][ T9181] geneve2: entered promiscuous mode
[   98.481818][ T9181] geneve2: entered allmulticast mode
[   98.715192][ T9195] bridge0: port 1(gretap0) entered disabled state
[   98.733374][ T9217] lo speed is unknown, defaulting to 1000
[   98.783519][ T9226] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   98.786082][ T9226] IPv6: NLM_F_CREATE should be set when creating new route
[   98.788466][ T9226] IPv6: NLM_F_CREATE should be set when creating new route
[   98.984774][ T9248] openvswitch: netlink: IPv4 tun info is not correct
[   98.984825][ T9249] openvswitch: netlink: IPv4 tun info is not correct
[   99.237527][ T5813] Bluetooth: hci2: link tx timeout
[   99.239999][ T5813] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[   99.378454][ T5280] IPVS: starting estimator thread 0...
[   99.463563][ T9285] IPVS: using max 78 ests per chain, 187200 per kthread
[  100.119459][ T9316] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  100.177296][ T9321] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.180114][ T9321] syzkaller0: entered promiscuous mode
[  100.181959][ T9321] syzkaller0: entered allmulticast mode
[  100.199494][ T9320] tipc: Resetting bearer <eth:syzkaller0>
[  100.209241][ T9320] tipc: Disabling bearer <eth:syzkaller0>
[  100.538405][ T9349] netlink: 'syz.2.1151': attribute type 4 has an invalid length.
[  100.790571][ T9383] netlink: 'syz.2.1159': attribute type 2 has an invalid length.
[  100.964945][ T9401] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.070179][ T9410] netlink: 'syz.2.1166': attribute type 1 has an invalid length.
[  101.303001][ T5816] Bluetooth: hci2: command 0x0405 tx timeout
[  101.306990][ T9312] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  101.309055][ T9311] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  101.389359][ T9433] nftables ruleset with unbound set
[  101.463269][ T9440] netlink: 'syz.1.1176': attribute type 8 has an invalid length.
[  101.498382][ T9446] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  101.775436][ T9475] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma?
[  101.852433][ T9484] IPVS: length: 163 != 66835186712
[  101.978542][ T9503] netlink: 'syz.1.1199': attribute type 39 has an invalid length.
[  102.014380][ T9506] lo speed is unknown, defaulting to 1000
[  102.145795][ T9513] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  102.277724][ T9529] __nla_validate_parse: 36 callbacks suppressed
[  102.277734][ T9529] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1205'.
[  102.279651][ T9531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1206'.
[  102.360347][ T9541] xt_l2tp: missing protocol rule (udp|l2tpip)
[  102.364526][ T9542] netlink: 'syz.1.1211': attribute type 1 has an invalid length.
[  102.366872][ T9539] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1210'.
[  102.368842][ T9542] netlink: 'syz.1.1211': attribute type 2 has an invalid length.
[  102.412566][ T9550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1213'.
[  102.425190][   T10] IPVS: starting estimator thread 0...
[  102.461791][ T9551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1212'.
[  102.466446][ T9551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1212'.
[  102.475325][ T9558] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0
[  102.478456][ T9558] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0
[  102.481234][ T9558] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0
[  102.488329][ T9558] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0
[  102.523447][ T9552] IPVS: using max 80 ests per chain, 192000 per kthread
[  102.553356][ T9565] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  102.585980][ T9565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1219'.
[  102.690033][ T9596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1228'.
[  102.694309][ T9580] block nbd0: server does not support multiple connections per device.
[  102.697337][ T9580] block nbd0: shutting down sockets
[  102.703091][ T9594] netlink: 'syz.0.1227': attribute type 11 has an invalid length.
[  102.706026][ T9594] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1227'.
[  102.710035][ T9594] lo speed is unknown, defaulting to 1000
[  102.711982][ T9594] lo speed is unknown, defaulting to 1000
[  102.720806][ T9594] lo speed is unknown, defaulting to 1000
[  102.732319][ T9594] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  102.742635][ T9594] lo speed is unknown, defaulting to 1000
[  102.745472][ T9594] lo speed is unknown, defaulting to 1000
[  102.750260][ T9594] lo speed is unknown, defaulting to 1000
[  102.889802][ T9616] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1237'.
[  102.912047][ T9616] netlink: 'syz.0.1237': attribute type 1 has an invalid length.
[  102.983771][ T9621] 
[  102.984639][ T9621] ======================================================
[  102.986900][ T9621] WARNING: possible circular locking dependency detected
[  102.989135][ T9621] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[  102.992642][ T9621] ------------------------------------------------------
[  102.994862][ T9621] syz.2.1239/9621 is trying to acquire lock:
[  102.996839][ T9621] ffff888107b00988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  103.000303][ T9621] 
[  103.000303][ T9621] but task is already holding lock:
[  103.002715][ T9621] ffff888107b00a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x94f/0x1930
[  103.005834][ T9621] 
[  103.005834][ T9621] which lock already depends on the new lock.
[  103.005834][ T9621] 
[  103.009203][ T9621] 
[  103.009203][ T9621] the existing dependency chain (in reverse order) is:
[  103.012130][ T9621] 
[  103.012130][ T9621] -> #2 (&nbd->config_lock){+.+.}-{4:4}:
[  103.014690][ T9621]        lock_acquire+0x120/0x360
[  103.016362][ T9621]        __mutex_lock+0x182/0xe80
[  103.018046][ T9621]        refcount_dec_and_mutex_lock+0x30/0xa0
[  103.020073][ T9621]        nbd_config_put+0x2c/0x790
[  103.021766][ T9621]        nbd_release+0xfe/0x140
[  103.023319][ T9621]        bdev_release+0x536/0x650
[  103.024957][ T9621]        blkdev_release+0x15/0x20
[  103.026551][ T9621]        __fput+0x44c/0xa70
[  103.028026][ T9621]        fput_close_sync+0x119/0x200
[  103.029705][ T9621]        __x64_sys_close+0x7f/0x110
[  103.031361][ T9621]        do_syscall_64+0xfa/0x3b0
[  103.033004][ T9621]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.035032][ T9621] 
[  103.035032][ T9621] -> #1 (&disk->open_mutex){+.+.}-{4:4}:
[  103.037520][ T9621]        lock_acquire+0x120/0x360
[  103.039129][ T9621]        __mutex_lock+0x182/0xe80
[  103.040802][ T9621]        __del_gendisk+0x129/0x9e0
[  103.042436][ T9621]        del_gendisk+0xe8/0x160
[  103.044072][ T9621]        nbd_dev_remove_work+0x47/0xe0
[  103.045809][ T9621]        process_scheduled_works+0xae1/0x17b0
[  103.047724][ T9621]        worker_thread+0x8a0/0xda0
[  103.049333][ T9621]        kthread+0x711/0x8a0
[  103.050827][ T9621]        ret_from_fork+0x3fc/0x770
[  103.052467][ T9621]        ret_from_fork_asm+0x1a/0x30
[  103.054161][ T9621] 
[  103.054161][ T9621] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}:
[  103.056834][ T9621]        validate_chain+0xb9b/0x2140
[  103.058519][ T9621]        __lock_acquire+0xab9/0xd20
[  103.060233][ T9621]        lock_acquire+0x120/0x360
[  103.061905][ T9621]        down_write+0x96/0x1f0
[  103.063486][ T9621]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  103.065546][ T9621]        nbd_start_device+0x16c/0xac0
[  103.067339][ T9621]        nbd_genl_connect+0x1250/0x1930
[  103.069196][ T9621]        genl_family_rcv_msg_doit+0x215/0x300
[  103.071206][ T9621]        genl_rcv_msg+0x60e/0x790
[  103.072886][ T9621]        netlink_rcv_skb+0x208/0x470
[  103.074653][ T9621]        genl_rcv+0x28/0x40
[  103.076180][ T9621]        netlink_unicast+0x75b/0x8d0
[  103.077945][ T9621]        netlink_sendmsg+0x805/0xb30
[  103.079698][ T9621]        __sock_sendmsg+0x21c/0x270
[  103.081426][ T9621]        ____sys_sendmsg+0x505/0x830
[  103.083196][ T9621]        ___sys_sendmsg+0x21f/0x2a0
[  103.084930][ T9621]        __x64_sys_sendmsg+0x19b/0x260
[  103.086741][ T9621]        do_syscall_64+0xfa/0x3b0
[  103.088419][ T9621]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.090533][ T9621] 
[  103.090533][ T9621] other info that might help us debug this:
[  103.090533][ T9621] 
[  103.093788][ T9621] Chain exists of:
[  103.093788][ T9621]   &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock
[  103.093788][ T9621] 
[  103.098254][ T9621]  Possible unsafe locking scenario:
[  103.098254][ T9621] 
[  103.100588][ T9621]        CPU0                    CPU1
[  103.102259][ T9621]        ----                    ----
[  103.104042][ T9621]   lock(&nbd->config_lock);
[  103.105596][ T9621]                                lock(&disk->open_mutex);
[  103.107934][ T9621]                                lock(&nbd->config_lock);
[  103.110129][ T9621]   lock(&set->update_nr_hwq_lock);
[  103.111799][ T9621] 
[  103.111799][ T9621]  *** DEADLOCK ***
[  103.111799][ T9621] 
[  103.114407][ T9621] 3 locks held by syz.2.1239/9621:
[  103.116129][ T9621]  #0: ffffffff8f576170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  103.118838][ T9621]  #1: ffffffff8f575f88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  103.121789][ T9621]  #2: ffff888107b00a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x94f/0x1930
[  103.125077][ T9621] 
[  103.125077][ T9621] stack backtrace:
[  103.127054][ T9621] CPU: 0 UID: 0 PID: 9621 Comm: syz.2.1239 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  103.127064][ T9621] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  103.127069][ T9621] Call Trace:
[  103.127073][ T9621]  <TASK>
[  103.127077][ T9621]  dump_stack_lvl+0x189/0x250
[  103.127090][ T9621]  ? __pfx_dump_stack_lvl+0x10/0x10
[  103.127100][ T9621]  ? __pfx__printk+0x10/0x10
[  103.127108][ T9621]  ? print_lock_name+0xde/0x100
[  103.127116][ T9621]  print_circular_bug+0x2ee/0x310
[  103.127124][ T9621]  check_noncircular+0x134/0x160
[  103.127133][ T9621]  validate_chain+0xb9b/0x2140
[  103.127143][ T9621]  __lock_acquire+0xab9/0xd20
[  103.127154][ T9621]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  103.127165][ T9621]  lock_acquire+0x120/0x360
[  103.127174][ T9621]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  103.127186][ T9621]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  103.127197][ T9621]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  103.127206][ T9621]  down_write+0x96/0x1f0
[  103.127212][ T9621]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  103.127222][ T9621]  ? __pfx_down_write+0x10/0x10
[  103.127230][ T9621]  blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  103.127240][ T9621]  ? nbd_add_socket+0x688/0x9a0
[  103.127250][ T9621]  ? nbd_add_socket+0x688/0x9a0
[  103.127261][ T9621]  nbd_start_device+0x16c/0xac0
[  103.127270][ T9621]  ? __nla_parse+0x40/0x60
[  103.127281][ T9621]  nbd_genl_connect+0x1250/0x1930
[  103.127292][ T9621]  ? __pfx_nbd_genl_connect+0x10/0x10
[  103.127304][ T9621]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  103.127315][ T9621]  genl_family_rcv_msg_doit+0x215/0x300
[  103.127325][ T9621]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  103.127338][ T9621]  genl_rcv_msg+0x60e/0x790
[  103.127348][ T9621]  ? __pfx_genl_rcv_msg+0x10/0x10
[  103.127357][ T9621]  ? __pfx_nbd_genl_connect+0x10/0x10
[  103.127368][ T9621]  netlink_rcv_skb+0x208/0x470
[  103.127375][ T9621]  ? __pfx_genl_rcv_msg+0x10/0x10
[  103.127384][ T9621]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  103.127394][ T9621]  ? down_read+0x1ad/0x2e0
[  103.127400][ T9621]  genl_rcv+0x28/0x40
[  103.127409][ T9621]  netlink_unicast+0x75b/0x8d0
[  103.127417][ T9621]  netlink_sendmsg+0x805/0xb30
[  103.127426][ T9621]  ? __pfx_netlink_sendmsg+0x10/0x10
[  103.127433][ T9621]  ? aa_sock_msg_perm+0x94/0x160
[  103.127442][ T9621]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  103.127451][ T9621]  ? __pfx_netlink_sendmsg+0x10/0x10
[  103.127458][ T9621]  __sock_sendmsg+0x21c/0x270
[  103.127468][ T9621]  ____sys_sendmsg+0x505/0x830
[  103.127477][ T9621]  ? __pfx_____sys_sendmsg+0x10/0x10
[  103.127486][ T9621]  ? import_iovec+0x74/0xa0
[  103.127493][ T9621]  ___sys_sendmsg+0x21f/0x2a0
[  103.127501][ T9621]  ? __pfx____sys_sendmsg+0x10/0x10
[  103.127513][ T9621]  ? __fget_files+0x2a/0x420
[  103.127521][ T9621]  ? __fget_files+0x3a0/0x420
[  103.127529][ T9621]  __x64_sys_sendmsg+0x19b/0x260
[  103.127538][ T9621]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  103.127548][ T9621]  ? rcu_is_watching+0x15/0xb0
[  103.127560][ T9621]  ? do_syscall_64+0xbe/0x3b0
[  103.127590][ T9621]  do_syscall_64+0xfa/0x3b0
[  103.127597][ T9621]  ? lockdep_hardirqs_on+0x9c/0x150
[  103.127607][ T9621]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.127614][ T9621]  ? exc_page_fault+0x9f/0xf0
[  103.127624][ T9621]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.127632][ T9621] RIP: 0033:0x7fe7ad98e929
[  103.127640][ T9621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  103.127647][ T9621] RSP: 002b:00007fe7ae743038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  103.127655][ T9621] RAX: ffffffffffffffda RBX: 00007fe7adbb5fa0 RCX: 00007fe7ad98e929
[  103.127660][ T9621] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000009
[  103.127664][ T9621] RBP: 00007fe7ada10b39 R08: 0000000000000000 R09: 0000000000000000
[  103.127668][ T9621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  103.127672][ T9621] R13: 0000000000000000 R14: 00007fe7adbb5fa0 R15: 00007fffad8fd798
[  103.127680][ T9621]  </TASK>
[  103.267809][ T9630] lo speed is unknown, defaulting to 1000
[  103.270307][ T9630] lo speed is unknown, defaulting to 1000
[  103.303059][ T9621] nbd2: detected capacity change from 0 to 63
[  103.306289][ T9631] block nbd2: NBD_DISCONNECT
[  103.307937][ T9631] block nbd2: Disconnected due to user request.
[  103.310053][ T9631] block nbd2: shutting down sockets
[  103.333231][    C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  103.336234][    C0] Buffer I/O error on dev nbd2, logical block 0, async page read
[  103.338819][    C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  103.341825][    C0] Buffer I/O error on dev nbd2, logical block 1, async page read
[  103.344419][    C0] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  103.347339][    C0] Buffer I/O error on dev nbd2, logical block 2, async page read
[  103.349846][    C0] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  103.352665][    C0] Buffer I/O error on dev nbd2, logical block 3, async page read
[  103.355634][ T9403] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  103.358627][ T9403] Buffer I/O error on dev nbd2, logical block 0, async page read
[  103.361190][ T9403] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  103.369590][ T9403] Buffer I/O error on dev nbd2, logical block 1, async page read
[  103.372064][ T9403] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  103.375053][ T9403] Buffer I/O error on dev nbd2, logical block 2, async page read
[  103.377628][ T9403] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  103.380476][ T9403] Buffer I/O error on dev nbd2, logical block 3, async page read
[  103.382975][ T9403] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  103.383236][ T5813] Bluetooth: hci2: command 0x0405 tx timeout
[  103.385778][ T9403] Buffer I/O error on dev nbd2, logical block 0, async page read
[  103.390296][ T9403] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  103.393493][ T9403] Buffer I/O error on dev nbd2, logical block 1, async page read
[  103.396591][ T9403] ldm_validate_partition_table(): Disk read failed.
[  103.399232][ T9403] Dev nbd2: unable to read RDB block 0
[  103.401518][ T9403]  nbd2: unable to read partition table
[  103.405307][ T9403] ldm_validate_partition_table(): Disk read failed.
[  103.407883][ T9403] Dev nbd2: unable to read RDB block 0
[  103.410024][ T9403]  nbd2: unable to read partition table
[  105.472990][ T5813] Bluetooth: hci2: command 0x0405 tx timeout
[  107.543033][ T5813] Bluetooth: hci2: command 0x0405 tx timeout

VM DIAGNOSIS:
17:57:42  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000073 RBX=0000000000000073 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000012fd RDI=00000000000012fe RBP=00000000000003f8 RSP=ffffc90004ace710
R8 =ffff888020a48237 R9 =1ffff11004149046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48e3 R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe7ae7436c0 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb685b74980 CR3=000000002ed5e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0a3020646165725f 6b72616d20302073
XMM06=65746174735f6b61 6570203020736574 XMM07=6174735f6c61746f 742030206e736e69
XMM08=5f7265705f736574 6174735f78616d20 XMM09=0000000000000000 00007face1611c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1b7b6ef284c3c100 RBX=ffffffff81974d58 RCX=1b7b6ef284c3c100 RDX=0000000000000001
RSI=ffffffff8be28d20 RDI=ffffffff81974d58 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa10cf0 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001d000
RIP=ffffffff8b66b4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000010f410000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
