last executing test programs:

20.127725611s ago: executing program 4 (id=107):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r2, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x2, 0x4) (async)
connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @private=0xa010102}, 0x2, 0x1, 0x1, 0x4}}, 0x2e) (async)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmmsg$unix(r6, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000012c0)='R', 0x1}, {&(0x7f0000000640)="94", 0x1}], 0x2}}], 0x1, 0x0)
unshare(0x22020600) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00')
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000006700028008001c00", @ANYRES32=r8, @ANYBLOB], 0x3c}}, 0x0) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r6)
sendmsg$IPVS_CMD_SET_DEST(r6, 0x0, 0x80) (async)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r9, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) (async, rerun: 32)
r10 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r11 = socket$inet6(0xa, 0x3, 0x3c)
setsockopt$inet6_IPV6_RTHDR(r11, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000008000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r12, 0x0, 0x8000000000000000}, 0x18) (async, rerun: 64)
connect$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @dev, 0x9}, 0x1c) (async, rerun: 64)
writev(r11, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) (async)
setsockopt$IPT_SO_SET_REPLACE(r10, 0x8001000000000000, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0x11, 0x148, 0xd8, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x41}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd8}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'xfrm0\x00', 'geneve0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8)

20.127459344s ago: executing program 4 (id=107):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r2, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x2, 0x4) (async)
connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @private=0xa010102}, 0x2, 0x1, 0x1, 0x4}}, 0x2e) (async)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmmsg$unix(r6, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000012c0)='R', 0x1}, {&(0x7f0000000640)="94", 0x1}], 0x2}}], 0x1, 0x0)
unshare(0x22020600) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00')
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000006700028008001c00", @ANYRES32=r8, @ANYBLOB], 0x3c}}, 0x0) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r6)
sendmsg$IPVS_CMD_SET_DEST(r6, 0x0, 0x80) (async)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r9, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) (async, rerun: 32)
r10 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r11 = socket$inet6(0xa, 0x3, 0x3c)
setsockopt$inet6_IPV6_RTHDR(r11, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000008000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r12, 0x0, 0x8000000000000000}, 0x18) (async, rerun: 64)
connect$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @dev, 0x9}, 0x1c) (async, rerun: 64)
writev(r11, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) (async)
setsockopt$IPT_SO_SET_REPLACE(r10, 0x8001000000000000, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0x11, 0x148, 0xd8, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x41}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd8}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'xfrm0\x00', 'geneve0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8)

20.127174783s ago: executing program 4 (id=107):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r2, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x2, 0x4) (async)
connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @private=0xa010102}, 0x2, 0x1, 0x1, 0x4}}, 0x2e) (async)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmmsg$unix(r6, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000012c0)='R', 0x1}, {&(0x7f0000000640)="94", 0x1}], 0x2}}], 0x1, 0x0)
unshare(0x22020600) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00')
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000006700028008001c00", @ANYRES32=r8, @ANYBLOB], 0x3c}}, 0x0) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r6)
sendmsg$IPVS_CMD_SET_DEST(r6, 0x0, 0x80) (async)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r9, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) (async, rerun: 32)
r10 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r11 = socket$inet6(0xa, 0x3, 0x3c)
setsockopt$inet6_IPV6_RTHDR(r11, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000008000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r12, 0x0, 0x8000000000000000}, 0x18) (async, rerun: 64)
connect$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @dev, 0x9}, 0x1c) (async, rerun: 64)
writev(r11, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) (async)
setsockopt$IPT_SO_SET_REPLACE(r10, 0x8001000000000000, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0x11, 0x148, 0xd8, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x41}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd8}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'xfrm0\x00', 'geneve0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8)

20.12686733s ago: executing program 4 (id=107):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r2, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x2, 0x4) (async)
connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @private=0xa010102}, 0x2, 0x1, 0x1, 0x4}}, 0x2e) (async)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmmsg$unix(r6, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000012c0)='R', 0x1}, {&(0x7f0000000640)="94", 0x1}], 0x2}}], 0x1, 0x0)
unshare(0x22020600) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00')
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000006700028008001c00", @ANYRES32=r8, @ANYBLOB], 0x3c}}, 0x0) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r6)
sendmsg$IPVS_CMD_SET_DEST(r6, 0x0, 0x80) (async)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r9, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) (async, rerun: 32)
r10 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r11 = socket$inet6(0xa, 0x3, 0x3c)
setsockopt$inet6_IPV6_RTHDR(r11, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000008000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r12, 0x0, 0x8000000000000000}, 0x18) (async, rerun: 64)
connect$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @dev, 0x9}, 0x1c) (async, rerun: 64)
writev(r11, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) (async)
setsockopt$IPT_SO_SET_REPLACE(r10, 0x8001000000000000, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0x11, 0x148, 0xd8, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x41}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd8}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'xfrm0\x00', 'geneve0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8)

20.12658219s ago: executing program 4 (id=107):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r2, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x2, 0x4) (async)
connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @private=0xa010102}, 0x2, 0x1, 0x1, 0x4}}, 0x2e) (async)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmmsg$unix(r6, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000012c0)='R', 0x1}, {&(0x7f0000000640)="94", 0x1}], 0x2}}], 0x1, 0x0)
unshare(0x22020600) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00')
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000006700028008001c00", @ANYRES32=r8, @ANYBLOB], 0x3c}}, 0x0) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r6)
sendmsg$IPVS_CMD_SET_DEST(r6, 0x0, 0x80) (async)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r9, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) (async, rerun: 32)
r10 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r11 = socket$inet6(0xa, 0x3, 0x3c)
setsockopt$inet6_IPV6_RTHDR(r11, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000008000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r12, 0x0, 0x8000000000000000}, 0x18) (async, rerun: 64)
connect$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @dev, 0x9}, 0x1c) (async, rerun: 64)
writev(r11, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) (async)
setsockopt$IPT_SO_SET_REPLACE(r10, 0x8001000000000000, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0x11, 0x148, 0xd8, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x41}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd8}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'xfrm0\x00', 'geneve0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8)

19.772492279s ago: executing program 0 (id=431):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
unshare(0x42000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x50, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
write$cgroup_devices(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0308003c5ca601288763"], 0xffdd)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="798609", 0x3}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}, 0x0)
recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/69, 0x45}, {&(0x7f0000000180)=""/70, 0x46}, {&(0x7f0000000200)=""/51, 0x33}], 0x3}, 0x2)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080), 0x10)

19.559093112s ago: executing program 1 (id=435):
r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000080)=""/4096, &(0x7f0000001080)=0x1000)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000010c0)={{0x0, 0xffffffffffff7fff, 0xfffffffffffffff7, 0x4aa, 0x7, 0x740f, 0x9, 0xfffffffa, 0x84, 0xa, 0x9, 0x40, 0xba, 0x0, 0x9}})
r2 = socket(0xa, 0x1, 0x2)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000002180)=<r3=>0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000021c0)={0x0, <r4=>0x0}, &(0x7f0000002200)=0xc)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002240)={0x0, 0x0, <r5=>0x0}, &(0x7f0000002280)=0xc)
sendmsg$unix(r2, &(0x7f0000002300)={&(0x7f00000020c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002140)=[{0xfffffffffffffffe}], 0x1, &(0x7f00000022c0)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}], 0x20, 0x804}, 0x40000)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000002340)={<r6=>0x0, 0xa0, "845e85984f877c79eb6b87a5ac5f874a4cbe7fcf2ff266e9d80d9e047ec7a47fea9a5ef49d9e4081c687190f4a9fed543355c3ca24fe37d7ad415411692aefa6c6bfaf14ee076d802b7e7825665f2e0a9a898424134cd0eb026fa60115527d258edbc8496f27bb8e2fd7962ba14a155e651d76b22b015e53f409d6f1f4a4018923232553dae5e832bbde5b98b43317285195c0535625d5a5e7b1eaa52aab7f99"}, &(0x7f0000002400)=0xa8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000002440)={<r7=>r6, 0x4, 0x7}, &(0x7f0000002480)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000024c0)={r7, 0xc, 0x20, 0x4, 0x7}, &(0x7f0000002500)=0x18)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000002580)=@filter={'filter\x00', 0xe, 0x4, 0x418, 0xffffffff, 0x1c0, 0x1c0, 0x1c0, 0xffffffff, 0xffffffff, 0x380, 0x380, 0x380, 0xffffffff, 0x4, &(0x7f0000002540), {[{{@uncond, 0x0, 0x98, 0x1c0, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0xf1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x6, 'system_u:object_r:setrans_var_run_t:s0\x00'}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xff, 0x0, 'dvmrp0\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x3, 0x1}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x112}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@icmp={{0x28}, {0x14, "1b44"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xa8, 0x67, {0xfffffffffffffff9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000002b00)={'gre0\x00', &(0x7f0000002a40)={'gre0\x00', <r8=>0x0, 0x7800, 0x20, 0x7ff, 0x4, {{0x1e, 0x4, 0x3, 0x2, 0x78, 0x68, 0x0, 0x8, 0x2f, 0x0, @remote, @multicast2, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x48, 0xffffffffffffffff, [{0x5, 0x7, "c3c88f46ad"}, {0x0, 0x7, "48323306c3"}, {0x5, 0x5, "aac738"}, {0x5, 0xf, "b9dd0c167de21fe02c08503d88"}, {0x0, 0xc, "bc9aced57699490c788c"}, {0x5, 0x7, "ecd738c3d9"}, {0x6, 0xd, "7c3015310bd71dbfef4291"}]}, @end, @timestamp={0x44, 0x8, 0xf4, 0x0, 0xd, [0x80000000]}, @end, @end, @ra={0x94, 0x4, 0x1}, @noop, @end]}}}}})
sendto$packet(r2, &(0x7f0000002a00)="cafe62c903edbbe9a3bd49d1bdc9e6eae4eb5e8501928307c24c3b7a9a6bc4b8d0f25d21f686099b", 0x28, 0x40000, &(0x7f0000002b40)={0x11, 0x4, r8, 0x1, 0x7f, 0x6, @multicast}, 0x14)
r9 = accept4$tipc(r2, &(0x7f0000002b80)=@name, &(0x7f0000002bc0)=0x10, 0x1800)
recvfrom(r9, &(0x7f0000002c00)=""/34, 0x22, 0x40, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000002c40)={r6, 0xa00000}, &(0x7f0000002c80)=0x8)
r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_POWER(r10, 0x112, 0x9, &(0x7f0000002cc0)=0x3, 0x1)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000002d00)={r6, @in={{0x2, 0x4e24, @empty}}, 0x1, 0x8, 0x6, 0x40, 0xeba5}, &(0x7f0000002dc0)=0x98)
recvmmsg(r1, &(0x7f0000003000)=[{{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000002e00)=""/168, 0xa8}], 0x1, &(0x7f0000002f00)=""/251, 0xfb}, 0x8001}], 0x1, 0x0, 0x0)
bind$netlink(r2, &(0x7f0000003040)={0x10, 0x0, 0x25dfdbfc}, 0xc)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0)
ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000003080)={@null, 0xb, 'netpci0\x00'})
r11 = syz_genetlink_get_family_id$ipvs(&(0x7f00000031c0), r2)
sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000003300)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000032c0)={&(0x7f0000003200)={0x98, r11, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x8}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1a, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffffb}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7ff}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x24000091}, 0x0)
readv(r0, &(0x7f00000047c0)=[{&(0x7f0000003340)=""/119, 0x77}, {&(0x7f00000033c0)=""/243, 0xf3}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f00000044c0)=""/71, 0x47}, {&(0x7f0000004540)=""/252, 0xfc}, {&(0x7f0000004640)=""/66, 0x42}, {&(0x7f00000046c0)=""/42, 0x2a}, {&(0x7f0000004700)=""/63, 0x3f}, {&(0x7f0000004740)=""/95, 0x5f}], 0x9)

19.234523883s ago: executing program 4 (id=107):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r2, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x2, 0x4) (async)
connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @private=0xa010102}, 0x2, 0x1, 0x1, 0x4}}, 0x2e) (async)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmmsg$unix(r6, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000012c0)='R', 0x1}, {&(0x7f0000000640)="94", 0x1}], 0x2}}], 0x1, 0x0)
unshare(0x22020600) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00')
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000006700028008001c00", @ANYRES32=r8, @ANYBLOB], 0x3c}}, 0x0) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r6)
sendmsg$IPVS_CMD_SET_DEST(r6, 0x0, 0x80) (async)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r9, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) (async, rerun: 32)
r10 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r11 = socket$inet6(0xa, 0x3, 0x3c)
setsockopt$inet6_IPV6_RTHDR(r11, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000008000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r12, 0x0, 0x8000000000000000}, 0x18) (async, rerun: 64)
connect$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @dev, 0x9}, 0x1c) (async, rerun: 64)
writev(r11, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) (async)
setsockopt$IPT_SO_SET_REPLACE(r10, 0x8001000000000000, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0x11, 0x148, 0xd8, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x41}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd8}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'xfrm0\x00', 'geneve0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8)

17.888285635s ago: executing program 0 (id=436):
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
r1 = socket$phonet(0x23, 0x2, 0x1)
r2 = socket$netlink(0x10, 0x3, 0xc)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002840)={0x0, <r3=>0x0}, &(0x7f0000002880)=0xc)
sendmsg$netlink(r2, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000980)={0x10, 0x32, 0x4, 0x70bd25, 0x25dfdbff}, 0x10}], 0x1, &(0x7f0000002900)=[@cred={{0x1c, 0x1, 0x2, {0x0, r3}}}], 0x20, 0x50}, 0x40880)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_UID={0x8, 0x19, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

17.887416361s ago: executing program 1 (id=437):
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001500000029bd7000100000006469676573745f6e756c6c2d67656e65726963000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002400"/224], 0xe0}}, 0x0) (async)
r0 = socket$nl_crypto(0x10, 0x3, 0x15) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_T4(r2, 0x103, 0x4, 0x0, &(0x7f00000000c0)) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xb, @empty=0x4000000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x4}, @handle=@pci={{0x8}, {0x11}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x4c0d0) (async)
sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) (async)
sendmsg$AUDIT_TRIM(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x3f6, 0x1, 0x70bd28, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = socket$inet_dccp(0x2, 0x6, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x1113, r5, 0x0)
getsockopt$inet_int(r4, 0x10d, 0xae, &(0x7f00000002c0), &(0x7f0000000080)=0x4) (async)
r6 = socket(0x10, 0x3, 0x0)
getsockopt$sock_linger(r6, 0x1, 0x4b, 0x0, &(0x7f0000000240)) (async)
r7 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r8=>0x0}, &(0x7f0000000180)=0xc)
sendmsg$nl_generic(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @uid=r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a841}, 0x0) (async)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x360, 0xa, 0x148, 0x360, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x4, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x20, 0x8601, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x6, 0x3, 0x81, 'snmp_trap\x00', 'syz0\x00', {0x30f6a663}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0)

17.774452597s ago: executing program 0 (id=440):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000140)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
connect$netrom(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x50, 0x1, 0x8, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x17}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x18}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x20000850)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0xc0, 0x2, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TUPLE_REPLY={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @local}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40846}, 0x44)
pipe(&(0x7f0000000340))
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xba}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000140)={<r4=>0xffffffffffffffff, 0x2, 0x8, 0x401})
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f00000001c0)=0x8)

17.73050182s ago: executing program 1 (id=442):
r0 = socket(0x10, 0x3, 0x0) (async)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8}]}}]}, 0x3c}}, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_IFALIASn={0x4}]}, 0x40}}, 0x4000) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00'})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000040122000b0000000100", @ANYBLOB], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000140)="7ae81820dff2aa3017250b40c98025e26c07f9ca98c98b522759eaf470b0a4c712438ca0009dce8e1b1820cb5715b5e404a2aaf7b3f1811795abed862a57e4cf5b", 0x2, r5}, 0x38) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000006000000000000000000008500000041000000850000007d00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x8, 0x46, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f280db17ab50b5432b18faa02276ec9cdef5c9e647ff1a5b72438a5c0ba2c885e64e225db0393da557da605ce470e05e7e4835154e448a5572802", 0x0, 0xffc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4}, 0x50) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='ext4_fc_track_inode\x00', r6}, 0x10) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8}]}, 0x24}}, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f0000000000)=""/56, &(0x7f00000001c0), &(0x7f00000000c0), 0x1, r5}, 0x38)

17.60592497s ago: executing program 1 (id=444):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x34, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES64=r0], 0xb4}}, 0x200000c4)

17.572156798s ago: executing program 2 (id=445):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xdfff, 0x4}, 0x6)
write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2f0100003201"], 0x138)

17.4901181s ago: executing program 0 (id=447):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f0000000140)={0x2}, 0x8)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newlink={0x68, 0x10, 0x800, 0x2070bd2d, 0x4000000, {0x0, 0x0, 0x0, 0x0, 0x40004}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x2004c012}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, <r3=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@type_tag={0x8, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x61]}}, &(0x7f0000000340)=""/237, 0x27, 0xed, 0x1, 0x9, 0x0, @void, @value}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x18, &(0x7f0000000180)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}], &(0x7f0000000240)='GPL\x00', 0xa, 0x2c, &(0x7f00000002c0)=""/44, 0x41000, 0x20, '\x00', r2, 0x25, r5, 0x8, &(0x7f0000000480)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000004c0)=[{0x1, 0x2, 0x1, 0xa}, {0x0, 0x1, 0xb, 0x5}, {0x3, 0x5, 0xf, 0xc}, {0x4, 0x1, 0xa, 0x1}], 0x10, 0x8, @void, @value}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r10=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r8, 0x0, 0x0)
sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="05002abd70000b0000002600000008000300", @ANYRES32=r10, @ANYBLOB="050034008b0000000400af00"], 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(r6, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r9, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, ["", ""]}, 0x1c}}, 0x4)

17.489658775s ago: executing program 2 (id=448):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x400, 0x0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0)
r2 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xc, 0xa}}]}}]}, 0x3c}}, 0x4000)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x288, 0x288, 0x288, 0x288, 0x288, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TTL={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'pim6reg1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418)

17.443034155s ago: executing program 1 (id=449):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000040)={'gre0\x00', <r1=>0x0, 0x8000, 0x20, 0x2, 0x7f, {{0x9, 0x4, 0x2, 0x26, 0x24, 0x68, 0x0, 0xd5, 0x2f, 0x0, @private=0xa010100, @rand_addr=0x64010101, {[@lsrr={0x83, 0xb, 0x33, [@multicast1, @broadcast]}, @ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$nl_route_sched_retired(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newtclass={0x48, 0x28, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {0xc, 0xf}, {0x1, 0x5}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x33}}}, @c_cbq={{0x8}, {0x4}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000200)={@local, @multicast1, @broadcast}, &(0x7f0000000240)=0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @default}, [@null, @remote, @null, @rose, @default, @null, @bcast, @bcast]}, &(0x7f0000000300)=0x48, 0xf425b46d3f1609ce)
ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={@default, @null, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]})
r4 = accept4$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, @dev}, &(0x7f0000000400)=0x10, 0x40800)
connect$inet(r4, &(0x7f0000000440)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
clock_gettime(0x0, &(0x7f0000003ac0)={<r5=>0x0, <r6=>0x0})
recvmmsg(r2, &(0x7f00000038c0)=[{{&(0x7f0000000480)=@ax25={{}, [@default, @netrom, @bcast, @rose, @netrom, @rose, @bcast, @rose]}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000500)=""/136, 0x88}, {&(0x7f00000005c0)=""/243, 0xf3}, {&(0x7f00000006c0)=""/43, 0x2b}, {&(0x7f0000000700)=""/213, 0xd5}, {&(0x7f0000000800)=""/242, 0xf2}], 0x5, &(0x7f0000000980)}, 0x800}, {{&(0x7f00000009c0)=@hci, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000a40)=""/15, 0xf}, {&(0x7f0000000a80)=""/105, 0x69}, {&(0x7f0000000b00)=""/12, 0xc}], 0x3}}, {{&(0x7f0000000b80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000c00)=""/2, 0x2}, {&(0x7f0000000c40)=""/49, 0x31}, {&(0x7f0000000c80)=""/255, 0xff}], 0x3, &(0x7f0000000dc0)=""/73, 0x49}, 0x5}, {{&(0x7f0000000e40)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000ec0)=""/47, 0x2f}, {&(0x7f0000000f00)=""/75, 0x4b}, {&(0x7f0000000f80)=""/49, 0x31}], 0x3, &(0x7f0000001000)=""/129, 0x81}, 0x400}, {{&(0x7f00000010c0)=@pptp, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001140)=""/254, 0xfe}, {&(0x7f0000001240)=""/69, 0x45}], 0x2, &(0x7f0000001300)=""/236, 0xec}, 0xfffff10d}, {{&(0x7f0000001400)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000002940)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/14, 0xe}, {&(0x7f00000024c0)=""/170, 0xaa}, {&(0x7f0000002580)=""/18, 0x12}, {&(0x7f00000025c0)=""/25, 0x19}, {&(0x7f0000002600)=""/107, 0x6b}, {&(0x7f0000002680)=""/161, 0xa1}, {&(0x7f0000002740)=""/52, 0x34}, {&(0x7f0000002780)=""/143, 0x8f}, {&(0x7f0000002840)=""/219, 0xdb}], 0xa, &(0x7f0000002a00)=""/87, 0x57}, 0xffff2e9a}, {{&(0x7f0000002a80)=@nfc, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002b00)=""/253, 0xfd}, {&(0x7f0000002c00)=""/145, 0x91}, {&(0x7f0000002cc0)=""/180, 0xb4}, {&(0x7f0000002d80)=""/215, 0xd7}], 0x4, &(0x7f0000002ec0)=""/195, 0xc3}}, {{&(0x7f0000002fc0)=@nfc, 0x80, &(0x7f00000037c0)=[{&(0x7f0000003040)=""/191, 0xbf}, {&(0x7f0000003100)=""/228, 0xe4}, {&(0x7f0000003200)=""/123, 0x7b}, {&(0x7f0000003280)=""/201, 0xc9}, {&(0x7f0000003380)=""/201, 0xc9}, {&(0x7f0000003480)=""/213, 0xd5}, {&(0x7f0000003580)=""/72, 0x48}, {&(0x7f0000003600)=""/23, 0x17}, {&(0x7f0000003640)=""/109, 0x6d}, {&(0x7f00000036c0)=""/205, 0xcd}], 0xa, &(0x7f0000003880)=""/14, 0xe}, 0xb}], 0x8, 0x10100, &(0x7f0000003b00)={r5, r6+10000000})
clock_gettime(0x0, &(0x7f0000003b40)={<r7=>0x0, <r8=>0x0})
nanosleep(&(0x7f0000003b80)={r7, r8+60000000}, 0xfffffffffffffffd)
recvmsg(r2, &(0x7f0000003e80)={0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000003bc0)=""/32, 0x20}, {&(0x7f0000003c00)=""/22, 0x16}, {&(0x7f0000003c40)=""/248, 0xf8}], 0x3, &(0x7f0000003d80)=""/225, 0xe1}, 0x1)
sendto$inet(r4, &(0x7f0000003ec0)="c7c0fad0107ad079bae151aed4578de22575a69dfb87e1e42f5043e97eb965db58eb430625303e0ef55ff49e3a3aad3006795becdd2ca1e89fafe42dd957c6c7857654cf3d47c02098fc9ffc5a01f8fd1ac08bca17d9a9409864c25de12964bffa97755dd1942c294713bd599f9a2ea560bf1371607124", 0x77, 0x40004, 0x0, 0x0)
r9 = accept$ax25(r3, 0x0, &(0x7f0000003f40))
bind$ax25(r9, &(0x7f0000003f80)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48)
ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000004000)={'vlan0\x00', 0x7})
sendmsg$nl_generic(r4, &(0x7f00000042c0)={&(0x7f0000004040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004280)={&(0x7f0000004080)={0x1d4, 0x14, 0x10, 0x70bd26, 0x25dfdbff, {0xf}, [@generic="0de223943e5205f4077a03c3334d", @nested={0x18c, 0xa3, 0x0, 0x1, [@nested={0x4, 0xfc}, @typed={0xb, 0xaf, 0x0, 0x0, @str='dsmark\x00'}, @nested={0x4, 0x2d}, @nested={0x4, 0x31}, @typed={0x8, 0xf1, 0x0, 0x0, @fd=r4}, @generic="0d2dd9", @typed={0x4, 0x128}, @typed={0x61, 0x109, 0x0, 0x0, @binary="2e6ede3f135570ecccafb3c529b6fa0cc583bc232cb4b45a7ea35a41302c64c2c709e7c9182c39198df684025965fe4b85d77a4f9f61ecd23d2bf9b79b881e0716a346ad24d8c164e9d514ce4a1639105f81cd9ec0d64ca10a1efe0eef"}, @typed={0x8, 0xa7, 0x0, 0x0, @u32=0x1000}, @generic="41e295fde84794c73ac80e6156cee69f0edb3c0731ad4463cfb9fc7246289005681738c41a15eabfb6f42196398011038795c6359dcc3b4ec59cf1fd98328f04596551db971ddedd87b112bb1c236a8e83c85b4c8df4385dadd4f4297c2e76a7c77725eebd1dc2a0947575c2103291845c7419e62fd53eff30ffafe648d765babc686dd80f425d083d663043c2d8f8be3a3f96ff3015d4e763ddbd230c1879c1857666279b90f1ca9e9abca9b1957af27c3ad1d2739788f04cfcbf670542cb112a54da18c09bdc03a596b048355c780320e669b288ca4bc7b2661ad4fde548537e2224fc4774406e215bce8c313b5508550394b116"]}, @generic="3d41249a40bf3e7bf9172db99d9ccb101d73d00d987400f12af8142b6743117e04a853"]}, 0x1d4}}, 0x404c800)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004300), r10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000004340)={'wlan1\x00', <r12=>0x0})
r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000043c0), r10)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r10, &(0x7f00000044c0)={&(0x7f0000004380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004480)={&(0x7f0000004400)={0x50, r13, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x132}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000004500)={<r14=>r9, 0x5, 0x1, 0xffffffffffffffff})
write$cgroup_type(r14, &(0x7f0000004540), 0x9)
r15 = openat$cgroup_ro(r14, &(0x7f0000004580)='pids.current\x00', 0x0, 0x0)
accept4$ax25(r15, &(0x7f00000045c0)={{0x3, @bcast}, [@bcast, @netrom, @default, @null, @rose, @remote, @null, @bcast]}, &(0x7f0000004640)=0x48, 0x800)
sendmsg$NL80211_CMD_FRAME(r14, &(0x7f0000004740)={&(0x7f0000004680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004700)={&(0x7f00000046c0)={0x34, r11, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x7fffffff, 0x5c}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x1000, 0xff3a, 0x8e13]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000005}, 0x8010)
connect$inet(r4, &(0x7f0000004780)={0x2, 0x4e23, @remote}, 0x10)

17.310536095s ago: executing program 0 (id=451):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='svc_unregister\x00', r0, 0x0, 0x4}, 0x18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x11, 0xa, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x88)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="8500000055000000040000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='svc_unregister\x00', r1, 0x0, 0x4}, 0x18)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x40}, 0x0)

17.305868726s ago: executing program 2 (id=453):
r0 = socket(0x28, 0x1, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r1=>0x0}, &(0x7f0000000040)=0x14)
r2 = socket(0x11, 0x800000003, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x80, 0x87}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0xc1ddfe9aa4c8d4f8, 0xffffffffffffffff, 0xfffff000)
sendmsg$nl_xfrm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00002100030000000a00100088"], 0x5c}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'syztnl1\x00', r1, 0x700, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @private}}}})

17.145963372s ago: executing program 3 (id=454):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x1e4, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xa}}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_RATE={0x6, 0x5, {0x4, 0x10}}, @filter_kind_options=@f_route={{0xa}, {0x19c, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x69}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x180, 0x6, [@m_sample={0x17c, 0x13, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x60}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8001}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x6, 0x3e360fc481fbc0f, 0x1, 0xfeb7}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x200, 0x5, 0x20000000, 0x3, 0x8}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xe}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xfffffff1}]}, {0xde, 0x6, "3f81bd469ecd55c3d0c66f931a90cf8a9a6c6e924d22e41113bf61112e1bef5ef9e1150463043691922858f5540850bceed091a291af3e192cb3fc9ab6d65e4d417d821b8b6ae01e4c04503209c7b330c633a1b0e489d27420f87ff60a2503cd8878afc4daa23fac2fea00383bdae6a786ec4d84c2b24de3811e29e60127d303f4a5ec66b7c215ed333785f4025672c23193da57af7fcdf1e26cb5130a24304f4f64351e15c1c666fbeac60ea48b92c0cb8eeb33bbca61ca0cbe2a262f65cee54540f2435e9300672916b9b4dcd48f3d1315d0a60e2e047a4245"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x91}, 0x0)
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
r1 = socket(0x40000000002, 0x3, 0xfb)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000280)={@multicast1, @broadcast}, 0x10)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x32, @multicast2, 0x4e22, 0x0, 'dh\x00', 0x0, 0xba, 0x2c09}, 0x2c)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

17.137373756s ago: executing program 0 (id=455):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24008004}, 0x20004000)
recvmmsg(r2, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/139, 0x8b}], 0x1}, 0x40}], 0x1, 0x40018102, 0x0)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00000008100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000005b4e6ec0fac882cc00"/28], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r5}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x11, &(0x7f0000000440)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r3, 0x4)
sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000b80)='?L', 0x2}], 0x1, 0x0, 0x0, 0x50}, 0x0)
recvmsg$unix(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x40012002)
sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="6ed5e8e6", 0x4}], 0x1}, 0x1050)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="300000002c0001000000000000000000040000801c0011802e"], 0x30}], 0x1}, 0x0)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r10, 0x8982, &(0x7f0000000000)={0x9, 'vlan1\x00'})
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r8, 0x800, 0x55007}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x6}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x80)

16.898509613s ago: executing program 2 (id=456):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1, 0x7fff}, 0xc)
bind$qrtr(r0, &(0x7f0000001000)={0x2a, 0x1, 0x7fff}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711208000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

16.891592426s ago: executing program 3 (id=457):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000003d0007010000000000000000047c000008000880040008000c00018006000600800a0000100002800c000c"], 0x38}}, 0xc000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000711221000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

16.826090072s ago: executing program 2 (id=458):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086602, &(0x7f0000000000)={0xfff})

16.750619229s ago: executing program 3 (id=459):
unshare(0xa020480)
unshare(0xe020780)

16.75006443s ago: executing program 2 (id=460):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
getsockname(r0, &(0x7f0000000080)=@ll={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x80)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'})
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010446ca9e1a4a2baae728dd5800", @ANYRES64=r1, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001f"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@delchain={0x34, 0x65, 0x800, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xf}, {0x1, 0xb}, {0xffe0, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x9}}, @TCA_RATE={0x6, 0x5, {0x4, 0xe}}]}, 0x34}}, 0x0)

16.749454343s ago: executing program 3 (id=461):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbbb08004500001c0000000000019078007800000000c39daf80490b076adfec191cc438ad081378d2d373372e0c4bf2c2cde2bfeac1132131f18e444a0a98"], 0x0) (async)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 32)
r1 = socket$inet6(0xa, 0x5, 0x0) (rerun: 32)
setsockopt$inet6_int(r1, 0x29, 0x1a, 0x0, 0x0) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, 0x0, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 32)
r2 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 32)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x62, @multicast1, 0x0, 0xfffffffc, 'sed\x00', 0x0, 0x5, 0x52}, 0x2c) (async, rerun: 32)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c) (rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) (async, rerun: 64)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000015000100000000ec001fb6330d70000008000100", @ANYRES16=r4], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="64000000020605000000330000000000000000000500040073797a3200004230f5be07665350b4425aaa189e0cfd7734f9a080050015000300000008001240000000000540050002000000050001000600000013000300686173683a76"], 0x60}}, 0x20008000) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
openat$ppp(0xffffffffffffff9c, 0x0, 0x442400, 0x0) (async)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES8=r3, @ANYRES64=r5], 0x6c}}, 0x0) (async, rerun: 64)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (rerun: 64)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) (async, rerun: 32)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) (rerun: 32)
sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000003e00250304000000000000000a"], 0x14}}, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="013f542d8d15ffc8626cee42cf1781416ff1a31a4e563c693506c1fbd24073c5e9d4c0e139c2e8eb0d03f7b1dd5d1010e85c78c54001bc672d7ec1d19ee7506688f77c8e85ee542ffb6d24151b37b9ac89fc0237dd4a1dc9e1ebda0767e06afadf53207c82a676216f072fa21ff2576abc0def204fc2339260b5e239f749575dfd354b769bc1e240a74f31", 0x8b)

16.687570111s ago: executing program 3 (id=462):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000180)={@in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x3, 0x0, 0x17, 0x0, "5e3b86774ed89ec669fabcaff49c2eeb8c1c0685564614c85bcf859a08695e2f3f309e196a0c67a7768e058e3008931c0870b2780eb77cbbee013423d43101cb8242bc42b8e0662749302c9ffcd1d119"}, 0xd8)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0xc03, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x10)
r2 = socket$inet(0xa, 0x801, 0x84)
sendto$inet(r2, &(0x7f0000000240)='M', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10)
listen(r2, 0x8)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f00000005c0)=0x80000001, 0x4)
sendto$inet(r3, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendto$inet(r3, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x12eed8485ad)
r4 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$inet6(r4, &(0x7f0000000f40)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xe}}, 0x9}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000001c0)="ea4904", 0x3}], 0x1}}], 0x1, 0x24048801)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x60}}, 0x4000)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x9, 0x3, 0x310, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x240, 0xffffffff, 0xffffffff, 0x240, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@ipv6={@loopback, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xffffff00], [0xff0000ff, 0xffffff00, 0xffffff00, 0xff], 'macvtap0\x00', 'bond_slave_1\x00', {0x570df0b8b87d5244}, {0xff}, 0x62, 0xa, 0x4, 0xc}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8, 0xb, 0x26, 'syz0\x00', {0xf}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4, 0x4}, {0x1, 0x0, 0x4}, 0x6, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370)
r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4)
r8 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEYRING(r8, 0x110, 0x2, &(0x7f0000000140)='\x00', 0x1)
write$cgroup_subtree(r6, &(0x7f00000000c0)={[{0x0, 'hugetlb'}, {0x2d, 'devices'}, {0x2b, 'net_cls'}, {0x2d, 'net_prio'}, {0x2b, 'pids'}, {0x2d, 'cpuacct'}, {0x2d, 'devices'}]}, 0x3d)
recvfrom$inet(r0, &(0x7f0000000600)=""/4096, 0x1000, 0x2002, 0x0, 0x0)

16.537789377s ago: executing program 1 (id=463):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="14010000330001000000000000000000020100800c0001000000000000000000140003"], 0x114}], 0x1}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r2, 0x200000000114, 0x5, 0x0, &(0x7f0000000080)=0x39)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0x6c3f, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r4, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0x1, <r5=>0xffffffffffffffff}, 0x4)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6tnl0\x00', <r6=>0x0, 0x4, 0x5, 0x5, 0x2, 0x38, @loopback, @local, 0x800f, 0x80, 0x10001, 0x5}})
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1bb8b1cb61124f21c95c0000008000000000000000000005", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000300"/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x2b, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xa}, @call={0x85, 0x0, 0x0, 0xb7}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff0000}, @alu={0x7, 0x0, 0x4, 0x7, 0xb, 0xffffffffffffffc8, 0xfffffffffffffff0}, @generic={0x6, 0x0, 0x2, 0x9, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='syzkaller\x00', 0xb1a, 0x0, 0x0, 0x41100, 0x4, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x4, 0x6, 0x6, 0xfff}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000007c0)=[r7], &(0x7f0000000800)=[{0x0, 0x1, 0x9}, {0x4, 0x1, 0x8, 0xb}, {0x4, 0x5, 0xf, 0xc}], 0x10, 0x100, @void, @value}, 0x94)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r8)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000047409062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004007da6e5a5e467383e0000000014000600626f6e6430000000000000000000000008000300ff02000100000000"], 0x78}, 0x1, 0xffffffff00000003}, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r10)
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r12=>0x0})
r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r14 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
write$tun(r13, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500002c00000000002f"], 0x3e)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, r11, 0x1, 0x71bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x81}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c804}, 0x4000000)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000100)={'wpan3\x00'})
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

15.778644901s ago: executing program 3 (id=464):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0x48}}, 0x40040)

2.067913888s ago: executing program 32 (id=455):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24008004}, 0x20004000)
recvmmsg(r2, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/139, 0x8b}], 0x1}, 0x40}], 0x1, 0x40018102, 0x0)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00000008100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000005b4e6ec0fac882cc00"/28], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r5}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x11, &(0x7f0000000440)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r3, 0x4)
sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000b80)='?L', 0x2}], 0x1, 0x0, 0x0, 0x50}, 0x0)
recvmsg$unix(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x40012002)
sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="6ed5e8e6", 0x4}], 0x1}, 0x1050)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="300000002c0001000000000000000000040000801c0011802e"], 0x30}], 0x1}, 0x0)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r10, 0x8982, &(0x7f0000000000)={0x9, 'vlan1\x00'})
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r8, 0x800, 0x55007}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x6}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x80)

1.035570396s ago: executing program 33 (id=463):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="14010000330001000000000000000000020100800c0001000000000000000000140003"], 0x114}], 0x1}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r2, 0x200000000114, 0x5, 0x0, &(0x7f0000000080)=0x39)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0x6c3f, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r4, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0x1, <r5=>0xffffffffffffffff}, 0x4)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6tnl0\x00', <r6=>0x0, 0x4, 0x5, 0x5, 0x2, 0x38, @loopback, @local, 0x800f, 0x80, 0x10001, 0x5}})
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1bb8b1cb61124f21c95c0000008000000000000000000005", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000300"/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x2b, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xa}, @call={0x85, 0x0, 0x0, 0xb7}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff0000}, @alu={0x7, 0x0, 0x4, 0x7, 0xb, 0xffffffffffffffc8, 0xfffffffffffffff0}, @generic={0x6, 0x0, 0x2, 0x9, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='syzkaller\x00', 0xb1a, 0x0, 0x0, 0x41100, 0x4, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x4, 0x6, 0x6, 0xfff}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000007c0)=[r7], &(0x7f0000000800)=[{0x0, 0x1, 0x9}, {0x4, 0x1, 0x8, 0xb}, {0x4, 0x5, 0xf, 0xc}], 0x10, 0x100, @void, @value}, 0x94)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r8)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000047409062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004007da6e5a5e467383e0000000014000600626f6e6430000000000000000000000008000300ff02000100000000"], 0x78}, 0x1, 0xffffffff00000003}, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r10)
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r12=>0x0})
r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r14 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
write$tun(r13, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500002c00000000002f"], 0x3e)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, r11, 0x1, 0x71bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x81}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c804}, 0x4000000)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000100)={'wpan3\x00'})
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

1.019418043s ago: executing program 34 (id=460):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
getsockname(r0, &(0x7f0000000080)=@ll={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x80)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'})
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010446ca9e1a4a2baae728dd5800", @ANYRES64=r1, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001f"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@delchain={0x34, 0x65, 0x800, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xf}, {0x1, 0xb}, {0xffe0, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x9}}, @TCA_RATE={0x6, 0x5, {0x4, 0xe}}]}, 0x34}}, 0x0)

0s ago: executing program 35 (id=464):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0x48}}, 0x40040)

kernel console output (not intermixed with test programs):

 T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.406731][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.418923][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.425964][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.452823][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.506527][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.513486][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.540016][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.551596][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.558776][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.584773][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.596646][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.603617][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.629565][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.658927][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.666008][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.692147][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.708885][ T5831] hsr_slave_0: entered promiscuous mode
[   67.714965][ T5831] hsr_slave_1: entered promiscuous mode
[   67.730228][ T5836] hsr_slave_0: entered promiscuous mode
[   67.737318][ T5836] hsr_slave_1: entered promiscuous mode
[   67.743133][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   67.750828][ T5836] Cannot create hsr debugfs directory
[   67.800484][ T5841] hsr_slave_0: entered promiscuous mode
[   67.806745][ T5841] hsr_slave_1: entered promiscuous mode
[   67.812582][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   67.821565][ T5841] Cannot create hsr debugfs directory
[   67.829449][ T5844] hsr_slave_0: entered promiscuous mode
[   67.835560][ T5844] hsr_slave_1: entered promiscuous mode
[   67.841564][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   67.849297][ T5844] Cannot create hsr debugfs directory
[   67.865100][ T5834] hsr_slave_0: entered promiscuous mode
[   67.871303][ T5834] hsr_slave_1: entered promiscuous mode
[   67.877316][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   67.884891][ T5834] Cannot create hsr debugfs directory
[   68.007466][   T54] Bluetooth: hci1: command tx timeout
[   68.007471][ T5837] Bluetooth: hci2: command tx timeout
[   68.095860][ T5837] Bluetooth: hci3: command tx timeout
[   68.095873][   T54] Bluetooth: hci4: command tx timeout
[   68.095884][ T5148] Bluetooth: hci0: command tx timeout
[   68.136787][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   68.157316][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   68.171996][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   68.189222][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   68.205248][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   68.214746][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   68.223822][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   68.233252][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   68.272966][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   68.287436][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   68.306136][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   68.328523][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   68.352870][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   68.367587][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   68.387455][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   68.397147][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   68.410192][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.468261][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   68.479620][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   68.493506][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   68.502203][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   68.511365][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   68.522023][ T3437] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.529172][ T3437] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.541161][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.571428][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   68.580610][ T3437] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.587748][ T3437] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.617935][ T3437] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.625036][ T3437] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.633883][ T3437] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.640967][ T3437] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.654294][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.701001][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   68.712822][ T5841] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   68.723491][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   68.742092][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.749209][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.792030][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.799267][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.813543][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.854053][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.879759][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   68.899625][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.906737][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.938260][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.945597][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.977263][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   68.994463][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.010461][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.017578][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.073187][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.080342][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.151183][ T5841] veth0_vlan: entered promiscuous mode
[   69.158417][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.182680][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.199987][ T5841] veth1_vlan: entered promiscuous mode
[   69.269139][ T5834] veth0_vlan: entered promiscuous mode
[   69.301499][ T5841] veth0_macvtap: entered promiscuous mode
[   69.320237][ T5834] veth1_vlan: entered promiscuous mode
[   69.342983][ T5841] veth1_macvtap: entered promiscuous mode
[   69.385546][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.397801][ T5834] veth0_macvtap: entered promiscuous mode
[   69.411441][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.423177][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.434614][ T5834] veth1_macvtap: entered promiscuous mode
[   69.451809][ T5841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.460831][ T5841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.470307][ T5841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.480794][ T5841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.532748][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.554182][ T5831] veth0_vlan: entered promiscuous mode
[   69.578603][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.590063][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.602609][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.612622][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.623289][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.633862][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.643321][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.652367][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.661395][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.670313][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.685675][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.693688][ T5831] veth1_vlan: entered promiscuous mode
[   69.702597][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.723259][ T5836] veth0_vlan: entered promiscuous mode
[   69.764379][ T5836] veth1_vlan: entered promiscuous mode
[   69.770890][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.787513][ T5831] veth0_macvtap: entered promiscuous mode
[   69.787551][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.818103][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.827781][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.838348][ T5844] veth0_vlan: entered promiscuous mode
[   69.853899][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   69.878999][ T5831] veth1_macvtap: entered promiscuous mode
[   69.904635][ T5844] veth1_vlan: entered promiscuous mode
[   69.912706][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.917756][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.931433][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.933023][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.949861][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.960417][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.971129][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.987258][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.998418][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.009412][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.021595][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.033015][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.050822][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.059856][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.068802][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.078151][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.087466][ T5837] Bluetooth: hci1: command tx timeout
[   70.095861][ T5837] Bluetooth: hci2: command tx timeout
[   70.102325][ T5836] veth0_macvtap: entered promiscuous mode
[   70.110658][ T5914] tipc: Started in network mode
[   70.116019][ T5914] tipc: Node identity eea1450897d7, cluster identity 4711
[   70.124589][ T5914] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.150976][ T5915] syzkaller0: entered promiscuous mode
[   70.156681][ T5915] syzkaller0: entered allmulticast mode
[   70.162604][ T5915] tipc: Resetting bearer <eth:syzkaller0>
[   70.168378][ T5837] Bluetooth: hci4: command tx timeout
[   70.168572][   T54] Bluetooth: hci0: command tx timeout
[   70.179579][ T5837] Bluetooth: hci3: command tx timeout
[   70.195250][ T5836] veth1_macvtap: entered promiscuous mode
[   70.221614][ T5913] tipc: Resetting bearer <eth:syzkaller0>
[   70.262626][ T5913] tipc: Disabling bearer <eth:syzkaller0>
[   70.286412][ T5844] veth0_macvtap: entered promiscuous mode
[   70.288526][ T5917] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET)
[   70.298770][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.309344][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.329821][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.340740][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.351480][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.363883][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.375001][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.390244][ T5844] veth1_macvtap: entered promiscuous mode
[   70.419346][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.431686][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.445130][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.459139][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.469773][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.480978][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.493316][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.502251][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.513497][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.523678][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.534567][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.544558][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.555258][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.565399][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.577459][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.588311][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.605056][ T5836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.621069][ T5836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.630556][ T5836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.639571][ T5836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.660793][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.668856][ T5929] nbd: must specify a size in bytes for the device
[   70.672135][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.688139][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.698649][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.708647][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.719141][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.731622][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.742590][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.753346][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.764681][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.774290][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.783768][ T5844] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.799150][ T5844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.809979][ T5844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.822845][ T5844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.840707][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'.
[   70.881255][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.890766][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.928556][ T3437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.937509][ T3437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.957529][ T3437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.978867][ T3437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.013321][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.023497][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.032387][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.048977][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.224476][ T5946] warning: `syz.0.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   71.364966][ T5956] ieee802154 phy0 wpan0: encryption failed: -90
[   71.390717][ T5957] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.504925][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'.
[   71.529792][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[   71.536605][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[   71.734210][ T5976] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.769682][ T5982] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[   71.787597][ T5976] netlink: 1036 bytes leftover after parsing attributes in process `syz.0.18'.
[   71.799207][ T5976] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   71.812449][ T5982] Zero length message leads to an empty skb
[   71.819452][ T5988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21'.
[   71.858944][ T5988] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   71.974230][ T5997] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   72.156578][ T6012] bridge0: entered promiscuous mode
[   72.166974][   T54] Bluetooth: hci2: command tx timeout
[   72.173349][   T54] Bluetooth: hci1: command tx timeout
[   72.203326][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25'.
[   72.227615][ T6015] netlink: 288 bytes leftover after parsing attributes in process `syz.4.28'.
[   72.253383][   T54] Bluetooth: hci0: command tx timeout
[   72.253397][ T5837] Bluetooth: hci3: command tx timeout
[   72.253431][   T54] Bluetooth: hci4: command tx timeout
[   72.269983][ T6012] bridge_slave_1: left allmulticast mode
[   72.271004][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25'.
[   72.284217][ T6012] bridge_slave_1: left promiscuous mode
[   72.290769][ T6012] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.302148][ T6021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25'.
[   72.312508][ T6021] netlink: 'syz.1.25': attribute type 14 has an invalid length.
[   72.320893][ T6012] bridge_slave_0: left allmulticast mode
[   72.327009][ T6012] bridge_slave_0: left promiscuous mode
[   72.332725][ T6012] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.353293][ T6012] bridge0 (unregistering): left promiscuous mode
[   72.483489][ T6034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.34'.
[   72.708950][ T6055] netlink: 48 bytes leftover after parsing attributes in process `syz.1.41'.
[   72.877986][ T6067] syzkaller1: entered promiscuous mode
[   72.917122][ T6067] syzkaller1: entered allmulticast mode
[   72.951245][ T6080] netlink: 'syz.0.50': attribute type 13 has an invalid length.
[   73.074847][ T6087] syzkaller0: entered promiscuous mode
[   73.081766][ T6087] syzkaller0: entered allmulticast mode
[   73.497944][ T6128] xt_CT: You must specify a L4 protocol and not use inversions on it
[   73.695762][ T6141] syzkaller1: entered promiscuous mode
[   73.711492][ T6141] syzkaller1: entered allmulticast mode
[   73.838819][ T6163] xt_time: invalid argument - start or stop time greater than 23:59:59
[   73.896240][ T6163] netlink: 'syz.3.69': attribute type 25 has an invalid length.
[   74.139704][ T6178] syzkaller0: entered promiscuous mode
[   74.155530][ T6178] syzkaller0: entered allmulticast mode
[   74.245647][   T54] Bluetooth: hci1: command tx timeout
[   74.251088][   T54] Bluetooth: hci2: command tx timeout
[   74.325625][ T5837] Bluetooth: hci3: command tx timeout
[   74.331076][   T54] Bluetooth: hci0: command tx timeout
[   74.336531][   T54] Bluetooth: hci4: command tx timeout
[   74.584476][ T6224] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.129337][ T5836] syz-executor (5836) used greatest stack depth: 19600 bytes left
[   75.238534][ T1150] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.334949][ T1150] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.461102][ T1150] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.592622][ T1150] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.619804][ T6282] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.814181][ T1150] bridge_slave_1: left allmulticast mode
[   75.836036][ T1150] bridge_slave_1: left promiscuous mode
[   75.841768][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.911361][ T1150] bridge_slave_0: left allmulticast mode
[   75.935473][ T1150] bridge_slave_0: left promiscuous mode
[   75.941521][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   75.946523][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.958467][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   75.964016][ T6306] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001
[   75.966582][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   75.980840][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   75.988304][   T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   75.995996][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   76.124004][ T6315] netlink: 'syz.2.117': attribute type 1 has an invalid length.
[   76.152391][ T6315] __nla_validate_parse: 21 callbacks suppressed
[   76.152409][ T6315] netlink: 224 bytes leftover after parsing attributes in process `syz.2.117'.
[   76.188801][ T6321] netlink: 'syz.2.117': attribute type 1 has an invalid length.
[   76.211641][ T6321] netlink: 224 bytes leftover after parsing attributes in process `syz.2.117'.
[   76.263928][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   76.289500][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   76.313743][ T6328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.118'.
[   76.332153][ T1150] bond0 (unregistering): Released all slaves
[   76.352125][ T6331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.119'.
[   76.362907][ T6328] netlink: 160 bytes leftover after parsing attributes in process `syz.2.118'.
[   76.372853][ T6328] netlink: 'syz.2.118': attribute type 1 has an invalid length.
[   76.386001][ T6331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.119'.
[   76.600605][ T6336] syzkaller0: entered promiscuous mode
[   76.606177][ T6336] syzkaller0: entered allmulticast mode
[   76.616684][ T6348] veth0: entered promiscuous mode
[   76.820629][ T6303] chnl_net:caif_netlink_parms(): no params data found
[   76.849269][ T6347] veth0: left promiscuous mode
[   76.860109][ T6364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'.
[   76.869041][ T6364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.127'.
[   76.894422][ T1150] hsr_slave_0: left promiscuous mode
[   76.921038][ T1150] hsr_slave_1: left promiscuous mode
[   76.929359][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.948587][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.977999][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.988174][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1
[   77.002120][ T1150] veth1_macvtap: left promiscuous mode
[   77.008016][ T1150] veth0_macvtap: left promiscuous mode
[   77.015110][ T1150] veth1_vlan: left promiscuous mode
[   77.020745][ T1150] veth0_vlan: left promiscuous mode
[   77.131210][ T6377] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.255514][ T1150] team0 (unregistering): Port device team_slave_1 removed
[   77.271018][ T1150] team0 (unregistering): Port device team_slave_0 removed
[   77.330790][ T6388] netlink: 'syz.3.130': attribute type 29 has an invalid length.
[   77.360676][ T6377] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.422374][ T6392] netlink: 'syz.3.130': attribute type 29 has an invalid length.
[   77.450826][ T6391] sctp: [Deprecated]: syz.3.130 (pid 6391) Use of struct sctp_assoc_value in delayed_ack socket option.
[   77.450826][ T6391] Use struct sctp_sack_info instead
[   77.527918][ T6377] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.571875][ T6303] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.599780][ T6303] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.619439][ T6303] bridge_slave_0: entered allmulticast mode
[   77.629197][ T6303] bridge_slave_0: entered promiscuous mode
[   77.636574][ T6303] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.647927][ T6303] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.655577][ T6303] bridge_slave_1: entered allmulticast mode
[   77.662306][ T6303] bridge_slave_1: entered promiscuous mode
[   77.707662][ T6409] netlink: 596 bytes leftover after parsing attributes in process `syz.3.135'.
[   77.743321][ T6377] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.781859][ T6303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.844549][ T6303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.900495][ T6415] xt_CT: No such helper "pptp"
[   77.931191][ T6303] team0: Port device team_slave_0 added
[   77.947115][ T6303] team0: Port device team_slave_1 added
[   77.964591][ T6426] raw_sendmsg: syz.1.139 forgot to set AF_INET. Fix it!
[   77.972409][ T6422] sctp: [Deprecated]: syz.1.139 (pid 6422) Use of struct sctp_assoc_value in delayed_ack socket option.
[   77.972409][ T6422] Use struct sctp_sack_info instead
[   78.010252][ T6303] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.019120][ T6303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.053339][ T6303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.071623][ T6377] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.086837][   T54] Bluetooth: hci2: command tx timeout
[   78.095868][ T6303] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.102824][ T6303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.135021][ T6436] netlink: 'syz.2.141': attribute type 12 has an invalid length.
[   78.144486][ T6438] netlink: 'syz.2.141': attribute type 12 has an invalid length.
[   78.152457][ T6303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.180339][ T6377] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.202114][ T6377] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.262688][ T6377] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.308196][ T6450] netlink: 128 bytes leftover after parsing attributes in process `syz.1.143'.
[   78.371998][ T6303] hsr_slave_0: entered promiscuous mode
[   78.391452][ T6303] hsr_slave_1: entered promiscuous mode
[   78.403219][ T6303] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.414480][ T6303] Cannot create hsr debugfs directory
[   79.098394][ T6303] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   79.132145][ T6303] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   79.145059][ T6303] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   79.162766][ T6303] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   79.319170][ T6303] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.352171][ T6303] 8021q: adding VLAN 0 to HW filter on device team0
[   79.375657][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.382797][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.434143][ T3437] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.441336][ T3437] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.543667][ T6303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   79.653934][ T6550] tipc: Started in network mode
[   79.679975][ T6550] tipc: Node identity ac1414aa, cluster identity 4711
[   79.696181][ T6550] tipc: New replicast peer: 100.1.1.1
[   79.701743][ T6550] tipc: Enabled bearer <udp:syz2>, priority 10
[   79.889335][ T6571] dccp_v6_rcv: dropped packet with invalid checksum
[   80.010362][ T6303] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.023946][ T6578] Illegal XDP return value 4294967274 on prog  (id 38) dev N/A, expect packet loss!
[   80.060723][ T6581] netlink: 'syz.3.176': attribute type 4 has an invalid length.
[   80.165598][   T54] Bluetooth: hci2: command tx timeout
[   80.346294][ T6303] veth0_vlan: entered promiscuous mode
[   80.394615][ T6303] veth1_vlan: entered promiscuous mode
[   80.477638][ T6303] veth0_macvtap: entered promiscuous mode
[   80.513577][ T6303] veth1_macvtap: entered promiscuous mode
[   80.560921][ T6613] netem: change failed
[   80.590506][ T6303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.624671][ T6303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.655396][ T6303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.685501][ T6303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.695498][ T5930] tipc: Node number set to 2886997162
[   80.707530][ T6303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.728282][ T6303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.743632][ T6303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.764588][ T6303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.779584][ T6303] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.840124][ T6303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.867964][ T6303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.888184][ T6303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.912039][ T6303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.988620][ T6303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.010042][ T6303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.033378][ T6303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.057840][ T6303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.075830][ T6303] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.113034][ T6303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.137267][ T6303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.149171][ T6303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.158542][ T6303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.494086][ T6683] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.495884][ T6713] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.565969][ T6683] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.594424][ T6713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.858734][ T6732] Bluetooth: MGMT ver 1.23
[   81.900337][ T6736] netlink: 'syz.1.195': attribute type 30 has an invalid length.
[   81.986365][ T6736] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[   82.351661][ T6759] __nla_validate_parse: 10 callbacks suppressed
[   82.351680][ T6759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.199'.
[   82.438233][ T6760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.199'.
[   82.501327][ T6759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.199'.
[   82.561610][ T6760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.199'.
[   83.033116][ T6705] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.157893][ T6705] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.303680][ T6705] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.358778][ T6783] veth0: entered promiscuous mode
[   83.365287][ T6779] veth0: left promiscuous mode
[   83.490551][ T6787] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.206'.
[   83.544476][ T6705] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.558996][ T6787] openvswitch: netlink: Message has 44053 unknown bytes.
[   83.886158][ T6705] bridge_slave_1: left allmulticast mode
[   83.891850][ T6705] bridge_slave_1: left promiscuous mode
[   83.956676][ T6705] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.042290][ T6705] bridge_slave_0: left allmulticast mode
[   84.071418][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   84.075926][ T6705] bridge_slave_0: left promiscuous mode
[   84.090601][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   84.098436][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   84.109495][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   84.122347][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   84.135790][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   84.138176][ T6705] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.173501][ T6809] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   84.570277][ T6705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   84.598374][ T6705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   84.612417][ T6705] bond0 (unregistering): Released all slaves
[   84.655098][ T6835] Cannot find del_set index 4 as target
[   84.672676][ T6832] batman_adv: batadv0: Adding interface: dummy0
[   84.680303][ T6832] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.715584][ T6832] batman_adv: batadv0: Interface activated: dummy0
[   84.788351][ T6833] batadv0: mtu less than device minimum
[   84.802229][ T6833] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   84.813586][ T6833] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   84.824867][ T6833] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   84.836184][ T6833] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   84.847448][ T6833] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   84.858682][ T6833] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   84.870019][ T6833] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   84.947342][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   84.957903][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   84.973338][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   84.988795][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   84.996497][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   85.004418][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   85.073894][    C0] Unknown status report in ack skb
[   85.146133][ T6854] xt_hashlimit: size too large, truncated to 1048576
[   85.179745][ T6855] netlink: 'syz.0.221': attribute type 21 has an invalid length.
[   85.463146][ T6705] hsr_slave_0: left promiscuous mode
[   85.475472][ T6705] hsr_slave_1: left promiscuous mode
[   85.483773][ T6705] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.505491][ T6705] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.566106][ T6705] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.578815][ T6705] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.598795][ T6705] veth1_macvtap: left promiscuous mode
[   85.604332][ T6705] veth0_macvtap: left promiscuous mode
[   85.624443][ T6705] veth1_vlan: left promiscuous mode
[   85.647942][ T6705] veth0_vlan: left promiscuous mode
[   85.767319][ T6896] pim6reg: entered allmulticast mode
[   85.939232][ T6705] team0 (unregistering): Port device team_slave_1 removed
[   85.953420][ T6705] team0 (unregistering): Port device team_slave_0 removed
[   86.069893][ T6844] chnl_net:caif_netlink_parms(): no params data found
[   86.166571][ T6931] netlink: 16 bytes leftover after parsing attributes in process `syz.2.237'.
[   86.237724][ T6939] netlink: 'syz.0.238': attribute type 2 has an invalid length.
[   86.240754][ T6937] netlink: 24 bytes leftover after parsing attributes in process `syz.3.239'.
[   86.364598][ T6844] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.372771][ T6844] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.412422][ T6844] bridge_slave_0: entered allmulticast mode
[   86.444398][ T6844] bridge_slave_0: entered promiscuous mode
[   86.482167][ T6844] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.490328][ T6844] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.496388][ T6967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.243'.
[   86.498491][ T6844] bridge_slave_1: entered allmulticast mode
[   86.525009][ T6844] bridge_slave_1: entered promiscuous mode
[   86.639734][ T6844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.651079][ T6844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.720650][ T6844] team0: Port device team_slave_0 added
[   86.741875][ T6844] team0: Port device team_slave_1 added
[   86.774310][ T6986] ieee802154 phy0 wpan0: encryption failed: -90
[   86.779701][ T6988] netlink: 116 bytes leftover after parsing attributes in process `syz.2.249'.
[   86.817953][ T6844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.828329][ T6844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.873619][ T6844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.893448][  T976] cfg80211: failed to load regulatory.db
[   86.936715][ T6844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.962437][ T6844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.047151][ T5837] Bluetooth: hci2: command tx timeout
[   87.051167][ T6844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.198271][ T6844] hsr_slave_0: entered promiscuous mode
[   87.223765][ T6844] hsr_slave_1: entered promiscuous mode
[   87.260744][ T6844] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   87.311001][ T6844] Cannot create hsr debugfs directory
[   87.715318][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.266'.
[   87.859618][ T7082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.270'.
[   87.915257][ T7082] netlink: 72 bytes leftover after parsing attributes in process `syz.3.270'.
[   87.931878][ T7085] net_ratelimit: 12 callbacks suppressed
[   87.931897][ T7085] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[   88.171751][ T7110] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.276'.
[   88.181129][ T7110] openvswitch: netlink: Message has 44053 unknown bytes.
[   88.330561][ T7118] netlink: 20 bytes leftover after parsing attributes in process `syz.2.277'.
[   88.339789][ T7118] netlink: 20 bytes leftover after parsing attributes in process `syz.2.277'.
[   88.378389][ T6844] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   88.393147][ T6844] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   88.403830][ T6844] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   88.413700][ T6844] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   88.565185][ T6844] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.607224][ T6844] 8021q: adding VLAN 0 to HW filter on device team0
[   88.624443][ T6700] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.631586][ T6700] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.645462][ T6709] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.652624][ T6709] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.741437][ T7143] netlink: 48 bytes leftover after parsing attributes in process `syz.2.283'.
[   88.801629][ T7149] netlink: 'syz.3.284': attribute type 61 has an invalid length.
[   88.813992][ T7143] netlink: 16 bytes leftover after parsing attributes in process `syz.2.283'.
[   88.836805][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.284'.
[   88.850695][ T7149] netlink: 64 bytes leftover after parsing attributes in process `syz.3.284'.
[   88.935138][ T6844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.125800][ T5837] Bluetooth: hci2: command tx timeout
[   89.239573][ T7190] xt_TCPMSS: Only works on TCP SYN packets
[   89.398231][ T6844] veth0_vlan: entered promiscuous mode
[   89.436841][ T6844] veth1_vlan: entered promiscuous mode
[   89.518072][ T6844] veth0_macvtap: entered promiscuous mode
[   89.529305][ T7220] netlink: 'syz.2.300': attribute type 1 has an invalid length.
[   89.542095][ T6844] veth1_macvtap: entered promiscuous mode
[   89.556157][ T7222] netlink: 'syz.2.300': attribute type 1 has an invalid length.
[   89.587596][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.608972][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.619714][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.630722][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.642425][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.654132][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.667745][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.680479][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.692795][ T6844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.700942][ T7220] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[   89.701685][ T7222] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[   89.711306][ T7228] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[   89.732449][ T7226] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.770577][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.815505][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.854231][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.866692][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.877172][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.888652][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.946162][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.959177][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.970316][ T6844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.981288][ T6844] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.992276][ T6844] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.019538][ T6844] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.037722][ T6844] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.202663][ T6705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.227013][ T6705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.309751][ T6677] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.329922][ T6677] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.634381][ T7299] tipc: Can't bind to reserved service type 1
[   90.729216][ T7307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0
[   90.741920][ T7307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.752826][ T7307] bond0: (slave macvlan2): Error -22 calling dev_set_mtu
[   91.112253][ T7345] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.135645][ T7345] macvlan1: entered promiscuous mode
[   91.142309][ T7344] macvlan1: left promiscuous mode
[   91.776672][ T7404] IPVS: set_ctl: invalid protocol: 46 172.20.20.68:20004
[   91.807606][ T7407] netlink: 'syz.1.338': attribute type 4 has an invalid length.
[   91.902647][ T6678] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.439357][    T8] IPVS: starting estimator thread 0...
[   92.501033][ T7427] gretap0: entered promiscuous mode
[   92.520128][ T7427] batadv_slave_1: entered promiscuous mode
[   92.536142][ T7426] IPVS: using max 37 ests per chain, 88800 per kthread
[   92.595098][ T6678] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.626368][ T7433] bridge0: entered promiscuous mode
[   92.635365][ T7433] bridge_slave_1: left allmulticast mode
[   92.653223][ T7433] bridge_slave_1: left promiscuous mode
[   92.661559][ T7433] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.693629][ T7433] bridge_slave_0: left allmulticast mode
[   92.704815][ T7433] bridge_slave_0: left promiscuous mode
[   92.712292][ T7433] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.745824][ T7433] bridge0 (unregistering): left promiscuous mode
[   92.769696][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   92.778847][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   92.788277][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   92.796354][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   92.803775][   T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   92.812440][ T6678] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.812881][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   92.838663][ T7447] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   92.851642][ T7447] gretap1: entered promiscuous mode
[   92.857372][ T7447] gretap1: entered allmulticast mode
[   92.897790][ T6678] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.997344][ T7458] __nla_validate_parse: 17 callbacks suppressed
[   92.997364][ T7458] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.352'.
[   93.032751][ T7465] x_tables: duplicate underflow at hook 3
[   93.040122][ T7458] netlink: zone id is out of range
[   93.049258][ T7458] netlink: zone id is out of range
[   93.066725][ T7458] netlink: zone id is out of range
[   93.075524][ T7458] netlink: get zone limit has 8 unknown bytes
[   93.117208][ T6678] bridge_slave_1: left allmulticast mode
[   93.141402][ T6678] bridge_slave_1: left promiscuous mode
[   93.154928][ T6678] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.165195][ T6678] bridge_slave_0: left allmulticast mode
[   93.177081][ T6678] bridge_slave_0: left promiscuous mode
[   93.182890][ T6678] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.239368][ T7483] netlink: 'syz.2.356': attribute type 1 has an invalid length.
[   93.307321][ T7485] netlink: 16 bytes leftover after parsing attributes in process `syz.1.357'.
[   93.352044][ T6678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   93.375028][ T6678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   93.386798][ T6678] bond0 (unregistering): Released all slaves
[   93.449924][ T7486] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   93.460759][ T7490] 8021q: adding VLAN 0 to HW filter on device bond1
[   93.468191][ T6697] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   93.562373][ T7448] chnl_net:caif_netlink_parms(): no params data found
[   93.586121][ T6705] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   93.672528][ T7520] netlink: 36 bytes leftover after parsing attributes in process `syz.0.363'.
[   93.721180][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.364'.
[   93.742274][ T7520] tc_dump_action: action bad kind
[   93.749453][ T7448] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.761327][ T7448] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.768689][ T7448] bridge_slave_0: entered allmulticast mode
[   93.776060][ T7448] bridge_slave_0: entered promiscuous mode
[   93.784249][ T7448] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.802839][ T7448] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.810382][ T7448] bridge_slave_1: entered allmulticast mode
[   93.844302][ T7448] bridge_slave_1: entered promiscuous mode
[   93.981882][ T6678] hsr_slave_0: left promiscuous mode
[   93.997739][ T6678] hsr_slave_1: left promiscuous mode
[   94.003773][ T6678] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.035644][ T6678] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.060223][ T6678] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   94.079199][ T6678] batman_adv: batadv0: Removing interface: batadv_slave_1
[   94.091425][ T7548] x_tables: duplicate underflow at hook 1
[   94.099161][ T6678] veth1_macvtap: left promiscuous mode
[   94.106995][ T6678] veth0_macvtap: left promiscuous mode
[   94.112689][ T6678] veth1_vlan: left promiscuous mode
[   94.120325][ T6678] veth0_vlan: left promiscuous mode
[   94.181759][ T7448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.194216][ T7448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.235880][ T7545] tc_dump_action: action bad kind
[   94.356336][ T7560] netlink: 24 bytes leftover after parsing attributes in process `syz.3.372'.
[   94.408738][ T7564] x_tables: duplicate underflow at hook 2
[   94.417601][ T6678] team0 (unregistering): Port device team_slave_1 removed
[   94.427240][ T7564] ip6t_srh: unknown srh match flags  536B
[   94.438538][ T7566] Bluetooth: MGMT ver 1.23
[   94.444545][ T6678] team0 (unregistering): Port device team_slave_0 removed
[   94.610798][ T7562] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[   94.637052][ T7448] team0: Port device team_slave_0 added
[   94.651289][ T7448] team0: Port device team_slave_1 added
[   94.728845][ T7586] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   94.744766][ T7588] netlink: 'syz.1.381': attribute type 1 has an invalid length.
[   94.752613][ T7588] netlink: 134732 bytes leftover after parsing attributes in process `syz.1.381'.
[   94.766147][ T7448] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.774206][ T7448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.811935][ T7592] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   94.821344][ T7448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.835546][ T7592] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.848152][ T7448] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.852375][ T7594] Cannot find del_set index 4 as target
[   94.864674][ T7448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.891419][   T54] Bluetooth: hci2: command tx timeout
[   94.898531][ T7448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.919836][ T7590] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   94.927136][ T7590] IPv6: NLM_F_CREATE should be set when creating new route
[   94.987894][ T7602] netlink: 'syz.1.385': attribute type 178 has an invalid length.
[   94.996004][ T7448] hsr_slave_0: entered promiscuous mode
[   94.996642][ T7448] hsr_slave_1: entered promiscuous mode
[   95.020800][ T7448] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   95.028712][ T7448] Cannot create hsr debugfs directory
[   95.041285][ T7602] netlink: 48 bytes leftover after parsing attributes in process `syz.1.385'.
[   95.119837][    T8] IPVS: starting estimator thread 0...
[   95.206296][ T7612] IPVS: using max 35 ests per chain, 84000 per kthread
[   95.235318][ T7617] netlink: 28 bytes leftover after parsing attributes in process `syz.1.387'.
[   95.273422][ T7617] netlink: 28 bytes leftover after parsing attributes in process `syz.1.387'.
[   95.480295][ T7629] netlink: 20 bytes leftover after parsing attributes in process `syz.1.390'.
[   95.597397][ T7448] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   95.631054][ T7647] veth1: entered promiscuous mode
[   95.640142][ T7647] veth1: left promiscuous mode
[   95.659555][ T7652] netlink: 'syz.1.394': attribute type 11 has an invalid length.
[   95.676213][ T7448] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   95.688013][ T7448] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   95.727987][ T7448] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   95.898228][ T7448] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.947816][ T7448] 8021q: adding VLAN 0 to HW filter on device team0
[   95.970550][ T6678] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.977689][ T6678] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.027909][ T6709] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.035077][ T6709] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.249988][ T7692] tap0: tun_chr_ioctl cmd 1074025672
[   96.260614][ T7692] tap0: ignored: set checksum disabled
[   96.337881][ T7448] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.400077][ T7707] ip6t_srh: unknown srh match flags  536B
[   96.488788][ T5837] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   96.495059][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout
[   96.539402][ T7715] bond1: entered promiscuous mode
[   96.560240][ T7715] bond1: entered allmulticast mode
[   96.568040][ T7715] 8021q: adding VLAN 0 to HW filter on device bond1
[   96.623144][ T7721] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[   96.807069][ T7448] veth0_vlan: entered promiscuous mode
[   96.872839][ T7448] veth1_vlan: entered promiscuous mode
[   96.946430][ T7448] veth0_macvtap: entered promiscuous mode
[   96.972595][ T5837] Bluetooth: hci2: command tx timeout
[   96.982016][ T7448] veth1_macvtap: entered promiscuous mode
[   97.007467][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.018440][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.028908][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.039568][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.049703][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.060505][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.071936][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.082618][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.100268][ T7448] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.150978][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.181885][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.205351][ T7770] xt_TPROXY: Can be used only with -p tcp or -p udp
[   97.213614][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.227601][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.245144][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.256139][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.267514][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.287686][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.306742][ T7448] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.375379][ T7448] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.390300][ T7448] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.405532][ T7448] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.423449][ T7448] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.574958][ T7792] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.616210][ T6700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.658184][ T6700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.727507][ T6697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.746823][ T6697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.779466][ T6705] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.328454][ T6705] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.471903][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   99.479328][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   99.486810][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   99.494500][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   99.504054][   T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   99.512199][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   99.530327][ T6705] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.589003][ T6705] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.627498][ T7815] chnl_net:caif_netlink_parms(): no params data found
[   99.688391][ T7815] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.699831][ T7815] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.707301][ T7815] bridge_slave_0: entered allmulticast mode
[   99.713786][ T7815] bridge_slave_0: entered promiscuous mode
[   99.727820][ T7815] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.735032][ T7815] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.742560][ T7815] bridge_slave_1: entered allmulticast mode
[   99.749472][ T7815] bridge_slave_1: entered promiscuous mode
[   99.770600][ T6705] bridge_slave_1: left allmulticast mode
[   99.778539][ T6705] bridge_slave_1: left promiscuous mode
[   99.784193][ T6705] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.792638][ T6705] bridge_slave_0: left allmulticast mode
[   99.798738][ T6705] bridge_slave_0: left promiscuous mode
[   99.804369][ T6705] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.835023][ T7815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.847515][ T7815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.926551][ T6705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   99.938781][ T6705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   99.948205][ T6705] bond0 (unregistering): Released all slaves
[   99.968004][ T7815] team0: Port device team_slave_0 added
[   99.975048][ T7815] team0: Port device team_slave_1 added
[   99.993787][ T7815] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.000801][ T7815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.027466][ T7815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.041118][ T7815] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.048377][ T7815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.074449][ T7815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.110585][ T7815] hsr_slave_0: entered promiscuous mode
[  100.118920][ T7815] hsr_slave_1: entered promiscuous mode
[  100.124985][ T7815] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  100.133376][ T7815] Cannot create hsr debugfs directory
[  100.287428][ T6705] hsr_slave_0: left promiscuous mode
[  100.293217][ T6705] hsr_slave_1: left promiscuous mode
[  100.299320][ T6705] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.308581][ T6705] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.318645][ T6705] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.333215][ T6705] batman_adv: batadv0: Removing interface: batadv_slave_1
[  100.342888][ T6705] veth1_macvtap: left promiscuous mode
[  100.351023][ T6705] veth0_macvtap: left promiscuous mode
[  100.357295][ T6705] veth1_vlan: left promiscuous mode
[  100.362790][ T6705] veth0_vlan: left promiscuous mode
[  100.478120][ T6705] team0 (unregistering): Port device team_slave_1 removed
[  100.495014][ T6705] team0 (unregistering): Port device team_slave_0 removed
[  100.732119][ T7815] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  100.743254][ T7815] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  100.755142][ T7815] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  100.765221][ T7815] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  100.859549][ T7815] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.891401][ T7815] 8021q: adding VLAN 0 to HW filter on device team0
[  100.904300][ T6678] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.911467][ T6678] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.939786][ T6678] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.946938][ T6678] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.982188][ T7815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  101.106213][ T7815] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.269556][ T7815] veth0_vlan: entered promiscuous mode
[  101.281013][ T7815] veth1_vlan: entered promiscuous mode
[  101.307564][ T7815] veth0_macvtap: entered promiscuous mode
[  101.320033][ T7815] veth1_macvtap: entered promiscuous mode
[  101.335065][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.348352][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.359885][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.373944][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.384095][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.397442][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.408118][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.420848][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.433065][ T7815] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.449928][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.463032][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.474568][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.488894][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.499054][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.512552][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.522947][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.537174][ T5837] Bluetooth: hci2: command tx timeout
[  101.542647][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.555026][ T7815] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.570167][ T7815] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.580320][ T7815] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.590860][ T7815] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.601648][ T7815] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.658268][ T6705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.671726][ T6705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.687240][ T6705] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.695093][ T6705] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.377631][ T6713] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.163230][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  104.171354][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  104.178987][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  104.188468][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  104.196233][   T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  104.203689][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  104.288161][ T7906] chnl_net:caif_netlink_parms(): no params data found
[  104.330199][ T7906] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.337400][ T7906] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.344515][ T7906] bridge_slave_0: entered allmulticast mode
[  104.351846][ T7906] bridge_slave_0: entered promiscuous mode
[  104.359330][ T7906] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.366630][ T7906] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.373768][ T7906] bridge_slave_1: entered allmulticast mode
[  104.380595][ T7906] bridge_slave_1: entered promiscuous mode
[  104.399907][ T7906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  104.410998][ T7906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.432872][ T7906] team0: Port device team_slave_0 added
[  104.440060][ T7906] team0: Port device team_slave_1 added
[  104.458553][ T7906] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.465640][ T7906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.492111][ T7906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.504457][ T7906] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.511665][ T7906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.538223][ T7906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.567644][ T7906] hsr_slave_0: entered promiscuous mode
[  104.574124][ T7906] hsr_slave_1: entered promiscuous mode
[  104.580488][ T7906] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  104.588103][ T7906] Cannot create hsr debugfs directory
[  104.859937][ T6713] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.909140][ T6713] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.959161][ T6713] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.032106][ T6713] bridge_slave_1: left allmulticast mode
[  105.038043][ T6713] bridge_slave_1: left promiscuous mode
[  105.044258][ T6713] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.052903][ T6713] bridge_slave_0: left allmulticast mode
[  105.058957][ T6713] bridge_slave_0: left promiscuous mode
[  105.064684][ T6713] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.151449][ T6713] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  105.163087][ T6713] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  105.173807][ T6713] bond0 (unregistering): Released all slaves
[  105.498291][ T6713] hsr_slave_0: left promiscuous mode
[  105.504123][ T6713] hsr_slave_1: left promiscuous mode
[  105.512489][ T6713] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.520244][ T6713] batman_adv: batadv0: Removing interface: batadv_slave_0
[  105.529084][ T6713] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  105.536777][ T6713] batman_adv: batadv0: Removing interface: batadv_slave_1
[  105.546828][ T6713] veth1_macvtap: left promiscuous mode
[  105.552369][ T6713] veth0_macvtap: left promiscuous mode
[  105.559176][ T6713] veth1_vlan: left promiscuous mode
[  105.564475][ T6713] veth0_vlan: left promiscuous mode
[  105.687833][ T6713] team0 (unregistering): Port device team_slave_1 removed
[  105.701618][ T6713] team0 (unregistering): Port device team_slave_0 removed
[  105.865302][ T7906] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  105.873900][ T7906] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  105.882942][ T7906] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  105.891474][ T7906] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  105.937543][ T7906] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.952115][ T7906] 8021q: adding VLAN 0 to HW filter on device team0
[  105.968286][ T6709] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.975376][ T6709] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.987715][ T6700] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.994805][ T6700] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.110139][ T7906] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.223477][ T7906] veth0_vlan: entered promiscuous mode
[  106.233872][ T7906] veth1_vlan: entered promiscuous mode
[  106.246020][   T54] Bluetooth: hci2: command tx timeout
[  106.261043][ T7906] veth0_macvtap: entered promiscuous mode
[  106.269947][ T7906] veth1_macvtap: entered promiscuous mode
[  106.282646][ T7906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.293164][ T7906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.303070][ T7906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.313560][ T7906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.323575][ T7906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.334131][ T7906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.343986][ T7906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.354486][ T7906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.365215][ T7906] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.375118][ T7906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.385937][ T7906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.397430][ T7906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.408187][ T7906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.418138][ T7906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.428807][ T7906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.438712][ T7906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.449163][ T7906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.459784][ T7906] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.471843][ T7906] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.481078][ T7906] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.490011][ T7906] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.500063][ T7906] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.540595][ T6705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.552286][ T6705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.570659][ T6700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.579611][ T6700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.278246][ T6705] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.177785][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  109.185115][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  109.192970][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  109.201009][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  109.208782][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  109.216181][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  109.305921][ T7954] chnl_net:caif_netlink_parms(): no params data found
[  109.346982][ T7954] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.354092][ T7954] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.361672][ T7954] bridge_slave_0: entered allmulticast mode
[  109.369016][ T7954] bridge_slave_0: entered promiscuous mode
[  109.376481][ T7954] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.383575][ T7954] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.391034][ T7954] bridge_slave_1: entered allmulticast mode
[  109.397856][ T7954] bridge_slave_1: entered promiscuous mode
[  109.417186][ T7954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.427905][ T7954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  109.451763][ T7954] team0: Port device team_slave_0 added
[  109.459207][ T7954] team0: Port device team_slave_1 added
[  109.477959][ T7954] batman_adv: batadv0: Adding interface: batadv_slave_0
[  109.484950][ T7954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.511470][ T7954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  109.525686][ T7954] batman_adv: batadv0: Adding interface: batadv_slave_1
[  109.532721][ T7954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.559214][ T7954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  109.587525][ T7954] hsr_slave_0: entered promiscuous mode
[  109.593558][ T7954] hsr_slave_1: entered promiscuous mode
[  109.599597][ T7954] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  109.607481][ T7954] Cannot create hsr debugfs directory
[  109.989275][ T6705] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.030464][ T6705] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.080709][ T6705] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.148143][ T6705] bridge_slave_1: left allmulticast mode
[  110.153844][ T6705] bridge_slave_1: left promiscuous mode
[  110.159915][ T6705] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.170427][ T6705] bridge_slave_0: left allmulticast mode
[  110.177109][ T6705] bridge_slave_0: left promiscuous mode
[  110.182790][ T6705] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.273743][ T6705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  110.283829][ T6705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  110.297390][ T6705] bond0 (unregistering): Released all slaves
[  110.508353][ T6705] hsr_slave_0: left promiscuous mode
[  110.514562][ T6705] hsr_slave_1: left promiscuous mode
[  110.521516][ T6705] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  110.529288][ T6705] batman_adv: batadv0: Removing interface: batadv_slave_0
[  110.537371][ T6705] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  110.544820][ T6705] batman_adv: batadv0: Removing interface: batadv_slave_1
[  110.554910][ T6705] veth1_macvtap: left promiscuous mode
[  110.562286][ T6705] veth0_macvtap: left promiscuous mode
[  110.567925][ T6705] veth1_vlan: left promiscuous mode
[  110.573398][ T6705] veth0_vlan: left promiscuous mode
[  110.674231][ T6705] team0 (unregistering): Port device team_slave_1 removed
[  110.686715][ T6705] team0 (unregistering): Port device team_slave_0 removed
[  110.975771][ T7954] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  110.984624][ T7954] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  110.993578][ T7954] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  111.002312][ T7954] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  111.047543][ T7954] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.061918][ T7954] 8021q: adding VLAN 0 to HW filter on device team0
[  111.072990][ T6713] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.080104][ T6713] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.092817][ T6705] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.099942][ T6705] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.202795][ T7954] 8021q: adding VLAN 0 to HW filter on device batadv0
[  111.285605][   T54] Bluetooth: hci2: command tx timeout
[  111.328660][ T7954] veth0_vlan: entered promiscuous mode
[  111.337693][ T7954] veth1_vlan: entered promiscuous mode
[  111.358492][ T7954] veth0_macvtap: entered promiscuous mode
[  111.366603][ T7954] veth1_macvtap: entered promiscuous mode
[  111.379628][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  111.391255][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.401137][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  111.411899][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.421806][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  111.432424][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.442907][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  111.453533][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.464303][ T7954] batman_adv: batadv0: Interface activated: batadv_slave_0
[  111.477436][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  111.488215][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.498540][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  111.509242][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.519950][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  111.530466][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.540445][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  111.550952][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.562119][ T7954] batman_adv: batadv0: Interface activated: batadv_slave_1
[  111.572568][ T7954] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.581806][ T7954] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.590591][ T7954] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.600117][ T7954] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.638776][ T6678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.651921][ T6678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.669534][ T6700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.677993][ T6700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.316155][ T6709] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.362866][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  114.370482][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  114.377930][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  114.386926][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  114.394493][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  114.401880][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  114.490219][ T8000] chnl_net:caif_netlink_parms(): no params data found
[  114.531013][ T8000] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.538514][ T8000] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.545746][ T8000] bridge_slave_0: entered allmulticast mode
[  114.552254][ T8000] bridge_slave_0: entered promiscuous mode
[  114.559574][ T8000] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.567917][ T8000] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.575061][ T8000] bridge_slave_1: entered allmulticast mode
[  114.581811][ T8000] bridge_slave_1: entered promiscuous mode
[  114.601678][ T8000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  114.612835][ T8000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  114.634112][ T8000] team0: Port device team_slave_0 added
[  114.641535][ T8000] team0: Port device team_slave_1 added
[  114.659292][ T8000] batman_adv: batadv0: Adding interface: batadv_slave_0
[  114.667351][ T8000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.694774][ T8000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  114.707924][ T8000] batman_adv: batadv0: Adding interface: batadv_slave_1
[  114.714887][ T8000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.741035][ T8000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  114.770164][ T8000] hsr_slave_0: entered promiscuous mode
[  114.776394][ T8000] hsr_slave_1: entered promiscuous mode
[  114.782294][ T8000] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  114.790054][ T8000] Cannot create hsr debugfs directory
[  114.909663][ T6709] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.959971][ T6709] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.019302][ T6709] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.126547][ T6709] bridge_slave_1: left allmulticast mode
[  115.132266][ T6709] bridge_slave_1: left promiscuous mode
[  115.141162][ T6709] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.150100][ T6709] bridge_slave_0: left allmulticast mode
[  115.156405][ T6709] bridge_slave_0: left promiscuous mode
[  115.162147][ T6709] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.270722][ T6709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  115.282716][ T6709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  115.292286][ T6709] bond0 (unregistering): Released all slaves
[  115.467371][ T6709] hsr_slave_0: left promiscuous mode
[  115.473372][ T6709] hsr_slave_1: left promiscuous mode
[  115.480118][ T6709] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.488320][ T6709] batman_adv: batadv0: Removing interface: batadv_slave_0
[  115.499800][ T6709] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.507673][ T6709] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.521461][ T6709] veth1_macvtap: left promiscuous mode
[  115.527468][ T6709] veth0_macvtap: left promiscuous mode
[  115.533057][ T6709] veth1_vlan: left promiscuous mode
[  115.541502][ T6709] veth0_vlan: left promiscuous mode
[  115.650070][ T6709] team0 (unregistering): Port device team_slave_1 removed
[  115.661274][ T6709] team0 (unregistering): Port device team_slave_0 removed
[  116.033623][ T8000] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  116.042381][ T8000] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  116.052368][ T8000] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  116.061967][ T8000] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  116.106624][ T8000] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.122980][ T8000] 8021q: adding VLAN 0 to HW filter on device team0
[  116.132906][ T6700] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.140010][ T6700] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.152359][ T6705] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.159491][ T6705] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.187170][ T8000] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  116.268730][ T8000] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.381596][ T8000] veth0_vlan: entered promiscuous mode
[  116.391361][ T8000] veth1_vlan: entered promiscuous mode
[  116.409914][ T8000] veth0_macvtap: entered promiscuous mode
[  116.421575][ T8000] veth1_macvtap: entered promiscuous mode
[  116.433052][ T8000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  116.444619][ T8000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.454849][ T8000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  116.465719][ T8000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.475689][ T8000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  116.486269][ T5837] Bluetooth: hci2: command tx timeout
[  116.491744][ T8000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.501599][ T8000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  116.512591][ T8000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.523349][ T8000] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.534559][ T8000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  116.545076][ T8000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.555360][ T8000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  116.565919][ T8000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.576537][ T8000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  116.587043][ T8000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.597013][ T8000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  116.607792][ T8000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.618904][ T8000] batman_adv: batadv0: Interface activated: batadv_slave_1
[  116.630427][ T8000] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.639271][ T8000] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.648335][ T8000] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.657165][ T8000] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.695045][ T6713] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.703273][ T6713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.721428][ T6697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.730066][ T6697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.622025][ T6700] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.749212][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  119.756512][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  119.763745][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  119.771972][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  119.779581][   T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  119.787497][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  119.873140][ T8046] chnl_net:caif_netlink_parms(): no params data found
[  119.916245][ T8046] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.923361][ T8046] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.930929][ T8046] bridge_slave_0: entered allmulticast mode
[  119.938321][ T8046] bridge_slave_0: entered promiscuous mode
[  119.945321][ T8046] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.952839][ T8046] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.960336][ T8046] bridge_slave_1: entered allmulticast mode
[  119.967268][ T8046] bridge_slave_1: entered promiscuous mode
[  119.986174][ T8046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  119.997596][ T8046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  120.019440][ T8046] team0: Port device team_slave_0 added
[  120.027177][ T8046] team0: Port device team_slave_1 added
[  120.043838][ T8046] batman_adv: batadv0: Adding interface: batadv_slave_0
[  120.050977][ T8046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.077371][ T8046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  120.090271][ T8046] batman_adv: batadv0: Adding interface: batadv_slave_1
[  120.097924][ T8046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.124499][ T8046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  120.136392][ T6700] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.166667][ T8046] hsr_slave_0: entered promiscuous mode
[  120.172749][ T8046] hsr_slave_1: entered promiscuous mode
[  120.178857][ T8046] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  120.186466][ T8046] Cannot create hsr debugfs directory
[  120.215172][ T6700] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.290149][ T6700] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.382939][ T6700] bridge_slave_1: left allmulticast mode
[  120.390030][ T6700] bridge_slave_1: left promiscuous mode
[  120.395912][ T6700] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.404646][ T6700] bridge_slave_0: left allmulticast mode
[  120.411730][ T6700] bridge_slave_0: left promiscuous mode
[  120.418015][ T6700] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.549702][ T6700] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  120.559838][ T6700] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  120.569603][ T6700] bond0 (unregistering): Released all slaves
[  120.774451][ T6700] hsr_slave_0: left promiscuous mode
[  120.780877][ T6700] hsr_slave_1: left promiscuous mode
[  120.788816][ T6700] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.798379][ T6700] batman_adv: batadv0: Removing interface: batadv_slave_0
[  120.807007][ T6700] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.815329][ T6700] batman_adv: batadv0: Removing interface: batadv_slave_1
[  120.828659][ T6700] veth1_macvtap: left promiscuous mode
[  120.834326][ T6700] veth0_macvtap: left promiscuous mode
[  120.840031][ T6700] veth1_vlan: left promiscuous mode
[  120.845295][ T6700] veth0_vlan: left promiscuous mode
[  120.944823][ T6700] team0 (unregistering): Port device team_slave_1 removed
[  120.960192][ T6700] team0 (unregistering): Port device team_slave_0 removed
[  121.258949][ T8046] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  121.271975][ T8046] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  121.281982][ T8046] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  121.294549][ T8046] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  121.340691][ T8046] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.354725][ T8046] 8021q: adding VLAN 0 to HW filter on device team0
[  121.364492][ T6678] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.371604][ T6678] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.384765][ T6713] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.391919][ T6713] bridge0: port 2(bridge_slave_1) entered forwarding state
[  121.491670][ T8046] 8021q: adding VLAN 0 to HW filter on device batadv0
[  121.610493][ T8046] veth0_vlan: entered promiscuous mode
[  121.620171][ T8046] veth1_vlan: entered promiscuous mode
[  121.640175][ T8046] veth0_macvtap: entered promiscuous mode
[  121.648049][ T8046] veth1_macvtap: entered promiscuous mode
[  121.660369][ T8046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.671082][ T8046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.680932][ T8046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.691461][ T8046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.701384][ T8046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.711847][ T8046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.721721][ T8046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.732708][ T8046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.743725][ T8046] batman_adv: batadv0: Interface activated: batadv_slave_0
[  121.754597][ T8046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.766091][ T8046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.776369][ T8046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.786959][ T8046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.796882][ T8046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.807406][ T8046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.817545][ T8046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.828043][ T8046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.839191][ T8046] batman_adv: batadv0: Interface activated: batadv_slave_1
[  121.851088][ T8046] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.860049][   T54] Bluetooth: hci2: command tx timeout
[  121.860152][ T8046] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.874180][ T8046] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.882903][ T8046] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  121.921740][ T6706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.930500][ T6706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.951734][ T6700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.960066][ T6700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.939184][ T6705] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.160609][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  125.168292][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  125.175678][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  125.183477][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  125.191239][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  125.198749][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  125.290846][ T8092] chnl_net:caif_netlink_parms(): no params data found
[  125.331658][ T8092] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.339193][ T8092] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.346811][ T8092] bridge_slave_0: entered allmulticast mode
[  125.353473][ T8092] bridge_slave_0: entered promiscuous mode
[  125.360993][ T8092] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.369825][ T8092] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.377506][ T8092] bridge_slave_1: entered allmulticast mode
[  125.384079][ T8092] bridge_slave_1: entered promiscuous mode
[  125.399904][ T6705] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.421241][ T8092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  125.432173][ T8092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  125.454204][ T8092] team0: Port device team_slave_0 added
[  125.461919][ T8092] team0: Port device team_slave_1 added
[  125.482619][ T6705] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.494939][ T8092] batman_adv: batadv0: Adding interface: batadv_slave_0
[  125.503890][ T8092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.531043][ T8092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  125.542956][ T8092] batman_adv: batadv0: Adding interface: batadv_slave_1
[  125.550000][ T8092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.576131][ T8092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  125.606404][ T6705] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.620558][ T8092] hsr_slave_0: entered promiscuous mode
[  125.627887][ T8092] hsr_slave_1: entered promiscuous mode
[  125.633808][ T8092] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  125.641763][ T8092] Cannot create hsr debugfs directory
[  125.737847][ T6705] bridge_slave_1: left allmulticast mode
[  125.743531][ T6705] bridge_slave_1: left promiscuous mode
[  125.749360][ T6705] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.763365][ T6705] bridge_slave_0: left allmulticast mode
[  125.769985][ T6705] bridge_slave_0: left promiscuous mode
[  125.776021][ T6705] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.889179][ T6705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  125.899178][ T6705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  125.909133][ T6705] bond0 (unregistering): Released all slaves
[  126.169994][ T6705] hsr_slave_0: left promiscuous mode
[  126.175798][ T6705] hsr_slave_1: left promiscuous mode
[  126.181545][ T6705] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  126.191544][ T6705] batman_adv: batadv0: Removing interface: batadv_slave_0
[  126.200630][ T6705] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  126.210876][ T6705] batman_adv: batadv0: Removing interface: batadv_slave_1
[  126.222070][ T6705] veth1_macvtap: left promiscuous mode
[  126.230517][ T6705] veth0_macvtap: left promiscuous mode
[  126.237158][ T6705] veth1_vlan: left promiscuous mode
[  126.242738][ T6705] veth0_vlan: left promiscuous mode
[  126.378398][ T6705] team0 (unregistering): Port device team_slave_1 removed
[  126.390117][ T6705] team0 (unregistering): Port device team_slave_0 removed
[  126.618712][ T8092] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  126.627354][ T8092] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  126.637432][ T8092] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  126.649382][ T8092] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  126.701308][ T8092] 8021q: adding VLAN 0 to HW filter on device bond0
[  126.719250][ T8092] 8021q: adding VLAN 0 to HW filter on device team0
[  126.731190][ T6706] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.738388][ T6706] bridge0: port 1(bridge_slave_0) entered forwarding state
[  126.750634][ T6713] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.757830][ T6713] bridge0: port 2(bridge_slave_1) entered forwarding state
[  126.859078][ T8092] 8021q: adding VLAN 0 to HW filter on device batadv0
[  126.977792][ T8092] veth0_vlan: entered promiscuous mode
[  126.986750][ T8092] veth1_vlan: entered promiscuous mode
[  127.006950][ T8092] veth0_macvtap: entered promiscuous mode
[  127.014663][ T8092] veth1_macvtap: entered promiscuous mode
[  127.027838][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  127.039138][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.049962][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  127.060809][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.070720][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  127.081372][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.091306][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  127.101891][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.112598][ T8092] batman_adv: batadv0: Interface activated: batadv_slave_0
[  127.123350][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.134117][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.144095][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.155141][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.165714][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.176244][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.186109][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.196759][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.207933][ T8092] batman_adv: batadv0: Interface activated: batadv_slave_1
[  127.219652][ T8092] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.228507][ T8092] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  127.237309][ T8092] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  127.246624][ T8092] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  127.284964][ T6706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.295609][   T54] Bluetooth: hci2: command tx timeout
[  127.301018][ T6706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.317588][ T6713] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.326721][ T6713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.123856][ T8145] wg1: entered allmulticast mode
[  128.200971][ T8159] net_ratelimit: 5 callbacks suppressed
[  128.200989][ T8159] openvswitch: netlink: Duplicate or invalid key (type 0).
[  128.214697][ T8159] openvswitch: netlink: Actions may not be safe on all matching packets
[  128.226980][ T8159] __nla_validate_parse: 6 callbacks suppressed
[  128.226999][ T8159] netlink: 28 bytes leftover after parsing attributes in process `syz.2.424'.
[  128.279112][ T8159] netlink: 32 bytes leftover after parsing attributes in process `syz.2.424'.
[  128.302239][ T8170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.426'.
[  128.312591][ T8160] sctp: [Deprecated]: syz.2.424 (pid 8160) Use of struct sctp_assoc_value in delayed_ack socket option.
[  128.312591][ T8160] Use struct sctp_sack_info instead
[  128.340490][ T8170] tipc: Enabled bearer <eth:macvlan1>, priority 11
[  128.473477][ T8184] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT
[  128.971178][ T6697] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.084098][ T8186] syzkaller0: entered promiscuous mode
[  129.101616][ T8186] syzkaller0: entered allmulticast mode
[  130.368093][ T8209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.437'.
[  130.409912][ T8210] xt_bpf: check failed: parse error
[  130.547271][ T6697] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.666452][ T6697] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.678891][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  130.693598][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  130.702673][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  130.720236][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  130.730042][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  130.752869][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  130.819624][ T6697] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.842414][ T8245] ipt_ECN: cannot use operation on non-tcp rule
[  130.949807][ T6697] bridge_slave_1: left allmulticast mode
[  130.958593][ T6697] bridge_slave_1: left promiscuous mode
[  130.964498][ T6697] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.977220][ T8254] netlink: 'syz.3.452': attribute type 11 has an invalid length.
[  130.985622][ T6697] bridge_slave_0: left allmulticast mode
[  130.991672][ T6697] bridge_slave_0: left promiscuous mode
[  130.998515][ T6697] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.163332][ T6697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  131.172731][ T8270] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20002
[  131.182600][ T6697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  131.192716][ T6697] bond0 (unregistering): Released all slaves
[  131.302054][ T8235] chnl_net:caif_netlink_parms(): no params data found
[  131.501171][ T8301] netlink: 28 bytes leftover after parsing attributes in process `syz.2.460'.
[  131.712670][ T8315] netlink: 'syz.1.463': attribute type 3 has an invalid length.
[  131.721501][ T8315] netlink: 224 bytes leftover after parsing attributes in process `syz.1.463'.
[  132.805625][ T5837] Bluetooth: hci2: command tx timeout
[  132.968837][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  132.975179][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  134.886202][ T5837] Bluetooth: hci2: command tx timeout
[  136.965836][ T5837] Bluetooth: hci2: command tx timeout
[  139.055709][ T5837] Bluetooth: hci2: command tx timeout
[  146.281883][   T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  146.290991][   T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  146.298280][   T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  146.306164][   T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  146.313840][   T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  146.321674][   T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  147.367335][   T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  147.374593][   T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  147.381948][   T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  147.389713][   T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  147.396707][ T5833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  147.400113][   T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  147.404009][ T5833] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  147.411512][   T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  147.418208][ T5833] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  147.437881][ T5833] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  147.445447][ T5833] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  147.452719][ T5833] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  148.338068][ T5148] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  148.345362][ T5148] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  148.353303][ T5148] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  148.361469][ T5148] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  148.369193][ T5148] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  148.376920][ T5148] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  148.405814][ T5148] Bluetooth: hci5: command tx timeout
[  149.445633][ T5148] Bluetooth: hci6: command tx timeout
[  149.525614][ T5148] Bluetooth: hci7: command tx timeout
[  150.405577][ T5148] Bluetooth: hci8: command tx timeout
[  150.485695][ T5148] Bluetooth: hci5: command tx timeout
[  151.525761][ T5148] Bluetooth: hci6: command tx timeout
[  151.605666][ T5148] Bluetooth: hci7: command tx timeout
[  152.485657][ T5148] Bluetooth: hci8: command tx timeout
[  152.565794][ T5148] Bluetooth: hci5: command tx timeout
[  153.605655][ T5148] Bluetooth: hci6: command tx timeout
[  153.685605][ T5148] Bluetooth: hci7: command tx timeout
[  154.565539][ T5148] Bluetooth: hci8: command tx timeout
[  154.645546][ T5148] Bluetooth: hci5: command tx timeout
[  155.685705][ T5148] Bluetooth: hci6: command tx timeout
[  155.765663][ T5148] Bluetooth: hci7: command tx timeout
[  156.645590][ T5148] Bluetooth: hci8: command tx timeout
[  191.365479][ T5148] Bluetooth: hci0: command 0x0c1a tx timeout
[  191.381732][ T5148] Bluetooth: hci1: command 0x0406 tx timeout
[  191.381742][ T5833] Bluetooth: hci3: command 0x0406 tx timeout
[  192.604059][ T5148] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  192.611446][ T5148] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  192.618820][ T5148] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  192.626414][ T5148] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  192.633922][ T5148] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  192.641218][ T5148] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  194.410319][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  194.416917][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  194.725617][ T5148] Bluetooth: hci9: command tx timeout
[  196.805605][ T5148] Bluetooth: hci9: command tx timeout
[  198.885618][ T5148] Bluetooth: hci9: command tx timeout
[  200.965534][ T5847] Bluetooth: hci9: command tx timeout
[  201.605509][ T5847] Bluetooth: hci4: command 0x0406 tx timeout
[  206.633904][ T5847] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  206.643109][ T5847] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  206.650544][ T5847] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  206.658495][ T5847] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  206.666100][ T5847] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  206.673468][ T5847] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  207.722337][ T5847] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  207.731547][ T5837] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  207.731577][   T54] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  207.742955][ T5837] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  207.746189][   T54] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  207.755153][ T5837] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  207.760545][   T54] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  207.770831][ T5837] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  207.775671][   T54] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  207.783842][ T5837] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  207.789239][   T54] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  207.804577][   T54] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  208.695003][   T54] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  208.702484][   T54] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  208.710404][   T54] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  208.718921][   T54] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  208.726393][ T5837] Bluetooth: hci10: command tx timeout
[  208.728451][   T54] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  208.739868][   T54] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  209.845747][   T54] Bluetooth: hci12: command tx timeout
[  209.846005][ T5847] Bluetooth: hci11: command tx timeout
[  210.805673][ T5847] Bluetooth: hci13: command tx timeout
[  210.805720][   T54] Bluetooth: hci10: command tx timeout
[  211.925700][   T54] Bluetooth: hci11: command tx timeout
[  211.926838][ T5847] Bluetooth: hci12: command tx timeout
[  212.885734][ T5847] Bluetooth: hci13: command tx timeout
[  212.886969][   T54] Bluetooth: hci10: command tx timeout
[  214.005639][   T54] Bluetooth: hci12: command tx timeout
[  214.006568][ T5847] Bluetooth: hci11: command tx timeout
[  214.965696][ T5847] Bluetooth: hci10: command tx timeout
[  214.965781][   T54] Bluetooth: hci13: command tx timeout
[  216.085642][ T5847] Bluetooth: hci12: command tx timeout
[  216.086116][   T54] Bluetooth: hci11: command tx timeout
[  217.045665][   T54] Bluetooth: hci13: command tx timeout
[  254.143331][ T5847] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  254.151278][ T5847] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  254.159213][ T5847] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  254.167282][ T5847] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  254.174896][ T5847] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  254.182566][ T5847] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  255.847623][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  255.853962][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  256.245524][ T5847] Bluetooth: hci14: command tx timeout
[  257.925495][ T5847] Bluetooth: hci2: command 0x0406 tx timeout
[  258.325489][   T54] Bluetooth: hci14: command tx timeout
[  260.405531][   T54] Bluetooth: hci14: command tx timeout
[  262.485498][   T54] Bluetooth: hci14: command tx timeout
[  267.138221][ T5847] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  267.146089][ T5847] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  267.153607][ T5847] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  267.161892][ T5847] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  267.169595][ T5847] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3
[  267.177319][ T5847] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  268.217457][ T5847] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  268.224888][ T5847] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  268.234267][ T5847] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  268.242887][ T5837] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  268.244222][ T5148] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  268.256800][ T5837] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  268.261103][ T5148] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3
[  268.264625][ T5837] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  268.272298][ T5148] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  268.283498][ T5837] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  268.293583][ T5837] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3
[  268.301036][ T5837] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  269.191218][ T5847] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  269.198795][ T5847] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  269.206071][ T5847] Bluetooth: hci15: command tx timeout
[  269.206977][   T54] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  269.219486][   T54] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  269.227029][   T54] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3
[  269.234381][   T54] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  270.326980][ T5837] Bluetooth: hci16: command tx timeout
[  270.326986][   T54] Bluetooth: hci17: command tx timeout
[  271.285617][   T54] Bluetooth: hci15: command tx timeout
[  271.285630][ T5847] Bluetooth: hci18: command tx timeout
[  272.405527][   T54] Bluetooth: hci16: command tx timeout
[  272.415964][   T54] Bluetooth: hci17: command tx timeout
[  273.285854][   T54] Bluetooth: hci5: command 0x0406 tx timeout
[  273.286264][ T5847] Bluetooth: hci8: command 0x0406 tx timeout
[  273.291937][ T5848] Bluetooth: hci7: command 0x0406 tx timeout
[  273.298018][ T5846] Bluetooth: hci6: command 0x0406 tx timeout
[  273.365634][ T5837] Bluetooth: hci15: command tx timeout
[  273.368143][ T5833] Bluetooth: hci18: command tx timeout
[  274.487087][ T5837] Bluetooth: hci16: command tx timeout
[  274.488331][ T5833] Bluetooth: hci17: command tx timeout
[  275.445557][ T5833] Bluetooth: hci18: command tx timeout
[  275.445599][ T5837] Bluetooth: hci15: command tx timeout
[  276.565461][ T5837] Bluetooth: hci17: command tx timeout
[  276.575574][ T5837] Bluetooth: hci16: command tx timeout
[  277.525641][ T5837] Bluetooth: hci18: command tx timeout
[  287.845686][   T30] INFO: task dhcpcd:5503 blocked for more than 143 seconds.
[  287.853301][   T30]       Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0
[  287.860668][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  287.869395][   T30] task:dhcpcd          state:D stack:21200 pid:5503  tgid:5503  ppid:5502   flags:0x00000002
[  287.879663][   T30] Call Trace:
[  287.882970][   T30]  <TASK>
[  287.885989][   T30]  __schedule+0x186c/0x4be0
[  287.890568][   T30]  ? schedule+0x90/0x320
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  287.894843][   T30]  ? schedule+0x90/0x320
[  287.899153][   T30]  ? __pfx___schedule+0x10/0x10
[  287.904041][   T30]  ? __pfx_lock_release+0x10/0x10
[  287.909139][   T30]  ? rcu_is_watching+0x15/0xb0
[  287.925448][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  287.931952][   T30]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  287.953878][   T30]  ? schedule+0x90/0x320
[  287.958460][   T30]  schedule+0x14b/0x320
[  287.962659][   T30]  schedule_preempt_disabled+0x13/0x30
[  287.969500][   T30]  __mutex_lock+0x817/0x1010
[  287.974165][   T30]  ? __mutex_lock+0x602/0x1010
[  287.979020][   T30]  ? devinet_ioctl+0x31a/0x1ac0
[  287.983917][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  287.989030][   T30]  ? apparmor_capable+0x13b/0x1b0
[  287.994081][   T30]  ? bpf_lsm_capable+0x9/0x10
[  287.998842][   T30]  devinet_ioctl+0x31a/0x1ac0
[  288.003551][   T30]  ? get_user_ifreq+0x1bb/0x200
[  288.008600][   T30]  inet_ioctl+0x3d7/0x4f0
[  288.012959][   T30]  ? __pfx_inet_ioctl+0x10/0x10
[  288.018314][   T30]  ? tomoyo_path_number_perm+0x679/0x860
[  288.023979][   T30]  ? tomoyo_path_number_perm+0x206/0x860
[  288.030343][   T30]  sock_do_ioctl+0x158/0x460
[  288.034979][   T30]  ? __pfx_sock_do_ioctl+0x10/0x10
[  288.040154][   T30]  ? __pfx_lock_release+0x10/0x10
[  288.045232][   T30]  sock_ioctl+0x626/0x8e0
[  288.049638][   T30]  ? __pfx_sock_ioctl+0x10/0x10
[  288.054516][   T30]  ? __sys_socket+0x20a/0x3c0
[  288.059240][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  288.065660][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  288.072008][   T30]  ? __pfx_sock_ioctl+0x10/0x10
[  288.077010][   T30]  __se_sys_ioctl+0xf5/0x170
[  288.081631][   T30]  do_syscall_64+0xf3/0x230
[  288.086244][   T30]  ? clear_bhb_loop+0x35/0x90
[  288.090951][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.096906][   T30] RIP: 0033:0x7f30f9181d49
[  288.101336][   T30] RSP: 002b:00007ffd6affbc48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  288.109825][   T30] RAX: ffffffffffffffda RBX: 00007f30f90b36c0 RCX: 00007f30f9181d49
[  288.117825][   T30] RDX: 00007ffd6b00be38 RSI: 0000000000008914 RDI: 0000000000000018
[  288.125825][   T30] RBP: 00007ffd6b01bff8 R08: 00007ffd6b00bdf8 R09: 00007ffd6b00bda8
[  288.134395][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  288.142439][   T30] R13: 00007ffd6b00be38 R14: 0000000000000028 R15: 0000000000008914
[  288.150456][   T30]  </TASK>
[  288.153508][   T30] INFO: task kworker/u8:32:6697 blocked for more than 143 seconds.
[  288.161443][   T30]       Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0
[  288.168795][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  288.177536][   T30] task:kworker/u8:32   state:D stack:19120 pid:6697  tgid:6697  ppid:2      flags:0x00004000
[  288.187796][   T30] Workqueue: netns cleanup_net
[  288.192646][   T30] Call Trace:
[  288.196007][   T30]  <TASK>
[  288.198981][   T30]  __schedule+0x186c/0x4be0
[  288.203528][   T30]  ? schedule+0x90/0x320
[  288.207853][   T30]  ? schedule+0x90/0x320
[  288.212137][   T30]  ? __pfx___schedule+0x10/0x10
[  288.217060][   T30]  ? __pfx_lock_release+0x10/0x10
[  288.222114][   T30]  ? rcu_is_watching+0x15/0xb0
[  288.226953][   T30]  ? kthread_data+0x52/0xd0
[  288.231479][   T30]  ? schedule+0x90/0x320
[  288.236392][   T30]  ? wq_worker_sleeping+0x66/0x240
[  288.241539][   T30]  ? schedule+0x90/0x320
[  288.246250][   T30]  schedule+0x14b/0x320
[  288.250465][   T30]  schedule_preempt_disabled+0x13/0x30
[  288.256106][   T30]  __mutex_lock+0x817/0x1010
[  288.260735][   T30]  ? __mutex_lock+0x602/0x1010
[  288.265601][   T30]  ? unregister_netdevice_many_notify+0xac2/0x2030
[  288.272132][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  288.277339][   T30]  ? __pfx___might_resched+0x10/0x10
[  288.282643][   T30]  ? unregister_netdevice_many_notify+0x9fa/0x2030
[  288.289333][   T30]  ? rcu_is_watching+0x15/0xb0
[  288.294131][   T30]  ? unregister_netdevice_many_notify+0x9fa/0x2030
[  288.300745][   T30]  unregister_netdevice_many_notify+0xac2/0x2030
[  288.307156][   T30]  ? rcu_is_watching+0x15/0xb0
[  288.312043][   T30]  ? lock_release+0xbf/0xa30
[  288.316745][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  288.323109][   T30]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  288.330121][   T30]  ? rcu_is_watching+0x15/0xb0
[  288.334918][   T30]  ? __pfx_lock_release+0x10/0x10
[  288.340198][   T30]  unregister_netdevice_queue+0x303/0x370
[  288.346109][   T30]  ? __pfx_up_write+0x10/0x10
[  288.350800][   T30]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  288.357135][   T30]  ? kernfs_remove_by_name_ns+0x11b/0x160
[  288.362879][   T30]  _cfg80211_unregister_wdev+0x163/0x590
[  288.368665][   T30]  ieee80211_remove_interfaces+0x4ef/0x700
[  288.374530][   T30]  ? __pfx_ieee80211_remove_interfaces+0x10/0x10
[  288.380914][   T30]  ? rcu_is_watching+0x15/0xb0
[  288.385788][   T30]  ieee80211_unregister_hw+0x5d/0x2c0
[  288.391169][   T30]  mac80211_hwsim_del_radio+0x2c4/0x4c0
[  288.396767][   T30]  ? __pfx_mac80211_hwsim_del_radio+0x10/0x10
[  288.402872][   T30]  hwsim_exit_net+0x5c1/0x670
[  288.407769][   T30]  ? __pfx_hwsim_exit_net+0x10/0x10
[  288.412993][   T30]  ? __ip_vs_dev_cleanup_batch+0x239/0x260
[  288.418863][   T30]  cleanup_net+0x812/0xd60
[  288.423298][   T30]  ? __pfx_cleanup_net+0x10/0x10
[  288.428294][   T30]  ? rcu_is_watching+0x15/0xb0
[  288.433105][   T30]  ? process_scheduled_works+0x976/0x1840
[  288.439231][   T30]  process_scheduled_works+0xa66/0x1840
[  288.444818][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  288.450922][   T30]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  288.456565][   T30]  ? assign_work+0x364/0x3d0
[  288.461185][   T30]  worker_thread+0x870/0xd30
[  288.465839][   T30]  ? __kthread_parkme+0x169/0x1d0
[  288.470880][   T30]  ? __pfx_worker_thread+0x10/0x10
[  288.476054][   T30]  kthread+0x7a9/0x920
[  288.480138][   T30]  ? __pfx_worker_thread+0x10/0x10
[  288.485239][   T30]  ? __pfx_kthread+0x10/0x10
[  288.490182][   T30]  ? __pfx_kthread+0x10/0x10
[  288.494824][   T30]  ? rcu_is_watching+0x15/0xb0
[  288.499648][   T30]  ? __pfx_kthread+0x10/0x10
[  288.504268][   T30]  ? __pfx_kthread+0x10/0x10
[  288.508916][   T30]  ret_from_fork+0x4b/0x80
[  288.513376][   T30]  ? __pfx_kthread+0x10/0x10
[  288.518039][   T30]  ret_from_fork_asm+0x1a/0x30
[  288.522823][   T30]  </TASK>
[  288.525942][   T30] INFO: task kworker/u8:40:6706 blocked for more than 144 seconds.
[  288.533858][   T30]       Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0
[  288.542684][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  288.551507][   T30] task:kworker/u8:40   state:D stack:23216 pid:6706  tgid:6706  ppid:2      flags:0x00004000
[  288.561739][   T30] Workqueue: cfg80211 cfg80211_dfs_channels_update_work
[  288.568867][   T30] Call Trace:
[  288.572159][   T30]  <TASK>
[  288.575086][   T30]  __schedule+0x186c/0x4be0
[  288.579696][   T30]  ? schedule+0x90/0x320
[  288.583964][   T30]  ? schedule+0x90/0x320
[  288.588279][   T30]  ? __pfx___schedule+0x10/0x10
[  288.593167][   T30]  ? __pfx_lock_release+0x10/0x10
[  288.598292][   T30]  ? rcu_is_watching+0x15/0xb0
[  288.603096][   T30]  ? kthread_data+0x52/0xd0
[  288.607706][   T30]  ? schedule+0x90/0x320
[  288.611972][   T30]  ? wq_worker_sleeping+0x66/0x240
[  288.617141][   T30]  ? schedule+0x90/0x320
[  288.621405][   T30]  schedule+0x14b/0x320
[  288.625618][   T30]  schedule_preempt_disabled+0x13/0x30
[  288.631101][   T30]  __mutex_lock+0x817/0x1010
[  288.635752][   T30]  ? __mutex_lock+0x602/0x1010
[  288.640547][   T30]  ? cfg80211_dfs_channels_update_work+0xbf/0x610
[  288.647260][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  288.652394][   T30]  ? rcu_is_watching+0x15/0xb0
[  288.658476][   T30]  cfg80211_dfs_channels_update_work+0xbf/0x610
[  288.664762][   T30]  ? debug_object_deactivate+0x2d5/0x390
[  288.670456][   T30]  ? __pfx_lock_release+0x10/0x10
[  288.675570][   T30]  ? __pfx_debug_object_deactivate+0x10/0x10
[  288.681558][   T30]  ? __pfx_cfg80211_dfs_channels_update_work+0x10/0x10
[  288.688529][   T30]  ? rcu_is_watching+0x15/0xb0
[  288.693322][   T30]  ? process_scheduled_works+0x976/0x1840
[  288.699086][   T30]  process_scheduled_works+0xa66/0x1840
[  288.704674][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  288.710755][   T30]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  288.716420][   T30]  ? assign_work+0x364/0x3d0
[  288.721049][   T30]  worker_thread+0x870/0xd30
[  288.725761][   T30]  ? __kthread_parkme+0x169/0x1d0
[  288.730825][   T30]  ? __pfx_worker_thread+0x10/0x10
[  288.736094][   T30]  kthread+0x7a9/0x920
[  288.740203][   T30]  ? __pfx_worker_thread+0x10/0x10
[  288.745391][   T30]  ? __pfx_kthread+0x10/0x10
[  288.750445][   T30]  ? __pfx_kthread+0x10/0x10
[  288.755086][   T30]  ? rcu_is_watching+0x15/0xb0
[  288.759924][   T30]  ? __pfx_kthread+0x10/0x10
[  288.764529][   T30]  ? __pfx_kthread+0x10/0x10
[  288.769289][   T30]  ret_from_fork+0x4b/0x80
[  288.773730][   T30]  ? __pfx_kthread+0x10/0x10
[  288.778534][   T30]  ret_from_fork_asm+0x1a/0x30
[  288.783327][   T30]  </TASK>
[  288.786487][   T30] INFO: task kworker/u8:44:6713 blocked for more than 144 seconds.
[  288.794403][   T30]       Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0
[  288.802365][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  288.811139][   T30] task:kworker/u8:44   state:D stack:23376 pid:6713  tgid:6713  ppid:2      flags:0x00004000
[  288.821399][   T30] Workqueue: events_unbound linkwatch_event
[  288.827422][   T30] Call Trace:
[  288.830802][   T30]  <TASK>
[  288.833730][   T30]  __schedule+0x186c/0x4be0
[  288.838573][   T30]  ? schedule+0x90/0x320
[  288.842840][   T30]  ? schedule+0x90/0x320
[  288.847186][   T30]  ? __pfx___schedule+0x10/0x10
[  288.852568][   T30]  ? __pfx_lock_release+0x10/0x10
[  288.857684][   T30]  ? rcu_is_watching+0x15/0xb0
[  288.862476][   T30]  ? kthread_data+0x52/0xd0
[  288.867021][   T30]  ? schedule+0x90/0x320
[  288.871299][   T30]  ? wq_worker_sleeping+0x66/0x240
[  288.876468][   T30]  ? schedule+0x90/0x320
[  288.880734][   T30]  schedule+0x14b/0x320
[  288.884909][   T30]  schedule_preempt_disabled+0x13/0x30
[  288.890481][   T30]  __mutex_lock+0x817/0x1010
[  288.895113][   T30]  ? __mutex_lock+0x602/0x1010
[  288.899954][   T30]  ? linkwatch_event+0xe/0x60
[  288.904664][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  288.909738][   T30]  ? __pfx_debug_object_deactivate+0x10/0x10
[  288.915799][   T30]  ? rcu_is_watching+0x15/0xb0
[  288.920590][   T30]  ? process_scheduled_works+0x976/0x1840
[  288.926394][   T30]  linkwatch_event+0xe/0x60
[  288.930920][   T30]  process_scheduled_works+0xa66/0x1840
[  288.936543][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  288.942539][   T30]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  288.948173][   T30]  ? assign_work+0x364/0x3d0
[  288.953150][   T30]  worker_thread+0x870/0xd30
[  288.957846][   T30]  ? __kthread_parkme+0x169/0x1d0
[  288.962894][   T30]  ? __pfx_worker_thread+0x10/0x10
[  288.968150][   T30]  kthread+0x7a9/0x920
[  288.972264][   T30]  ? __pfx_worker_thread+0x10/0x10
[  288.977450][   T30]  ? __pfx_kthread+0x10/0x10
[  288.982066][   T30]  ? __pfx_kthread+0x10/0x10
[  288.986709][   T30]  ? rcu_is_watching+0x15/0xb0
[  288.991475][   T30]  ? __pfx_kthread+0x10/0x10
[  288.996114][   T30]  ? __pfx_kthread+0x10/0x10
[  289.000716][   T30]  ret_from_fork+0x4b/0x80
[  289.005145][   T30]  ? __pfx_kthread+0x10/0x10
[  289.009833][   T30]  ret_from_fork_asm+0x1a/0x30
[  289.014637][   T30]  </TASK>
[  289.017725][   T30] INFO: task syz-executor:8235 blocked for more than 144 seconds.
[  289.025633][   T30]       Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0
[  289.032917][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  289.041753][   T30] task:syz-executor    state:D stack:22096 pid:8235  tgid:8235  ppid:1      flags:0x00000004
[  289.052588][   T30] Call Trace:
[  289.056663][   T30]  <TASK>
[  289.059635][   T30]  __schedule+0x186c/0x4be0
[  289.064187][   T30]  ? schedule+0x90/0x320
[  289.068555][   T30]  ? schedule+0x90/0x320
[  289.072834][   T30]  ? __pfx___schedule+0x10/0x10
[  289.077810][   T30]  ? __pfx_lock_release+0x10/0x10
[  289.082861][   T30]  ? rcu_is_watching+0x15/0xb0
[  289.087735][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  289.093673][   T30]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  289.100185][   T30]  ? schedule+0x90/0x320
[  289.104470][   T30]  schedule+0x14b/0x320
[  289.108745][   T30]  schedule_preempt_disabled+0x13/0x30
[  289.114231][   T30]  __mutex_lock+0x817/0x1010
[  289.118917][   T30]  ? __mutex_lock+0x602/0x1010
[  289.123713][   T30]  ? rtnl_newlink+0xce2/0x2210
[  289.129305][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  289.134376][   T30]  ? ns_capable+0x8a/0xf0
[  289.138832][   T30]  ? rtnl_link_get_net_capable+0x168/0x340
[  289.144684][   T30]  rtnl_newlink+0xce2/0x2210
[  289.149330][   T30]  ? __pfx_rtnl_newlink+0x10/0x10
[  289.154383][   T30]  ? rcu_is_watching+0x15/0xb0
[  289.159435][   T30]  ? lock_release+0xbf/0xa30
[  289.164072][   T30]  ? rcu_is_watching+0x15/0xb0
[  289.169013][   T30]  ? lock_release+0xbf/0xa30
[  289.173635][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  289.178827][   T30]  ? lock_release+0xbf/0xa30
[  289.183444][   T30]  ? deref_stack_reg+0x17c/0x210
[  289.188465][   T30]  ? __pfx_lock_release+0x10/0x10
[  289.193514][   T30]  ? stack_trace_save+0x118/0x1d0
[  289.198646][   T30]  ? unwind_next_frame+0x18e6/0x22d0
[  289.204003][   T30]  ? deref_stack_reg+0x17c/0x210
[  289.209067][   T30]  ? preempt_count_add+0x93/0x190
[  289.214119][   T30]  ? 0xffffffffa0002090
[  289.218373][   T30]  ? is_bpf_text_address+0x285/0x2a0
[  289.223692][   T30]  ? is_bpf_text_address+0x26/0x2a0
[  289.229001][   T30]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  289.235277][   T30]  ? kernel_text_address+0xa7/0xe0
[  289.240472][   T30]  ? __kernel_text_address+0xd/0x40
[  289.245831][   T30]  ? unwind_get_return_address+0x4d/0x90
[  289.251503][   T30]  ? rcu_is_watching+0x15/0xb0
[  289.256340][   T30]  ? lock_release+0xbf/0xa30
[  289.261403][   T30]  ? __pfx_lock_release+0x10/0x10
[  289.266501][   T30]  ? bpf_lsm_capable+0x9/0x10
[  289.271199][   T30]  ? security_capable+0x7e/0x2d0
[  289.276213][   T30]  ? __pfx_rtnl_newlink+0x10/0x10
[  289.281283][   T30]  rtnetlink_rcv_msg+0x791/0xcf0
[  289.286346][   T30]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  289.291482][   T30]  ? lock_release+0xbf/0xa30
[  289.296153][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  289.301646][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  289.306736][   T30]  ? rcu_is_watching+0x15/0xb0
[  289.311533][   T30]  ? lock_acquire+0xe3/0x550
[  289.316225][   T30]  netlink_rcv_skb+0x1e3/0x430
[  289.321028][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  289.326605][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  289.331963][   T30]  ? net_generic+0x1f/0x240
[  289.336541][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[  289.341783][   T30]  netlink_unicast+0x7f6/0x990
[  289.346615][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  289.351916][   T30]  ? __virt_addr_valid+0x45f/0x530
[  289.357184][   T30]  ? __phys_addr_symbol+0x2f/0x70
[  289.362715][   T30]  ? __check_object_size+0x47a/0x730
[  289.368143][   T30]  netlink_sendmsg+0x8e4/0xcb0
[  289.372976][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  289.378328][   T30]  ? aa_sock_msg_perm+0x91/0x160
[  289.383313][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  289.388654][   T30]  __sock_sendmsg+0x221/0x270
[  289.393468][   T30]  __sys_sendto+0x363/0x4c0
[  289.398068][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  289.403147][   T30]  ? rcu_is_watching+0x15/0xb0
[  289.408023][   T30]  ? blkcg_maybe_throttle_current+0x1ab/0xb80
[  289.414131][   T30]  ? xfd_validate_state+0x6e/0x150
[  289.419306][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  289.425711][   T30]  ? rcu_is_watching+0x15/0xb0
[  289.430481][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  289.436876][   T30]  ? rcu_is_watching+0x15/0xb0
[  289.441681][   T30]  __x64_sys_sendto+0xde/0x100
[  289.446718][   T30]  do_syscall_64+0xf3/0x230
[  289.451255][   T30]  ? clear_bhb_loop+0x35/0x90
[  289.456010][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.461950][   T30] RIP: 0033:0x7fdc6b58ebbc
[  289.467020][   T30] RSP: 002b:00007ffc41671670 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  289.475526][   T30] RAX: ffffffffffffffda RBX: 00007fdc6c2d4620 RCX: 00007fdc6b58ebbc
[  289.483519][   T30] RDX: 000000000000003c RSI: 00007fdc6c2d4670 RDI: 0000000000000003
[  289.491589][   T30] RBP: 0000000000000000 R08: 00007ffc416716c4 R09: 000000000000000c
[  289.499632][   T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  289.507842][   T30] R13: 0000000000000000 R14: 00007fdc6c2d4670 R15: 0000000000000000
[  289.515973][   T30]  </TASK>
[  289.519018][   T30] INFO: task syz.0.455:8269 blocked for more than 145 seconds.
[  289.526675][   T30]       Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0
[  289.533968][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  289.542850][   T30] task:syz.0.455       state:D stack:24528 pid:8269  tgid:8268  ppid:5834   flags:0x00004006
[  289.553102][   T30] Call Trace:
[  289.556450][   T30]  <TASK>
[  289.559491][   T30]  __schedule+0x186c/0x4be0
[  289.564002][   T30]  ? schedule+0x90/0x320
[  289.568685][   T30]  ? schedule+0x90/0x320
[  289.572975][   T30]  ? __pfx___schedule+0x10/0x10
[  289.578049][   T30]  ? __pfx_lock_release+0x10/0x10
[  289.583119][   T30]  ? rcu_is_watching+0x15/0xb0
[  289.587965][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  289.593903][   T30]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  289.600309][   T30]  ? schedule+0x90/0x320
[  289.604573][   T30]  schedule+0x14b/0x320
[  289.608849][   T30]  schedule_preempt_disabled+0x13/0x30
[  289.614338][   T30]  __mutex_lock+0x817/0x1010
[  289.619083][   T30]  ? __mutex_lock+0x602/0x1010
[  289.623904][   T30]  ? reg_process_self_managed_hints+0xb9/0x1c0
[  289.630139][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  289.635204][   T30]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  289.641305][   T30]  reg_process_self_managed_hints+0xb9/0x1c0
[  289.647452][   T30]  wiphy_register+0x1be5/0x27b0
[  289.652352][   T30]  ? __pfx_wiphy_register+0x10/0x10
[  289.657656][   T30]  ? minstrel_ht_alloc+0x72b/0x860
[  289.662798][   T30]  ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620
[  289.669133][   T30]  ieee80211_register_hw+0x354e/0x4240
[  289.674631][   T30]  ? ieee80211_register_hw+0x1681/0x4240
[  289.680357][   T30]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  289.686272][   T30]  ? __pfx_lockdep_init_map_type+0x10/0x10
[  289.692082][   T30]  ? __asan_memset+0x23/0x50
[  289.696752][   T30]  ? __hrtimer_init+0x170/0x250
[  289.701629][   T30]  mac80211_hwsim_new_radio+0x2a9f/0x4a90
[  289.707402][   T30]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  289.713494][   T30]  ? kstrndup+0x5c/0xb0
[  289.717743][   T30]  ? __asan_memcpy+0x40/0x70
[  289.722396][   T30]  hwsim_new_radio_nl+0xece/0x2290
[  289.727617][   T30]  ? __pfx___nla_validate_parse+0x10/0x10
[  289.733362][   T30]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  289.739024][   T30]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[  289.745466][   T30]  genl_rcv_msg+0xb14/0xec0
[  289.750011][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  289.755054][   T30]  ? stack_trace_save+0x118/0x1d0
[  289.760270][   T30]  ? __pfx_stack_trace_save+0x10/0x10
[  289.765826][   T30]  ? stack_depot_save_flags+0x37/0x940
[  289.771520][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  289.776658][   T30]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  289.782227][   T30]  ? __pfx___might_resched+0x10/0x10
[  289.787557][   T30]  ? rcu_is_watching+0x15/0xb0
[  289.792366][   T30]  ? lock_acquire+0xe3/0x550
[  289.797045][   T30]  netlink_rcv_skb+0x1e3/0x430
[  289.801832][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  289.806945][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  289.812247][   T30]  ? lock_release+0xbf/0xa30
[  289.816944][   T30]  ? __pfx___netlink_lookup+0x10/0x10
[  289.822353][   T30]  ? net_generic+0x1f/0x240
[  289.826913][   T30]  genl_rcv+0x28/0x40
[  289.830922][   T30]  netlink_unicast+0x7f6/0x990
[  289.835764][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  289.841072][   T30]  ? __virt_addr_valid+0x45f/0x530
[  289.846323][   T30]  ? __phys_addr_symbol+0x2f/0x70
[  289.851403][   T30]  ? __check_object_size+0x47a/0x730
[  289.856777][   T30]  netlink_sendmsg+0x8e4/0xcb0
[  289.861587][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  289.867067][   T30]  ? aa_sock_msg_perm+0x91/0x160
[  289.872050][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  289.877693][   T30]  __sock_sendmsg+0x221/0x270
[  289.882436][   T30]  ____sys_sendmsg+0x52a/0x7e0
[  289.887263][   T30]  ? __pfx_____sys_sendmsg+0x10/0x10
[  289.892572][   T30]  ? __fget_files+0x2a/0x410
[  289.897283][   T30]  ? __fget_files+0x2a/0x410
[  289.901907][   T30]  __sys_sendmsg+0x269/0x350
[  289.906540][   T30]  ? __pfx___sys_sendmsg+0x10/0x10
[  289.911707][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  289.918143][   T30]  ? rcu_is_watching+0x15/0xb0
[  289.922939][   T30]  ? rcu_is_watching+0x15/0xb0
[  289.927874][   T30]  do_syscall_64+0xf3/0x230
[  289.932402][   T30]  ? clear_bhb_loop+0x35/0x90
[  289.937178][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.943099][   T30] RIP: 0033:0x7f116878cd29
[  289.947556][   T30] RSP: 002b:00007f1169627038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  289.956163][   T30] RAX: ffffffffffffffda RBX: 00007f11689a5fa0 RCX: 00007f116878cd29
[  289.964186][   T30] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000008
[  289.972206][   T30] RBP: 00007f116880e2a0 R08: 0000000000000000 R09: 0000000000000000
[  289.980506][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  289.988636][   T30] R13: 0000000000000000 R14: 00007f11689a5fa0 R15: 00007ffc1dd56ae8
[  289.996707][   T30]  </TASK>
[  289.999744][   T30] INFO: task syz.0.455:8271 blocked for more than 145 seconds.
[  290.007422][   T30]       Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0
[  290.014722][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  290.023499][   T30] task:syz.0.455       state:D stack:27984 pid:8271  tgid:8268  ppid:5834   flags:0x00000004
[  290.033774][   T30] Call Trace:
[  290.037131][   T30]  <TASK>
[  290.040103][   T30]  __schedule+0x186c/0x4be0
[  290.044616][   T30]  ? schedule+0x90/0x320
[  290.048911][   T30]  ? schedule+0x90/0x320
[  290.053199][   T30]  ? __pfx___schedule+0x10/0x10
[  290.058132][   T30]  ? __pfx_lock_release+0x10/0x10
[  290.063192][   T30]  ? rcu_is_watching+0x15/0xb0
[  290.068021][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  290.073941][   T30]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  290.080553][   T30]  ? rcu_is_watching+0x15/0xb0
[  290.085516][   T30]  ? schedule+0x90/0x320
[  290.089795][   T30]  schedule+0x14b/0x320
[  290.093997][   T30]  schedule_preempt_disabled+0x13/0x30
[  290.099565][   T30]  __mutex_lock+0x817/0x1010
[  290.104190][   T30]  ? __mutex_lock+0x602/0x1010
[  290.109017][   T30]  ? vlan_ioctl_handler+0x112/0x9d0
[  290.114249][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  290.119333][   T30]  ? rcu_is_watching+0x15/0xb0
[  290.124125][   T30]  ? trace_contention_end+0x3c/0x120
[  290.129481][   T30]  ? __might_fault+0xaa/0x120
[  290.134188][   T30]  vlan_ioctl_handler+0x112/0x9d0
[  290.139309][   T30]  ? __pfx_vlan_ioctl_handler+0x10/0x10
[  290.144903][   T30]  ? __pfx_vlan_ioctl_handler+0x10/0x10
[  290.150503][   T30]  sock_ioctl+0x680/0x8e0
[  290.154873][   T30]  ? __pfx_sock_ioctl+0x10/0x10
[  290.159795][   T30]  ? __fget_files+0x2a/0x410
[  290.164411][   T30]  ? __fget_files+0x2a/0x410
[  290.169055][   T30]  ? __pfx_sock_ioctl+0x10/0x10
[  290.174025][   T30]  __se_sys_ioctl+0xf5/0x170
[  290.178681][   T30]  do_syscall_64+0xf3/0x230
[  290.183394][   T30]  ? clear_bhb_loop+0x35/0x90
[  290.188132][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.194063][   T30] RIP: 0033:0x7f116878cd29
[  290.198706][   T30] RSP: 002b:00007f1169606038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  290.207253][   T30] RAX: ffffffffffffffda RBX: 00007f11689a6080 RCX: 00007f116878cd29
[  290.215266][   T30] RDX: 0000000020000000 RSI: 0000000000008982 RDI: 000000000000000a
[  290.223396][   T30] RBP: 00007f116880e2a0 R08: 0000000000000000 R09: 0000000000000000
[  290.231442][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  290.239482][   T30] R13: 0000000000000000 R14: 00007f11689a6080 R15: 00007ffc1dd56ae8
[  290.247572][   T30]  </TASK>
[  290.250636][   T30] INFO: task syz.0.455:8288 blocked for more than 145 seconds.
[  290.259692][   T30]       Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0
[  290.268573][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  290.277296][   T30] task:syz.0.455       state:D stack:24944 pid:8288  tgid:8268  ppid:5834   flags:0x00000004
[  290.287898][   T30] Call Trace:
[  290.291191][   T30]  <TASK>
[  290.294116][   T30]  __schedule+0x186c/0x4be0
[  290.298676][   T30]  ? schedule+0x90/0x320
[  290.302958][   T30]  ? schedule+0x90/0x320
[  290.307366][   T30]  ? __pfx___schedule+0x10/0x10
[  290.312241][   T30]  ? __pfx_lock_release+0x10/0x10
[  290.317338][   T30]  ? rcu_is_watching+0x15/0xb0
[  290.322127][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  290.328092][   T30]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  290.334447][   T30]  ? schedule+0x90/0x320
[  290.338771][   T30]  schedule+0x14b/0x320
[  290.342983][   T30]  schedule_preempt_disabled+0x13/0x30
[  290.348495][   T30]  __mutex_lock+0x817/0x1010
[  290.353121][   T30]  ? __mutex_lock+0x602/0x1010
[  290.357956][   T30]  ? rtnl_newlink+0xce2/0x2210
[  290.362747][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  290.367937][   T30]  ? ns_capable+0x8a/0xf0
[  290.372295][   T30]  ? rtnl_link_get_net_capable+0x168/0x340
[  290.378194][   T30]  rtnl_newlink+0xce2/0x2210
[  290.382839][   T30]  ? __pfx_rtnl_newlink+0x10/0x10
[  290.388132][   T30]  ? __netlink_deliver_tap+0x56b/0x7f0
[  290.393637][   T30]  ? netlink_deliver_tap+0x19d/0x1b0
[  290.398983][   T30]  ? netlink_unicast+0x7c4/0x990
[  290.403943][   T30]  ? netlink_sendmsg+0x8e4/0xcb0
[  290.409082][   T30]  ? __sock_sendmsg+0x221/0x270
[  290.413968][   T30]  ? ____sys_sendmsg+0x52a/0x7e0
[  290.419086][   T30]  ? __sys_sendmsg+0x269/0x350
[  290.423878][   T30]  ? do_syscall_64+0xf3/0x230
[  290.428610][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.434706][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  290.441191][   T30]  ? rcu_is_watching+0x15/0xb0
[  290.446013][   T30]  ? rcu_is_watching+0x15/0xb0
[  290.450812][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  290.457204][   T30]  ? lock_release+0xbf/0xa30
[  290.461815][   T30]  ? nlmon_xmit+0xaf/0x100
[  290.466282][   T30]  ? rcu_is_watching+0x15/0xb0
[  290.471097][   T30]  ? rcu_is_watching+0x15/0xb0
[  290.475927][   T30]  ? lock_release+0xbf/0xa30
[  290.480536][   T30]  ? __pfx_aa_get_newest_label+0x10/0x10
[  290.486438][   T30]  ? __pfx_lock_release+0x10/0x10
[  290.491820][   T30]  ? bpf_lsm_capable+0x9/0x10
[  290.496581][   T30]  ? security_capable+0x7e/0x2d0
[  290.501531][   T30]  ? __pfx_rtnl_newlink+0x10/0x10
[  290.506614][   T30]  rtnetlink_rcv_msg+0x791/0xcf0
[  290.511576][   T30]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  290.516746][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  290.522229][   T30]  ? ref_tracker_free+0x643/0x7e0
[  290.527418][   T30]  netlink_rcv_skb+0x1e3/0x430
[  290.532294][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  290.537834][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  290.543150][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[  290.548428][   T30]  netlink_unicast+0x7f6/0x990
[  290.553215][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  290.559243][   T30]  ? __virt_addr_valid+0x45f/0x530
[  290.564378][   T30]  ? __phys_addr_symbol+0x2f/0x70
[  290.569663][   T30]  ? __check_object_size+0x47a/0x730
[  290.575033][   T30]  netlink_sendmsg+0x8e4/0xcb0
[  290.580767][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  290.586190][   T30]  ? aa_sock_msg_perm+0x91/0x160
[  290.591497][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  290.596847][   T30]  __sock_sendmsg+0x221/0x270
[  290.601646][   T30]  ____sys_sendmsg+0x52a/0x7e0
[  290.606469][   T30]  ? __pfx_____sys_sendmsg+0x10/0x10
[  290.611807][   T30]  ? __fget_files+0x2a/0x410
[  290.616455][   T30]  ? __fget_files+0x2a/0x410
[  290.621096][   T30]  __sys_sendmsg+0x269/0x350
[  290.625767][   T30]  ? __pfx_futex_wake+0x10/0x10
[  290.630656][   T30]  ? __pfx___sys_sendmsg+0x10/0x10
[  290.635912][   T30]  ? lock_release+0xbf/0xa30
[  290.640537][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  290.646967][   T30]  ? rcu_is_watching+0x15/0xb0
[  290.651776][   T30]  ? rcu_is_watching+0x15/0xb0
[  290.656594][   T30]  do_syscall_64+0xf3/0x230
[  290.661114][   T30]  ? clear_bhb_loop+0x35/0x90
[  290.665850][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.671759][   T30] RIP: 0033:0x7f116878cd29
[  290.676248][   T30] RSP: 002b:00007f11695c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  290.684677][   T30] RAX: ffffffffffffffda RBX: 00007f11689a6240 RCX: 00007f116878cd29
[  290.692923][   T30] RDX: 0000000000000080 RSI: 0000000020000280 RDI: 0000000000000009
[  290.700946][   T30] RBP: 00007f116880e2a0 R08: 0000000000000000 R09: 0000000000000000
[  290.708985][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  290.717017][   T30] R13: 0000000000000000 R14: 00007f11689a6240 R15: 00007ffc1dd56ae8
[  290.725016][   T30]  </TASK>
[  290.728160][   T30] INFO: task syz.2.460:8301 blocked for more than 146 seconds.
[  290.735778][   T30]       Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0
[  290.743074][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  290.751926][   T30] task:syz.2.460       state:D stack:25264 pid:8301  tgid:8299  ppid:5841   flags:0x00004004
[  290.762169][   T30] Call Trace:
[  290.765536][   T30]  <TASK>
[  290.768484][   T30]  __schedule+0x186c/0x4be0
[  290.772995][   T30]  ? schedule+0x90/0x320
[  290.777288][   T30]  ? schedule+0x90/0x320
[  290.781557][   T30]  ? __pfx___schedule+0x10/0x10
[  290.786466][   T30]  ? __pfx_lock_release+0x10/0x10
[  290.791525][   T30]  ? rcu_is_watching+0x15/0xb0
[  290.796529][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  290.802446][   T30]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  290.808908][   T30]  ? schedule+0x90/0x320
[  290.813189][   T30]  schedule+0x14b/0x320
[  290.817380][   T30]  schedule_preempt_disabled+0x13/0x30
[  290.822958][   T30]  __mutex_lock+0x817/0x1010
[  290.827627][   T30]  ? __mutex_lock+0x602/0x1010
[  290.832595][   T30]  ? rtnl_newlink+0xce2/0x2210
[  290.837524][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  290.842591][   T30]  ? ns_capable+0x8a/0xf0
[  290.846990][   T30]  ? rtnl_link_get_net_capable+0x168/0x340
[  290.852837][   T30]  rtnl_newlink+0xce2/0x2210
[  290.857629][   T30]  ? __pfx_rtnl_newlink+0x10/0x10
[  290.862707][   T30]  ? __netlink_deliver_tap+0x56b/0x7f0
[  290.868234][   T30]  ? netlink_deliver_tap+0x19d/0x1b0
[  290.873565][   T30]  ? netlink_unicast+0x7c4/0x990
[  290.878527][   T30]  ? netlink_sendmsg+0x8e4/0xcb0
[  290.883482][   T30]  ? __sock_sendmsg+0x221/0x270
[  290.888395][   T30]  ? ____sys_sendmsg+0x52a/0x7e0
[  290.893352][   T30]  ? __sys_sendmsg+0x269/0x350
[  290.898385][   T30]  ? do_syscall_64+0xf3/0x230
[  290.903085][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.909211][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  290.915594][   T30]  ? rcu_is_watching+0x15/0xb0
[  290.920382][   T30]  ? rcu_is_watching+0x15/0xb0
[  290.925146][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  290.931552][   T30]  ? lock_release+0xbf/0xa30
[  290.936186][   T30]  ? nlmon_xmit+0xaf/0x100
[  290.940603][   T30]  ? rcu_is_watching+0x15/0xb0
[  290.945417][   T30]  ? rcu_is_watching+0x15/0xb0
[  290.950203][   T30]  ? lock_release+0xbf/0xa30
[  290.954794][   T30]  ? __pfx_aa_get_newest_label+0x10/0x10
[  290.960479][   T30]  ? __pfx_lock_release+0x10/0x10
[  290.965787][   T30]  ? apparmor_capable+0x13b/0x1b0
[  290.970850][   T30]  ? bpf_lsm_capable+0x9/0x10
[  290.975599][   T30]  ? security_capable+0x7e/0x2d0
[  290.980565][   T30]  ? __pfx_rtnl_newlink+0x10/0x10
[  290.985652][   T30]  rtnetlink_rcv_msg+0x791/0xcf0
[  290.990632][   T30]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  290.995818][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  291.001476][   T30]  ? ref_tracker_free+0x643/0x7e0
[  291.006589][   T30]  netlink_rcv_skb+0x1e3/0x430
[  291.011405][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  291.016925][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  291.022234][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[  291.027514][   T30]  netlink_unicast+0x7f6/0x990
[  291.032295][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  291.037646][   T30]  ? __virt_addr_valid+0x45f/0x530
[  291.042815][   T30]  ? __phys_addr_symbol+0x2f/0x70
[  291.047903][   T30]  ? __check_object_size+0x47a/0x730
[  291.053211][   T30]  netlink_sendmsg+0x8e4/0xcb0
[  291.058031][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  291.063337][   T30]  ? aa_sock_msg_perm+0x91/0x160
[  291.068337][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  291.073639][   T30]  __sock_sendmsg+0x221/0x270
[  291.078536][   T30]  ____sys_sendmsg+0x52a/0x7e0
[  291.083330][   T30]  ? __pfx_____sys_sendmsg+0x10/0x10
[  291.088700][   T30]  ? __fget_files+0x2a/0x410
[  291.093336][   T30]  ? __fget_files+0x2a/0x410
[  291.097979][   T30]  __sys_sendmsg+0x269/0x350
[  291.102812][   T30]  ? __pfx___sys_sendmsg+0x10/0x10
[  291.108039][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  291.114387][   T30]  ? rcu_is_watching+0x15/0xb0
[  291.119199][   T30]  ? rcu_is_watching+0x15/0xb0
[  291.124012][   T30]  do_syscall_64+0xf3/0x230
[  291.128568][   T30]  ? clear_bhb_loop+0x35/0x90
[  291.133263][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.139204][   T30] RIP: 0033:0x7fa631f8cd29
[  291.143629][   T30] RSP: 002b:00007fa632e71038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  291.152082][   T30] RAX: ffffffffffffffda RBX: 00007fa6321a5fa0 RCX: 00007fa631f8cd29
[  291.160118][   T30] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000005
[  291.168127][   T30] RBP: 00007fa63200e2a0 R08: 0000000000000000 R09: 0000000000000000
[  291.176162][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  291.184322][   T30] R13: 0000000000000000 R14: 00007fa6321a5fa0 R15: 00007ffdef76c748
[  291.192473][   T30]  </TASK>
[  291.195550][   T30] INFO: task syz.1.463:8315 blocked for more than 146 seconds.
[  291.203108][   T30]       Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0
[  291.210720][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  291.219460][   T30] task:syz.1.463       state:D stack:26096 pid:8315  tgid:8314  ppid:5831   flags:0x00000004
[  291.230018][   T30] Call Trace:
[  291.233324][   T30]  <TASK>
[  291.236310][   T30]  __schedule+0x186c/0x4be0
[  291.240848][   T30]  ? schedule+0x90/0x320
[  291.245115][   T30]  ? schedule+0x90/0x320
[  291.249426][   T30]  ? __pfx___schedule+0x10/0x10
[  291.254303][   T30]  ? __pfx_lock_release+0x10/0x10
[  291.259401][   T30]  ? rcu_is_watching+0x15/0xb0
[  291.264203][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  291.270172][   T30]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  291.276585][   T30]  ? tomoyo_path_number_perm+0x679/0x860
[  291.282228][   T30]  ? schedule+0x90/0x320
[  291.286523][   T30]  schedule+0x14b/0x320
[  291.290706][   T30]  schedule_preempt_disabled+0x13/0x30
[  291.296327][   T30]  __mutex_lock+0x817/0x1010
[  291.300982][   T30]  ? __mutex_lock+0x602/0x1010
[  291.305911][   T30]  ? dev_ioctl+0x86e/0x1340
[  291.310633][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  291.315751][   T30]  ? dev_load+0x21/0x1f0
[  291.320010][   T30]  dev_ioctl+0x86e/0x1340
[  291.324356][   T30]  sock_ioctl+0x7ef/0x8e0
[  291.328740][   T30]  ? __pfx_sock_ioctl+0x10/0x10
[  291.333615][   T30]  ? __pfx_sock_ioctl+0x10/0x10
[  291.338533][   T30]  __se_sys_ioctl+0xf5/0x170
[  291.343154][   T30]  do_syscall_64+0xf3/0x230
[  291.347724][   T30]  ? clear_bhb_loop+0x35/0x90
[  291.352429][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.358365][   T30] RIP: 0033:0x7ff1af38cd29
[  291.362775][   T30] RSP: 002b:00007ff1b01f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  291.371241][   T30] RAX: ffffffffffffffda RBX: 00007ff1af5a5fa0 RCX: 00007ff1af38cd29
[  291.379295][   T30] RDX: 0000000020000480 RSI: 00000000000089f0 RDI: 0000000000000003
[  291.387336][   T30] RBP: 00007ff1af40e2a0 R08: 0000000000000000 R09: 0000000000000000
[  291.395343][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  291.403319][   T30] R13: 0000000000000000 R14: 00007ff1af5a5fa0 R15: 00007ffec9bd98c8
[  291.411772][   T30]  </TASK>
[  291.414828][   T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  291.423992][   T30] INFO: task syz.1.463:8316 blocked for more than 146 seconds.
[  291.431577][   T30]       Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0
[  291.438912][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  291.447843][   T30] task:syz.1.463       state:D stack:25104 pid:8316  tgid:8314  ppid:5831   flags:0x00004004
[  291.458167][   T30] Call Trace:
[  291.461470][   T30]  <TASK>
[  291.464422][   T30]  __schedule+0x186c/0x4be0
[  291.469016][   T30]  ? schedule+0x90/0x320
[  291.473293][   T30]  ? schedule+0x90/0x320
[  291.477644][   T30]  ? __pfx___schedule+0x10/0x10
[  291.482532][   T30]  ? __pfx_lock_release+0x10/0x10
[  291.487728][   T30]  ? rcu_is_watching+0x15/0xb0
[  291.492535][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  291.498620][   T30]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  291.504979][   T30]  ? rcu_is_watching+0x15/0xb0
[  291.509798][   T30]  ? schedule+0x90/0x320
[  291.514481][   T30]  schedule+0x14b/0x320
[  291.518725][   T30]  schedule_preempt_disabled+0x13/0x30
[  291.524212][   T30]  __mutex_lock+0x817/0x1010
[  291.528985][   T30]  ? __mutex_lock+0x602/0x1010
[  291.533777][   T30]  ? genl_rcv_msg+0x121/0xec0
[  291.538501][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  291.543551][   T30]  ? 0xffffffffa0002090
[  291.547738][   T30]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  291.553918][   T30]  ? kernel_text_address+0xa7/0xe0
[  291.559104][   T30]  ? __kernel_text_address+0xd/0x40
[  291.564326][   T30]  ? radix_tree_lookup+0x238/0x290
[  291.569536][   T30]  genl_rcv_msg+0x121/0xec0
[  291.574070][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  291.579160][   T30]  ? stack_trace_save+0x118/0x1d0
[  291.584201][   T30]  ? __pfx_stack_trace_save+0x10/0x10
[  291.589648][   T30]  ? stack_depot_save_flags+0x37/0x940
[  291.595172][   T30]  ? rcu_is_watching+0x15/0xb0
[  291.600025][   T30]  ? lock_acquire+0xe3/0x550
[  291.604639][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  291.609814][   T30]  ? __pfx___might_resched+0x10/0x10
[  291.615577][   T30]  ? rcu_is_watching+0x15/0xb0
[  291.620377][   T30]  ? lock_acquire+0xe3/0x550
[  291.624965][   T30]  netlink_rcv_skb+0x1e3/0x430
[  291.629800][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  291.634851][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  291.640214][   T30]  ? lock_release+0xbf/0xa30
[  291.644849][   T30]  ? __pfx___netlink_lookup+0x10/0x10
[  291.650324][   T30]  ? net_generic+0x1f/0x240
[  291.654863][   T30]  genl_rcv+0x28/0x40
[  291.658937][   T30]  netlink_unicast+0x7f6/0x990
[  291.663738][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  291.669095][   T30]  ? __virt_addr_valid+0x45f/0x530
[  291.674228][   T30]  ? __phys_addr_symbol+0x2f/0x70
[  291.679346][   T30]  ? __check_object_size+0x47a/0x730
[  291.684662][   T30]  netlink_sendmsg+0x8e4/0xcb0
[  291.690176][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  291.695550][   T30]  ? aa_sock_msg_perm+0x91/0x160
[  291.700505][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  291.705824][   T30]  __sock_sendmsg+0x221/0x270
[  291.710527][   T30]  __sys_sendto+0x363/0x4c0
[  291.715027][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  291.720581][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  291.725798][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  291.732154][   T30]  ? __pfx___up_read+0x10/0x10
[  291.736992][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  291.743341][   T30]  ? rcu_is_watching+0x15/0xb0
[  291.748168][   T30]  __x64_sys_sendto+0xde/0x100
[  291.752974][   T30]  do_syscall_64+0xf3/0x230
[  291.757522][   T30]  ? clear_bhb_loop+0x35/0x90
[  291.762213][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.768178][   T30] RIP: 0033:0x7ff1af38ebbc
[  291.772600][   T30] RSP: 002b:00007ff1b01cdec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  291.781200][   T30] RAX: ffffffffffffffda RBX: 00007ff1b01cdfc0 RCX: 00007ff1af38ebbc
[  291.789210][   T30] RDX: 0000000000000024 RSI: 00007ff1b01ce010 RDI: 000000000000000a
[  291.797247][   T30] RBP: 0000000000000000 R08: 00007ff1b01cdf14 R09: 000000000000000c
[  291.805246][   T30] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000a
[  291.813360][   T30] R13: 00007ff1b01cdf68 R14: 00007ff1b01ce010 R15: 0000000000000000
[  291.821788][   T30]  </TASK>
[  291.824840][   T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  291.833945][   T30] INFO: task syz.1.463:8317 blocked for more than 147 seconds.
[  291.841524][   T30]       Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0
[  291.848996][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  291.857838][   T30] task:syz.1.463       state:D stack:27824 pid:8317  tgid:8314  ppid:5831   flags:0x00000004
[  291.868135][   T30] Call Trace:
[  291.871431][   T30]  <TASK>
[  291.874474][   T30]  __schedule+0x186c/0x4be0
[  291.879039][   T30]  ? schedule+0x90/0x320
[  291.883308][   T30]  ? schedule+0x90/0x320
[  291.887692][   T30]  ? __pfx___schedule+0x10/0x10
[  291.892588][   T30]  ? __pfx_lock_release+0x10/0x10
[  291.897686][   T30]  ? rcu_is_watching+0x15/0xb0
[  291.902477][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  291.908435][   T30]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  291.914787][   T30]  ? rcu_is_watching+0x15/0xb0
[  291.919702][   T30]  ? schedule+0x90/0x320
[  291.924363][   T30]  schedule+0x14b/0x320
[  291.928705][   T30]  schedule_preempt_disabled+0x13/0x30
[  291.934203][   T30]  __mutex_lock+0x817/0x1010
[  291.939037][   T30]  ? __mutex_lock+0x602/0x1010
[  291.943830][   T30]  ? genl_rcv_msg+0x121/0xec0
[  291.948573][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  291.953822][   T30]  ? 0xffffffffa0002090
[  291.958028][   T30]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  291.964208][   T30]  ? kernel_text_address+0xa7/0xe0
[  291.969603][   T30]  ? __kernel_text_address+0xd/0x40
[  291.974839][   T30]  ? radix_tree_lookup+0x238/0x290
[  291.980016][   T30]  genl_rcv_msg+0x121/0xec0
[  291.984573][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  291.989684][   T30]  ? stack_trace_save+0x118/0x1d0
[  291.994739][   T30]  ? __pfx_stack_trace_save+0x10/0x10
[  292.000212][   T30]  ? stack_depot_save_flags+0x37/0x940
[  292.005873][   T30]  ? rcu_is_watching+0x15/0xb0
[  292.010676][   T30]  ? lock_acquire+0xe3/0x550
[  292.015287][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  292.020409][   T30]  ? __pfx___might_resched+0x10/0x10
[  292.026270][   T30]  ? rcu_is_watching+0x15/0xb0
[  292.031079][   T30]  ? lock_acquire+0xe3/0x550
[  292.035726][   T30]  netlink_rcv_skb+0x1e3/0x430
[  292.040508][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  292.045649][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  292.050979][   T30]  ? lock_release+0xbf/0xa30
[  292.055632][   T30]  ? __pfx___netlink_lookup+0x10/0x10
[  292.061035][   T30]  ? net_generic+0x1f/0x240
[  292.065633][   T30]  genl_rcv+0x28/0x40
[  292.069648][   T30]  netlink_unicast+0x7f6/0x990
[  292.074443][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  292.079799][   T30]  ? __virt_addr_valid+0x45f/0x530
[  292.084933][   T30]  ? __phys_addr_symbol+0x2f/0x70
[  292.090130][   T30]  ? __check_object_size+0x47a/0x730
[  292.095586][   T30]  netlink_sendmsg+0x8e4/0xcb0
[  292.100380][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  292.105740][   T30]  ? aa_sock_msg_perm+0x91/0x160
[  292.110699][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  292.116050][   T30]  __sock_sendmsg+0x221/0x270
[  292.120756][   T30]  __sys_sendto+0x363/0x4c0
[  292.125261][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  292.130924][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  292.136061][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  292.142419][   T30]  ? __pfx___up_read+0x10/0x10
[  292.147244][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  292.153631][   T30]  ? rcu_is_watching+0x15/0xb0
[  292.158501][   T30]  __x64_sys_sendto+0xde/0x100
[  292.163326][   T30]  do_syscall_64+0xf3/0x230
[  292.169433][   T30]  ? clear_bhb_loop+0x35/0x90
[  292.174148][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.180387][   T30] RIP: 0033:0x7ff1af38ebbc
[  292.184824][   T30] RSP: 002b:00007ff1b01acec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  292.193291][   T30] RAX: ffffffffffffffda RBX: 00007ff1b01acfc0 RCX: 00007ff1af38ebbc
[  292.201299][   T30] RDX: 0000000000000024 RSI: 00007ff1b01ad010 RDI: 000000000000000b
[  292.209484][   T30] RBP: 0000000000000000 R08: 00007ff1b01acf14 R09: 000000000000000c
[  292.217519][   T30] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000b
[  292.225578][   T30] R13: 00007ff1b01acf68 R14: 00007ff1b01ad010 R15: 0000000000000000
[  292.233969][   T30]  </TASK>
[  292.237087][   T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  292.246234][   T30] INFO: task syz.1.463:8318 blocked for more than 147 seconds.
[  292.253788][   T30]       Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0
[  292.261137][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  292.269886][   T30] task:syz.1.463       state:D stack:28176 pid:8318  tgid:8314  ppid:5831   flags:0x00000004
[  292.280185][   T30] Call Trace:
[  292.283482][   T30]  <TASK>
[  292.286531][   T30]  __schedule+0x186c/0x4be0
[  292.291077][   T30]  ? schedule+0x90/0x320
[  292.295406][   T30]  ? schedule+0x90/0x320
[  292.299689][   T30]  ? __pfx___schedule+0x10/0x10
[  292.304545][   T30]  ? __pfx_lock_release+0x10/0x10
[  292.309632][   T30]  ? rcu_is_watching+0x15/0xb0
[  292.314425][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  292.320374][   T30]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  292.326897][   T30]  ? schedule+0x90/0x320
[  292.331620][   T30]  schedule+0x14b/0x320
[  292.335896][   T30]  schedule_preempt_disabled+0x13/0x30
[  292.341390][   T30]  __mutex_lock+0x817/0x1010
[  292.346071][   T30]  ? __mutex_lock+0x602/0x1010
[  292.350885][   T30]  ? __tun_chr_ioctl+0x48c/0x2400
[  292.355972][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  292.361025][   T30]  ? __might_fault+0xaa/0x120
[  292.365811][   T30]  __tun_chr_ioctl+0x48c/0x2400
[  292.370699][   T30]  ? __pfx___tun_chr_ioctl+0x10/0x10
[  292.376100][   T30]  ? __pfx_tun_chr_ioctl+0x10/0x10
[  292.381273][   T30]  __se_sys_ioctl+0xf5/0x170
[  292.385940][   T30]  do_syscall_64+0xf3/0x230
[  292.390461][   T30]  ? clear_bhb_loop+0x35/0x90
[  292.395154][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.401116][   T30] RIP: 0033:0x7ff1af38cd29
[  292.405680][   T30] RSP: 002b:00007ff1b018d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  292.414124][   T30] RAX: ffffffffffffffda RBX: 00007ff1af5a6240 RCX: 00007ff1af38cd29
[  292.422185][   T30] RDX: 00000000200000c0 RSI: 00000000400454ca RDI: 0000000000000008
[  292.430209][   T30] RBP: 00007ff1af40e2a0 R08: 0000000000000000 R09: 0000000000000000
[  292.438710][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  292.446799][   T30] R13: 0000000000000000 R14: 00007ff1af5a6240 R15: 00007ffec9bd98c8
[  292.454837][   T30]  </TASK>
[  292.457908][   T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  292.466975][   T30] INFO: task syz.1.463:8319 blocked for more than 147 seconds.
[  292.474539][   T30]       Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0
[  292.481948][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  292.490784][   T30] task:syz.1.463       state:D stack:27696 pid:8319  tgid:8314  ppid:5831   flags:0x00004004
[  292.501059][   T30] Call Trace:
[  292.504346][   T30]  <TASK>
[  292.507343][   T30]  __schedule+0x186c/0x4be0
[  292.511872][   T30]  ? schedule+0x90/0x320
[  292.516168][   T30]  ? schedule+0x90/0x320
[  292.520453][   T30]  ? __pfx___schedule+0x10/0x10
[  292.525306][   T30]  ? __pfx_lock_release+0x10/0x10
[  292.530423][   T30]  ? rcu_is_watching+0x15/0xb0
[  292.535743][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  292.541675][   T30]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  292.548046][   T30]  ? schedule+0x90/0x320
[  292.552329][   T30]  schedule+0x14b/0x320
[  292.556541][   T30]  schedule_preempt_disabled+0x13/0x30
[  292.562054][   T30]  __mutex_lock+0x817/0x1010
[  292.566780][   T30]  ? __mutex_lock+0x602/0x1010
[  292.571571][   T30]  ? devinet_ioctl+0x31a/0x1ac0
[  292.576491][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  292.581545][   T30]  ? apparmor_capable+0x13b/0x1b0
[  292.586643][   T30]  ? bpf_lsm_capable+0x9/0x10
[  292.591345][   T30]  devinet_ioctl+0x31a/0x1ac0
[  292.596114][   T30]  ? get_user_ifreq+0x1bb/0x200
[  292.600989][   T30]  inet_ioctl+0x3d7/0x4f0
[  292.605432][   T30]  ? __pfx_inet_ioctl+0x10/0x10
[  292.610332][   T30]  ? tomoyo_path_number_perm+0x679/0x860
[  292.616048][   T30]  ? tomoyo_path_number_perm+0x206/0x860
[  292.621696][   T30]  ? packet_ioctl+0x26b/0x350
[  292.626448][   T30]  sock_do_ioctl+0x158/0x460
[  292.631095][   T30]  ? __pfx_sock_do_ioctl+0x10/0x10
[  292.636266][   T30]  sock_ioctl+0x626/0x8e0
[  292.641025][   T30]  ? __pfx_sock_ioctl+0x10/0x10
[  292.646009][   T30]  ? __fget_files+0x2a/0x410
[  292.650663][   T30]  ? __fget_files+0x2a/0x410
[  292.655292][   T30]  ? __pfx_sock_ioctl+0x10/0x10
[  292.660204][   T30]  __se_sys_ioctl+0xf5/0x170
[  292.664818][   T30]  do_syscall_64+0xf3/0x230
[  292.669444][   T30]  ? clear_bhb_loop+0x35/0x90
[  292.674147][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.680102][   T30] RIP: 0033:0x7ff1af38cd29
[  292.684532][   T30] RSP: 002b:00007ff1b016c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  292.693049][   T30] RAX: ffffffffffffffda RBX: 00007ff1af5a6320 RCX: 00007ff1af38cd29
[  292.701188][   T30] RDX: 0000000020000180 RSI: 0000000000008914 RDI: 000000000000000c
[  292.709228][   T30] RBP: 00007ff1af40e2a0 R08: 0000000000000000 R09: 0000000000000000
[  292.717249][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  292.725236][   T30] R13: 0000000000000000 R14: 00007ff1af5a6320 R15: 00007ffec9bd98c8
[  292.733434][   T30]  </TASK>
[  292.736504][   T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  292.746123][   T30] INFO: task syz.1.463:8322 blocked for more than 148 seconds.
[  292.753780][   T30]       Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0
[  292.761119][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  292.769874][   T30] task:syz.1.463       state:D stack:27824 pid:8322  tgid:8314  ppid:5831   flags:0x00000004
[  292.780262][   T30] Call Trace:
[  292.783567][   T30]  <TASK>
[  292.786554][   T30]  __schedule+0x186c/0x4be0
[  292.791095][   T30]  ? schedule+0x90/0x320
[  292.795393][   T30]  ? schedule+0x90/0x320
[  292.799683][   T30]  ? __pfx___schedule+0x10/0x10
[  292.804576][   T30]  ? __pfx_lock_release+0x10/0x10
[  292.809713][   T30]  ? rcu_is_watching+0x15/0xb0
[  292.814521][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  292.820484][   T30]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  292.826895][   T30]  ? schedule+0x90/0x320
[  292.831157][   T30]  schedule+0x14b/0x320
[  292.835362][   T30]  schedule_preempt_disabled+0x13/0x30
[  292.840926][   T30]  __mutex_lock+0x817/0x1010
[  292.846089][   T30]  ? __mutex_lock+0x602/0x1010
[  292.850907][   T30]  ? genl_rcv_msg+0x121/0xec0
[  292.855658][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  292.860712][   T30]  ? rcu_is_watching+0x15/0xb0
[  292.865575][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  292.871932][   T30]  ? lock_release+0xbf/0xa30
[  292.876582][   T30]  ? rcu_is_watching+0x15/0xb0
[  292.881401][   T30]  ? radix_tree_lookup+0x238/0x290
[  292.886616][   T30]  genl_rcv_msg+0x121/0xec0
[  292.891147][   T30]  ? __dev_queue_xmit+0x2f4/0x3f50
[  292.896318][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  292.901368][   T30]  ? __dev_queue_xmit+0x1775/0x3f50
[  292.906640][   T30]  ? kasan_save_track+0x51/0x80
[  292.911711][   T30]  ? __sys_sendto+0x363/0x4c0
[  292.916554][   T30]  ? rcu_is_watching+0x15/0xb0
[  292.921349][   T30]  ? lock_acquire+0xe3/0x550
[  292.926017][   T30]  ? __pfx___dev_queue_xmit+0x10/0x10
[  292.931415][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  292.936519][   T30]  ? __pfx___might_resched+0x10/0x10
[  292.941853][   T30]  netlink_rcv_skb+0x1e3/0x430
[  292.947160][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  292.952223][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  292.957595][   T30]  ? lock_release+0xbf/0xa30
[  292.962229][   T30]  ? __netlink_deliver_tap+0x7aa/0x7f0
[  292.967790][   T30]  genl_rcv+0x28/0x40
[  292.971800][   T30]  netlink_unicast+0x7f6/0x990
[  292.976631][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  292.981953][   T30]  ? __virt_addr_valid+0x45f/0x530
[  292.987159][   T30]  ? __phys_addr_symbol+0x2f/0x70
[  292.992213][   T30]  ? __check_object_size+0x47a/0x730
[  292.997568][   T30]  netlink_sendmsg+0x8e4/0xcb0
[  293.002361][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  293.007708][   T30]  ? aa_sock_msg_perm+0x91/0x160
[  293.012720][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  293.018082][   T30]  __sock_sendmsg+0x221/0x270
[  293.022792][   T30]  __sys_sendto+0x363/0x4c0
[  293.027351][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  293.032411][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  293.038802][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  293.045156][   T30]  ? rcu_is_watching+0x15/0xb0
[  293.050513][   T30]  __x64_sys_sendto+0xde/0x100
[  293.055367][   T30]  do_syscall_64+0xf3/0x230
[  293.059889][   T30]  ? clear_bhb_loop+0x35/0x90
[  293.064574][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.070507][   T30] RIP: 0033:0x7ff1af38ebbc
[  293.074943][   T30] RSP: 002b:00007ff1b0149ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  293.083413][   T30] RAX: ffffffffffffffda RBX: 00007ff1b0149fc0 RCX: 00007ff1af38ebbc
[  293.091510][   T30] RDX: 0000000000000024 RSI: 00007ff1b014a010 RDI: 000000000000000d
[  293.099569][   T30] RBP: 0000000000000000 R08: 00007ff1b0149f14 R09: 000000000000000c
[  293.107640][   T30] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000d
[  293.115690][   T30] R13: 00007ff1b0149f68 R14: 00007ff1b014a010 R15: 0000000000000000
[  293.123699][   T30]  </TASK>
[  293.126779][   T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  293.135858][   T30] INFO: task syz.3.464:8327 blocked for more than 148 seconds.
[  293.143427][   T30]       Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0
[  293.151689][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  293.160428][   T30] task:syz.3.464       state:D stack:26480 pid:8327  tgid:8326  ppid:5844   flags:0x00000004
[  293.170681][   T30] Call Trace:
[  293.173954][   T30]  <TASK>
[  293.176961][   T30]  __schedule+0x186c/0x4be0
[  293.181495][   T30]  ? schedule+0x90/0x320
[  293.185799][   T30]  ? schedule+0x90/0x320
[  293.190066][   T30]  ? __pfx___schedule+0x10/0x10
[  293.194936][   T30]  ? __pfx_lock_release+0x10/0x10
[  293.200057][   T30]  ? rcu_is_watching+0x15/0xb0
[  293.204854][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  293.211097][   T30]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  293.217909][   T30]  ? schedule+0x90/0x320
[  293.222208][   T30]  schedule+0x14b/0x320
[  293.226572][   T30]  schedule_preempt_disabled+0x13/0x30
[  293.232088][   T30]  __mutex_lock+0x817/0x1010
[  293.236787][   T30]  ? __mutex_lock+0x602/0x1010
[  293.241633][   T30]  ? rtnl_newlink+0xce2/0x2210
[  293.246530][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  293.251981][   T30]  ? ns_capable+0x8a/0xf0
[  293.256450][   T30]  ? rtnl_link_get_net_capable+0x168/0x340
[  293.262322][   T30]  rtnl_newlink+0xce2/0x2210
[  293.266999][   T30]  ? __pfx_rtnl_newlink+0x10/0x10
[  293.272066][   T30]  ? __netlink_deliver_tap+0x56b/0x7f0
[  293.277627][   T30]  ? netlink_deliver_tap+0x19d/0x1b0
[  293.282936][   T30]  ? netlink_unicast+0x7c4/0x990
[  293.288012][   T30]  ? netlink_sendmsg+0x8e4/0xcb0
[  293.292974][   T30]  ? __sock_sendmsg+0x221/0x270
[  293.297948][   T30]  ? ____sys_sendmsg+0x52a/0x7e0
[  293.302918][   T30]  ? __sys_sendmsg+0x269/0x350
[  293.307722][   T30]  ? do_syscall_64+0xf3/0x230
[  293.312415][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.318589][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  293.324948][   T30]  ? rcu_is_watching+0x15/0xb0
[  293.329883][   T30]  ? rcu_is_watching+0x15/0xb0
[  293.334687][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  293.341156][   T30]  ? lock_release+0xbf/0xa30
[  293.345844][   T30]  ? nlmon_xmit+0xaf/0x100
[  293.350304][   T30]  ? rcu_is_watching+0x15/0xb0
[  293.355268][   T30]  ? rcu_is_watching+0x15/0xb0
[  293.360146][   T30]  ? lock_release+0xbf/0xa30
[  293.364767][   T30]  ? __pfx_aa_get_newest_label+0x10/0x10
[  293.370583][   T30]  ? __pfx_lock_release+0x10/0x10
[  293.375709][   T30]  ? bpf_lsm_capable+0x9/0x10
[  293.380449][   T30]  ? security_capable+0x7e/0x2d0
[  293.385473][   T30]  ? __pfx_rtnl_newlink+0x10/0x10
[  293.390550][   T30]  rtnetlink_rcv_msg+0x791/0xcf0
[  293.395614][   T30]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  293.400751][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  293.406344][   T30]  ? ref_tracker_free+0x643/0x7e0
[  293.411396][   T30]  netlink_rcv_skb+0x1e3/0x430
[  293.416342][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  293.421827][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  293.427163][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[  293.432407][   T30]  netlink_unicast+0x7f6/0x990
[  293.437314][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  293.442622][   T30]  ? __virt_addr_valid+0x45f/0x530
[  293.447930][   T30]  ? __phys_addr_symbol+0x2f/0x70
[  293.452985][   T30]  ? __check_object_size+0x47a/0x730
[  293.458590][   T30]  netlink_sendmsg+0x8e4/0xcb0
[  293.463389][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  293.468726][   T30]  ? aa_sock_msg_perm+0x91/0x160
[  293.473776][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  293.479115][   T30]  __sock_sendmsg+0x221/0x270
[  293.483821][   T30]  ____sys_sendmsg+0x52a/0x7e0
[  293.488718][   T30]  ? __pfx_____sys_sendmsg+0x10/0x10
[  293.494034][   T30]  ? __fget_files+0x2a/0x410
[  293.498692][   T30]  ? __fget_files+0x2a/0x410
[  293.503341][   T30]  __sys_sendmsg+0x269/0x350
[  293.508072][   T30]  ? __pfx___sys_sendmsg+0x10/0x10
[  293.513197][   T30]  ? lock_release+0xbf/0xa30
[  293.517864][   T30]  ? __se_sys_futex+0x3f9/0x480
[  293.522738][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  293.529198][   T30]  ? rcu_is_watching+0x15/0xb0
[  293.533996][   T30]  ? rcu_is_watching+0x15/0xb0
[  293.538817][   T30]  do_syscall_64+0xf3/0x230
[  293.543338][   T30]  ? clear_bhb_loop+0x35/0x90
[  293.548122][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.554034][   T30] RIP: 0033:0x7fc9a698cd29
[  293.558580][   T30] RSP: 002b:00007fc9a7878038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  293.567355][   T30] RAX: ffffffffffffffda RBX: 00007fc9a6ba5fa0 RCX: 00007fc9a698cd29
[  293.575412][   T30] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004
[  293.583404][   T30] RBP: 00007fc9a6a0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  293.591483][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  293.599562][   T30] R13: 0000000000000000 R14: 00007fc9a6ba5fa0 R15: 00007fffe5a7ac78
[  293.607795][   T30]  </TASK>
[  293.610859][   T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  293.619945][   T30] INFO: lockdep is turned off.
[  293.624743][   T30] NMI backtrace for cpu 1
[  293.624760][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0
[  293.624781][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  293.624795][   T30] Call Trace:
[  293.624801][   T30]  <TASK>
[  293.624809][   T30]  dump_stack_lvl+0x241/0x360
[  293.624837][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  293.624861][   T30]  ? __pfx__printk+0x10/0x10
[  293.624883][   T30]  ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10
[  293.624908][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  293.624930][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  293.624953][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  293.624972][   T30]  ? rcu_is_watching+0x15/0xb0
[  293.625001][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  293.625019][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  293.625042][   T30]  watchdog+0xff6/0x1040
[  293.625062][   T30]  ? watchdog+0x1ea/0x1040
[  293.625083][   T30]  ? __pfx_watchdog+0x10/0x10
[  293.625102][   T30]  kthread+0x7a9/0x920
[  293.625122][   T30]  ? __pfx_kthread+0x10/0x10
[  293.625143][   T30]  ? __pfx_watchdog+0x10/0x10
[  293.625162][   T30]  ? __pfx_kthread+0x10/0x10
[  293.625181][   T30]  ? __pfx_kthread+0x10/0x10
[  293.625203][   T30]  ? __pfx_kthread+0x10/0x10
[  293.625222][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  293.625244][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  293.625267][   T30]  ? __pfx_kthread+0x10/0x10
[  293.625288][   T30]  ret_from_fork+0x4b/0x80
[  293.625305][   T30]  ? __pfx_kthread+0x10/0x10
[  293.625332][   T30]  ret_from_fork_asm+0x1a/0x30
[  293.625357][   T30]  </TASK>
[  293.783065][   T30] Sending NMI from CPU 1 to CPUs 0:
[  293.788461][    C0] NMI backtrace for cpu 0
[  293.788475][    C0] CPU: 0 UID: 0 PID: 6672 Comm: kworker/u8:17 Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0
[  293.788494][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  293.788506][    C0] Workqueue: events_unbound cfg80211_wiphy_work
[  293.788536][    C0] RIP: 0010:ieee80211_sta_get_rates+0x32c/0x660
[  293.788563][    C0] Code: 89 f7 e8 97 54 b5 f6 49 63 c7 4d 8b 36 4c 8d 2c 40 4b 8d 1c ae 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 0f 85 f4 00 00 00 8b 1b 8b 6c 24 4c 21 eb 89 df 89 ee e8 1b
[  293.788578][    C0] RSP: 0018:ffffc900035476d8 EFLAGS: 00000a06
[  293.788592][    C0] RAX: 0000000000000000 RBX: ffff888027ea5c68 RCX: dffffc0000000000
[  293.788604][    C0] RDX: 0000000000000000 RSI: 000000000000006e RDI: 00000000000000f0
[  293.788615][    C0] RBP: 00000000000000f0 R08: ffffffff8b50ad9c R09: 1ffffffff2037496
[  293.788626][    C0] R10: dffffc0000000000 R11: fffffbfff2037497 R12: dffffc0000000000
[  293.788639][    C0] R13: 000000000000000c R14: ffff888027ea5c38 R15: 0000000000000004
[  293.788650][    C0] FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  293.788664][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  293.788675][    C0] CR2: 000055cdddaead88 CR3: 000000000e738000 CR4: 00000000003526f0
[  293.788697][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  293.788707][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  293.788717][    C0] Call Trace:
[  293.788723][    C0]  <NMI>
[  293.788730][    C0]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  293.788753][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  293.788777][    C0]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  293.788806][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  293.788824][    C0]  ? nmi_handle+0x14f/0x5a0
[  293.788846][    C0]  ? nmi_handle+0x2a/0x5a0
[  293.788868][    C0]  ? ieee80211_sta_get_rates+0x32c/0x660
[  293.788891][    C0]  ? default_do_nmi+0x63/0x160
[  293.788912][    C0]  ? exc_nmi+0x123/0x1f0
[  293.788932][    C0]  ? end_repeat_nmi+0xf/0x53
[  293.788953][    C0]  ? ieee80211_sta_get_rates+0x37c/0x660
[  293.788978][    C0]  ? ieee80211_sta_get_rates+0x32c/0x660
[  293.789002][    C0]  ? ieee80211_sta_get_rates+0x32c/0x660
[  293.789027][    C0]  ? ieee80211_sta_get_rates+0x32c/0x660
[  293.789051][    C0]  </NMI>
[  293.789057][    C0]  <TASK>
[  293.789069][    C0]  ieee80211_ibss_rx_queued_mgmt+0x11e1/0x2d70
[  293.789103][    C0]  ? rcu_is_watching+0x15/0xb0
[  293.789129][    C0]  ? ieee80211_ibss_rx_queued_mgmt+0xf7e/0x2d70
[  293.789157][    C0]  ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10
[  293.789187][    C0]  ? rcu_is_watching+0x15/0xb0
[  293.789212][    C0]  ? lock_release+0xbf/0xa30
[  293.789233][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  293.789255][    C0]  ? __pfx_lock_release+0x10/0x10
[  293.789275][    C0]  ? do_raw_spin_lock+0x14f/0x370
[  293.789293][    C0]  ? __pfx_lock_release+0x10/0x10
[  293.789316][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  293.789340][    C0]  ? kcov_remote_start+0x97/0x7d0
[  293.789362][    C0]  ? skb_dequeue+0x113/0x150
[  293.789389][    C0]  ieee80211_iface_work+0x8dc/0xf90
[  293.789411][    C0]  cfg80211_wiphy_work+0x2f0/0x490
[  293.789435][    C0]  ? process_scheduled_works+0x976/0x1840
[  293.789455][    C0]  process_scheduled_works+0xa66/0x1840
[  293.789485][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  293.789505][    C0]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  293.789529][    C0]  ? assign_work+0x364/0x3d0
[  293.789560][    C0]  worker_thread+0x870/0xd30
[  293.789584][    C0]  ? __kthread_parkme+0x169/0x1d0
[  293.789605][    C0]  ? __pfx_worker_thread+0x10/0x10
[  293.789623][    C0]  kthread+0x7a9/0x920
[  293.789645][    C0]  ? __pfx_worker_thread+0x10/0x10
[  293.789663][    C0]  ? __pfx_kthread+0x10/0x10
[  293.789683][    C0]  ? __pfx_kthread+0x10/0x10
[  293.789711][    C0]  ? rcu_is_watching+0x15/0xb0
[  293.789734][    C0]  ? __pfx_kthread+0x10/0x10
[  293.789755][    C0]  ? __pfx_kthread+0x10/0x10
[  293.789776][    C0]  ret_from_fork+0x4b/0x80
[  293.789794][    C0]  ? __pfx_kthread+0x10/0x10
[  293.789814][    C0]  ret_from_fork_asm+0x1a/0x30
[  293.789837][    C0]  </TASK>
[  293.790627][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  294.193513][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0
[  294.203685][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  294.213742][   T30] Call Trace:
[  294.217021][   T30]  <TASK>
[  294.219953][   T30]  dump_stack_lvl+0x241/0x360
[  294.224647][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  294.229856][   T30]  ? __pfx__printk+0x10/0x10
[  294.234457][   T30]  ? vscnprintf+0x5d/0x90
[  294.238793][   T30]  panic+0x349/0x880
[  294.242698][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  294.248860][   T30]  ? __pfx_panic+0x10/0x10
[  294.253284][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  294.258667][   T30]  ? __irq_work_queue_local+0x137/0x410
[  294.264219][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  294.269599][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  294.275768][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  294.281936][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  294.288106][   T30]  watchdog+0x1035/0x1040
[  294.292439][   T30]  ? watchdog+0x1ea/0x1040
[  294.296859][   T30]  ? __pfx_watchdog+0x10/0x10
[  294.301553][   T30]  kthread+0x7a9/0x920
[  294.305629][   T30]  ? __pfx_kthread+0x10/0x10
[  294.310225][   T30]  ? __pfx_watchdog+0x10/0x10
[  294.314904][   T30]  ? __pfx_kthread+0x10/0x10
[  294.319499][   T30]  ? __pfx_kthread+0x10/0x10
[  294.324092][   T30]  ? __pfx_kthread+0x10/0x10
[  294.328682][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  294.333884][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  294.339090][   T30]  ? __pfx_kthread+0x10/0x10
[  294.343685][   T30]  ret_from_fork+0x4b/0x80
[  294.348099][   T30]  ? __pfx_kthread+0x10/0x10
[  294.352689][   T30]  ret_from_fork_asm+0x1a/0x30
[  294.357464][   T30]  </TASK>
[  294.360824][   T30] Kernel Offset: disabled
[  294.365146][   T30] Rebooting in 86400 seconds..