last executing test programs:

18.322896973s ago: executing program 2 (id=5731):
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000000101030000000000000000000000000110000180b0a56ec8b543d2c1ef04af8ca30c0002800500010088000000"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x810)
r0 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r0, 0x108, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@fallback=<r4=>r3, 0x14, 0x0, 0x7ff, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000003c0), &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], <r5=>0x0}, 0x40)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x7, '\x00', r2, 0xffffffffffffffff, 0x1, 0x5}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000010000000bfa300000000000007030000f0ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b2314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8dd63d4b77b206000000000000e254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3813e2c25a61ec45c3af9948f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469600241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c12e28ef97d9ebd9c77f1774cf4683c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f011000000f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497a6103876843ee04ed9ff002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd1304202274f20675eb781925440578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b96508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e25c89b552d7fcd116bce9c764c714c9402c21d1aac59efb28d4f91652f6000000000000000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a575939206d0c0f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8000000edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db76cf059f40fa2640b6bfb74dd35391b8fa18479da9f4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847db97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ccfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000000000000000000003ba34b611569a451564d3a5400f9097ffe7a37e765be352be71ee24250d6828562c7e24cb763062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89a0000bde05c114e7a020fc1a5fd3eeeb822008b2d7d1cc062b51b0aca4956b557e51a1385cc572b0074b0950fb1437de2590bf99ec7ceb69e1fe2465fce099c992d57b804a22e148ae3411523814aee03ee2df877edfabf4aa94f07c6fdd127e57a8bf7975f2e606c25a299980a6e52fcf7849d45bb38573fbba8afef1aa7a24c805f7aee3e39a3000000000000000000000000000000000000878f88c4742ac490951c36c610a0d266588ec6a0bd300cf160b5a5d9e9fafa49ecc8430832d795e727b7fc2b76e7fc4141fdbb82f45d3cdd3fb8d4b443ab4954fdf5c1b9a6ab3e457f098329307ccb0a1989b6c37509692e952e7244f48bc12569ff8eb30d0f887b85b5ef44fb9a7571319190be0c226ed72f346cc4aa071ae0c72fa8bd00d5590c4f4ba65d0c8e1f4870fe3c414681e41b40163eb1aa2a7429a2208cd6e69c7d959e87da3fd0101159a03ab7fe78881ee7a1ee7a2edff75fb18a181e0c54352be2b7a5b5273198291c28d9141deeb3cdba5d414ae4b0000000000000000000000000009eacd83458d8a606be71970497a4fd4ca3b48ca482ab3804e2fac216b3ba613608b1a465456a33fd08491d337d7344c01cfc9e73"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r7, 0xc0, &(0x7f0000000640)={0x0, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x2, 0xf, 0xc2, 0x7, 0x3, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_nat_t_type={0x1, 0x14, 0xfc}]}, 0x18}}, 0x4000)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r8}, 0x4)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000500)={0x1}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000880)={@fallback=r6, r1, 0x23, 0x20, 0x0, @void, @void, @void, @value=r8, r5}, 0x20)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x0)
getsockname$packet(r4, &(0x7f0000000280), &(0x7f0000000780)=0x14)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000003300)=ANY=[@ANYBLOB="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"], 0x10d8}}, 0x0)

18.086660514s ago: executing program 2 (id=5735):
syz_emit_ethernet(0x113f, &(0x7f0000001280)=ANY=[@ANYBLOB="0180c200000e0180c200000086dd65efdf2211091101fc020000000000000000000000000001fe8000000000000000000000000000aa2f0a040511080600fe8000000000000000000000000000bb00000000000000000000ffffac1414aaff020000000000000000000000000001fe8000000000000000000000000000aaff0100000000000000000000000000010c08040402400100ff0100000000"], 0x0)
r0 = socket$inet6(0xa, 0x4, 0x6)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'macvtap0\x00', &(0x7f0000000040)=@ethtool_modinfo={0x42, 0x3ff, 0x3}})
syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x0)

17.812715463s ago: executing program 3 (id=5743):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8864}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
socket$netlink(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x336}, 0x4000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4020}}, 0x20}, 0x1, 0x0, 0x0, 0x20004080}, 0x400)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_vlan={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x9a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x806}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x4800)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
write$tun(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0003110004000000a60c6eec00be00442c2f"], 0xfdef)
socket$tipc(0x1e, 0x2, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

17.740109092s ago: executing program 2 (id=5744):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

17.668369349s ago: executing program 2 (id=5747):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', <r3=>0x0})
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000480)=0x100000, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000300)={0x0, 0x0, 0x1000, 0x0, 0x2}, 0x20)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="76a32be221715ed8f89a1d6f7a18740000000084037d039350ace500000002000005140004800800024000000003080002400000c2120900010073797a3100000000050003002f0000002400048008000240ece482b2080002400000000308000240800000010800024000e000050900010073797a310000000006000240a1000000d5e85e0a15bb3bdad4a62d985a07eaca1888a251813cc9b7c1"], 0x74}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
close(0x4)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40)
unshare(0x24060400)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={0x0, 0x4c}}, 0x41)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10)
setsockopt$sock_int(r7, 0x1, 0x1d, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x91ab60eeb323041a, 0x11, 0xffffffffffffffff, 0x38581000)
socket(0x14, 0x2, 0x4)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r8, 0xffffe000)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f00000016c0)=0x7b, 0x4)

17.241626413s ago: executing program 3 (id=5754):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="780000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414bb0c00028005000100000000000800074000000001"], 0x78}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7000000000010104000000000000000002000006240001801400018008000100e000000108000200ac1414000c00028005000100000000002c0002801400018008000100e000000108000200e00000010c000280050001000000000006000340000000000800074000000000040006"], 0x70}}, 0x0)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000001840)={0x0, @isdn={0x22, 0x9, 0x2e, 0x9, 0x7}, @rc={0x1f, @any, 0xfc}, @vsock={0x28, 0x0, 0x2711, @my=0x1}, 0x9, 0x0, 0x0, 0x0, 0xfe01, 0x0, 0x40, 0xa19, 0x9})
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e5709", @ANYBLOB="40a9384824ea"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$kcm(0xa, 0x3, 0x87)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x30, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xffffffff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffffc}]}]}, 0x30}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000001000ffff25b800e402f720ff076a0000", @ANYRES32=0x0, @ANYBLOB="4200000021200000300012800c0001006d6163766c616e0020000280080003000300"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
write$tun(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)
recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r11, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080c0}, 0x20040000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004001}, 0x0)

17.090298457s ago: executing program 0 (id=5757):
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400030000", @ANYRES32=0x0, @ANYBLOB="04000d80080005"], 0x24}, 0x1, 0x5502000000000000}, 0x0)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r5, &(0x7f0000000000), 0x8)
listen(r5, 0x80)
setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x13, 0x0, 0x24)
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000280), &(0x7f00000002c0)=0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x8, 0x0, 0x0)
sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000d000000050007000f00000006000a000100000006000800535500"], 0x2c}, 0x1, 0x0, 0x0, 0x18005}, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x0)
poll(&(0x7f0000000240)=[{r6, 0x2220}], 0x1, 0x1000)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400048000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100ffffff050000000001000040100007800c00018008000100", @ANYRES32=r9, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000"], 0x3c}}, 0x20000000)
r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r10, 0x8982, &(0x7f0000000080)={0x1, 'gre0\x00', {}, 0x1f})
sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

17.019949287s ago: executing program 1 (id=5758):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x1, r2, 0x1, 0x9}, 0x14)
getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x50)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00\''], 0x4c}}, 0x4)

16.937905321s ago: executing program 3 (id=5759):
syz_emit_ethernet(0x37f, &(0x7f0000000540)={@random="576b71bcaf90", @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x9, 0x6, "e4b993", 0x349, 0x6, 0x0, @private1, @loopback, {[@routing={0x2e, 0x6, 0x1, 0x20, 0x0, [@private2, @private0, @mcast1]}, @hopopts={0x84, 0x1b, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x7, 0xd7, "9f863a9c210e765a80830e97f2b3c87f5d0c0c95a19db122d5e5e04b5a512ce483b168c1e64fcd5d3d69343d513fbbe30395f23ae2c4cc88c3c9bf1e7c7677ef7c9b043177afcd424efc6789088cf8f1b12488070d07dd39d4155ad6e299c92a71a097afa9787b9c6030d82b87acb0b549558449d12e6b6eb03d36f7c09bfa91618bfe7e51447b940fbf25d44a8298cddafbd69d8f9e6c92f40fdb58b486929446bbe8c8a6822eb17c1ae0eef63a1034b41b71d5cea8dff4a28cc556abe080b9df0004e22d4c641c344e370d1ba6ba590ce34f41ea6cd4"}]}, @dstopts={0x2e, 0x5, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x6}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0x6}, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0x7}, @jumbo={0xc2, 0x4, 0x92e}]}, @hopopts={0x6, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}, @enc_lim]}, @dstopts={0x84, 0x10, '\x00', [@enc_lim={0x4, 0x1, 0x56}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0xb236}, @jumbo={0xc2, 0x4, 0xfffffff7}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x4}, @generic={0xfa, 0x5e, "f027a00c2594f37ecd8d62c2f8e87dd65f17206ac46075a9756dd95bd4979242ab01e831cea7912243ee28b07c996c23cadfb3deef8e420078f2c95267d0ee33358e6c74307c54fd4c376949879c1329a336436b05fd4b416163e38b32f5"}, @enc_lim]}, @dstopts={0x3c, 0x5, '\x00', [@hao={0xc9, 0x10, @mcast1}, @enc_lim={0x4, 0x1, 0xf4}, @pad1, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}, @routing={0x0, 0x2, 0x0, 0xc, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}]}, @srh={0x32, 0x12, 0x4, 0x9, 0xff, 0x50, 0x4, [@empty, @mcast1, @empty, @empty, @loopback, @dev={0xfe, 0x80, '\x00', 0xb}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private0]}, @routing={0x29, 0x4, 0x0, 0x1, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @dstopts={0x84, 0x0, '\x00', [@ra={0x5, 0x2, 0xffff}]}], @payload_named={{{{{0x29, 0x0, 0x1, 0x0, 0x1, 0xa, 0x2, 0x2, 0x4, 0x0, 0x1, 0x6, 0x5, 0x2, 0x101, 0x5, 0x0, 0x4e21, 0x4e22}, 0x4, 0x3}, 0x1, 0x3}}, [0x0]}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000000), 0x3, 0xfffff1c1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054)
write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='P'], 0x14)
write$nci(r0, &(0x7f0000000e80)=@NCI_OP_CORE_CONN_CLOSE_RSP={0x0, 0x1, 0x2, 0x5, 0xb6}, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x8c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x33}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x1f)

16.876147336s ago: executing program 2 (id=5760):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005640), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000005780)={0x0, 0x0, &(0x7f0000005740)={&(0x7f0000005680)={0x20, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', <r3=>0x0})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={<r4=>0x0, @broadcast, @initdev}, &(0x7f0000000140)=0xc)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb8, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc0}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="240000002e00090027bd7000fedbdf250400000010001a80"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x84)

16.818261208s ago: executing program 1 (id=5761):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3)
shutdown(0xffffffffffffffff, 0x1)

16.79095195s ago: executing program 4 (id=5762):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800ea0000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b609010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

16.675613469s ago: executing program 4 (id=5763):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000ffff27bd7000fbdbdf2500730000", @ANYRES32=0x0, @ANYBLOB="37ec000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

16.675343095s ago: executing program 1 (id=5764):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x5001, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000300)={0x32, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x20)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x1, @loopback, 0x9}}, 0x0, 0x0, 0x32, 0x0, "aae37be4753f0a28060a80cdd60fe31d6ba25cec257a3a485a338d600a8402d23df4854ed4cf29109f0e30e8d115e434392db157494620680fffb8cb989ab0cfc17eb88225e0fb0a062dd7a81eb098d3"}, 0xd8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_GET(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000327bd7000fedbdf251200000024000980080002000000000008000100020000000800010016f8000008000200810000002400098008000200040000080002008000000008000200400000000800010001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x2000c050}, 0x8010)
sendmmsg$inet6(r1, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfe5}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000000)="fbcb37d4b602407e380d05c2cfab553433380ae1ea5fe76b88f56925b0500c144f7ec56a5ca5c409c384299080b09076f9d21d0ac4d37d30f03626ae1a93d3ddaa87df04b3866f3101af348f1fd2afb29e52910a48ccb191e145621cbdd3ec9376a10097b652266b16bf359cac92d29d99091df7d403fa664191c43e723976fb09907728328da39a2a55c6724c26bb285eb50de1fefe3826b67d5d5cb5ae73232f8ffdfd8750b3c729734deea37286518c4229ac181e61642848e74c7afbe48cbb48ad0f2ac790e8d2e6d89e9ac35b5ef3b84b240204fc753d43e99561adc369ee13b0dec9f0a7c61a9bbbec80", 0xed}, {&(0x7f0000000540)="922c61816e8c5c3c9eac46f8fbc68746146264df7ff761a1b86a214c63dca9c315cef0a0d950a20712b2980de54c5926be2db6ec5691f62c03394193e6e31c9c40ea2590", 0x44}], 0x2}}], 0x1, 0x200880d8)

16.633551824s ago: executing program 4 (id=5765):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'erspan0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PORT_SELF={0x4}, @IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_MTU={0x8, 0x4, 0xff2}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r6 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name, &(0x7f0000000100)=0x10, 0x81c00)
sendmsg$tipc(r6, &(0x7f00000003c0)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{0x40, 0x3}}}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000180)="da2434b0d59e94ea11f2e1b2c60c54261e9b26bfdd3304c2c5b4b22c3e254a7e30c1523a64a224b06269da7f56cddbfd94cbac2fdeef441ebd5fa5254961583d1ea6ed0cef7f8ed947615700c269086e5aecdd9e8c83978d417384d6ab8010f8b3e197863e9ffeb88e171c344d315625dc188cfd800ec1d9ea86923c4f97ce2ea2adb45284", 0x85}, {&(0x7f0000000240)="594f3888a68ee6059a5ffacbc971cdb4f0ec9e994933aaa3a85828069e61831462d05842bb54da21472f11e23c25b3d8a37ae60a8f4dae3d6dc570db1e07b14ac5a33f854b19ab0aa2bb6501ce89c73c17242fc8692f61ca6075cfee6426370d6d2fb0c0", 0x64}, {&(0x7f0000000300)="d9b8e64304854e7ce34827653b313ef6e8cf8754a0b79febb3a7b51f2e493f2b8bd879b8e5f4f0581625719e41626c7b1cdb626de7aee1e29065a595c959b268559963b95020d8d14d0f8aef3e85711e66934ef8b200bbd9f6c3c14967927550eed431287686a85bbf7bc2338094d429684cff4dc264645c9b50dd5067feba103e4849", 0x83}, {&(0x7f0000000440)="22641fad70a5622e6d29389e6faaf24683f3e94a1d2daa5449536ec45d5e49e40eef29759e6ccc59695e53f26fd9b0b70d59e4f8f39351f58b070e64bf5c040d68073a95da696abd78224e3f69b062e28c442600", 0x54}, {&(0x7f00000004c0)="b1a6b06fdcf2436f1448ca466ee4b183eda93225f6059c260b79aaaab7bee4d685f7f7f598f02df27b09a845fc3ab035b7f749622df5925b1ae06442ff23b21196b56ba37c75aef06a90547829c53883e57fbc4452668d30c1a03d7b9f21a9b4bacafb974a7d9172ab5f5282d99a5d3aa84457875592b01bfffca383d76a3a0fd01615316718ba014a1248672c302253046ffa2a1309e1fd151b936db25c75f98de9fa480473bf2af569262150020a8e8d493940009a83727278d3c78988f0fc30096bbd034b9e88e18aa1b149ef42770bad877114b26a4ec972e8368bcc9e2f3561d7", 0xe3}], 0x5, 0x0, 0x0, 0x4000041}, 0x4040000)

16.54006822s ago: executing program 0 (id=5766):
socket(0x80000000000000a, 0x2, 0x81)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x404c080)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000000), 0x4)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000280)={{0x84, @remote, 0x4e20, 0x3, 'nq\x00', 0x24, 0x6, 0x33}, {@loopback, 0x4e20, 0x2000, 0xc24, 0x3, 0x8}}, 0x44)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="38000000180001000000000000000000020080000003c809001b0000060015000400000014001680100008800c00028008000180"], 0x38}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r3)
sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r6, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x74}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0xff07, 0x0)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x238, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, [0xffffff00, 0xff], [0x0, 0x0, 0xff000000], 'veth0_macvtap\x00', 'team0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3d, 0xfff1, 0x9, 0x7f, 'pptp\x00', 'syz1\x00', {0xffffffff}}}}, {{@ipv6={@private0, @remote, [0xffff00, 0xff, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0x0, 0xff000000], 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {0xff}, 0x32, 0xdf, 0x4, 0x24}, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc0, 0x10}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x368)

16.486293084s ago: executing program 4 (id=5767):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
syz_emit_ethernet(0xbe, &(0x7f0000000380)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x66, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x2, 0x0, {0x25, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x77, 0x0, [{0x0, 0xc, "e2ffb28c599d1681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x12, "f475699cd6412447d261b42abe8bd289"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x1, 0xa, "6580a5e97612fe86"}, {0x0, 0x10, "2400110003000000000000000004"}, {0x0, 0x9, "c8f46976e79e56"}]}, @cipso={0x86, 0x6, 0x3}]}}}}}}}, 0x0)

16.466647431s ago: executing program 2 (id=5768):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x2, 0x2, {@in6_addr=@remote, 0x105ba}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000160001000000000000000000aa90db15ba45ed57f57e9c804564820a00000085008b8011000000"], 0x1c}}, 0x0)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x42}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000029e46053972dd8966b7e000000040000"], 0x18}, 0x40e0)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000080)={0x2, 0x8, '\x00', 0x1, &(0x7f0000000040)=[0x0]})
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={<r3=>r0, 0xffffffff, 0x8, 0x1})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x88, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, ',*%-'}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, 'team0\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x834f}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xf9}]}, 0x88}}, 0x8000)
sendto$isdn(r3, &(0x7f00000001c0)={0x4, 0x9, "59a62489e020ebe03d16eb87b83b66e299bfb616ebdbb473d1bc0f8085dccb34a0665a37a69d1bb44c31ef814a418ab7d3865ef530a92e88cc4bcc142a61176e5ec4a4831d58520f7af8328617f89941e0e056bcfc2a255062e530a4b25d14f76fbc2dbbb5e3b2813f"}, 0x71, 0x4010, &(0x7f0000000240)={0x22, 0x73, 0x80, 0x8, 0xd5}, 0x6)

16.460567699s ago: executing program 1 (id=5769):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000400000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0)

16.383676678s ago: executing program 3 (id=5770):
unshare(0x22020600)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000894)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00'})
socket(0x10, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10)
getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000000280))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x1, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffff546}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x40000}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x0, 0x3b}}, [@migrate={0x9c, 0x11, [{@in6=@remote, @in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x33, 0x1, 0x0, 0x3502, 0xa, 0x8}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x1a8, 0x80}, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x2)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
close(0x4)
syz_init_net_socket$ax25(0x3, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

16.339938207s ago: executing program 4 (id=5771):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x3a7c, 0x4)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00"/180]}, 0x12c)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9e}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040800) (async)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9e}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040800)
ioctl$FS_IOC_RESVSP(r3, 0x40305829, 0x0)
getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000000)={@dev}, &(0x7f0000000040)=0xc) (async)
getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000000)={@dev}, &(0x7f0000000040)=0xc)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x35c, 0x0)

16.299449336s ago: executing program 0 (id=5772):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000007000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000)

16.211973614s ago: executing program 4 (id=5773):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff)
r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
r3 = getpid()
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
r5 = socket(0xa, 0x3, 0x3a)
sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x59, r4, 0x4, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x0, 0x8a, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x44, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip_vti0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x6000)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x1}, 0x50)

16.211070632s ago: executing program 1 (id=5774):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PORT_SELF={0x4}, @IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_MTU={0x8, 0x4, 0xff2}]}, 0x38}, 0x1, 0x0, 0xc3ff, 0x80}, 0x0)

16.20708215s ago: executing program 0 (id=5775):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a6ddf0000000000000000070000000900010073797a33000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a0500000000080005400000000d08000640ffffff400800034000000038"], 0xdc}}, 0x0)
socket$kcm(0xa, 0x2, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00010200"/19, @ANYRES32=0x0, @ANYBLOB="0200f7"], 0x1c}}, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet6_sctp(0xa, 0x5, 0x84)
bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f00000000c0)="510003000000", 0x6)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000190001002bbd7000fcdbdf251c2080070001fd000001000046fa0619255abfd29e9cd10298b77a61721943c949afc3fef80a51eb9e72fbae1cd6b426e7ca"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004)
setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x78}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x0, 0x0}, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r5)
sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100ffffffff000000000100000008000100030000"], 0x58}}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket(0x400000000010, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000000000a03000000000000000000000a"], 0x0, 0x3e}, 0x20)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x100, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xd0, 0x2, [@TCA_CGROUP_ACT={0xcc, 0x1, [@m_simple={0x88, 0x15, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x11, 0x3, 'NLBL_CIPSOv4\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0xb, 0x3, 'cgroup\x00'}]}, {0x32, 0x6, "2c49669416a3f15f08b505c9aef6fda931e9245a5054bab5ee2dc92f744a8c304b0000e83150045f0ce76c5df6f4"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0x40, 0x1, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x100}, 0x1, 0x0, 0x0, 0x84}, 0x40010)
socket$nl_netfilter(0x10, 0x3, 0xc)

16.170128627s ago: executing program 3 (id=5776):
unshare(0x22020600)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x37, 0x0, 0x9}]}, 0x10)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x1, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x20000450)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000380)='9\x00\x00\x00', 0x4}], 0x1)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x10b}}}]}, 0x3c}}, 0x4000010)
sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)
r7 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r7)
syz_emit_ethernet(0x56, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd3180020060120010000000000000000000000000000fe8000e1588fbc660f3a6817041f68682de910000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002000090780000050a000000c3000000050000"], 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2})
ioctl$TUNSETOFFLOAD(r8, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNSETLINK(r8, 0x400454cd, 0x339)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
r9 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f00000001c0)="7fde5fc0003210db788d61f79febb21c", 0x10)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0136030000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRESDEC=r9], 0x44}, 0x1, 0x0, 0x0, 0x20049848}, 0x20000044)

16.111951335s ago: executing program 1 (id=5777):
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, &(0x7f0000000080)='K+)[\x00', 0x480000, &(0x7f00000000c0)={@align=0x3, {0x4, 0x9, 0x2, 0x401}}, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x101})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000380)={@remote, @local, <r1=>0x0}, &(0x7f00000003c0)=0xc)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r3=>0x0}, 0x8)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000b00)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4)
r5 = accept4(r4, 0x0, 0x0, 0x80800)
sendmmsg$alg(r5, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="f703010010fff3be522ba800000000", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba12", 0x11}], 0x2, 0x0, 0x0, 0x2000847}], 0x1, 0x40800)
recvmmsg$unix(r5, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/192, 0xc0}], 0x1}}], 0x1, 0x40000000, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000003c0)={0x9, {{0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}}}, 0x88)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r3, 0x4)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000800))
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r9, 0x29, 0x4d, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000280)={0x1c, r6, 0x303, 0x0, 0xfffffffc, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
write$tun(r2, &(0x7f0000000800)=ANY=[], 0x141)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0xfffffffffffff38f)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYRES16=r10, @ANYRESHEX=r3, @ANYRESOCT, @ANYRES32=r2], 0x5c}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa, &(0x7f0000000480)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r11=>0x0, 0xbe, &(0x7f0000000500)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xbc, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10)
r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x82, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xb, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb9, 0x0, 0x0, 0x0, 0x401}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xb}, @call={0x85, 0x0, 0x0, 0x27}, @exit, @call={0x85, 0x0, 0x0, 0x8d}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @ldst={0x2, 0x2, 0x2, 0x0, 0x8, 0x20, 0xfffffffffffffffc}]}, &(0x7f0000000280)='syzkaller\x00', 0x20a, 0x86, &(0x7f00000002c0)=""/134, 0x41100, 0x15, '\x00', r1, @cgroup_skb=0x1, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x2, 0x2, 0xf, 0x1}, 0x10, r11, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)=[r12], &(0x7f0000000800), 0x10, 0x2}, 0x94)
syz_emit_ethernet(0x50, &(0x7f00000003c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, '\x00', 0x1a, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x1, '\x00', @ipv4={'\x00', '\xff\xff', @local}, [{0x22}]}}}}}}, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c00018006000600800a0000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

16.100798521s ago: executing program 0 (id=5778):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x2, 0x3e0, 0x1f8, 0x2f8, 0x1f8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vxcan1\x00', 'nr0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @broadcast}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg\x00', 'vcan0\x00'}, 0xc0, 0x100, 0x3f}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "dcbc4f0fcafe5fd600342efa7968d220b64d039e8a81d171eeb2e9630554"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430)

16.051677269s ago: executing program 0 (id=5779):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) (async)
r1 = accept4(r0, 0x0, 0x0, 0x0)
read$alg(r1, &(0x7f0000001400)=""/18, 0x12)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r5, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', <r6=>0x0})
sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x54, r4, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x54}}, 0x40081)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xe}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040080}, 0x0)

15.247346372s ago: executing program 3 (id=5780):
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, &(0x7f0000000000)=[{0x20, 0x0, 0x4, 0x8}, {0x20, 0x0, 0x0, 0x3e57}, {0x6}]}, 0xfffffffffffffe9a)
sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0xeb, 0x1, 'z'}, 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x5}, 0x8)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000580)={0x5, &(0x7f0000000280)=[{0x5, 0xf6, 0x9, 0x800007ff}, {0x9, 0x5, 0x6, 0x7}, {0x4, 0xfc, 0x2, 0x3}, {0x6, 0x2, 0x7, 0xd}, {0x31e, 0x6, 0x0, 0x8000}]}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000eb0000008500000010000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea4}, 0x94)
r5 = socket$rxrpc(0x21, 0x2, 0xa)
r6 = epoll_create(0x752)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100))
setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000002c0), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r7 = socket$alg(0x26, 0x5, 0x0)
r8 = socket$kcm(0x29, 0x7, 0x0)
sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000001900)=[{0x90, 0x84, 0x8, "5f64e91e55afe2619508201f93aeb0187afbb4c8bacd67416be703f53500a9e251a58bb2e065e6a0e3699670e8d5bb67abdf90d5dc23ac0f1c373935259fae80768c41dd852bd6aed918b0f5ffe56a79050c935888a8c8e3533b6aaf9e46fe4e93c8b699bb003c035b89c127776eddcb9ad6452cd2628bfa671c761e"}, {0xb0, 0x116, 0x6, "67eec5ce3569d71f5740f8e7755624129c566ec93e4d0b676cb4e928acec5ee4e6c6079e08bb566e5f834d6d8c1f8c7fbf5bafa9bafe0bd3810d5996b51edd1fa0563d0f3b9c4af3e4bc216f0d295f6b34e0f5fe26b1d58cb3e2e4b70f2bd544e86547b46ecb0761dab15718297d1ff1b62ee017991f7d24366d04a485771801d378dcb6affef5d574380a8a308bd26ac71089af162dc7533444837d5c032b"}, {0x40, 0x114, 0x8, "666e5eb73c4d6bad1cb4053933142a1741f9692ece6ab98a1dc18d97df19417c6c12e4d0789d619c514be7b16fc6e2"}, {0x58, 0x101, 0xcc2, "f906f9ecaea70aef5e59c7612d70d8f75f6e3b82676c9077bac57125a11cf16bf05560f38f103cbea270a5a2a37b79a1a468dc7e8fe7dd1903bd0711c9a903d9b61fb7"}], 0x1d8}, 0x8091)
bind$alg(r7, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4eaa00000000000091101900000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x66}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x4004010)
r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r9)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg2\x00', <r12=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r11, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="240003"], 0x10e0}}, 0x0)

1.051811576s ago: executing program 32 (id=5777):
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, &(0x7f0000000080)='K+)[\x00', 0x480000, &(0x7f00000000c0)={@align=0x3, {0x4, 0x9, 0x2, 0x401}}, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x101})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000380)={@remote, @local, <r1=>0x0}, &(0x7f00000003c0)=0xc)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r3=>0x0}, 0x8)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000b00)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4)
r5 = accept4(r4, 0x0, 0x0, 0x80800)
sendmmsg$alg(r5, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="f703010010fff3be522ba800000000", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba12", 0x11}], 0x2, 0x0, 0x0, 0x2000847}], 0x1, 0x40800)
recvmmsg$unix(r5, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/192, 0xc0}], 0x1}}], 0x1, 0x40000000, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000003c0)={0x9, {{0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}}}, 0x88)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r3, 0x4)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000800))
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r9, 0x29, 0x4d, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000280)={0x1c, r6, 0x303, 0x0, 0xfffffffc, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
write$tun(r2, &(0x7f0000000800)=ANY=[], 0x141)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0xfffffffffffff38f)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYRES16=r10, @ANYRESHEX=r3, @ANYRESOCT, @ANYRES32=r2], 0x5c}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa, &(0x7f0000000480)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r11=>0x0, 0xbe, &(0x7f0000000500)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xbc, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10)
r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x82, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xb, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb9, 0x0, 0x0, 0x0, 0x401}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xb}, @call={0x85, 0x0, 0x0, 0x27}, @exit, @call={0x85, 0x0, 0x0, 0x8d}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @ldst={0x2, 0x2, 0x2, 0x0, 0x8, 0x20, 0xfffffffffffffffc}]}, &(0x7f0000000280)='syzkaller\x00', 0x20a, 0x86, &(0x7f00000002c0)=""/134, 0x41100, 0x15, '\x00', r1, @cgroup_skb=0x1, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x2, 0x2, 0xf, 0x1}, 0x10, r11, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)=[r12], &(0x7f0000000800), 0x10, 0x2}, 0x94)
syz_emit_ethernet(0x50, &(0x7f00000003c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, '\x00', 0x1a, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x1, '\x00', @ipv4={'\x00', '\xff\xff', @local}, [{0x22}]}}}}}}, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c00018006000600800a0000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

1.033408237s ago: executing program 33 (id=5768):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x2, 0x2, {@in6_addr=@remote, 0x105ba}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000160001000000000000000000aa90db15ba45ed57f57e9c804564820a00000085008b8011000000"], 0x1c}}, 0x0)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x42}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000029e46053972dd8966b7e000000040000"], 0x18}, 0x40e0)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000080)={0x2, 0x8, '\x00', 0x1, &(0x7f0000000040)=[0x0]})
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={<r3=>r0, 0xffffffff, 0x8, 0x1})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x88, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, ',*%-'}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, 'team0\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x834f}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xf9}]}, 0x88}}, 0x8000)
sendto$isdn(r3, &(0x7f00000001c0)={0x4, 0x9, "59a62489e020ebe03d16eb87b83b66e299bfb616ebdbb473d1bc0f8085dccb34a0665a37a69d1bb44c31ef814a418ab7d3865ef530a92e88cc4bcc142a61176e5ec4a4831d58520f7af8328617f89941e0e056bcfc2a255062e530a4b25d14f76fbc2dbbb5e3b2813f"}, 0x71, 0x4010, &(0x7f0000000240)={0x22, 0x73, 0x80, 0x8, 0xd5}, 0x6)

974.118222ms ago: executing program 34 (id=5773):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff)
r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
r3 = getpid()
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
r5 = socket(0xa, 0x3, 0x3a)
sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x59, r4, 0x4, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x0, 0x8a, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x44, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip_vti0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x6000)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x1}, 0x50)

43.478761ms ago: executing program 35 (id=5779):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) (async)
r1 = accept4(r0, 0x0, 0x0, 0x0)
read$alg(r1, &(0x7f0000001400)=""/18, 0x12)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r5, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', <r6=>0x0})
sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x54, r4, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x54}}, 0x40081)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xe}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040080}, 0x0)

0s ago: executing program 36 (id=5780):
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, &(0x7f0000000000)=[{0x20, 0x0, 0x4, 0x8}, {0x20, 0x0, 0x0, 0x3e57}, {0x6}]}, 0xfffffffffffffe9a)
sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0xeb, 0x1, 'z'}, 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x5}, 0x8)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000580)={0x5, &(0x7f0000000280)=[{0x5, 0xf6, 0x9, 0x800007ff}, {0x9, 0x5, 0x6, 0x7}, {0x4, 0xfc, 0x2, 0x3}, {0x6, 0x2, 0x7, 0xd}, {0x31e, 0x6, 0x0, 0x8000}]}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000eb0000008500000010000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea4}, 0x94)
r5 = socket$rxrpc(0x21, 0x2, 0xa)
r6 = epoll_create(0x752)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100))
setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000002c0), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r7 = socket$alg(0x26, 0x5, 0x0)
r8 = socket$kcm(0x29, 0x7, 0x0)
sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000001900)=[{0x90, 0x84, 0x8, "5f64e91e55afe2619508201f93aeb0187afbb4c8bacd67416be703f53500a9e251a58bb2e065e6a0e3699670e8d5bb67abdf90d5dc23ac0f1c373935259fae80768c41dd852bd6aed918b0f5ffe56a79050c935888a8c8e3533b6aaf9e46fe4e93c8b699bb003c035b89c127776eddcb9ad6452cd2628bfa671c761e"}, {0xb0, 0x116, 0x6, "67eec5ce3569d71f5740f8e7755624129c566ec93e4d0b676cb4e928acec5ee4e6c6079e08bb566e5f834d6d8c1f8c7fbf5bafa9bafe0bd3810d5996b51edd1fa0563d0f3b9c4af3e4bc216f0d295f6b34e0f5fe26b1d58cb3e2e4b70f2bd544e86547b46ecb0761dab15718297d1ff1b62ee017991f7d24366d04a485771801d378dcb6affef5d574380a8a308bd26ac71089af162dc7533444837d5c032b"}, {0x40, 0x114, 0x8, "666e5eb73c4d6bad1cb4053933142a1741f9692ece6ab98a1dc18d97df19417c6c12e4d0789d619c514be7b16fc6e2"}, {0x58, 0x101, 0xcc2, "f906f9ecaea70aef5e59c7612d70d8f75f6e3b82676c9077bac57125a11cf16bf05560f38f103cbea270a5a2a37b79a1a468dc7e8fe7dd1903bd0711c9a903d9b61fb7"}], 0x1d8}, 0x8091)
bind$alg(r7, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4eaa00000000000091101900000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x66}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x4004010)
r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r9)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg2\x00', <r12=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r11, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="240003"], 0x10e0}}, 0x0)

kernel console output (not intermixed with test programs):

1486][T21935] netlink: 'syz.4.5176': attribute type 2 has an invalid length.
[  478.924839][T21942] vlan2: entered promiscuous mode
[  478.938948][T21942] bond0: entered promiscuous mode
[  478.945466][T21942] bond_slave_0: entered promiscuous mode
[  478.953706][T21942] bond_slave_1: entered promiscuous mode
[  478.982332][T21935] __nla_validate_parse: 4 callbacks suppressed
[  478.982352][T21935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5176'.
[  479.251572][T21935] nbd16: detected capacity change from 0 to 63
[  479.270828][ T5838] block nbd16: Receive control failed (result -104)
[  479.281651][ T5147] block nbd16: Receive control failed (result -32)
[  479.387987][T21955] xt_policy: output policy not valid in PREROUTING and INPUT
[  479.739266][T21943] Bluetooth: hci3: Opcode 0x0401 failed: -4
[  479.867304][T21977] xt_CT: You must specify a L4 protocol and not use inversions on it
[  479.876087][T21979] openvswitch: netlink: IP tunnel dst address not specified
[  480.027948][T21985] netlink: 'syz.2.5193': attribute type 1 has an invalid length.
[  480.043932][T21985] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5193'.
[  480.148506][T21994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5196'.
[  480.213456][T21997] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) !
[  480.513741][T22015] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5203'.
[  480.675857][T21999] gretap0: left allmulticast mode
[  481.010673][T22027] hsr0: entered promiscuous mode
[  481.010999][ T5838] Bluetooth: hci3: command 0x0401 tx timeout
[  481.030986][T22007] Bluetooth: hci3: Opcode 0x0401 failed: -110
[  481.043894][T22027] hsr0: left promiscuous mode
[  481.253591][T22042] netlink: 'syz.2.5213': attribute type 2 has an invalid length.
[  481.327764][T22046] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  481.474281][T22037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5213'.
[  481.517243][T22057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5220'.
[  481.571730][ T5838] Bluetooth: hci0: command 0x0401 tx timeout
[  481.572777][ T5147] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  481.623780][T22064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5224'.
[  481.635865][T22066] sch_tbf: burst 0 is lower than device tunl0 mtu (129) !
[  481.660867][T22037] nbd17: detected capacity change from 0 to 63
[  481.678580][ T5838] block nbd17: Receive control failed (result -104)
[  481.678580][ T5147] block nbd17: Receive control failed (result -32)
[  481.684950][T18400] block nbd17: Send control failed (result -32)
[  481.730219][T18400] block nbd17: Request send failed, requeueing
[  481.768884][T16957] block nbd17: Dead connection, failed to find a fallback
[  481.779456][T16957] block nbd17: shutting down sockets
[  481.784928][T16957] blk_print_req_error: 138 callbacks suppressed
[  481.784948][T16957] I/O error, dev nbd17, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  481.802179][T16957] buffer_io_error: 138 callbacks suppressed
[  481.802195][T16957] Buffer I/O error on dev nbd17, logical block 3, async page read
[  481.842173][T22077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5231'.
[  481.914429][T22079] netlink: 165 bytes leftover after parsing attributes in process `syz.4.5229'.
[  482.022014][T22087] syzkaller0: entered promiscuous mode
[  482.027672][T22087] syzkaller0: entered allmulticast mode
[  482.045196][T22087] tipc: Started in network mode
[  482.054247][T22087] tipc: Node identity 3a4c09a91af4, cluster identity 4711
[  482.066803][T22087] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  482.080699][T22084] netlink: 'syz.2.5232': attribute type 58 has an invalid length.
[  482.098503][T22086] tipc: Resetting bearer <eth:syzkaller0>
[  482.126413][T22086] tipc: Disabling bearer <eth:syzkaller0>
[  482.324918][T22109] netlink: 'syz.4.5240': attribute type 4 has an invalid length.
[  482.447977][T22116] tap0: tun_chr_ioctl cmd 1074025676
[  482.460921][T22116] tap0: owner set to 0
[  482.483004][T22116] ieee802154 phy0 wpan0: encryption failed: -22
[  482.625574][T22128] netlink: 'syz.4.5248': attribute type 4 has an invalid length.
[  482.689471][T22132] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5250'.
[  482.873450][T22149] netlink: 'syz.3.5254': attribute type 10 has an invalid length.
[  482.882634][T22149] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  483.043540][T22158] nbd1: detected capacity change from 63 to 65
[  483.054919][T18419] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  483.090922][ T5147] Bluetooth: hci3: command 0x0401 tx timeout
[  483.094965][T18419] Buffer I/O error on dev nbd1, logical block 0, async page read
[  483.136498][T18419] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  483.158599][T22166] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP)
[  483.180811][T18419] Buffer I/O error on dev nbd1, logical block 0, async page read
[  483.209403][T18419] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  483.238329][T18419] Buffer I/O error on dev nbd1, logical block 0, async page read
[  483.263252][T18419] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  483.288787][T22174] netlink: 'syz.2.5265': attribute type 58 has an invalid length.
[  483.301041][T18419] Buffer I/O error on dev nbd1, logical block 0, async page read
[  483.320409][T18419] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  483.344136][T18419] Buffer I/O error on dev nbd1, logical block 0, async page read
[  483.376476][T18419] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  483.387567][T22180] xt_CT: You must specify a L4 protocol and not use inversions on it
[  483.426936][T18419] Buffer I/O error on dev nbd1, logical block 0, async page read
[  483.452881][T18419] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  483.474191][T18419] Buffer I/O error on dev nbd1, logical block 0, async page read
[  483.492060][T22188] FAULT_INJECTION: forcing a failure.
[  483.492060][T22188] name failslab, interval 1, probability 0, space 0, times 0
[  483.505556][T22188] CPU: 0 UID: 0 PID: 22188 Comm: syz.2.5269 Not tainted syzkaller #0 PREEMPT(full) 
[  483.505583][T22188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  483.505593][T22188] Call Trace:
[  483.505602][T22188]  <TASK>
[  483.505609][T22188]  dump_stack_lvl+0xe8/0x150
[  483.505639][T22188]  should_fail_ex+0x412/0x560
[  483.505666][T22188]  should_failslab+0xa8/0x100
[  483.505686][T22188]  ? sctp_get_port_local+0x6f2/0x1730
[  483.505786][T22188]  kmem_cache_alloc_noprof+0x87/0x650
[  483.505811][T22188]  sctp_get_port_local+0x6f2/0x1730
[  483.505837][T22188]  ? __pfx_sctp_get_port_local+0x10/0x10
[  483.505856][T22188]  ? sctp_bind_addr_match+0x28b/0x2b0
[  483.505907][T22188]  sctp_do_bind+0x4f1/0x9d0
[  483.505932][T22188]  sctp_connect_new_asoc+0x270/0x6b0
[  483.505951][T22188]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  483.505972][T22188]  ? __local_bh_enable_ip+0xd0/0x130
[  483.505992][T22188]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  483.506014][T22188]  ? security_sctp_bind_connect+0x7e/0x2c0
[  483.506037][T22188]  sctp_sendmsg+0x1528/0x2c10
[  483.506073][T22188]  ? __pfx_sctp_sendmsg+0x10/0x10
[  483.506106][T22188]  ? aa_sk_perm+0x6d5/0x900
[  483.506133][T22188]  ? __pfx_aa_sk_perm+0x10/0x10
[  483.506157][T22188]  ? sock_rps_record_flow+0x19/0x350
[  483.506216][T22188]  ? inet_sendmsg+0x2f4/0x370
[  483.506237][T22188]  ____sys_sendmsg+0x80a/0x9f0
[  483.506264][T22188]  ? __pfx_____sys_sendmsg+0x10/0x10
[  483.506291][T22188]  ? import_iovec+0x73/0xa0
[  483.506311][T22188]  ___sys_sendmsg+0x2a5/0x360
[  483.506335][T22188]  ? __pfx____sys_sendmsg+0x10/0x10
[  483.506382][T22188]  ? __fget_files+0x2a/0x420
[  483.506405][T22188]  ? __fget_files+0x3a0/0x420
[  483.506435][T22188]  __x64_sys_sendmsg+0x1bd/0x2a0
[  483.506457][T22188]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  483.506484][T22188]  ? __pfx_ksys_write+0x10/0x10
[  483.506512][T22188]  do_syscall_64+0x14d/0xf80
[  483.506531][T22188]  ? trace_irq_disable+0x3b/0x150
[  483.506552][T22188]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.506569][T22188]  ? clear_bhb_loop+0x40/0x90
[  483.506588][T22188]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.506605][T22188] RIP: 0033:0x7f0dffd9c799
[  483.506621][T22188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  483.506635][T22188] RSP: 002b:00007f0e00c2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  483.506653][T22188] RAX: ffffffffffffffda RBX: 00007f0e00015fa0 RCX: 00007f0dffd9c799
[  483.506665][T22188] RDX: 0000000024000052 RSI: 00002000000000c0 RDI: 0000000000000003
[  483.506676][T22188] RBP: 00007f0e00c2c090 R08: 0000000000000000 R09: 0000000000000000
[  483.506686][T22188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  483.506695][T22188] R13: 00007f0e00016038 R14: 00007f0e00015fa0 R15: 00007ffe469450d8
[  483.506721][T22188]  </TASK>
[  483.507593][T18419] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  483.741061][T18419] Buffer I/O error on dev nbd1, logical block 0, async page read
[  483.834378][T18419] ldm_validate_partition_table(): Disk read failed.
[  483.865654][T18419] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  483.878502][T18419] Buffer I/O error on dev nbd1, logical block 0, async page read
[  483.886813][T18419] Dev nbd1: unable to read RDB block 0
[  483.893069][T18419]  nbd1: unable to read partition table
[  483.901837][T18419] ldm_validate_partition_table(): Disk read failed.
[  483.908855][T18419] Dev nbd1: unable to read RDB block 0
[  483.918187][T18419]  nbd1: unable to read partition table
[  484.013924][T22204] syzkaller0: entered promiscuous mode
[  484.019439][T22204] syzkaller0: entered allmulticast mode
[  484.041841][T22204] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  484.148608][T22202] tipc: Resetting bearer <eth:syzkaller0>
[  484.222195][T22202] tipc: Disabling bearer <eth:syzkaller0>
[  484.274461][T22231] xt_CT: You must specify a L4 protocol and not use inversions on it
[  484.443273][T22245] netlink: 'syz.0.5287': attribute type 4 has an invalid length.
[  485.027859][T22272] __nla_validate_parse: 2 callbacks suppressed
[  485.027880][T22272] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5299'.
[  485.088776][T22277] xt_policy: output policy not valid in PREROUTING and INPUT
[  485.521834][T22300] xt_CT: You must specify a L4 protocol and not use inversions on it
[  485.531810][T22303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5312'.
[  485.541050][T22303] netlink: 'syz.4.5312': attribute type 21 has an invalid length.
[  485.559111][T22303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5312'.
[  485.578792][T22303] netlink: 'syz.4.5312': attribute type 21 has an invalid length.
[  485.717652][T22308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5314'.
[  485.753317][T22310] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5315'.
[  485.754427][T22308] netlink: 'syz.1.5314': attribute type 2 has an invalid length.
[  486.021001][T22316] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5318'.
[  486.085738][T22318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5319'.
[  486.273419][T22325] vlan3: entered allmulticast mode
[  486.324824][T22327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5323'.
[  486.510995][T22340] netlink: 'syz.1.5327': attribute type 4 has an invalid length.
[  486.759003][T22356] netlink: 'syz.2.5334': attribute type 4 has an invalid length.
[  486.801324][T22356] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5334'.
[  486.842042][T22357] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5334'.
[  486.895477][T22367] netlink: 'syz.4.5336': attribute type 2 has an invalid length.
[  486.939081][T22372] x_tables: duplicate underflow at hook 1
[  487.247824][T22356] .`: renamed from bond0 (while UP)
[  487.611418][T22362] nbd18: detected capacity change from 0 to 63
[  487.633557][ T5147] block nbd18: Receive control failed (result -32)
[  487.633767][ T5838] block nbd18: Receive control failed (result -32)
[  487.650211][T22199] block nbd18: Send control failed (result -32)
[  487.670834][T22199] block nbd18: Request send failed, requeueing
[  487.721044][T22199] block nbd18: Dead connection, failed to find a fallback
[  487.754927][T16957] blk_print_req_error: 28 callbacks suppressed
[  487.754946][T16957] I/O error, dev nbd18, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  487.771344][T16957] buffer_io_error: 28 callbacks suppressed
[  487.771361][T16957] Buffer I/O error on dev nbd18, logical block 0, async page read
[  487.785095][T22199] block nbd18: shutting down sockets
[  487.790400][T22199] I/O error, dev nbd18, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  487.814443][T22199] Buffer I/O error on dev nbd18, logical block 1, async page read
[  487.824860][T22199] I/O error, dev nbd18, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  487.834688][T22199] Buffer I/O error on dev nbd18, logical block 2, async page read
[  487.842558][T22404] xt_policy: output policy not valid in PREROUTING and INPUT
[  487.842681][T22199] I/O error, dev nbd18, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  487.860481][T22199] Buffer I/O error on dev nbd18, logical block 3, async page read
[  487.868488][T22199] I/O error, dev nbd18, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  487.879047][T22199] Buffer I/O error on dev nbd18, logical block 0, async page read
[  487.891203][T22199] I/O error, dev nbd18, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  487.901376][T22199] Buffer I/O error on dev nbd18, logical block 1, async page read
[  487.910222][T22199] I/O error, dev nbd18, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  487.922446][T22199] Buffer I/O error on dev nbd18, logical block 2, async page read
[  487.930350][T22199] I/O error, dev nbd18, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  487.940666][T22199] Buffer I/O error on dev nbd18, logical block 3, async page read
[  487.948696][T22199] I/O error, dev nbd18, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  487.958414][T22199] Buffer I/O error on dev nbd18, logical block 0, async page read
[  487.966916][T22199] I/O error, dev nbd18, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  488.004368][T22199] Buffer I/O error on dev nbd18, logical block 1, async page read
[  488.036226][T22199] ldm_validate_partition_table(): Disk read failed.
[  488.060012][T22199] Dev nbd18: unable to read RDB block 0
[  488.089159][T22199]  nbd18: unable to read partition table
[  488.132105][T22199] ldm_validate_partition_table(): Disk read failed.
[  488.153703][T22199] Dev nbd18: unable to read RDB block 0
[  488.169012][T22199]  nbd18: unable to read partition table
[  488.250482][T22416] netlink: 'syz.3.5353': attribute type 58 has an invalid length.
[  488.336009][T22416] 0ªX¹¦À: left allmulticast mode
[  488.513304][T22436] netlink: 'syz.4.5360': attribute type 3 has an invalid length.
[  488.558630][T22436] netlink: 'syz.4.5360': attribute type 2 has an invalid length.
[  488.567535][T22440] netlink: 'syz.2.5361': attribute type 5 has an invalid length.
[  488.569443][T22436] siw: device registration error -23
[  488.599925][T22440] netlink: 'syz.2.5361': attribute type 3 has an invalid length.
[  488.608733][T22441] FAULT_INJECTION: forcing a failure.
[  488.608733][T22441] name failslab, interval 1, probability 0, space 0, times 0
[  488.631266][T22441] CPU: 0 UID: 0 PID: 22441 Comm: syz.0.5362 Not tainted syzkaller #0 PREEMPT(full) 
[  488.631293][T22441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  488.631306][T22441] Call Trace:
[  488.631314][T22441]  <TASK>
[  488.631322][T22441]  dump_stack_lvl+0xe8/0x150
[  488.631356][T22441]  should_fail_ex+0x412/0x560
[  488.631393][T22441]  should_failslab+0xa8/0x100
[  488.631419][T22441]  __kmalloc_cache_noprof+0x88/0x660
[  488.631440][T22441]  ? sctp_v6_to_sk_saddr+0x100/0x1c0
[  488.631533][T22441]  ? sctp_association_new+0x89/0x25e0
[  488.631581][T22441]  ? __asan_memcpy+0x40/0x70
[  488.631602][T22441]  sctp_association_new+0x89/0x25e0
[  488.631622][T22441]  ? sctp_do_bind+0x661/0x9d0
[  488.631646][T22441]  ? __ipv6_addr_type+0x247/0x2f0
[  488.631673][T22441]  sctp_connect_new_asoc+0x2e4/0x6b0
[  488.631695][T22441]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  488.631721][T22441]  ? __local_bh_enable_ip+0xd0/0x130
[  488.631748][T22441]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  488.631771][T22441]  ? security_sctp_bind_connect+0x7e/0x2c0
[  488.631799][T22441]  sctp_sendmsg+0x1528/0x2c10
[  488.631840][T22441]  ? __pfx_sctp_sendmsg+0x10/0x10
[  488.631872][T22441]  ? aa_sk_perm+0x6d5/0x900
[  488.631906][T22441]  ? __pfx_aa_sk_perm+0x10/0x10
[  488.631935][T22441]  ? sock_rps_record_flow+0x19/0x350
[  488.631960][T22441]  ? inet_sendmsg+0x2f4/0x370
[  488.631985][T22441]  ____sys_sendmsg+0x80a/0x9f0
[  488.632019][T22441]  ? __pfx_____sys_sendmsg+0x10/0x10
[  488.632049][T22441]  ? import_iovec+0x73/0xa0
[  488.632074][T22441]  ___sys_sendmsg+0x2a5/0x360
[  488.632108][T22441]  ? __pfx____sys_sendmsg+0x10/0x10
[  488.632159][T22441]  ? __fget_files+0x2a/0x420
[  488.632184][T22441]  ? __fget_files+0x3a0/0x420
[  488.632230][T22441]  __x64_sys_sendmsg+0x1bd/0x2a0
[  488.632256][T22441]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  488.632289][T22441]  ? __pfx_ksys_write+0x10/0x10
[  488.632322][T22441]  do_syscall_64+0x14d/0xf80
[  488.632343][T22441]  ? trace_irq_disable+0x3b/0x150
[  488.632370][T22441]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  488.632390][T22441]  ? clear_bhb_loop+0x40/0x90
[  488.632414][T22441]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  488.632433][T22441] RIP: 0033:0x7fcfc619c799
[  488.632452][T22441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  488.632468][T22441] RSP: 002b:00007fcfc70ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  488.632488][T22441] RAX: ffffffffffffffda RBX: 00007fcfc6415fa0 RCX: 00007fcfc619c799
[  488.632501][T22441] RDX: 0000000024000052 RSI: 00002000000000c0 RDI: 0000000000000003
[  488.632514][T22441] RBP: 00007fcfc70ea090 R08: 0000000000000000 R09: 0000000000000000
[  488.632526][T22441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  488.632537][T22441] R13: 00007fcfc6416038 R14: 00007fcfc6415fa0 R15: 00007fff5358a338
[  488.632568][T22441]  </TASK>
[  489.174156][T22452] nbd0: detected capacity change from 63 to 65
[  489.182321][T22199] ldm_validate_partition_table(): Disk read failed.
[  489.189117][T22199] Dev nbd0: unable to read RDB block 0
[  489.194899][T22199]  nbd0: unable to read partition table
[  489.203543][T22199] ldm_validate_partition_table(): Disk read failed.
[  489.210309][T22199] Dev nbd0: unable to read RDB block 0
[  489.216313][T22199]  nbd0: unable to read partition table
[  489.273306][    T9] IPVS: starting estimator thread 0...
[  489.284701][T22457] syzkaller0: entered promiscuous mode
[  489.290660][T22457] syzkaller0: entered allmulticast mode
[  489.370948][T22460] IPVS: using max 34 ests per chain, 81600 per kthread
[  489.507196][T22467] netlink: 'syz.1.5373': attribute type 1 has an invalid length.
[  489.782874][T22457] 0: reclassify loop, rule prio 0, protocol 800
[  489.822763][T22443] Bluetooth: hci3: Opcode 0x0401 failed: -4
[  490.047240][T22487] __nla_validate_parse: 16 callbacks suppressed
[  490.047262][T22487] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5379'.
[  490.183318][T22496] netlink: 'syz.1.5382': attribute type 10 has an invalid length.
[  490.204882][T22496] team0: Port device dummy0 added
[  490.231814][T22496] team0: Port device dummy0 removed
[  490.240146][T22496] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  490.388792][T22509] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5386'.
[  490.398450][T22509] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5386'.
[  490.426275][T22505] 8021q: adding VLAN 0 to HW filter on device bond4
[  490.449498][T22505] bond4: (slave veth3): Enslaving as an active interface with a down link
[  490.461409][T22505] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5386'.
[  490.471857][T22505] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5386'.
[  490.713243][T22525] xt_CT: You must specify a L4 protocol and not use inversions on it
[  490.826763][T22532] sch_tbf: burst 0 is lower than device tunl0 mtu (129) !
[  491.092022][ T5147] Bluetooth: hci3: command 0x0401 tx timeout
[  491.098245][T22508] Bluetooth: hci3: Opcode 0x0401 failed: -110
[  491.123421][T22553] FAULT_INJECTION: forcing a failure.
[  491.123421][T22553] name failslab, interval 1, probability 0, space 0, times 0
[  491.186822][T22553] CPU: 0 UID: 0 PID: 22553 Comm: syz.4.5403 Not tainted syzkaller #0 PREEMPT(full) 
[  491.186848][T22553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  491.186861][T22553] Call Trace:
[  491.186868][T22553]  <TASK>
[  491.186877][T22553]  dump_stack_lvl+0xe8/0x150
[  491.186908][T22553]  should_fail_ex+0x412/0x560
[  491.186939][T22553]  should_failslab+0xa8/0x100
[  491.186965][T22553]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  491.186985][T22553]  ? __raw_spin_lock_init+0x45/0x100
[  491.187006][T22553]  ? __alloc_skb+0x1d0/0x7d0
[  491.187043][T22553]  __alloc_skb+0x1d0/0x7d0
[  491.187069][T22553]  tipc_msg_build+0x160/0xd60
[  491.187093][T22553]  ? tipc_node_find+0xb3/0x490
[  491.187124][T22553]  ? tipc_node_find+0x3bd/0x490
[  491.187151][T22553]  ? tipc_node_find+0xb3/0x490
[  491.187178][T22553]  ? __pfx_tipc_msg_build+0x10/0x10
[  491.187213][T22553]  __tipc_sendmsg+0x1902/0x2bf0
[  491.187251][T22553]  ? __pfx___tipc_sendmsg+0x10/0x10
[  491.187271][T22553]  ? aa_label_sk_perm+0x532/0x6e0
[  491.187302][T22553]  ? pfn_valid+0xba/0x480
[  491.187324][T22553]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  491.187362][T22553]  ? __lock_acquire+0x6b5/0x2cf0
[  491.187416][T22553]  ? __pfx_woken_wake_function+0x10/0x10
[  491.187439][T22553]  ? tipc_sendmsg+0x47/0x70
[  491.187460][T22553]  ? __local_bh_enable_ip+0xd0/0x130
[  491.187489][T22553]  tipc_sendmsg+0x55/0x70
[  491.187509][T22553]  ____sys_sendmsg+0x972/0x9f0
[  491.187542][T22553]  ? __pfx_____sys_sendmsg+0x10/0x10
[  491.187574][T22553]  ? import_iovec+0x73/0xa0
[  491.187598][T22553]  ___sys_sendmsg+0x2a5/0x360
[  491.187624][T22553]  ? __pfx____sys_sendmsg+0x10/0x10
[  491.187669][T22553]  ? lockdep_hardirqs_on+0x7a/0x110
[  491.187717][T22553]  __sys_sendmmsg+0x27c/0x4e0
[  491.187747][T22553]  ? __pfx___sys_sendmmsg+0x10/0x10
[  491.187768][T22553]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  491.187814][T22553]  ? ksys_write+0x242/0x270
[  491.187838][T22553]  ? __pfx_ksys_write+0x10/0x10
[  491.187870][T22553]  __x64_sys_sendmmsg+0xa0/0xc0
[  491.187897][T22553]  do_syscall_64+0x14d/0xf80
[  491.187918][T22553]  ? trace_irq_disable+0x3b/0x150
[  491.187944][T22553]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  491.187964][T22553]  ? clear_bhb_loop+0x40/0x90
[  491.187987][T22553]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  491.188006][T22553] RIP: 0033:0x7f757ab9c799
[  491.188031][T22553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  491.188048][T22553] RSP: 002b:00007f757ba09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  491.188069][T22553] RAX: ffffffffffffffda RBX: 00007f757ae15fa0 RCX: 00007f757ab9c799
[  491.188081][T22553] RDX: 000000000400006d RSI: 00002000000029c0 RDI: 0000000000000003
[  491.188093][T22553] RBP: 00007f757ba09090 R08: 0000000000000000 R09: 0000000000000000
[  491.188105][T22553] R10: 0000000020000004 R11: 0000000000000246 R12: 0000000000000002
[  491.188117][T22553] R13: 00007f757ae16038 R14: 00007f757ae15fa0 R15: 00007ffd76245c08
[  491.188148][T22553]  </TASK>
[  491.537471][T22555] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5404'.
[  491.596397][T22557] validate_nla: 3 callbacks suppressed
[  491.596415][T22557] netlink: 'syz.3.5405': attribute type 2 has an invalid length.
[  491.610690][T22557] netlink: 'syz.3.5405': attribute type 3 has an invalid length.
[  491.680301][T22571] xt_TCPMSS: Only works on TCP SYN packets
[  491.691648][T22572] netlink: 276 bytes leftover after parsing attributes in process `syz.3.5412'.
[  491.733366][ T5147] Bluetooth: hci2: command 0x0405 tx timeout
[  491.773535][T22578] nbd2: detected capacity change from 127 to 65
[  491.780224][T22572] netlink: 276 bytes leftover after parsing attributes in process `syz.3.5412'.
[  491.781777][T22199] ldm_validate_partition_table(): Disk read failed.
[  491.796248][T22199] Dev nbd2: unable to read RDB block 0
[  491.802799][T22199]  nbd2: unable to read partition table
[  491.815257][T22199] ldm_validate_partition_table(): Disk read failed.
[  491.833936][T22199] Dev nbd2: unable to read RDB block 0
[  491.841050][T22572] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5412'.
[  491.841883][T22199]  nbd2: unable to read partition table
[  491.968942][T22593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5417'.
[  492.023290][T22593] syzkaller0: entered promiscuous mode
[  492.028831][T22593] syzkaller0: entered allmulticast mode
[  492.720549][T22587] Bluetooth: hci3: Opcode 0x0401 failed: -4
[  493.171220][ T5147] Bluetooth: hci3: command 0x0401 tx timeout
[  493.765614][T22620] vlan4: entered allmulticast mode
[  493.878788][T22636] hsr0: entered promiscuous mode
[  493.917272][T22636] hsr0: left promiscuous mode
[  493.983920][    T9] IPVS: starting estimator thread 0...
[  493.995898][T22644] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  494.070854][T22641] IPVS: using max 30 ests per chain, 72000 per kthread
[  494.999175][T22661] Bluetooth: hci3: Opcode 0x0401 failed: -4
[  495.250830][ T5147] Bluetooth: hci3: command 0x0401 tx timeout
[  495.722140][T22612] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  495.901000][T22667] vcan0: tx address claim with dlc 0
[  495.953289][T22674] x_tables: ip_tables: osf match: only valid for protocol 6
[  495.966979][T22672] sctp: [Deprecated]: syz.4.5434 (pid 22672) Use of int in maxseg socket option.
[  495.966979][T22672] Use struct sctp_assoc_value instead
[  495.986954][T22674] __nla_validate_parse: 1 callbacks suppressed
[  495.986974][T22674] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5438'.
[  496.001154][T22677] netlink: 'syz.3.5440': attribute type 4 has an invalid length.
[  496.002557][T22674] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5438'.
[  496.134082][T22680] syzkaller0: entered promiscuous mode
[  496.139590][T22680] syzkaller0: entered allmulticast mode
[  496.181164][T22680] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  496.214437][T22679] tipc: Resetting bearer <eth:syzkaller0>
[  496.279166][T22679] tipc: Disabling bearer <eth:syzkaller0>
[  496.301265][T22691] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5443'.
[  496.353720][T22696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5444'.
[  496.374644][T22696] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5444'.
[  496.436296][T22702] vlan3: entered allmulticast mode
[  496.522588][T22710] netlink: 'syz.3.5450': attribute type 58 has an invalid length.
[  496.845245][T22716] netlink: 'syz.2.5452': attribute type 1 has an invalid length.
[  496.853286][T22716] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5452'.
[  497.089573][T22723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5455'.
[  497.204337][T22698] Bluetooth: hci3: Opcode 0x0401 failed: -4
[  497.269904][T22731] FAULT_INJECTION: forcing a failure.
[  497.269904][T22731] name failslab, interval 1, probability 0, space 0, times 0
[  497.306526][T22731] CPU: 0 UID: 0 PID: 22731 Comm: syz.0.5458 Not tainted syzkaller #0 PREEMPT(full) 
[  497.306552][T22731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  497.306562][T22731] Call Trace:
[  497.306570][T22731]  <TASK>
[  497.306578][T22731]  dump_stack_lvl+0xe8/0x150
[  497.306608][T22731]  should_fail_ex+0x412/0x560
[  497.306639][T22731]  should_failslab+0xa8/0x100
[  497.306665][T22731]  __kmalloc_cache_noprof+0x88/0x660
[  497.306687][T22731]  ? sctp_add_bind_addr+0x8c/0x370
[  497.306715][T22731]  sctp_add_bind_addr+0x8c/0x370
[  497.306743][T22731]  sctp_copy_local_addr_list+0x314/0x4f0
[  497.306846][T22731]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[  497.306870][T22731]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  497.306895][T22731]  ? sctp_v6_is_any+0x64/0x80
[  497.306920][T22731]  ? sctp_copy_one_addr+0x93/0x360
[  497.306948][T22731]  sctp_bind_addr_copy+0xb3/0x3c0
[  497.306974][T22731]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  497.306998][T22731]  sctp_connect_new_asoc+0x2ff/0x6b0
[  497.307019][T22731]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  497.307046][T22731]  ? __local_bh_enable_ip+0xd0/0x130
[  497.307068][T22731]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  497.307097][T22731]  ? security_sctp_bind_connect+0x7e/0x2c0
[  497.307123][T22731]  sctp_sendmsg+0x1528/0x2c10
[  497.307177][T22731]  ? __pfx_sctp_sendmsg+0x10/0x10
[  497.307211][T22731]  ? aa_sk_perm+0x6d5/0x900
[  497.307246][T22731]  ? __pfx_aa_sk_perm+0x10/0x10
[  497.307275][T22731]  ? sock_rps_record_flow+0x19/0x350
[  497.307308][T22731]  ? inet_sendmsg+0x2f4/0x370
[  497.307335][T22731]  ____sys_sendmsg+0x80a/0x9f0
[  497.307368][T22731]  ? __pfx_____sys_sendmsg+0x10/0x10
[  497.307402][T22731]  ? import_iovec+0x73/0xa0
[  497.307428][T22731]  ___sys_sendmsg+0x2a5/0x360
[  497.307459][T22731]  ? __pfx____sys_sendmsg+0x10/0x10
[  497.307517][T22731]  ? __fget_files+0x2a/0x420
[  497.307542][T22731]  ? __fget_files+0x3a0/0x420
[  497.307579][T22731]  __x64_sys_sendmsg+0x1bd/0x2a0
[  497.307606][T22731]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  497.307639][T22731]  ? __pfx_ksys_write+0x10/0x10
[  497.307673][T22731]  do_syscall_64+0x14d/0xf80
[  497.307695][T22731]  ? trace_irq_disable+0x3b/0x150
[  497.307722][T22731]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  497.307741][T22731]  ? clear_bhb_loop+0x40/0x90
[  497.307763][T22731]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  497.307780][T22731] RIP: 0033:0x7fcfc619c799
[  497.307799][T22731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  497.307814][T22731] RSP: 002b:00007fcfc70ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  497.307833][T22731] RAX: ffffffffffffffda RBX: 00007fcfc6415fa0 RCX: 00007fcfc619c799
[  497.307845][T22731] RDX: 0000000024000052 RSI: 00002000000000c0 RDI: 0000000000000003
[  497.307857][T22731] RBP: 00007fcfc70ea090 R08: 0000000000000000 R09: 0000000000000000
[  497.307868][T22731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  497.307879][T22731] R13: 00007fcfc6416038 R14: 00007fcfc6415fa0 R15: 00007fff5358a338
[  497.307907][T22731]  </TASK>
[  497.621351][ T5147] Bluetooth: hci3: command 0x0401 tx timeout
[  497.675266][T22737] 8021q: adding VLAN 0 to HW filter on device ipvlan5
[  497.693927][T22739] FAULT_INJECTION: forcing a failure.
[  497.693927][T22739] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  497.707309][T22739] CPU: 1 UID: 0 PID: 22739 Comm: syz.0.5461 Not tainted syzkaller #0 PREEMPT(full) 
[  497.707336][T22739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  497.707348][T22739] Call Trace:
[  497.707356][T22739]  <TASK>
[  497.707364][T22739]  dump_stack_lvl+0xe8/0x150
[  497.707396][T22739]  should_fail_ex+0x412/0x560
[  497.707429][T22739]  _copy_from_iter+0x1d3/0x1670
[  497.707546][T22739]  ? rcu_is_watching+0x15/0xb0
[  497.707574][T22739]  ? trace_kmem_cache_alloc+0x29/0xf0
[  497.707593][T22739]  ? __build_skb+0x62/0x440
[  497.707617][T22739]  ? __build_skb+0x62/0x440
[  497.707637][T22739]  ? __pfx__copy_from_iter+0x10/0x10
[  497.707668][T22739]  ? __build_skb+0x2a2/0x440
[  497.707687][T22739]  ? __kvmalloc_node_noprof+0x393/0x8a0
[  497.707712][T22739]  ? netlink_sendmsg+0x650/0xb40
[  497.707731][T22739]  ? skb_put+0x11b/0x210
[  497.707755][T22739]  netlink_sendmsg+0x6c0/0xb40
[  497.707784][T22739]  ? __pfx_netlink_sendmsg+0x10/0x10
[  497.707815][T22739]  ? aa_sock_msg_perm+0xf1/0x1b0
[  497.707844][T22739]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  497.707869][T22739]  ____sys_sendmsg+0x972/0x9f0
[  497.707901][T22739]  ? __pfx_____sys_sendmsg+0x10/0x10
[  497.707933][T22739]  ? import_iovec+0x73/0xa0
[  497.707958][T22739]  ___sys_sendmsg+0x2a5/0x360
[  497.707987][T22739]  ? __pfx____sys_sendmsg+0x10/0x10
[  497.708041][T22739]  ? __fget_files+0x2a/0x420
[  497.708067][T22739]  ? __fget_files+0x3a0/0x420
[  497.708101][T22739]  __x64_sys_sendmsg+0x1bd/0x2a0
[  497.708127][T22739]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  497.708159][T22739]  ? __pfx_ksys_write+0x10/0x10
[  497.708192][T22739]  do_syscall_64+0x14d/0xf80
[  497.708214][T22739]  ? trace_irq_disable+0x3b/0x150
[  497.708240][T22739]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  497.708260][T22739]  ? clear_bhb_loop+0x40/0x90
[  497.708283][T22739]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  497.708303][T22739] RIP: 0033:0x7fcfc619c799
[  497.708321][T22739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  497.708336][T22739] RSP: 002b:00007fcfc70ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  497.708357][T22739] RAX: ffffffffffffffda RBX: 00007fcfc6415fa0 RCX: 00007fcfc619c799
[  497.708371][T22739] RDX: 0000000000004000 RSI: 00002000000002c0 RDI: 0000000000000003
[  497.708384][T22739] RBP: 00007fcfc70ea090 R08: 0000000000000000 R09: 0000000000000000
[  497.708396][T22739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  497.708408][T22739] R13: 00007fcfc6416038 R14: 00007fcfc6415fa0 R15: 00007fff5358a338
[  497.708438][T22739]  </TASK>
[  498.205003][T22755] netlink: 'syz.0.5469': attribute type 4 has an invalid length.
[  498.243398][T22758] netlink: 'syz.0.5470': attribute type 10 has an invalid length.
[  498.263918][T22758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5470'.
[  498.388084][T22761] gre0 speed is unknown, defaulting to 1000
[  498.535935][T22761] wg1 speed is unknown, defaulting to 1000
[  498.543553][T22761] lo speed is unknown, defaulting to 1000
[  499.011369][T22753] Bluetooth: hci3: Opcode 0x0401 failed: -4
[  499.402888][T22701] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  499.582296][T22769] xt_CT: You must specify a L4 protocol and not use inversions on it
[  499.626628][T22771] netlink: 'syz.2.5473': attribute type 1 has an invalid length.
[  499.654817][ T5147] Bluetooth: hci3: command 0x0401 tx timeout
[  499.690927][T22771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5473'.
[  499.712591][T22772] netlink: 'syz.2.5473': attribute type 1 has an invalid length.
[  499.758325][T22772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5473'.
[  500.011740][T22795] smc: net device wlan0 applied user defined pnetid SYZ0
[  500.024699][T22800] xt_TCPMSS: Only works on TCP SYN packets
[  500.051910][T22795] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0
[  500.415660][T22804] bond6: Invalid ad_actor_system MAC address.
[  500.445890][T22804] bond6: option ad_actor_system: invalid value (7)
[  501.336297][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  501.347832][T22804] bond6 (unregistering): Released all slaves
[  501.493598][T22825] netlink: 'syz.3.5489': attribute type 10 has an invalid length.
[  501.616414][T22837] FAULT_INJECTION: forcing a failure.
[  501.616414][T22837] name failslab, interval 1, probability 0, space 0, times 0
[  501.640322][T22837] CPU: 1 UID: 0 PID: 22837 Comm: syz.0.5494 Not tainted syzkaller #0 PREEMPT(full) 
[  501.640349][T22837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  501.640361][T22837] Call Trace:
[  501.640368][T22837]  <TASK>
[  501.640376][T22837]  dump_stack_lvl+0xe8/0x150
[  501.640418][T22837]  should_fail_ex+0x412/0x560
[  501.640451][T22837]  should_failslab+0xa8/0x100
[  501.640478][T22837]  __kmalloc_cache_noprof+0x88/0x660
[  501.640501][T22837]  ? sctp_add_bind_addr+0x8c/0x370
[  501.640532][T22837]  sctp_add_bind_addr+0x8c/0x370
[  501.640561][T22837]  sctp_copy_local_addr_list+0x314/0x4f0
[  501.640590][T22837]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[  501.640613][T22837]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  501.640640][T22837]  ? sctp_v6_is_any+0x64/0x80
[  501.640666][T22837]  ? sctp_copy_one_addr+0x93/0x360
[  501.640694][T22837]  sctp_bind_addr_copy+0xb3/0x3c0
[  501.640721][T22837]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  501.640746][T22837]  sctp_connect_new_asoc+0x2ff/0x6b0
[  501.640768][T22837]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  501.640792][T22837]  ? __local_bh_enable_ip+0xd0/0x130
[  501.640815][T22837]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  501.640838][T22837]  ? security_sctp_bind_connect+0x7e/0x2c0
[  501.640865][T22837]  sctp_sendmsg+0x1528/0x2c10
[  501.640906][T22837]  ? __pfx_sctp_sendmsg+0x10/0x10
[  501.640939][T22837]  ? aa_sk_perm+0x6d5/0x900
[  501.640971][T22837]  ? __pfx_aa_sk_perm+0x10/0x10
[  501.640998][T22837]  ? sock_rps_record_flow+0x19/0x350
[  501.641023][T22837]  ? inet_sendmsg+0x2f4/0x370
[  501.641048][T22837]  ____sys_sendmsg+0x80a/0x9f0
[  501.641082][T22837]  ? __pfx_____sys_sendmsg+0x10/0x10
[  501.641115][T22837]  ? import_iovec+0x73/0xa0
[  501.641140][T22837]  ___sys_sendmsg+0x2a5/0x360
[  501.641169][T22837]  ? __pfx____sys_sendmsg+0x10/0x10
[  501.641228][T22837]  ? __fget_files+0x2a/0x420
[  501.641256][T22837]  ? __fget_files+0x3a0/0x420
[  501.641293][T22837]  __x64_sys_sendmsg+0x1bd/0x2a0
[  501.641321][T22837]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  501.641355][T22837]  ? __pfx_ksys_write+0x10/0x10
[  501.641387][T22837]  do_syscall_64+0x14d/0xf80
[  501.641417][T22837]  ? trace_irq_disable+0x3b/0x150
[  501.641443][T22837]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  501.641463][T22837]  ? clear_bhb_loop+0x40/0x90
[  501.641487][T22837]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  501.641506][T22837] RIP: 0033:0x7fcfc619c799
[  501.641525][T22837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  501.641542][T22837] RSP: 002b:00007fcfc70ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  501.641563][T22837] RAX: ffffffffffffffda RBX: 00007fcfc6415fa0 RCX: 00007fcfc619c799
[  501.641577][T22837] RDX: 0000000024000052 RSI: 00002000000000c0 RDI: 0000000000000003
[  501.641589][T22837] RBP: 00007fcfc70ea090 R08: 0000000000000000 R09: 0000000000000000
[  501.641601][T22837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  501.641613][T22837] R13: 00007fcfc6416038 R14: 00007fcfc6415fa0 R15: 00007fff5358a338
[  501.641645][T22837]  </TASK>
[  501.751345][ T5147] Bluetooth: hci3: command 0x0401 tx timeout
[  501.812336][T22847] __nla_validate_parse: 2 callbacks suppressed
[  501.812355][T22847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5489'.
[  501.875743][T22849] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5497'.
[  501.967219][T22850] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5497'.
[  503.239728][T22840] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) !
[  503.254832][T22849] IPv6: sit2: Disabled Multicast RS
[  503.277760][T22849] sit2: entered allmulticast mode
[  503.374063][T22856] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5498'.
[  503.434426][T22853] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  503.446932][T22853] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.488384][T22858] netlink: 'syz.2.5501': attribute type 4 has an invalid length.
[  503.550442][T22866] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5500'.
[  503.563406][T22868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5502'.
[  503.587076][T22868] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5502'.
[  503.622419][T22866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5500'.
[  503.655114][T22853] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  503.680956][T22853] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.827191][T22881] netlink: 732 bytes leftover after parsing attributes in process `syz.3.5506'.
[  503.847386][T22853] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  503.848328][T22881] netlink: 732 bytes leftover after parsing attributes in process `syz.3.5506'.
[  503.858792][T22853] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.961581][T22887] FAULT_INJECTION: forcing a failure.
[  503.961581][T22887] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  503.975063][T22887] CPU: 1 UID: 0 PID: 22887 Comm: syz.2.5510 Not tainted syzkaller #0 PREEMPT(full) 
[  503.975089][T22887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  503.975101][T22887] Call Trace:
[  503.975110][T22887]  <TASK>
[  503.975118][T22887]  dump_stack_lvl+0xe8/0x150
[  503.975151][T22887]  should_fail_ex+0x412/0x560
[  503.975192][T22887]  _copy_from_user+0x2d/0xb0
[  503.975214][T22887]  ___sys_sendmsg+0x1c6/0x360
[  503.975244][T22887]  ? __pfx____sys_sendmsg+0x10/0x10
[  503.975299][T22887]  ? __fget_files+0x2a/0x420
[  503.975325][T22887]  ? __fget_files+0x3a0/0x420
[  503.975363][T22887]  __x64_sys_sendmsg+0x1bd/0x2a0
[  503.975386][T22887]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  503.975419][T22887]  ? __pfx_ksys_write+0x10/0x10
[  503.975449][T22887]  do_syscall_64+0x14d/0xf80
[  503.975467][T22887]  ? trace_irq_disable+0x3b/0x150
[  503.975488][T22887]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  503.975507][T22887]  ? clear_bhb_loop+0x40/0x90
[  503.975530][T22887]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  503.975549][T22887] RIP: 0033:0x7f0dffd9c799
[  503.975567][T22887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  503.975584][T22887] RSP: 002b:00007f0e00c2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  503.975619][T22887] RAX: ffffffffffffffda RBX: 00007f0e00015fa0 RCX: 00007f0dffd9c799
[  503.975632][T22887] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005
[  503.975644][T22887] RBP: 00007f0e00c2c090 R08: 0000000000000000 R09: 0000000000000000
[  503.975656][T22887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  503.975667][T22887] R13: 00007f0e00016038 R14: 00007f0e00015fa0 R15: 00007ffe469450d8
[  503.975696][T22887]  </TASK>
[  504.178361][T22853] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  504.207754][T22853] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  504.287050][T22895] netlink: 'syz.2.5511': attribute type 21 has an invalid length.
[  504.320863][T22895] nbd: nbd2 already in use
[  504.325645][T22897] block nbd2: NBD_DISCONNECT
[  504.330488][T22897] block nbd2: Send disconnect failed -32
[  504.332195][T22896] gre0 speed is unknown, defaulting to 1000
[  504.348717][T22895] nbd: must specify a device to reconfigure
[  504.562798][T22907] xt_policy: output policy not valid in PREROUTING and INPUT
[  504.578481][ T1101] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  504.589321][ T1101] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  504.652170][ T1091] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  504.661236][ T1091] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  504.694500][ T1101] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  504.703377][ T1101] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  504.739519][T22912] netlink: 'syz.2.5517': attribute type 9 has an invalid length.
[  504.739519][T22913] netlink: 'syz.2.5517': attribute type 9 has an invalid length.
[  504.768716][ T6090] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  504.788206][ T6090] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  504.961422][T22924] vlan4: entered promiscuous mode
[  505.038313][T22896] wg1 speed is unknown, defaulting to 1000
[  505.049067][T22896] lo speed is unknown, defaulting to 1000
[  505.081042][T22928] Cannot find set identified by id 65534 to match
[  505.375525][T22941] xt_CT: You must specify a L4 protocol and not use inversions on it
[  505.421233][T22943] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) !
[  505.679028][T22953] ip6gre1: entered promiscuous mode
[  506.234602][T22991] FAULT_INJECTION: forcing a failure.
[  506.234602][T22991] name failslab, interval 1, probability 0, space 0, times 0
[  506.256413][T22991] CPU: 0 UID: 0 PID: 22991 Comm: syz.0.5547 Not tainted syzkaller #0 PREEMPT(full) 
[  506.256442][T22991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  506.256454][T22991] Call Trace:
[  506.256462][T22991]  <TASK>
[  506.256471][T22991]  dump_stack_lvl+0xe8/0x150
[  506.256503][T22991]  should_fail_ex+0x412/0x560
[  506.256537][T22991]  should_failslab+0xa8/0x100
[  506.256563][T22991]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  506.256585][T22991]  ? __alloc_skb+0x186/0x7d0
[  506.256606][T22991]  ? __alloc_skb+0x1d0/0x7d0
[  506.256623][T22991]  ? __local_bh_enable_ip+0xd0/0x130
[  506.256653][T22991]  __alloc_skb+0x1d0/0x7d0
[  506.256680][T22991]  netlink_sendmsg+0x5d4/0xb40
[  506.256710][T22991]  ? __pfx_netlink_sendmsg+0x10/0x10
[  506.256733][T22991]  ? aa_sock_msg_perm+0xf1/0x1b0
[  506.256762][T22991]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  506.256786][T22991]  ____sys_sendmsg+0x972/0x9f0
[  506.256819][T22991]  ? __pfx_____sys_sendmsg+0x10/0x10
[  506.256851][T22991]  ? import_iovec+0x73/0xa0
[  506.256875][T22991]  ___sys_sendmsg+0x2a5/0x360
[  506.256904][T22991]  ? __pfx____sys_sendmsg+0x10/0x10
[  506.256970][T22991]  ? __fget_files+0x2a/0x420
[  506.256996][T22991]  ? __fget_files+0x3a0/0x420
[  506.257033][T22991]  __x64_sys_sendmsg+0x1bd/0x2a0
[  506.257060][T22991]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  506.257094][T22991]  ? __pfx_ksys_write+0x10/0x10
[  506.257126][T22991]  do_syscall_64+0x14d/0xf80
[  506.257149][T22991]  ? trace_irq_disable+0x3b/0x150
[  506.257175][T22991]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  506.257195][T22991]  ? clear_bhb_loop+0x40/0x90
[  506.257221][T22991]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  506.257238][T22991] RIP: 0033:0x7fcfc619c799
[  506.257256][T22991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  506.257270][T22991] RSP: 002b:00007fcfc70ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  506.257286][T22991] RAX: ffffffffffffffda RBX: 00007fcfc6415fa0 RCX: 00007fcfc619c799
[  506.257298][T22991] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005
[  506.257310][T22991] RBP: 00007fcfc70ea090 R08: 0000000000000000 R09: 0000000000000000
[  506.257321][T22991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  506.257331][T22991] R13: 00007fcfc6416038 R14: 00007fcfc6415fa0 R15: 00007fff5358a338
[  506.257359][T22991]  </TASK>
[  506.582557][T23000] netlink: 'syz.1.5549': attribute type 4 has an invalid length.
[  506.670577][ T7238] IPVS: starting estimator thread 0...
[  506.679350][T23004] netlink: 'syz.2.5551': attribute type 16 has an invalid length.
[  506.700226][T23008] xt_policy: output policy not valid in PREROUTING and INPUT
[  506.719928][T23004] IPVS: set_ctl: invalid protocol: 1 10.1.1.0:20001
[  506.788822][T23009] IPVS: using max 54 ests per chain, 129600 per kthread
[  506.987310][T23026] block nbd2: not configured, cannot reconfigure
[  507.199501][T23038] xt_hashlimit: overflow, rate too high: 0
[  507.365434][T23056] __nla_validate_parse: 13 callbacks suppressed
[  507.365456][T23056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5569'.
[  507.418150][T23059] x_tables: duplicate underflow at hook 2
[  507.478159][T23064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5573'.
[  507.520546][T23068] netlink: 'syz.3.5574': attribute type 4 has an invalid length.
[  509.651840][   T25] block nbd16: Connection timed out, retrying (0/2 alive)
[  509.659227][   T25] block nbd16: Connection timed out, retrying (0/2 alive)
[  509.666553][T12014] block nbd16: Dead connection, failed to find a fallback
[  509.674220][T12014] block nbd16: shutting down sockets
[  509.679531][T12014] blk_print_req_error: 212 callbacks suppressed
[  509.679549][T12014] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  509.695876][   T25] block nbd16: Connection timed out, retrying (0/2 alive)
[  509.703182][   T25] block nbd16: Connection timed out, retrying (0/2 alive)
[  509.710359][T12014] buffer_io_error: 212 callbacks suppressed
[  509.710370][T12014] Buffer I/O error on dev nbd16, logical block 0, async page read
[  509.724813][T12014] I/O error, dev nbd16, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  509.734800][T12014] Buffer I/O error on dev nbd16, logical block 3, async page read
[  509.742817][T12014] I/O error, dev nbd16, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  509.752658][T12014] Buffer I/O error on dev nbd16, logical block 2, async page read
[  509.760476][T12014] I/O error, dev nbd16, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  509.770099][T12014] Buffer I/O error on dev nbd16, logical block 1, async page read
[  509.778095][T18420] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  509.787752][T18420] Buffer I/O error on dev nbd16, logical block 0, async page read
[  509.795712][T18420] I/O error, dev nbd16, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  509.805335][T18420] Buffer I/O error on dev nbd16, logical block 1, async page read
[  509.813238][T18420] I/O error, dev nbd16, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  509.822892][T18420] Buffer I/O error on dev nbd16, logical block 2, async page read
[  509.831232][T18420] I/O error, dev nbd16, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  509.840852][T18420] Buffer I/O error on dev nbd16, logical block 3, async page read
[  509.848721][T18420] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  509.858346][T18420] Buffer I/O error on dev nbd16, logical block 0, async page read
[  509.866361][T18420] I/O error, dev nbd16, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  509.876022][T18420] Buffer I/O error on dev nbd16, logical block 1, async page read
[  509.884453][T18420] ldm_validate_partition_table(): Disk read failed.
[  509.891486][T18420] Dev nbd16: unable to read RDB block 0
[  509.898208][T18420]  nbd16: unable to read partition table
[  509.907308][T18420] ldm_validate_partition_table(): Disk read failed.
[  509.914344][T18420] Dev nbd16: unable to read RDB block 0
[  509.920241][T18420]  nbd16: unable to read partition table
[  510.253332][T23046] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  510.271214][T23071] netlink: 189 bytes leftover after parsing attributes in process `syz.3.5575'.
[  510.544208][T23093] netlink: 'syz.4.5583': attribute type 10 has an invalid length.
[  510.595702][T23093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5583'.
[  510.682340][T23105] FAULT_INJECTION: forcing a failure.
[  510.682340][T23105] name failslab, interval 1, probability 0, space 0, times 0
[  510.716434][T23105] CPU: 0 UID: 0 PID: 23105 Comm: syz.1.5586 Not tainted syzkaller #0 PREEMPT(full) 
[  510.716468][T23105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  510.716482][T23105] Call Trace:
[  510.716490][T23105]  <TASK>
[  510.716498][T23105]  dump_stack_lvl+0xe8/0x150
[  510.716531][T23105]  should_fail_ex+0x412/0x560
[  510.716564][T23105]  should_failslab+0xa8/0x100
[  510.716591][T23105]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  510.716613][T23105]  ? __alloc_skb+0x186/0x7d0
[  510.716634][T23105]  ? __alloc_skb+0x1d0/0x7d0
[  510.716653][T23105]  ? __local_bh_enable_ip+0xd0/0x130
[  510.716683][T23105]  __alloc_skb+0x1d0/0x7d0
[  510.716704][T23105]  ? netlink_ack_tlv_len+0x6c/0x210
[  510.716727][T23105]  netlink_ack+0x146/0xa50
[  510.716752][T23105]  ? __kmalloc_cache_noprof+0x31c/0x660
[  510.716781][T23105]  nfnetlink_rcv+0x2517/0x27b0
[  510.716932][T23105]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  510.716973][T23105]  ? ref_tracker_free+0x693/0x840
[  510.717059][T23105]  ? __netlink_deliver_tap+0x807/0x850
[  510.717079][T23105]  ? netlink_deliver_tap+0x2e/0x1b0
[  510.717115][T23105]  netlink_unicast+0x80f/0x9b0
[  510.717153][T23105]  ? __pfx_netlink_unicast+0x10/0x10
[  510.717178][T23105]  ? __kvmalloc_node_noprof+0x393/0x8a0
[  510.717203][T23105]  ? netlink_sendmsg+0x650/0xb40
[  510.717221][T23105]  ? skb_put+0x11b/0x210
[  510.717247][T23105]  netlink_sendmsg+0x813/0xb40
[  510.717276][T23105]  ? __pfx_netlink_sendmsg+0x10/0x10
[  510.717300][T23105]  ? aa_sock_msg_perm+0xf1/0x1b0
[  510.717329][T23105]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  510.717355][T23105]  ____sys_sendmsg+0x972/0x9f0
[  510.717388][T23105]  ? __pfx_____sys_sendmsg+0x10/0x10
[  510.717421][T23105]  ? import_iovec+0x73/0xa0
[  510.717453][T23105]  ___sys_sendmsg+0x2a5/0x360
[  510.717482][T23105]  ? __pfx____sys_sendmsg+0x10/0x10
[  510.717536][T23105]  ? __fget_files+0x2a/0x420
[  510.717564][T23105]  ? __fget_files+0x3a0/0x420
[  510.717600][T23105]  __x64_sys_sendmsg+0x1bd/0x2a0
[  510.717627][T23105]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  510.717657][T23105]  ? __pfx_ksys_write+0x10/0x10
[  510.717687][T23105]  do_syscall_64+0x14d/0xf80
[  510.717708][T23105]  ? trace_irq_disable+0x3b/0x150
[  510.717730][T23105]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  510.717747][T23105]  ? clear_bhb_loop+0x40/0x90
[  510.717767][T23105]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  510.717785][T23105] RIP: 0033:0x7ff2f939c799
[  510.717803][T23105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  510.717820][T23105] RSP: 002b:00007ff2fa1ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  510.717839][T23105] RAX: ffffffffffffffda RBX: 00007ff2f9615fa0 RCX: 00007ff2f939c799
[  510.717853][T23105] RDX: 0000000000004000 RSI: 00002000000002c0 RDI: 0000000000000003
[  510.717865][T23105] RBP: 00007ff2fa1ef090 R08: 0000000000000000 R09: 0000000000000000
[  510.717876][T23105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  510.717886][T23105] R13: 00007ff2f9616038 R14: 00007ff2f9615fa0 R15: 00007ffdafc8c548
[  510.717913][T23105]  </TASK>
[  511.124794][T23110] netlink: 'syz.0.5589': attribute type 58 has an invalid length.
[  511.300277][T23125] netlink: 'syz.4.5595': attribute type 21 has an invalid length.
[  511.797784][T23144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  511.825938][T23144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  511.912313][T23139] syzkaller1: tun_chr_ioctl cmd 1074025677
[  511.918592][T23139] syzkaller1: linktype set to 260
[  511.949995][T23152] 8021q: adding VLAN 0 to HW filter on device ipvlan4
[  512.027065][T23144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  512.040994][T23144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  512.239134][T23144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  512.253143][T16957] block nbd17: Connection timed out, retrying (0/2 alive)
[  512.260397][T16957] block nbd17: Connection timed out, retrying (0/2 alive)
[  512.269806][T16957] block nbd17: Connection timed out, retrying (0/2 alive)
[  512.279411][T18400] ldm_validate_partition_table(): Disk read failed.
[  512.308534][T23144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  512.320824][T18400] Dev nbd17: unable to read RDB block 0
[  512.345082][T18400]  nbd17: unable to read partition table
[  512.352073][T23166] xt_policy: output policy not valid in PREROUTING and INPUT
[  512.373316][T18400] ldm_validate_partition_table(): Disk read failed.
[  512.380476][T18400] Dev nbd17: unable to read RDB block 0
[  512.407732][T18400]  nbd17: unable to read partition table
[  512.449818][T23144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  512.460378][T23144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  512.525763][T13320] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  512.534222][T13320] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  512.548814][T13320] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  512.557208][T13320] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  512.574375][T13320] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  512.582707][T13320] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  512.598292][T13320] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  512.606669][T13320] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  512.643860][T23178] xt_hashlimit: Unknown mode mask 1D8, kernel too old?
[  515.101350][T23156] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  515.536659][T23213] netlink: 'syz.2.5622': attribute type 10 has an invalid length.
[  515.562927][T23213] team0: Port device dummy0 added
[  515.592173][T23213] netlink: 'syz.2.5622': attribute type 10 has an invalid length.
[  515.599072][T23215] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5623'.
[  515.628924][T23213] team0: Port device dummy0 removed
[  515.786190][T23232] syzkaller0: entered promiscuous mode
[  515.935558][T23237] FAULT_INJECTION: forcing a failure.
[  515.935558][T23237] name failslab, interval 1, probability 0, space 0, times 0
[  515.948760][T23237] CPU: 1 UID: 0 PID: 23237 Comm: syz.4.5630 Not tainted syzkaller #0 PREEMPT(full) 
[  515.948785][T23237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  515.948797][T23237] Call Trace:
[  515.948805][T23237]  <TASK>
[  515.948813][T23237]  dump_stack_lvl+0xe8/0x150
[  515.948846][T23237]  should_fail_ex+0x412/0x560
[  515.948877][T23237]  should_failslab+0xa8/0x100
[  515.948903][T23237]  __kmalloc_cache_noprof+0x88/0x660
[  515.948924][T23237]  ? __pfx_stack_trace_save+0x10/0x10
[  515.948945][T23237]  ? rtnl_newlink+0x136/0x1be0
[  515.949060][T23237]  rtnl_newlink+0x136/0x1be0
[  515.949080][T23237]  ? kasan_save_track+0x4f/0x80
[  515.949100][T23237]  ? kasan_save_track+0x3e/0x80
[  515.949117][T23237]  ? kasan_save_free_info+0x46/0x50
[  515.949143][T23237]  ? __kasan_slab_free+0x5c/0x80
[  515.949163][T23237]  ? kmem_cache_free+0x187/0x630
[  515.949184][T23237]  ? __dev_queue_xmit+0x1557/0x3870
[  515.949208][T23237]  ? __netlink_deliver_tap+0x5ad/0x850
[  515.949227][T23237]  ? netlink_deliver_tap+0x19c/0x1b0
[  515.949244][T23237]  ? netlink_unicast+0x7e3/0x9b0
[  515.949268][T23237]  ? netlink_sendmsg+0x813/0xb40
[  515.949285][T23237]  ? __pfx_rtnl_newlink+0x10/0x10
[  515.949301][T23237]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  515.949348][T23237]  ? kasan_quarantine_put+0xbb/0x1f0
[  515.949365][T23237]  ? lockdep_hardirqs_on+0x7a/0x110
[  515.949388][T23237]  ? kmem_cache_free+0x187/0x630
[  515.949404][T23237]  ? nlmon_xmit+0xb0/0x100
[  515.949540][T23237]  ? __lock_acquire+0x6b5/0x2cf0
[  515.949566][T23237]  ? __local_bh_enable_ip+0xd0/0x130
[  515.949587][T23237]  ? lockdep_hardirqs_on+0x7a/0x110
[  515.949605][T23237]  ? __dev_queue_xmit+0x28b/0x3870
[  515.949623][T23237]  ? __local_bh_enable_ip+0xd0/0x130
[  515.949642][T23237]  ? __dev_queue_xmit+0x28b/0x3870
[  515.949683][T23237]  ? __pfx_rtnl_newlink+0x10/0x10
[  515.949699][T23237]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  515.949720][T23237]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  515.949737][T23237]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  515.949751][T23237]  ? ref_tracker_free+0x693/0x840
[  515.949774][T23237]  ? __copy_skb_header+0xa3/0x4a0
[  515.949796][T23237]  ? __pfx_ref_tracker_free+0x10/0x10
[  515.949818][T23237]  ? __skb_clone+0x63/0x7a0
[  515.949845][T23237]  netlink_rcv_skb+0x232/0x4b0
[  515.949863][T23237]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  515.949881][T23237]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  515.949908][T23237]  ? netlink_deliver_tap+0x2e/0x1b0
[  515.949931][T23237]  netlink_unicast+0x80f/0x9b0
[  515.949961][T23237]  ? __pfx_netlink_unicast+0x10/0x10
[  515.949986][T23237]  ? netlink_sendmsg+0x650/0xb40
[  515.950002][T23237]  ? skb_put+0x11b/0x210
[  515.950023][T23237]  netlink_sendmsg+0x813/0xb40
[  515.950048][T23237]  ? __pfx_netlink_sendmsg+0x10/0x10
[  515.950068][T23237]  ? aa_sock_msg_perm+0xf1/0x1b0
[  515.950094][T23237]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  515.950115][T23237]  ____sys_sendmsg+0x972/0x9f0
[  515.950143][T23237]  ? __pfx_____sys_sendmsg+0x10/0x10
[  515.950171][T23237]  ? import_iovec+0x73/0xa0
[  515.950193][T23237]  ___sys_sendmsg+0x2a5/0x360
[  515.950223][T23237]  ? __pfx____sys_sendmsg+0x10/0x10
[  515.950274][T23237]  ? __fget_files+0x2a/0x420
[  515.950298][T23237]  ? __fget_files+0x3a0/0x420
[  515.950330][T23237]  __x64_sys_sendmsg+0x1bd/0x2a0
[  515.950352][T23237]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  515.950381][T23237]  ? __pfx_ksys_write+0x10/0x10
[  515.950410][T23237]  do_syscall_64+0x14d/0xf80
[  515.950429][T23237]  ? trace_irq_disable+0x3b/0x150
[  515.950459][T23237]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  515.950477][T23237]  ? clear_bhb_loop+0x40/0x90
[  515.950497][T23237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  515.950513][T23237] RIP: 0033:0x7f757ab9c799
[  515.950531][T23237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  515.950546][T23237] RSP: 002b:00007f757ba09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  515.950565][T23237] RAX: ffffffffffffffda RBX: 00007f757ae15fa0 RCX: 00007f757ab9c799
[  515.950578][T23237] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005
[  515.950588][T23237] RBP: 00007f757ba09090 R08: 0000000000000000 R09: 0000000000000000
[  515.950599][T23237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  515.950610][T23237] R13: 00007f757ae16038 R14: 00007f757ae15fa0 R15: 00007ffd76245c08
[  515.950638][T23237]  </TASK>
[  517.814395][T23249] gre0 speed is unknown, defaulting to 1000
[  517.851260][T23255] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  517.983589][T23249] wg1 speed is unknown, defaulting to 1000
[  517.990366][T23249] lo speed is unknown, defaulting to 1000
[  518.146022][T23264] Cannot find set identified by id 65534 to match
[  518.324533][T23268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5639'.
[  518.341100][T23268] vlan3: entered promiscuous mode
[  518.488697][T23272] sit0: entered allmulticast mode
[  518.494987][T23272] sit0: left allmulticast mode
[  518.624464][T23219] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  518.817407][T23283] syzkaller1: entered promiscuous mode
[  518.841031][T23283] syzkaller1: entered allmulticast mode
[  518.876944][T23287] ipt_REJECT: TCP_RESET invalid for non-tcp
[  518.912149][T23287] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.5647'.
[  518.996429][T23293] netlink: 'syz.0.5650': attribute type 10 has an invalid length.
[  519.009637][T23293] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5650'.
[  519.051335][T23302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5651'.
[  519.518136][T23322] syzkaller0: entered promiscuous mode
[  519.523771][T23322] syzkaller0: entered allmulticast mode
[  519.882954][T23326] netlink: 'syz.4.5658': attribute type 4 has an invalid length.
[  520.890655][T23340] xt_CT: You must specify a L4 protocol and not use inversions on it
[  522.082908][T23304] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  522.268737][T23355] FAULT_INJECTION: forcing a failure.
[  522.268737][T23355] name failslab, interval 1, probability 0, space 0, times 0
[  522.301405][T23359] Cannot find set identified by id 65534 to match
[  522.310942][T23355] CPU: 1 UID: 0 PID: 23355 Comm: syz.2.5666 Not tainted syzkaller #0 PREEMPT(full) 
[  522.310970][T23355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  522.310983][T23355] Call Trace:
[  522.310991][T23355]  <TASK>
[  522.311000][T23355]  dump_stack_lvl+0xe8/0x150
[  522.311034][T23355]  should_fail_ex+0x412/0x560
[  522.311067][T23355]  should_failslab+0xa8/0x100
[  522.311095][T23355]  __kmalloc_cache_noprof+0x88/0x660
[  522.311117][T23355]  ? __sctp_v6_cmp_addr+0x1e6/0x510
[  522.311144][T23355]  ? sctp_add_bind_addr+0x8c/0x370
[  522.311176][T23355]  sctp_add_bind_addr+0x8c/0x370
[  522.311206][T23355]  sctp_copy_local_addr_list+0x314/0x4f0
[  522.311237][T23355]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[  522.311264][T23355]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  522.311292][T23355]  ? sctp_v6_is_any+0x64/0x80
[  522.311320][T23355]  ? sctp_copy_one_addr+0x93/0x360
[  522.311349][T23355]  sctp_bind_addr_copy+0xb3/0x3c0
[  522.311376][T23355]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  522.311403][T23355]  sctp_connect_new_asoc+0x2ff/0x6b0
[  522.311428][T23355]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  522.311463][T23355]  ? __local_bh_enable_ip+0xd0/0x130
[  522.311487][T23355]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  522.311511][T23355]  ? security_sctp_bind_connect+0x7e/0x2c0
[  522.311539][T23355]  sctp_sendmsg+0x1528/0x2c10
[  522.311584][T23355]  ? __pfx_sctp_sendmsg+0x10/0x10
[  522.311618][T23355]  ? aa_sk_perm+0x6d5/0x900
[  522.311653][T23355]  ? __pfx_aa_sk_perm+0x10/0x10
[  522.311683][T23355]  ? sock_rps_record_flow+0x19/0x350
[  522.311710][T23355]  ? inet_sendmsg+0x2f4/0x370
[  522.311736][T23355]  ____sys_sendmsg+0x80a/0x9f0
[  522.311771][T23355]  ? __pfx_____sys_sendmsg+0x10/0x10
[  522.311805][T23355]  ? import_iovec+0x73/0xa0
[  522.311831][T23355]  ___sys_sendmsg+0x2a5/0x360
[  522.311861][T23355]  ? __pfx____sys_sendmsg+0x10/0x10
[  522.311924][T23355]  ? __fget_files+0x2a/0x420
[  522.311950][T23355]  ? __fget_files+0x3a0/0x420
[  522.311989][T23355]  __x64_sys_sendmsg+0x1bd/0x2a0
[  522.312016][T23355]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  522.312050][T23355]  ? __pfx_ksys_write+0x10/0x10
[  522.312084][T23355]  do_syscall_64+0x14d/0xf80
[  522.312107][T23355]  ? trace_irq_disable+0x3b/0x150
[  522.312134][T23355]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  522.312154][T23355]  ? clear_bhb_loop+0x40/0x90
[  522.312179][T23355]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  522.312198][T23355] RIP: 0033:0x7f0dffd9c799
[  522.312218][T23355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  522.312235][T23355] RSP: 002b:00007f0e00c2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  522.312257][T23355] RAX: ffffffffffffffda RBX: 00007f0e00015fa0 RCX: 00007f0dffd9c799
[  522.312272][T23355] RDX: 0000000024000052 RSI: 00002000000000c0 RDI: 0000000000000003
[  522.312285][T23355] RBP: 00007f0e00c2c090 R08: 0000000000000000 R09: 0000000000000000
[  522.312298][T23355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  522.312310][T23355] R13: 00007f0e00016038 R14: 00007f0e00015fa0 R15: 00007ffe469450d8
[  522.312344][T23355]  </TASK>
[  523.227837][T23386] gre0 speed is unknown, defaulting to 1000
[  523.290276][T23399] nbd4: detected capacity change from 63 to 65
[  523.298128][T22199] blk_print_req_error: 285 callbacks suppressed
[  523.298147][T22199] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  523.317093][T23407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5680'.
[  523.359045][T22199] buffer_io_error: 285 callbacks suppressed
[  523.359065][T22199] Buffer I/O error on dev nbd4, logical block 0, async page read
[  523.406510][T22199] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  523.426710][T22199] Buffer I/O error on dev nbd4, logical block 0, async page read
[  523.444693][T22199] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  523.468384][T22199] Buffer I/O error on dev nbd4, logical block 0, async page read
[  523.486383][T22199] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  523.507141][T22199] Buffer I/O error on dev nbd4, logical block 0, async page read
[  523.536992][T22199] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  523.569251][T22199] Buffer I/O error on dev nbd4, logical block 0, async page read
[  523.600321][T22199] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  523.624260][T22199] Buffer I/O error on dev nbd4, logical block 0, async page read
[  523.648763][T22199] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  523.668933][T22199] Buffer I/O error on dev nbd4, logical block 0, async page read
[  523.688158][T22199] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  523.727009][T22199] Buffer I/O error on dev nbd4, logical block 0, async page read
[  523.759578][T22199] ldm_validate_partition_table(): Disk read failed.
[  523.771305][T23421] netlink: 'syz.4.5684': attribute type 4 has an invalid length.
[  523.777439][T22199] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  523.820238][T22199] Buffer I/O error on dev nbd4, logical block 0, async page read
[  523.850947][T22199] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  523.871082][T22199] Buffer I/O error on dev nbd4, logical block 0, async page read
[  523.886790][T22199] Dev nbd4: unable to read RDB block 0
[  523.904441][T22199]  nbd4: unable to read partition table
[  523.928795][T22199] ldm_validate_partition_table(): Disk read failed.
[  523.945488][T22199] Dev nbd4: unable to read RDB block 0
[  523.957504][T22199]  nbd4: unable to read partition table
[  523.981366][T23430] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5686'.
[  523.991026][T23430] nbd: nbd64 already in use
[  524.006352][T23430] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5686'.
[  524.039878][T23430] nbd: nbd64 already in use
[  524.053177][T23430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5686'.
[  524.195828][T23435] netlink: 'syz.2.5687': attribute type 2 has an invalid length.
[  524.224660][T23435] netlink: 'syz.2.5687': attribute type 5 has an invalid length.
[  524.248104][T23435] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5687'.
[  524.251978][T23386] wg1 speed is unknown, defaulting to 1000
[  524.265383][T23435] nbd: must specify at least one socket
[  524.282769][T23386] lo speed is unknown, defaulting to 1000
[  524.449421][T23445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5688'.
[  524.472866][T23445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5688'.
[  524.923049][T23469] xt_CT: You must specify a L4 protocol and not use inversions on it
[  525.166088][T23482] netlink: 'syz.0.5699': attribute type 58 has an invalid length.
[  525.189164][T23484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5702'.
[  525.387563][T23496] syzkaller0: entered promiscuous mode
[  526.709537][T23497] gre0 speed is unknown, defaulting to 1000
[  526.853291][T23497] wg1 speed is unknown, defaulting to 1000
[  526.860126][T23497] lo speed is unknown, defaulting to 1000
[  526.926593][T23503] SET target dimension over the limit!
[  526.978135][T23505] FAULT_INJECTION: forcing a failure.
[  526.978135][T23505] name failslab, interval 1, probability 0, space 0, times 0
[  526.991341][T23505] CPU: 0 UID: 0 PID: 23505 Comm: syz.3.5710 Not tainted syzkaller #0 PREEMPT(full) 
[  526.991367][T23505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  526.991377][T23505] Call Trace:
[  526.991385][T23505]  <TASK>
[  526.991394][T23505]  dump_stack_lvl+0xe8/0x150
[  526.991428][T23505]  should_fail_ex+0x412/0x560
[  526.991461][T23505]  should_failslab+0xa8/0x100
[  526.991488][T23505]  __kmalloc_cache_noprof+0x88/0x660
[  526.991512][T23505]  ? sctp_add_bind_addr+0x8c/0x370
[  526.991543][T23505]  sctp_add_bind_addr+0x8c/0x370
[  526.991572][T23505]  sctp_copy_local_addr_list+0x314/0x4f0
[  526.991602][T23505]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[  526.991627][T23505]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  526.991656][T23505]  ? sctp_v6_is_any+0x64/0x80
[  526.991684][T23505]  ? sctp_copy_one_addr+0x93/0x360
[  526.991714][T23505]  sctp_bind_addr_copy+0xb3/0x3c0
[  526.991740][T23505]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  526.991767][T23505]  sctp_connect_new_asoc+0x2ff/0x6b0
[  526.991790][T23505]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  526.991817][T23505]  ? __local_bh_enable_ip+0xd0/0x130
[  526.991840][T23505]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  526.991863][T23505]  ? security_sctp_bind_connect+0x7e/0x2c0
[  526.991892][T23505]  sctp_sendmsg+0x1528/0x2c10
[  526.991934][T23505]  ? __pfx_sctp_sendmsg+0x10/0x10
[  526.991964][T23505]  ? aa_sk_perm+0x6d5/0x900
[  526.991996][T23505]  ? __pfx_aa_sk_perm+0x10/0x10
[  526.992025][T23505]  ? sock_rps_record_flow+0x19/0x350
[  526.992049][T23505]  ? inet_sendmsg+0x2f4/0x370
[  526.992073][T23505]  ____sys_sendmsg+0x80a/0x9f0
[  526.992114][T23505]  ? __pfx_____sys_sendmsg+0x10/0x10
[  526.992147][T23505]  ? import_iovec+0x73/0xa0
[  526.992172][T23505]  ___sys_sendmsg+0x2a5/0x360
[  526.992202][T23505]  ? __pfx____sys_sendmsg+0x10/0x10
[  526.992263][T23505]  ? __fget_files+0x2a/0x420
[  526.992289][T23505]  ? __fget_files+0x3a0/0x420
[  526.992325][T23505]  __x64_sys_sendmsg+0x1bd/0x2a0
[  526.992351][T23505]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  526.992385][T23505]  ? __pfx_ksys_write+0x10/0x10
[  526.992419][T23505]  do_syscall_64+0x14d/0xf80
[  526.992441][T23505]  ? trace_irq_disable+0x3b/0x150
[  526.992467][T23505]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  526.992487][T23505]  ? clear_bhb_loop+0x40/0x90
[  526.992511][T23505]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  526.992531][T23505] RIP: 0033:0x7fc48999c799
[  526.992550][T23505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  526.992567][T23505] RSP: 002b:00007fc48a7ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  526.992589][T23505] RAX: ffffffffffffffda RBX: 00007fc489c15fa0 RCX: 00007fc48999c799
[  526.992602][T23505] RDX: 0000000024000052 RSI: 00002000000000c0 RDI: 0000000000000003
[  526.992616][T23505] RBP: 00007fc48a7ea090 R08: 0000000000000000 R09: 0000000000000000
[  526.992627][T23505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  526.992638][T23505] R13: 00007fc489c16038 R14: 00007fc489c15fa0 R15: 00007ffe7d7c3398
[  526.992669][T23505]  </TASK>
[  527.401669][T23509] Cannot find set identified by id 65534 to match
[  527.526471][T23513] hsr0: entered promiscuous mode
[  527.537074][T23513] hsr0: left promiscuous mode
[  527.685269][T23455] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  527.849410][T23518] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  527.869404][T23523] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5718'.
[  527.985700][T23534] xt_policy: output policy not valid in PREROUTING and INPUT
[  528.026860][T23537] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) !
[  528.134946][T23544] block nbd2: not configured, cannot reconfigure
[  528.177200][T23542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5727'.
[  528.257329][T23554] netlink: 'syz.3.5727': attribute type 3 has an invalid length.
[  528.286931][T23554] netlink: 'syz.3.5727': attribute type 3 has an invalid length.
[  528.498197][T23565] netlink: 'syz.4.5738': attribute type 4 has an invalid length.
[  528.632863][T23578] sit0: entered allmulticast mode
[  528.725918][T23587] netlink: 'syz.3.5743': attribute type 10 has an invalid length.
[  528.760202][T23587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5743'.
[  528.814217][T23530] Bluetooth: hci3: Opcode 0x0401 failed: -4
[  528.921022][T23596] netlink: 'syz.0.5746': attribute type 2 has an invalid length.
[  528.949004][T23596] netlink: 'syz.0.5746': attribute type 5 has an invalid length.
[  528.973766][T23596] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5746'.
[  528.978936][T23604] netlink: 'syz.4.5750': attribute type 10 has an invalid length.
[  528.989390][T23596] nbd: must specify at least one socket
[  529.014586][T23604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5750'.
[  529.247797][T23610] bridge0: entered promiscuous mode
[  529.254668][T23610] macsec2: entered promiscuous mode
[  529.276853][T23618] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5754'.
[  529.442628][T23620] syzkaller0: entered promiscuous mode
[  529.461114][T23620] syzkaller0: entered allmulticast mode
[  529.508625][T23620] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  529.545150][T23619] tipc: Resetting bearer <eth:syzkaller0>
[  529.610914][T23619] tipc: Disabling bearer <eth:syzkaller0>
[  529.621350][T23626] nbd2: detected capacity change from 0 to 63
[  529.629522][T23624] netlink: 'syz.0.5757': attribute type 1 has an invalid length.
[  529.637677][T23624] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5757'.
[  529.823341][T23642] 8021q: adding VLAN 0 to HW filter on device ipvlan6
[  529.864230][T23635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5760'.
[  529.881706][ T5147] block nbd2: Receive control failed (result -104)
[  529.889910][T23635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5760'.
[  529.918077][T23644] xt_policy: output policy not valid in PREROUTING and INPUT
[  529.928634][T23646] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  530.058152][ T5147] Bluetooth: hci3: command 0x0401 tx timeout
[  530.088395][T23653] vlan4: entered allmulticast mode
[  530.383928][T23674] netlink: 'syz.3.5776': attribute type 2 has an invalid length.
[  530.476806][T23682] syzkaller1: tun_chr_ioctl cmd 1074025677
[  530.483109][T23682] syzkaller1: linktype set to 825
[  530.507217][T23682] macsec1: entered allmulticast mode
[  530.513146][T23682] gretap0: entered allmulticast mode
[  530.542565][T23682] gretap0: left allmulticast mode
[  545.608097][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  545.619172][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  545.628684][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  545.638732][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  545.646581][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  545.684269][ T5838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  545.694324][ T5838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  545.700426][T23699] gre0 speed is unknown, defaulting to 1000
[  545.702711][ T5838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  545.716855][ T5838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  545.725040][ T5838] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  545.786924][ T5838] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  545.795860][ T5838] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  545.805377][ T5838] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  545.822727][ T5838] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  545.841399][ T5838] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  545.910021][T23699] wg1 speed is unknown, defaulting to 1000
[  545.910036][T23701] gre0 speed is unknown, defaulting to 1000
[  545.924308][T23699] lo speed is unknown, defaulting to 1000
[  546.103039][T23704] gre0 speed is unknown, defaulting to 1000
[  546.103372][T23699] chnl_net:caif_netlink_parms(): no params data found
[  546.126615][T23701] wg1 speed is unknown, defaulting to 1000
[  546.161641][T23701] lo speed is unknown, defaulting to 1000
[  546.294029][T23699] bridge0: port 1(bridge_slave_0) entered blocking state
[  546.301539][T23699] bridge0: port 1(bridge_slave_0) entered disabled state
[  546.308887][T23699] bridge_slave_0: entered allmulticast mode
[  546.317557][T23699] bridge_slave_0: entered promiscuous mode
[  546.325163][T23704] wg1 speed is unknown, defaulting to 1000
[  546.326286][T23699] bridge0: port 2(bridge_slave_1) entered blocking state
[  546.338359][T23699] bridge0: port 2(bridge_slave_1) entered disabled state
[  546.345831][T23699] bridge_slave_1: entered allmulticast mode
[  546.353036][T23699] bridge_slave_1: entered promiscuous mode
[  546.366089][T23704] lo speed is unknown, defaulting to 1000
[  546.423906][T23699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  546.438353][T23699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  546.610470][T23699] team0: Port device team_slave_0 added
[  546.632646][T23701] chnl_net:caif_netlink_parms(): no params data found
[  546.649625][T23699] team0: Port device team_slave_1 added
[  546.679009][ T5147] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  546.691712][ T5147] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  546.701639][ T5147] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  546.712178][ T5147] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  546.721107][ T5147] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  546.758064][ T5838] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  546.768759][ T5838] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  546.777834][ T5838] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  546.779155][T23699] batman_adv: batadv0: Adding interface: batadv_slave_0
[  546.786381][ T5838] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  546.798429][T23699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  546.802377][ T5838] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  546.826155][T23699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  546.859014][T23699] batman_adv: batadv0: Adding interface: batadv_slave_1
[  546.872497][T23699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  546.898585][T23699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  546.967772][T23717] gre0 speed is unknown, defaulting to 1000
[  547.064822][T23699] hsr_slave_0: entered promiscuous mode
[  547.082137][T23699] hsr_slave_1: entered promiscuous mode
[  547.088640][T23699] debugfs: 'hsr0' already exists in 'hsr'
[  547.095334][T23699] Cannot create hsr debugfs directory
[  547.111183][T23701] bridge0: port 1(bridge_slave_0) entered blocking state
[  547.118395][T23701] bridge0: port 1(bridge_slave_0) entered disabled state
[  547.126408][T23701] bridge_slave_0: entered allmulticast mode
[  547.134667][T23701] bridge_slave_0: entered promiscuous mode
[  547.165469][T23701] bridge0: port 2(bridge_slave_1) entered blocking state
[  547.175224][T23701] bridge0: port 2(bridge_slave_1) entered disabled state
[  547.183285][T23701] bridge_slave_1: entered allmulticast mode
[  547.192143][T23701] bridge_slave_1: entered promiscuous mode
[  547.214880][T23719] gre0 speed is unknown, defaulting to 1000
[  547.220058][T23717] wg1 speed is unknown, defaulting to 1000
[  547.228497][T23717] lo speed is unknown, defaulting to 1000
[  547.307023][T23704] chnl_net:caif_netlink_parms(): no params data found
[  547.341394][T23701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  547.405686][T23701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  547.465326][T23719] wg1 speed is unknown, defaulting to 1000
[  547.511751][T23719] lo speed is unknown, defaulting to 1000
[  547.523898][T23701] team0: Port device team_slave_0 added
[  547.562884][T23701] team0: Port device team_slave_1 added
[  547.659437][T23704] bridge0: port 1(bridge_slave_0) entered blocking state
[  547.666835][T23704] bridge0: port 1(bridge_slave_0) entered disabled state
[  547.674248][T23704] bridge_slave_0: entered allmulticast mode
[  547.681981][T23704] bridge_slave_0: entered promiscuous mode
[  547.695112][T23701] batman_adv: batadv0: Adding interface: batadv_slave_0
[  547.702847][T23701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  547.729149][T23701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  547.740218][ T5147] Bluetooth: hci4: command tx timeout
[  547.758663][T23704] bridge0: port 2(bridge_slave_1) entered blocking state
[  547.766066][T23704] bridge0: port 2(bridge_slave_1) entered disabled state
[  547.773472][T23704] bridge_slave_1: entered allmulticast mode
[  547.780500][T23704] bridge_slave_1: entered promiscuous mode
[  547.794085][T23701] batman_adv: batadv0: Adding interface: batadv_slave_1
[  547.802156][T23701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  547.828836][T23701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  547.830918][ T5147] Bluetooth: hci6: command tx timeout
[  547.891200][ T5147] Bluetooth: hci7: command tx timeout
[  547.898852][T23704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  547.935222][T23704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  547.996004][T23704] team0: Port device team_slave_0 added
[  548.005367][T23704] team0: Port device team_slave_1 added
[  548.067013][T23701] hsr_slave_0: entered promiscuous mode
[  548.073975][T23701] hsr_slave_1: entered promiscuous mode
[  548.080055][T23701] debugfs: 'hsr0' already exists in 'hsr'
[  548.086182][T23701] Cannot create hsr debugfs directory
[  548.108791][T23704] batman_adv: batadv0: Adding interface: batadv_slave_0
[  548.116017][T23704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  548.143015][T23704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  548.160634][T23704] batman_adv: batadv0: Adding interface: batadv_slave_1
[  548.168035][T23704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  548.194506][T23704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  548.229906][T23717] chnl_net:caif_netlink_parms(): no params data found
[  548.413713][T23704] hsr_slave_0: entered promiscuous mode
[  548.420109][T23704] hsr_slave_1: entered promiscuous mode
[  548.426760][T23704] debugfs: 'hsr0' already exists in 'hsr'
[  548.432806][T23704] Cannot create hsr debugfs directory
[  548.438552][T23719] chnl_net:caif_netlink_parms(): no params data found
[  548.515527][T23717] bridge0: port 1(bridge_slave_0) entered blocking state
[  548.523235][T23717] bridge0: port 1(bridge_slave_0) entered disabled state
[  548.530601][T23717] bridge_slave_0: entered allmulticast mode
[  548.538153][T23717] bridge_slave_0: entered promiscuous mode
[  548.567712][T23717] bridge0: port 2(bridge_slave_1) entered blocking state
[  548.575172][T23717] bridge0: port 2(bridge_slave_1) entered disabled state
[  548.583042][T23717] bridge_slave_1: entered allmulticast mode
[  548.590097][T23717] bridge_slave_1: entered promiscuous mode
[  548.682732][T23717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  548.697035][T23717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  548.770998][ T5147] Bluetooth: hci8: command tx timeout
[  548.799424][T23719] bridge0: port 1(bridge_slave_0) entered blocking state
[  548.806869][T23719] bridge0: port 1(bridge_slave_0) entered disabled state
[  548.814593][T23719] bridge_slave_0: entered allmulticast mode
[  548.822241][T23719] bridge_slave_0: entered promiscuous mode
[  548.830711][T23717] team0: Port device team_slave_0 added
[  548.837093][T23719] bridge0: port 2(bridge_slave_1) entered blocking state
[  548.844601][T23719] bridge0: port 2(bridge_slave_1) entered disabled state
[  548.851999][ T5147] Bluetooth: hci9: command tx timeout
[  548.852116][T23719] bridge_slave_1: entered allmulticast mode
[  548.865295][T23719] bridge_slave_1: entered promiscuous mode
[  548.896477][T23717] team0: Port device team_slave_1 added
[  548.915889][T23719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  548.958247][T23719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  548.994040][T23717] batman_adv: batadv0: Adding interface: batadv_slave_0
[  549.001495][T23717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  549.028300][T23717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  549.067227][T23717] batman_adv: batadv0: Adding interface: batadv_slave_1
[  549.074507][T23717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  549.101001][T23717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  549.113671][T23719] team0: Port device team_slave_0 added
[  549.135188][T23719] team0: Port device team_slave_1 added
[  549.209598][T23719] batman_adv: batadv0: Adding interface: batadv_slave_0
[  549.216855][T23719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  549.243916][T23719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  549.258879][T23719] batman_adv: batadv0: Adding interface: batadv_slave_1
[  549.266342][T23719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  549.292971][T23719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  549.309908][T23717] hsr_slave_0: entered promiscuous mode
[  549.316771][T23717] hsr_slave_1: entered promiscuous mode
[  549.323329][T23717] debugfs: 'hsr0' already exists in 'hsr'
[  549.329058][T23717] Cannot create hsr debugfs directory
[  549.431702][T23719] hsr_slave_0: entered promiscuous mode
[  549.438196][T23719] hsr_slave_1: entered promiscuous mode
[  549.444749][T23719] debugfs: 'hsr0' already exists in 'hsr'
[  549.450476][T23719] Cannot create hsr debugfs directory
[  549.811041][ T5147] Bluetooth: hci4: command tx timeout
[  549.890934][ T5147] Bluetooth: hci6: command tx timeout
[  549.971066][ T5147] Bluetooth: hci7: command tx timeout
[  550.851009][ T5147] Bluetooth: hci8: command tx timeout
[  550.931276][ T5147] Bluetooth: hci9: command tx timeout
[  551.891532][ T5147] Bluetooth: hci4: command tx timeout
[  551.970913][ T5147] Bluetooth: hci6: command tx timeout
[  552.050962][ T5147] Bluetooth: hci7: command tx timeout
[  552.931074][ T5147] Bluetooth: hci8: command tx timeout
[  553.011075][ T5147] Bluetooth: hci9: command tx timeout
[  553.971981][ T5147] Bluetooth: hci4: command tx timeout
[  554.051034][ T5147] Bluetooth: hci6: command tx timeout
[  554.131030][ T5147] Bluetooth: hci7: command tx timeout
[  555.011026][ T5147] Bluetooth: hci8: command tx timeout
[  555.091031][ T5147] Bluetooth: hci9: command tx timeout
[  591.789718][ T5197] udevd[5197]: worker [22199] /devices/virtual/block/nbd2 is taking a long time
[  603.743542][ T1091] team0: left allmulticast mode
[  603.748628][ T1091] team_slave_0: left allmulticast mode
[  603.754727][ T1091] team_slave_1: left allmulticast mode
[  603.760283][ T1091] team0: left promiscuous mode
[  603.765185][ T1091] team_slave_0: left promiscuous mode
[  603.771498][ T1091] team_slave_1: left promiscuous mode
[  603.779239][ T1091] bridge0: port 3(team0) entered disabled state
[  603.788079][ T1091] bridge_slave_1: left allmulticast mode
[  603.793807][ T1091] bridge_slave_1: left promiscuous mode
[  603.799489][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state
[  603.809060][ T1091] bridge_slave_0: left allmulticast mode
[  603.815143][ T1091] bridge_slave_0: left promiscuous mode
[  603.820907][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state
[  603.835118][ T1091] veth7: left allmulticast mode
[  603.839981][ T1091] veth7: left promiscuous mode
[  603.845321][ T1091] bridge2: port 3(veth7) entered disabled state
[  603.853939][ T1091] veth0_to_bond: left allmulticast mode
[  603.859485][ T1091] veth0_to_bond: left promiscuous mode
[  603.865783][ T1091] bridge2: port 2(veth0_to_bond) entered disabled state
[  603.874737][ T1091] veth5: left allmulticast mode
[  603.879587][ T1091] veth5: left promiscuous mode
[  603.884637][ T1091] bridge2: port 1(veth5) entered disabled state
[  604.154549][ T1091] bond4 (unregistering): (slave bridge3): Releasing active interface
[  604.214827][ T1091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  604.225284][ T1091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  604.236882][ T1091] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  604.250141][ T1091] bond0 (unregistering): Released all slaves
[  604.260662][ T1091] bond1 (unregistering): Released all slaves
[  604.272957][ T1091] bond2 (unregistering): Released all slaves
[  604.286006][ T1091] bond3 (unregistering): Released all slaves
[  604.304446][ T1091] bond4 (unregistering): Released all slaves
[  604.319835][ T1091] bond5 (unregistering): Released all slaves
[  604.336294][ T1091] bond6 (unregistering): Released all slaves
[  604.442124][ T1091] : left promiscuous mode
[  604.487982][ T1091] tipc: Left network mode
[  604.996357][ T1091] hsr_slave_0: left promiscuous mode
[  605.002635][ T1091] hsr_slave_1: left promiscuous mode
[  605.008564][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_0
[  605.016976][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_1
[  605.158938][ T1091] team0 (unregistering): Port device team_slave_1 removed
[  605.179161][ T1091] team0 (unregistering): Port device team_slave_0 removed
[  605.622286][ T5838] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  605.632000][ T5838] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  605.641587][ T5838] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  605.653103][ T5838] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  605.661138][ T5838] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  605.705605][ T5838] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  605.715828][ T5838] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  605.726203][ T5838] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  605.733713][T23747] gre0 speed is unknown, defaulting to 1000
[  605.741954][ T5838] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  605.749727][ T5838] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  605.866806][T23747] wg1 speed is unknown, defaulting to 1000
[  605.866824][T23749] gre0 speed is unknown, defaulting to 1000
[  605.881754][T23747] lo speed is unknown, defaulting to 1000
[  606.065855][T23749] wg1 speed is unknown, defaulting to 1000
[  606.073580][T23749] lo speed is unknown, defaulting to 1000
[  606.123146][T23747] chnl_net:caif_netlink_parms(): no params data found
[  606.181601][ T5147] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  606.195635][ T5147] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  606.204536][ T5147] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  606.214664][ T5147] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  606.224786][ T5147] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  606.325405][T23749] chnl_net:caif_netlink_parms(): no params data found
[  606.341860][T23747] bridge0: port 1(bridge_slave_0) entered blocking state
[  606.349028][T23747] bridge0: port 1(bridge_slave_0) entered disabled state
[  606.356519][T23747] bridge_slave_0: entered allmulticast mode
[  606.363942][T23747] bridge_slave_0: entered promiscuous mode
[  606.375282][T23747] bridge0: port 2(bridge_slave_1) entered blocking state
[  606.382482][T23747] bridge0: port 2(bridge_slave_1) entered disabled state
[  606.389689][T23747] bridge_slave_1: entered allmulticast mode
[  606.397030][T23747] bridge_slave_1: entered promiscuous mode
[  606.409820][T23755] gre0 speed is unknown, defaulting to 1000
[  606.478781][T23747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  606.523989][T23747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  606.632741][T23747] team0: Port device team_slave_0 added
[  606.647392][T23749] bridge0: port 1(bridge_slave_0) entered blocking state
[  606.659157][ T5838] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  606.669174][ T5838] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  606.678023][ T5838] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  606.687139][ T5838] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  606.691249][T23749] bridge0: port 1(bridge_slave_0) entered disabled state
[  606.702045][ T5838] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  606.702057][T23749] bridge_slave_0: entered allmulticast mode
[  606.703911][T23749] bridge_slave_0: entered promiscuous mode
[  606.730176][T23747] team0: Port device team_slave_1 added
[  606.735982][T23749] bridge0: port 2(bridge_slave_1) entered blocking state
[  606.743360][T23749] bridge0: port 2(bridge_slave_1) entered disabled state
[  606.750592][T23749] bridge_slave_1: entered allmulticast mode
[  606.758620][T23749] bridge_slave_1: entered promiscuous mode
[  606.766216][T23755] wg1 speed is unknown, defaulting to 1000
[  606.789224][T23755] lo speed is unknown, defaulting to 1000
[  606.814429][T23749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  606.831612][T23749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  606.870023][T23747] batman_adv: batadv0: Adding interface: batadv_slave_0
[  606.877401][T23747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  606.904368][T23747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  606.937795][T23747] batman_adv: batadv0: Adding interface: batadv_slave_1
[  606.944980][T23747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  606.972000][T23747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  606.997992][T23749] team0: Port device team_slave_0 added
[  607.012154][T23749] team0: Port device team_slave_1 added
[  607.035944][T23767] gre0 speed is unknown, defaulting to 1000
[  607.068166][T23749] batman_adv: batadv0: Adding interface: batadv_slave_0
[  607.080899][T23749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  607.107773][T23749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  607.143714][T23749] batman_adv: batadv0: Adding interface: batadv_slave_1
[  607.150685][T23749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  607.177803][T23749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  607.223310][T23747] hsr_slave_0: entered promiscuous mode
[  607.230113][T23747] hsr_slave_1: entered promiscuous mode
[  607.236995][T23747] debugfs: 'hsr0' already exists in 'hsr'
[  607.243099][T23747] Cannot create hsr debugfs directory
[  607.263515][T23767] wg1 speed is unknown, defaulting to 1000
[  607.292379][T23767] lo speed is unknown, defaulting to 1000
[  607.307975][T23749] hsr_slave_0: entered promiscuous mode
[  607.314697][T23749] hsr_slave_1: entered promiscuous mode
[  607.321265][T23749] debugfs: 'hsr0' already exists in 'hsr'
[  607.327008][T23749] Cannot create hsr debugfs directory
[  607.510020][T23755] chnl_net:caif_netlink_parms(): no params data found
[  607.671360][ T5838] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  607.683780][ T5838] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  607.692079][ T5838] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  607.701266][ T5838] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  607.711221][ T5838] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  607.731105][ T5838] Bluetooth: hci10: command tx timeout
[  607.810943][ T5838] Bluetooth: hci11: command tx timeout
[  607.846563][T23755] bridge0: port 1(bridge_slave_0) entered blocking state
[  607.853803][T23755] bridge0: port 1(bridge_slave_0) entered disabled state
[  607.861440][T23755] bridge_slave_0: entered allmulticast mode
[  607.868751][T23755] bridge_slave_0: entered promiscuous mode
[  607.891124][T23755] bridge0: port 2(bridge_slave_1) entered blocking state
[  607.898284][T23755] bridge0: port 2(bridge_slave_1) entered disabled state
[  607.906146][T23755] bridge_slave_1: entered allmulticast mode
[  607.914375][T23755] bridge_slave_1: entered promiscuous mode
[  607.961416][T23755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  607.979912][T23767] chnl_net:caif_netlink_parms(): no params data found
[  607.993858][T23755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  608.008209][T23774] gre0 speed is unknown, defaulting to 1000
[  608.118516][T23755] team0: Port device team_slave_0 added
[  608.161704][T23755] team0: Port device team_slave_1 added
[  608.228031][T23767] bridge0: port 1(bridge_slave_0) entered blocking state
[  608.235868][T23767] bridge0: port 1(bridge_slave_0) entered disabled state
[  608.243936][T23767] bridge_slave_0: entered allmulticast mode
[  608.251208][T23767] bridge_slave_0: entered promiscuous mode
[  608.268074][T23755] batman_adv: batadv0: Adding interface: batadv_slave_0
[  608.275276][T23755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  608.275299][T23774] wg1 speed is unknown, defaulting to 1000
[  608.301863][T23755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  608.307772][ T5838] Bluetooth: hci12: command tx timeout
[  608.319816][T23767] bridge0: port 2(bridge_slave_1) entered blocking state
[  608.331888][T23767] bridge0: port 2(bridge_slave_1) entered disabled state
[  608.339233][T23767] bridge_slave_1: entered allmulticast mode
[  608.346726][T23767] bridge_slave_1: entered promiscuous mode
[  608.363447][T23755] batman_adv: batadv0: Adding interface: batadv_slave_1
[  608.370399][T23755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  608.396973][T23755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  608.407871][T23774] lo speed is unknown, defaulting to 1000
[  608.453270][T23767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  608.482353][T23767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  608.548371][T23755] hsr_slave_0: entered promiscuous mode
[  608.555093][T23755] hsr_slave_1: entered promiscuous mode
[  608.561452][T23755] debugfs: 'hsr0' already exists in 'hsr'
[  608.567177][T23755] Cannot create hsr debugfs directory
[  608.588747][T23767] team0: Port device team_slave_0 added
[  608.610612][T23767] team0: Port device team_slave_1 added
[  608.671425][T23767] batman_adv: batadv0: Adding interface: batadv_slave_0
[  608.678397][T23767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  608.705959][T23767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  608.734954][T23767] batman_adv: batadv0: Adding interface: batadv_slave_1
[  608.742055][T23767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  608.768172][T23767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  608.781224][ T5838] Bluetooth: hci13: command tx timeout
[  608.858642][T23767] hsr_slave_0: entered promiscuous mode
[  608.866720][T23767] hsr_slave_1: entered promiscuous mode
[  608.873014][T23767] debugfs: 'hsr0' already exists in 'hsr'
[  608.878733][T23767] Cannot create hsr debugfs directory
[  609.095338][T23774] chnl_net:caif_netlink_parms(): no params data found
[  609.227687][T23774] bridge0: port 1(bridge_slave_0) entered blocking state
[  609.235147][T23774] bridge0: port 1(bridge_slave_0) entered disabled state
[  609.242753][T23774] bridge_slave_0: entered allmulticast mode
[  609.249754][T23774] bridge_slave_0: entered promiscuous mode
[  609.259827][T23774] bridge0: port 2(bridge_slave_1) entered blocking state
[  609.267049][T23774] bridge0: port 2(bridge_slave_1) entered disabled state
[  609.274548][T23774] bridge_slave_1: entered allmulticast mode
[  609.281793][T23774] bridge_slave_1: entered promiscuous mode
[  609.315695][T23774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  609.327486][T23774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  609.364301][T23774] team0: Port device team_slave_0 added
[  609.372664][T23774] team0: Port device team_slave_1 added
[  609.394928][T23774] batman_adv: batadv0: Adding interface: batadv_slave_0
[  609.403552][T23774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  609.429808][T23774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  609.442665][T23774] batman_adv: batadv0: Adding interface: batadv_slave_1
[  609.449616][T23774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  609.475963][T23774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  609.523775][T23774] hsr_slave_0: entered promiscuous mode
[  609.530130][T23774] hsr_slave_1: entered promiscuous mode
[  609.536575][T23774] debugfs: 'hsr0' already exists in 'hsr'
[  609.542362][T23774] Cannot create hsr debugfs directory
[  609.811167][ T5147] Bluetooth: hci10: command tx timeout
[  609.816737][ T5838] Bluetooth: hci14: command tx timeout
[  609.890936][ T5838] Bluetooth: hci11: command tx timeout
[  610.371015][ T5838] Bluetooth: hci12: command tx timeout
[  610.851041][ T5838] Bluetooth: hci13: command tx timeout
[  611.891110][ T5838] Bluetooth: hci14: command tx timeout
[  611.891120][ T5147] Bluetooth: hci10: command tx timeout
[  611.971039][ T5147] Bluetooth: hci11: command tx timeout
[  612.451142][ T5147] Bluetooth: hci12: command tx timeout
[  612.931172][ T5147] Bluetooth: hci13: command tx timeout
[  613.971822][ T5845] Bluetooth: hci10: command tx timeout
[  613.977389][ T5838] Bluetooth: hci14: command tx timeout
[  614.050947][ T5838] Bluetooth: hci11: command tx timeout
[  614.530974][ T5838] Bluetooth: hci12: command tx timeout
[  615.021213][ T5838] Bluetooth: hci13: command tx timeout
[  616.050962][T23703] Bluetooth: hci2: command 0x0405 tx timeout
[  616.053783][ T5838] Bluetooth: hci14: command tx timeout
[  665.676039][ T5838] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  665.686259][ T5838] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  665.694257][ T5838] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  665.710350][T23703] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  665.719765][T23703] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  665.727967][T23703] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  665.730648][T23799] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  665.742137][T23703] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  665.751938][T23703] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  665.759578][T23703] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  665.812744][T23795] gre0 speed is unknown, defaulting to 1000
[  665.916925][T23795] wg1 speed is unknown, defaulting to 1000
[  665.916957][T23797] gre0 speed is unknown, defaulting to 1000
[  665.924755][T23795] lo speed is unknown, defaulting to 1000
[  666.102379][T23797] wg1 speed is unknown, defaulting to 1000
[  666.114809][T23797] lo speed is unknown, defaulting to 1000
[  666.115128][T23795] chnl_net:caif_netlink_parms(): no params data found
[  666.233707][T23795] bridge0: port 1(bridge_slave_0) entered blocking state
[  666.241266][T23795] bridge0: port 1(bridge_slave_0) entered disabled state
[  666.248584][T23795] bridge_slave_0: entered allmulticast mode
[  666.256050][T23795] bridge_slave_0: entered promiscuous mode
[  666.268191][T23795] bridge0: port 2(bridge_slave_1) entered blocking state
[  666.275506][T23795] bridge0: port 2(bridge_slave_1) entered disabled state
[  666.283225][T23795] bridge_slave_1: entered allmulticast mode
[  666.290301][T23795] bridge_slave_1: entered promiscuous mode
[  666.322987][T23795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  666.336121][T23795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  666.376576][T23795] team0: Port device team_slave_0 added
[  666.384931][T23795] team0: Port device team_slave_1 added
[  666.426902][T23795] batman_adv: batadv0: Adding interface: batadv_slave_0
[  666.434237][T23795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  666.460675][T23795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  666.480641][T23795] batman_adv: batadv0: Adding interface: batadv_slave_1
[  666.487955][T23795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  666.514654][T23795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  666.582866][T23795] hsr_slave_0: entered promiscuous mode
[  666.592391][T23795] hsr_slave_1: entered promiscuous mode
[  666.598879][T23795] debugfs: 'hsr0' already exists in 'hsr'
[  666.604944][T23795] Cannot create hsr debugfs directory
[  666.611103][T23797] chnl_net:caif_netlink_parms(): no params data found
[  666.822002][T23703] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  666.832733][T23703] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  666.841602][T23703] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  666.849610][T23703] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  666.859853][T23703] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  666.869427][T23799] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  666.878259][T23703] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  666.888342][T23703] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  666.900044][T23703] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  666.908891][T23703] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  666.944041][T23797] bridge0: port 1(bridge_slave_0) entered blocking state
[  666.952793][T23797] bridge0: port 1(bridge_slave_0) entered disabled state
[  666.960119][T23797] bridge_slave_0: entered allmulticast mode
[  666.968017][T23797] bridge_slave_0: entered promiscuous mode
[  666.988548][T23797] bridge0: port 2(bridge_slave_1) entered blocking state
[  667.001001][T23797] bridge0: port 2(bridge_slave_1) entered disabled state
[  667.008733][T23797] bridge_slave_1: entered allmulticast mode
[  667.018946][T23797] bridge_slave_1: entered promiscuous mode
[  667.055905][T23816] gre0 speed is unknown, defaulting to 1000
[  667.110157][T23797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  667.134203][T23797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  667.193094][T23797] team0: Port device team_slave_0 added
[  667.203521][T23797] team0: Port device team_slave_1 added
[  667.246140][T23797] batman_adv: batadv0: Adding interface: batadv_slave_0
[  667.253271][T23797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  667.279534][T23797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  667.298900][T23816] wg1 speed is unknown, defaulting to 1000
[  667.299851][T23797] batman_adv: batadv0: Adding interface: batadv_slave_1
[  667.305392][T23814] gre0 speed is unknown, defaulting to 1000
[  667.319472][T23797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  667.346063][T23797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  667.363036][T23816] lo speed is unknown, defaulting to 1000
[  667.535305][T23814] wg1 speed is unknown, defaulting to 1000
[  667.542071][T23797] hsr_slave_0: entered promiscuous mode
[  667.548893][T23797] hsr_slave_1: entered promiscuous mode
[  667.555476][T23797] debugfs: 'hsr0' already exists in 'hsr'
[  667.561724][T23797] Cannot create hsr debugfs directory
[  667.573660][T23814] lo speed is unknown, defaulting to 1000
[  667.810900][ T5147] Bluetooth: hci16: command tx timeout
[  667.813244][T23703] Bluetooth: hci15: command tx timeout
[  667.847480][T23816] chnl_net:caif_netlink_parms(): no params data found
[  667.949163][T23814] chnl_net:caif_netlink_parms(): no params data found
[  668.015211][T23816] bridge0: port 1(bridge_slave_0) entered blocking state
[  668.022545][T23816] bridge0: port 1(bridge_slave_0) entered disabled state
[  668.029843][T23816] bridge_slave_0: entered allmulticast mode
[  668.037492][T23816] bridge_slave_0: entered promiscuous mode
[  668.064959][T23816] bridge0: port 2(bridge_slave_1) entered blocking state
[  668.072420][T23816] bridge0: port 2(bridge_slave_1) entered disabled state
[  668.079760][T23816] bridge_slave_1: entered allmulticast mode
[  668.088411][T23816] bridge_slave_1: entered promiscuous mode
[  668.183148][T23816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  668.211575][ T5147] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1
[  668.222338][ T5147] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9
[  668.232044][ T5147] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9
[  668.233700][T23816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  668.251886][ T5147] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4
[  668.259584][ T5147] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2
[  668.300064][T23814] bridge0: port 1(bridge_slave_0) entered blocking state
[  668.307621][T23814] bridge0: port 1(bridge_slave_0) entered disabled state
[  668.315884][T23814] bridge_slave_0: entered allmulticast mode
[  668.323695][T23814] bridge_slave_0: entered promiscuous mode
[  668.332295][T23814] bridge0: port 2(bridge_slave_1) entered blocking state
[  668.339419][T23814] bridge0: port 2(bridge_slave_1) entered disabled state
[  668.348086][T23814] bridge_slave_1: entered allmulticast mode
[  668.355655][T23814] bridge_slave_1: entered promiscuous mode
[  668.365015][T23816] team0: Port device team_slave_0 added
[  668.374375][T23816] team0: Port device team_slave_1 added
[  668.463428][T23816] batman_adv: batadv0: Adding interface: batadv_slave_0
[  668.470396][T23816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  668.496638][T23816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  668.511453][T23814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  668.524230][T23814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  668.535251][T23816] batman_adv: batadv0: Adding interface: batadv_slave_1
[  668.542362][T23816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  668.569357][T23816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  668.613754][T23831] gre0 speed is unknown, defaulting to 1000
[  668.663871][T23814] team0: Port device team_slave_0 added
[  668.679168][T23816] hsr_slave_0: entered promiscuous mode
[  668.687271][T23816] hsr_slave_1: entered promiscuous mode
[  668.694426][T23816] debugfs: 'hsr0' already exists in 'hsr'
[  668.700175][T23816] Cannot create hsr debugfs directory
[  668.708402][T23814] team0: Port device team_slave_1 added
[  668.813273][T23814] batman_adv: batadv0: Adding interface: batadv_slave_0
[  668.820241][T23814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  668.846838][T23814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  668.860011][T23814] batman_adv: batadv0: Adding interface: batadv_slave_1
[  668.867149][T23814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  668.893391][T23814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  668.909214][T23831] wg1 speed is unknown, defaulting to 1000
[  668.928286][T23831] lo speed is unknown, defaulting to 1000
[  668.934320][ T5147] Bluetooth: hci17: command tx timeout
[  668.998544][T23814] hsr_slave_0: entered promiscuous mode
[  669.005674][T23814] hsr_slave_1: entered promiscuous mode
[  669.011850][ T5147] Bluetooth: hci18: command tx timeout
[  669.019654][T23814] debugfs: 'hsr0' already exists in 'hsr'
[  669.025529][T23814] Cannot create hsr debugfs directory
[  669.276914][T23831] chnl_net:caif_netlink_parms(): no params data found
[  669.354756][T23831] bridge0: port 1(bridge_slave_0) entered blocking state
[  669.362025][T23831] bridge0: port 1(bridge_slave_0) entered disabled state
[  669.369303][T23831] bridge_slave_0: entered allmulticast mode
[  669.377050][T23831] bridge_slave_0: entered promiscuous mode
[  669.385267][T23831] bridge0: port 2(bridge_slave_1) entered blocking state
[  669.392842][T23831] bridge0: port 2(bridge_slave_1) entered disabled state
[  669.401614][T23831] bridge_slave_1: entered allmulticast mode
[  669.408842][T23831] bridge_slave_1: entered promiscuous mode
[  669.458073][T23831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  669.469959][T23831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  669.502835][T23831] team0: Port device team_slave_0 added
[  669.519064][T23831] team0: Port device team_slave_1 added
[  669.540595][T23831] batman_adv: batadv0: Adding interface: batadv_slave_0
[  669.547637][T23831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  669.575557][T23831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  669.587738][T23831] batman_adv: batadv0: Adding interface: batadv_slave_1
[  669.594893][T23831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  669.621198][T23831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  669.670194][T23831] hsr_slave_0: entered promiscuous mode
[  669.677660][T23831] hsr_slave_1: entered promiscuous mode
[  669.684846][T23831] debugfs: 'hsr0' already exists in 'hsr'
[  669.690587][T23831] Cannot create hsr debugfs directory
[  669.892221][T23703] Bluetooth: hci15: command tx timeout
[  669.893970][ T5147] Bluetooth: hci16: command tx timeout
[  670.294489][T23703] Bluetooth: hci19: command tx timeout
[  671.011103][T23840] Bluetooth: hci17: command tx timeout
[  671.090974][T23840] Bluetooth: hci18: command tx timeout
[  671.971094][T23840] Bluetooth: hci15: command tx timeout
[  671.981030][T23840] Bluetooth: hci16: command tx timeout
[  672.374743][T23840] Bluetooth: hci9: command 0x0406 tx timeout
[  672.382237][T23840] Bluetooth: hci4: command 0x0406 tx timeout
[  672.387494][T23841] Bluetooth: hci8: command 0x0406 tx timeout
[  672.388237][T23840] Bluetooth: hci19: command tx timeout
[  672.396051][T23841] Bluetooth: hci7: command 0x0406 tx timeout
[  672.400374][T23840] Bluetooth: hci6: command 0x0406 tx timeout
[  673.091022][ T5845] Bluetooth: hci17: command tx timeout
[  673.171022][ T5845] Bluetooth: hci18: command tx timeout
[  674.051160][T23703] Bluetooth: hci16: command tx timeout
[  674.056699][ T5845] Bluetooth: hci15: command tx timeout
[  674.451057][ T5845] Bluetooth: hci19: command tx timeout
[  675.171106][ T5845] Bluetooth: hci17: command tx timeout
[  675.251068][ T5845] Bluetooth: hci18: command tx timeout
[  676.531026][ T5845] Bluetooth: hci19: command tx timeout
[  679.251426][   T30] INFO: task syz.2.5768:23656 blocked for more than 143 seconds.
[  679.259188][   T30]       Not tainted syzkaller #0
[  679.264326][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  679.273169][   T30] task:syz.2.5768      state:D stack:26240 pid:23656 tgid:23654 ppid:16149  task_flags:0x480140 flags:0x00080002
[  679.285199][   T30] Call Trace:
[  679.288482][   T30]  <TASK>
[  679.291489][   T30]  __schedule+0x15dd/0x52d0
[  679.296011][   T30]  ? __lock_acquire+0x6b5/0x2cf0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  679.301223][   T30]  ? do_raw_spin_lock+0x12b/0x2f0
[  679.306401][   T30]  ? __pfx___schedule+0x10/0x10
[  679.311397][   T30]  ? schedule+0x90/0x360
[  679.315667][   T30]  schedule+0x164/0x360
[  679.319839][   T30]  blk_mq_freeze_queue_wait+0x101/0x180
[  679.325785][   T30]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[  679.332339][   T30]  ? __pfx_autoremove_wake_function+0x10/0x10
[  679.341056][   T30]  queue_limits_commit_update_frozen+0x55/0xd0
[  679.347263][   T30]  nbd_set_size+0x454/0x680
[  679.390846][   T30]  ? __pfx_nbd_set_size+0x10/0x10
[  679.395950][   T30]  ? nla_memcpy+0x5b/0xc0
[  679.400308][   T30]  nbd_genl_reconfigure+0x7f5/0x1ea0
[  679.409983][   T30]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  679.416160][   T30]  ? rcu_is_watching+0x15/0xb0
[  679.421065][   T30]  ? trace_kmalloc+0x2a/0x110
[  679.425763][   T30]  ? __nla_parse+0x40/0x60
[  679.430165][   T30]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  679.437461][   T30]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  679.444307][   T30]  genl_family_rcv_msg_doit+0x22a/0x330
[  679.449871][   T30]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  679.456226][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  679.461306][   T30]  genl_rcv_msg+0x61c/0x7a0
[  679.465813][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  679.471060][   T30]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  679.476793][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  679.481906][   T30]  netlink_rcv_skb+0x232/0x4b0
[  679.486681][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  679.492075][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  679.497384][   T30]  ? down_read+0x272/0x2e0
[  679.501944][   T30]  ? genl_rcv+0xd/0x40
[  679.506053][   T30]  genl_rcv+0x28/0x40
[  679.510024][   T30]  netlink_unicast+0x80f/0x9b0
[  679.514891][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  679.520189][   T30]  ? netlink_sendmsg+0x650/0xb40
[  679.525488][   T30]  netlink_sendmsg+0x813/0xb40
[  679.530331][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  679.535672][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  679.540623][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  679.546195][   T30]  ____sys_sendmsg+0x972/0x9f0
[  679.551024][   T30]  ? __pfx_____sys_sendmsg+0x10/0x10
[  679.556312][   T30]  ? import_iovec+0x73/0xa0
[  679.560927][   T30]  ___sys_sendmsg+0x2a5/0x360
[  679.565631][   T30]  ? __pfx____sys_sendmsg+0x10/0x10
[  679.571037][   T30]  ? futex_wait+0x29a/0x380
[  679.575592][   T30]  ? __fget_files+0x2a/0x420
[  679.580199][   T30]  ? __fget_files+0x3a0/0x420
[  679.585026][   T30]  __x64_sys_sendmsg+0x1bd/0x2a0
[  679.589982][   T30]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  679.595629][   T30]  ? rcu_is_watching+0x15/0xb0
[  679.600420][   T30]  do_syscall_64+0x14d/0xf80
[  679.605448][   T30]  ? trace_irq_disable+0x3b/0x150
[  679.610475][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.616606][   T30]  ? clear_bhb_loop+0x40/0x90
[  679.621385][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.627274][   T30] RIP: 0033:0x7f0dffd9c799
[  679.631771][   T30] RSP: 002b:00007f0e00c2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  679.640191][   T30] RAX: ffffffffffffffda RBX: 00007f0e00015fa0 RCX: 00007f0dffd9c799
[  679.648219][   T30] RDX: 0000000000008000 RSI: 00002000000003c0 RDI: 0000000000000006
[  679.656384][   T30] RBP: 00007f0dffe32c99 R08: 0000000000000000 R09: 0000000000000000
[  679.664564][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  679.672613][   T30] R13: 00007f0e00016038 R14: 00007f0e00015fa0 R15: 00007ffe469450d8
[  679.680619][   T30]  </TASK>
[  679.683996][   T30] INFO: task syz.4.5773:23667 blocked for more than 143 seconds.
[  679.692472][   T30]       Not tainted syzkaller #0
[  679.697412][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  679.706237][   T30] task:syz.4.5773      state:D stack:27880 pid:23667 tgid:23666 ppid:14946  task_flags:0x400140 flags:0x00080002
[  679.718386][   T30] Call Trace:
[  679.721740][   T30]  <TASK>
[  679.724680][   T30]  __schedule+0x15dd/0x52d0
[  679.729184][   T30]  ? __pfx___schedule+0x10/0x10
[  679.734297][   T30]  ? schedule+0x90/0x360
[  679.738553][   T30]  schedule+0x164/0x360
[  679.742830][   T30]  schedule_preempt_disabled+0x13/0x30
[  679.748294][   T30]  __mutex_lock+0x7fe/0x1300
[  679.753040][   T30]  ? __mutex_lock+0x5ac/0x1300
[  679.757818][   T30]  ? genl_rcv_msg+0x10b/0x7a0
[  679.762790][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  679.767815][   T30]  ? __dev_queue_xmit+0x28b/0x3870
[  679.772995][   T30]  ? radix_tree_lookup+0x240/0x290
[  679.778248][   T30]  genl_rcv_msg+0x10b/0x7a0
[  679.782957][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  679.787982][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  679.792994][   T30]  netlink_rcv_skb+0x232/0x4b0
[  679.797767][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  679.802851][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  679.808151][   T30]  ? down_read+0x272/0x2e0
[  679.812807][   T30]  ? genl_rcv+0xd/0x40
[  679.816897][   T30]  genl_rcv+0x28/0x40
[  679.821147][   T30]  netlink_unicast+0x80f/0x9b0
[  679.825929][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  679.831303][   T30]  ? netlink_sendmsg+0x650/0xb40
[  679.836241][   T30]  ? skb_put+0x11b/0x210
[  679.840470][   T30]  netlink_sendmsg+0x813/0xb40
[  679.845508][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  679.850863][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  679.855810][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  679.861212][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  679.866506][   T30]  __sys_sendto+0x672/0x710
[  679.871151][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  679.876199][   T30]  ? exc_page_fault+0x6a/0xc0
[  679.880918][   T30]  ? do_user_addr_fault+0xc6f/0x1340
[  679.886215][   T30]  __x64_sys_sendto+0xde/0x100
[  679.891377][   T30]  do_syscall_64+0x14d/0xf80
[  679.895985][   T30]  ? trace_irq_disable+0x3b/0x150
[  679.901132][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.907213][   T30]  ? clear_bhb_loop+0x40/0x90
[  679.912061][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.917967][   T30] RIP: 0033:0x7f757ab5cfce
[  679.922960][   T30] RSP: 002b:00007f757ba07e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  679.931629][   T30] RAX: ffffffffffffffda RBX: 00007f757ba096c0 RCX: 00007f757ab5cfce
[  679.939598][   T30] RDX: 0000000000000024 RSI: 00007f757ba08000 RDI: 0000000000000003
[  679.947744][   T30] RBP: 0000000000000000 R08: 00007f757ba07f04 R09: 000000000000000c
[  679.955770][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  679.963832][   T30] R13: 00007f757ba07f58 R14: 00007f757ba08000 R15: 0000000000000000
[  679.972004][   T30]  </TASK>
[  679.975041][   T30] INFO: task syz.4.5773:23672 blocked for more than 144 seconds.
[  679.984358][   T30]       Not tainted syzkaller #0
[  679.989301][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  679.998053][   T30] task:syz.4.5773      state:D stack:27880 pid:23672 tgid:23666 ppid:14946  task_flags:0x400040 flags:0x00080002
[  680.010158][   T30] Call Trace:
[  680.013493][   T30]  <TASK>
[  680.016424][   T30]  __schedule+0x15dd/0x52d0
[  680.021063][   T30]  ? __pfx___schedule+0x10/0x10
[  680.025929][   T30]  ? schedule+0x90/0x360
[  680.030158][   T30]  schedule+0x164/0x360
[  680.034475][   T30]  schedule_preempt_disabled+0x13/0x30
[  680.039970][   T30]  __mutex_lock+0x7fe/0x1300
[  680.044831][   T30]  ? __mutex_lock+0x5ac/0x1300
[  680.049620][   T30]  ? genl_rcv_msg+0x10b/0x7a0
[  680.054631][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  680.059689][   T30]  ? __dev_queue_xmit+0x28b/0x3870
[  680.064924][   T30]  ? radix_tree_lookup+0x240/0x290
[  680.070057][   T30]  genl_rcv_msg+0x10b/0x7a0
[  680.074627][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  680.079663][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  680.084898][   T30]  netlink_rcv_skb+0x232/0x4b0
[  680.089660][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  680.094748][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  680.100046][   T30]  ? down_read+0x272/0x2e0
[  680.104558][   T30]  ? genl_rcv+0xd/0x40
[  680.108640][   T30]  genl_rcv+0x28/0x40
[  680.112685][   T30]  netlink_unicast+0x80f/0x9b0
[  680.117470][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  680.122812][   T30]  ? netlink_sendmsg+0x650/0xb40
[  680.127752][   T30]  ? skb_put+0x11b/0x210
[  680.132188][   T30]  netlink_sendmsg+0x813/0xb40
[  680.136967][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  680.142476][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  680.147438][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  680.152967][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  680.158276][   T30]  __sys_sendto+0x672/0x710
[  680.163082][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  680.168157][   T30]  ? fd_install+0x94/0x3d0
[  680.172665][   T30]  ? fd_install+0x306/0x3d0
[  680.177195][   T30]  __x64_sys_sendto+0xde/0x100
[  680.182108][   T30]  do_syscall_64+0x14d/0xf80
[  680.186739][   T30]  ? trace_irq_disable+0x3b/0x150
[  680.191824][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  680.197907][   T30]  ? clear_bhb_loop+0x40/0x90
[  680.202680][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  680.208580][   T30] RIP: 0033:0x7f757ab5cfce
[  680.213869][   T30] RSP: 002b:00007f757b9e6e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  680.222438][   T30] RAX: ffffffffffffffda RBX: 00007f757b9e86c0 RCX: 00007f757ab5cfce
[  680.230419][   T30] RDX: 0000000000000020 RSI: 00007f757b9e7000 RDI: 0000000000000005
[  680.238470][   T30] RBP: 0000000000000000 R08: 00007f757b9e6f04 R09: 000000000000000c
[  680.246613][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  680.254755][   T30] R13: 00007f757b9e6f58 R14: 00007f757b9e7000 R15: 0000000000000000
[  680.263047][   T30]  </TASK>
[  680.266114][   T30] INFO: task syz.4.5773:23677 blocked for more than 144 seconds.
[  680.278848][   T30]       Not tainted syzkaller #0
[  680.283899][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  680.292778][   T30] task:syz.4.5773      state:D stack:27880 pid:23677 tgid:23666 ppid:14946  task_flags:0x400140 flags:0x00080002
[  680.304808][   T30] Call Trace:
[  680.308096][   T30]  <TASK>
[  680.311099][   T30]  __schedule+0x15dd/0x52d0
[  680.315645][   T30]  ? __pfx___schedule+0x10/0x10
[  680.320490][   T30]  ? schedule+0x90/0x360
[  680.325008][   T30]  schedule+0x164/0x360
[  680.329222][   T30]  schedule_preempt_disabled+0x13/0x30
[  680.334760][   T30]  __mutex_lock+0x7fe/0x1300
[  680.339367][   T30]  ? __mutex_lock+0x5ac/0x1300
[  680.344197][   T30]  ? genl_rcv_msg+0x10b/0x7a0
[  680.348895][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  680.354092][   T30]  ? __dev_queue_xmit+0x28b/0x3870
[  680.359223][   T30]  ? radix_tree_lookup+0x240/0x290
[  680.364501][   T30]  genl_rcv_msg+0x10b/0x7a0
[  680.369025][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  680.374467][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  680.379454][   T30]  netlink_rcv_skb+0x232/0x4b0
[  680.384301][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  680.389338][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  680.394713][   T30]  ? down_read+0x272/0x2e0
[  680.399145][   T30]  ? genl_rcv+0xd/0x40
[  680.403568][   T30]  genl_rcv+0x28/0x40
[  680.407557][   T30]  netlink_unicast+0x80f/0x9b0
[  680.412474][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  680.417789][   T30]  ? netlink_sendmsg+0x650/0xb40
[  680.422821][   T30]  ? skb_put+0x11b/0x210
[  680.427081][   T30]  netlink_sendmsg+0x813/0xb40
[  680.431904][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  680.437199][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  680.442198][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  680.447491][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  680.452948][   T30]  __sys_sendto+0x672/0x710
[  680.457501][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  680.462638][   T30]  ? fd_install+0x94/0x3d0
[  680.467074][   T30]  ? fd_install+0x306/0x3d0
[  680.471792][   T30]  __x64_sys_sendto+0xde/0x100
[  680.476670][   T30]  do_syscall_64+0x14d/0xf80
[  680.481708][   T30]  ? trace_irq_disable+0x3b/0x150
[  680.486738][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  680.492859][   T30]  ? clear_bhb_loop+0x40/0x90
[  680.497543][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  680.503495][   T30] RIP: 0033:0x7f757ab5cfce
[  680.507916][   T30] RSP: 002b:00007f757b9c5e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  680.516378][   T30] RAX: ffffffffffffffda RBX: 00007f757b9c76c0 RCX: 00007f757ab5cfce
[  680.524511][   T30] RDX: 0000000000000024 RSI: 00007f757b9c6000 RDI: 0000000000000007
[  680.534372][   T30] RBP: 0000000000000000 R08: 00007f757b9c5f04 R09: 000000000000000c
[  680.542666][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  680.550627][   T30] R13: 00007f757b9c5f58 R14: 00007f757b9c6000 R15: 0000000000000000
[  680.558667][   T30]  </TASK>
[  680.561890][   T30] INFO: task syz.1.5777:23676 blocked for more than 144 seconds.
[  680.569608][   T30]       Not tainted syzkaller #0
[  680.574602][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  680.583423][   T30] task:syz.1.5777      state:D stack:27880 pid:23676 tgid:23675 ppid:15580  task_flags:0x400140 flags:0x00080002
[  680.595564][   T30] Call Trace:
[  680.598855][   T30]  <TASK>
[  680.601834][   T30]  __schedule+0x15dd/0x52d0
[  680.606361][   T30]  ? __pfx___schedule+0x10/0x10
[  680.611376][   T30]  ? schedule+0x90/0x360
[  680.615631][   T30]  schedule+0x164/0x360
[  680.619803][   T30]  schedule_preempt_disabled+0x13/0x30
[  680.625309][   T30]  __mutex_lock+0x7fe/0x1300
[  680.630017][   T30]  ? __mutex_lock+0x5ac/0x1300
[  680.634892][   T30]  ? genl_rcv_msg+0x10b/0x7a0
[  680.639585][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  680.644939][   T30]  ? __dev_queue_xmit+0x28b/0x3870
[  680.650084][   T30]  ? radix_tree_lookup+0x240/0x290
[  680.655292][   T30]  genl_rcv_msg+0x10b/0x7a0
[  680.659818][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  680.664923][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  680.669879][   T30]  netlink_rcv_skb+0x232/0x4b0
[  680.674698][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  680.679729][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  680.685110][   T30]  ? down_read+0x272/0x2e0
[  680.689559][   T30]  ? genl_rcv+0xd/0x40
[  680.693970][   T30]  genl_rcv+0x28/0x40
[  680.697953][   T30]  netlink_unicast+0x80f/0x9b0
[  680.702988][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  680.708303][   T30]  ? netlink_sendmsg+0x650/0xb40
[  680.713335][   T30]  ? skb_put+0x11b/0x210
[  680.717593][   T30]  netlink_sendmsg+0x813/0xb40
[  680.722657][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  680.727939][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  680.732947][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  680.738240][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  680.743630][   T30]  __sys_sendto+0x672/0x710
[  680.748147][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  680.753279][   T30]  ? exc_page_fault+0x6a/0xc0
[  680.757967][   T30]  ? do_user_addr_fault+0xc6f/0x1340
[  680.763471][   T30]  __x64_sys_sendto+0xde/0x100
[  680.768261][   T30]  do_syscall_64+0x14d/0xf80
[  680.772998][   T30]  ? trace_irq_disable+0x3b/0x150
[  680.778080][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  680.784220][   T30]  ? clear_bhb_loop+0x40/0x90
[  680.788929][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  680.794905][   T30] RIP: 0033:0x7ff2f935cfce
[  680.799325][   T30] RSP: 002b:00007ff2fa1ede88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  680.808082][   T30] RAX: ffffffffffffffda RBX: 00007ff2fa1ef6c0 RCX: 00007ff2f935cfce
[  680.816306][   T30] RDX: 0000000000000020 RSI: 00007ff2fa1ee000 RDI: 0000000000000006
[  680.824343][   T30] RBP: 0000000000000000 R08: 00007ff2fa1edf04 R09: 000000000000000c
[  680.832361][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  680.840433][   T30] R13: 00007ff2fa1edf58 R14: 00007ff2fa1ee000 R15: 0000000000000000
[  680.848480][   T30]  </TASK>
[  680.851746][   T30] INFO: task syz.0.5779:23688 blocked for more than 144 seconds.
[  680.859474][   T30]       Not tainted syzkaller #0
[  680.864546][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  680.873256][   T30] task:syz.0.5779      state:D stack:28128 pid:23688 tgid:23686 ppid:15241  task_flags:0x400140 flags:0x00080002
[  680.885476][   T30] Call Trace:
[  680.888767][   T30]  <TASK>
[  680.891765][   T30]  __schedule+0x15dd/0x52d0
[  680.896388][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  680.901410][   T30]  ? __pfx___schedule+0x10/0x10
[  680.906273][   T30]  ? schedule+0x90/0x360
[  680.910511][   T30]  schedule+0x164/0x360
[  680.914824][   T30]  schedule_preempt_disabled+0x13/0x30
[  680.920295][   T30]  __mutex_lock+0x7fe/0x1300
[  680.925202][   T30]  ? is_bpf_text_address+0x26/0x2b0
[  680.930412][   T30]  ? __mutex_lock+0x5ac/0x1300
[  680.936216][   T30]  ? genl_rcv_msg+0x10b/0x7a0
[  680.941583][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  680.946615][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  680.951805][   T30]  ? radix_tree_lookup+0x240/0x290
[  680.956935][   T30]  genl_rcv_msg+0x10b/0x7a0
[  680.961701][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  680.966742][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  680.972006][   T30]  netlink_rcv_skb+0x232/0x4b0
[  680.976799][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  680.981988][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  680.987290][   T30]  ? down_read+0x272/0x2e0
[  680.991921][   T30]  ? genl_rcv+0xd/0x40
[  680.996000][   T30]  genl_rcv+0x28/0x40
[  680.999970][   T30]  netlink_unicast+0x80f/0x9b0
[  681.004946][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  681.010251][   T30]  ? netlink_sendmsg+0x650/0xb40
[  681.015726][   T30]  ? skb_put+0x11b/0x210
[  681.019995][   T30]  netlink_sendmsg+0x813/0xb40
[  681.025006][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  681.030312][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  681.035471][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  681.040937][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  681.046234][   T30]  __sys_sendto+0x672/0x710
[  681.050910][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  681.055955][   T30]  ? exc_page_fault+0x6a/0xc0
[  681.060621][   T30]  ? do_user_addr_fault+0xc6f/0x1340
[  681.066142][   T30]  __x64_sys_sendto+0xde/0x100
[  681.071179][   T30]  do_syscall_64+0x14d/0xf80
[  681.075778][   T30]  ? trace_irq_disable+0x3b/0x150
[  681.080988][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  681.087064][   T30]  ? clear_bhb_loop+0x40/0x90
[  681.092017][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  681.097919][   T30] RIP: 0033:0x7fcfc615cfce
[  681.102601][   T30] RSP: 002b:00007fcfc70c7e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  681.111192][   T30] RAX: ffffffffffffffda RBX: 00007fcfc70c96c0 RCX: 00007fcfc615cfce
[  681.119175][   T30] RDX: 0000000000000024 RSI: 00007fcfc70c8000 RDI: 0000000000000007
[  681.127440][   T30] RBP: 0000000000000000 R08: 00007fcfc70c7f04 R09: 000000000000000c
[  681.135501][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  681.143714][   T30] R13: 00007fcfc70c7f58 R14: 00007fcfc70c8000 R15: 0000000000000000
[  681.151851][   T30]  </TASK>
[  681.154893][   T30] INFO: task syz.3.5780:23694 blocked for more than 145 seconds.
[  681.162810][   T30]       Not tainted syzkaller #0
[  681.167750][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  681.177029][   T30] task:syz.3.5780      state:D stack:25352 pid:23694 tgid:23692 ppid:15902  task_flags:0x400140 flags:0x00080002
[  681.189298][   T30] Call Trace:
[  681.192765][   T30]  <TASK>
[  681.195703][   T30]  __schedule+0x15dd/0x52d0
[  681.200207][   T30]  ? __pfx___schedule+0x10/0x10
[  681.205164][   T30]  ? schedule+0x90/0x360
[  681.209419][   T30]  schedule+0x164/0x360
[  681.213679][   T30]  schedule_preempt_disabled+0x13/0x30
[  681.219146][   T30]  __mutex_lock+0x7fe/0x1300
[  681.223871][   T30]  ? __mutex_lock+0x5ac/0x1300
[  681.228660][   T30]  ? genl_rcv_msg+0x10b/0x7a0
[  681.233465][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  681.238516][   T30]  ? __dev_queue_xmit+0x28b/0x3870
[  681.243853][   T30]  ? radix_tree_lookup+0x240/0x290
[  681.248989][   T30]  genl_rcv_msg+0x10b/0x7a0
[  681.257321][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  681.262685][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  681.267666][   T30]  netlink_rcv_skb+0x232/0x4b0
[  681.272565][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  681.277608][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  681.283028][   T30]  ? down_read+0x272/0x2e0
[  681.287452][   T30]  ? genl_rcv+0xd/0x40
[  681.291689][   T30]  genl_rcv+0x28/0x40
[  681.295684][   T30]  netlink_unicast+0x80f/0x9b0
[  681.300456][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  681.306032][   T30]  ? netlink_sendmsg+0x650/0xb40
[  681.311105][   T30]  ? skb_put+0x11b/0x210
[  681.315363][   T30]  netlink_sendmsg+0x813/0xb40
[  681.320123][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  681.325538][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  681.330599][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  681.336203][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  681.341626][   T30]  __sys_sendto+0x672/0x710
[  681.346144][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  681.351792][   T30]  ? exc_page_fault+0x6a/0xc0
[  681.356473][   T30]  ? do_user_addr_fault+0xc6f/0x1340
[  681.362157][   T30]  __x64_sys_sendto+0xde/0x100
[  681.366925][   T30]  do_syscall_64+0x14d/0xf80
[  681.371578][   T30]  ? trace_irq_disable+0x3b/0x150
[  681.376611][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  681.382938][   T30]  ? clear_bhb_loop+0x40/0x90
[  681.387631][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  681.393648][   T30] RIP: 0033:0x7fc48995cfce
[  681.398088][   T30] RSP: 002b:00007fc48a7c7e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  681.406919][   T30] RAX: ffffffffffffffda RBX: 00007fc48a7c96c0 RCX: 00007fc48995cfce
[  681.415434][   T30] RDX: 0000000000000024 RSI: 00007fc48a7c8000 RDI: 000000000000000c
[  681.423896][   T30] RBP: 0000000000000000 R08: 00007fc48a7c7f04 R09: 000000000000000c
[  681.432079][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c
[  681.440169][   T30] R13: 00007fc48a7c7f58 R14: 00007fc48a7c8000 R15: 0000000000000000
[  681.448456][   T30]  </TASK>
[  681.451642][   T30] 
[  681.451642][   T30] Showing all locks held in the system:
[  681.459353][   T30] 1 lock held by khungtaskd/30:
[  681.464605][   T30]  #0: ffffffff8e75e520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  681.474868][   T30] 2 locks held by getty/5588:
[  681.479530][   T30]  #0: ffff888036a700a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  681.489419][   T30]  #1: ffffc9000322b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  681.499757][   T30] 1 lock held by udevd/22199:
[  681.504584][   T30]  #0: ffff8880261f4358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  681.514134][   T30] 6 locks held by syz.2.5768/23656:
[  681.519330][   T30]  #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  681.527835][   T30]  #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  681.536898][   T30]  #2: ffff8880261e4a78 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0
[  681.547668][   T30]  #3: ffff8880261eb668 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680
[  681.557185][   T30]  #4: ffff8880261eb008 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  681.569423][   T30]  #5: ffff8880261eb040 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  681.582045][   T30] 2 locks held by syz.4.5773/23667:
[  681.587238][   T30]  #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  681.595502][   T30]  #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  681.604780][   T30] 2 locks held by syz.4.5773/23672:
[  681.609957][   T30]  #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  681.618263][   T30]  #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  681.627414][   T30] 2 locks held by syz.4.5773/23677:
[  681.632692][   T30]  #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  681.640989][   T30]  #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  681.649978][   T30] 2 locks held by syz.1.5777/23676:
[  681.655257][   T30]  #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  681.663584][   T30]  #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  681.672723][   T30] 2 locks held by syz.0.5779/23688:
[  681.677922][   T30]  #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  681.686386][   T30]  #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  681.695508][   T30] 2 locks held by syz.3.5780/23694:
[  681.700700][   T30]  #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  681.708932][   T30]  #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  681.718267][   T30] 2 locks held by syz-executor/23699:
[  681.723729][   T30]  #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  681.732228][   T30]  #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  681.741330][   T30] 2 locks held by syz-executor/23701:
[  681.746699][   T30]  #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  681.755023][   T30]  #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  681.764273][   T30] 2 locks held by syz-executor/23704:
[  681.769628][   T30]  #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  681.777870][   T30]  #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  681.786967][   T30] 2 locks held by syz-executor/23717:
[  681.792431][   T30]  #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  681.800642][   T30]  #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  681.809786][   T30] 2 locks held by syz-executor/23719:
[  681.815365][   T30]  #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  681.823845][   T30]  #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  681.832964][   T30] 2 locks held by syz-executor/23747:
[  681.838335][   T30]  #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  681.846717][   T30]  #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  681.856085][   T30] 2 locks held by syz-executor/23749:
[  681.861763][   T30]  #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  681.869986][   T30]  #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  681.879116][   T30] 2 locks held by syz-executor/23755:
[  681.884535][   T30]  #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  681.892868][   T30]  #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  681.901947][   T30] 2 locks held by syz-executor/23767:
[  681.907328][   T30]  #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  681.915731][   T30]  #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  681.925020][   T30] 2 locks held by syz-executor/23774:
[  681.930396][   T30]  #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  681.938936][   T30]  #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  681.947991][   T30] 2 locks held by syz-executor/23795:
[  681.953458][   T30]  #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  681.961741][   T30]  #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  681.970699][   T30] 2 locks held by syz-executor/23797:
[  681.976432][   T30]  #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  681.984748][   T30]  #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  681.993865][   T30] 2 locks held by syz-executor/23814:
[  681.999234][   T30]  #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  682.007786][   T30]  #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  682.016839][   T30] 2 locks held by syz-executor/23816:
[  682.022351][   T30]  #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  682.030528][   T30]  #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  682.039621][   T30] 2 locks held by syz-executor/23831:
[  682.045233][   T30]  #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  682.053763][   T30]  #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  682.063279][   T30] 
[  682.065614][   T30] =============================================
[  682.065614][   T30] 
[  682.074122][   T30] NMI backtrace for cpu 1
[  682.074137][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  682.074156][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  682.074168][   T30] Call Trace:
[  682.074176][   T30]  <TASK>
[  682.074183][   T30]  dump_stack_lvl+0xe8/0x150
[  682.074214][   T30]  nmi_cpu_backtrace+0x274/0x2d0
[  682.074242][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  682.074268][   T30]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  682.074298][   T30]  sys_info+0x135/0x170
[  682.074320][   T30]  watchdog+0xfd9/0x1030
[  682.074378][   T30]  ? watchdog+0x21a/0x1030
[  682.074422][   T30]  kthread+0x388/0x470
[  682.074446][   T30]  ? __pfx_watchdog+0x10/0x10
[  682.074469][   T30]  ? __pfx_kthread+0x10/0x10
[  682.074488][   T30]  ret_from_fork+0x51e/0xb90
[  682.074522][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  682.074544][   T30]  ? __switch_to+0xc7d/0x1450
[  682.074581][   T30]  ? __pfx_kthread+0x10/0x10
[  682.074601][   T30]  ret_from_fork_asm+0x1a/0x30
[  682.074641][   T30]  </TASK>
[  682.074649][   T30] Sending NMI from CPU 1 to CPUs 0:
[  682.184831][    C0] NMI backtrace for cpu 0
[  682.184850][    C0] CPU: 0 UID: 0 PID: 1151 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) 
[  682.184871][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  682.184883][    C0] Workqueue: events_unbound toggle_allocation_gate
[  682.184911][    C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x36/0x90
[  682.184941][    C0] Code: 18 4a 56 11 65 8b 15 39 4a 56 11 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 a4 16 00 00 00 74 4e 8b 91 80 16 00 00 <83> fa 03 75 43 48 8b 91 88 16 00 00 44 8b 89 84 16 00 00 49 c1 e1
[  682.184956][    C0] RSP: 0018:ffffc90004d3f8f8 EFLAGS: 00000046
[  682.184970][    C0] RAX: ffffffff81b187dd RBX: ffff8880b8626148 RCX: ffff888027fdbd00
[  682.184983][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffffffffffff
[  682.184995][    C0] RBP: 00000001000094a6 R08: 0000000000000003 R09: 0000000000000004
[  682.185007][    C0] R10: dffffc0000000000 R11: fffff520009a7f0c R12: ffff8880b8626100
[  682.185019][    C0] R13: ffffffff9a2e1f68 R14: 00000001000094a5 R15: 0000000000000087
[  682.185032][    C0] FS:  0000000000000000(0000) GS:ffff888125461000(0000) knlGS:0000000000000000
[  682.185046][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  682.185058][    C0] CR2: 00007fafaa676e47 CR3: 000000000e54c000 CR4: 00000000003526f0
[  682.185074][    C0] Call Trace:
[  682.185081][    C0]  <TASK>
[  682.185088][    C0]  __mod_timer+0x2dd/0xf30
[  682.185129][    C0]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  682.185157][    C0]  queue_delayed_work_on+0x11a/0x1e0
[  682.185185][    C0]  toggle_allocation_gate+0x245/0x290
[  682.185207][    C0]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  682.185228][    C0]  ? __pfx_autoremove_wake_function+0x10/0x10
[  682.185250][    C0]  ? process_scheduled_works+0xa8d/0x18c0
[  682.185272][    C0]  ? process_scheduled_works+0xa8d/0x18c0
[  682.185294][    C0]  process_scheduled_works+0xb6e/0x18c0
[  682.185330][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  682.185356][    C0]  ? assign_work+0x3d5/0x5e0
[  682.185379][    C0]  worker_thread+0xa53/0xfc0
[  682.185414][    C0]  kthread+0x388/0x470
[  682.185430][    C0]  ? __pfx_worker_thread+0x10/0x10
[  682.185452][    C0]  ? __pfx_kthread+0x10/0x10
[  682.185468][    C0]  ret_from_fork+0x51e/0xb90
[  682.185491][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  682.185512][    C0]  ? __switch_to+0xc7d/0x1450
[  682.185533][    C0]  ? __pfx_kthread+0x10/0x10
[  682.185550][    C0]  ret_from_fork_asm+0x1a/0x30
[  682.185583][    C0]  </TASK>
[  682.425932][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  682.432866][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  682.441960][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  682.452020][   T30] Call Trace:
[  682.455301][   T30]  <TASK>
[  682.458214][   T30]  vpanic+0x56c/0xa60
[  682.462203][   T30]  ? __pfx___schedule+0x10/0x10
[  682.467042][   T30]  ? __pfx_vpanic+0x10/0x10
[  682.471532][   T30]  ? __pfx_console_unlock+0x10/0x10
[  682.476727][   T30]  panic+0xc5/0xd0
[  682.480438][   T30]  ? __pfx_panic+0x10/0x10
[  682.484840][   T30]  ? preempt_schedule_thunk+0x16/0x30
[  682.490199][   T30]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  682.496349][   T30]  watchdog+0x1023/0x1030
[  682.500675][   T30]  ? watchdog+0x21a/0x1030
[  682.505093][   T30]  kthread+0x388/0x470
[  682.509146][   T30]  ? __pfx_watchdog+0x10/0x10
[  682.513814][   T30]  ? __pfx_kthread+0x10/0x10
[  682.518393][   T30]  ret_from_fork+0x51e/0xb90
[  682.523064][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  682.528173][   T30]  ? __switch_to+0xc7d/0x1450
[  682.532866][   T30]  ? __pfx_kthread+0x10/0x10
[  682.537457][   T30]  ret_from_fork_asm+0x1a/0x30
[  682.542232][   T30]  </TASK>
[  682.545396][   T30] Kernel Offset: disabled
[  682.549706][   T30] Rebooting in 86400 seconds..